@uipath/llmgw-tool 1.201.0 → 1.202.0-preview.136

package/dist/{tool-3p87hvdj.js → tool-9dhz976r.js}

@@ -2,10 +2,10 @@ import {
   __commonJS,
   __require,
   __toESM
-} from "./tool-0v6na3yp.js";
+} from "./tool-1de529jm.js";
 
 // ../../../node_modules/commander/lib/error.js
-var require_error = __commonJS((exports) => {
+var require_error = __commonJS(function(exports) {
   class CommanderError extends Error {
     constructor(exitCode, code, message) {
       super(message);
@@ -29,7 +29,7 @@ var require_error = __commonJS((exports) => {
 });
 
 // ../../../node_modules/commander/lib/argument.js
-var require_argument = __commonJS((exports) => {
+var require_argument = __commonJS(function(exports) {
   var { InvalidArgumentError } = require_error();
 
   class Argument {
@@ -109,7 +109,7 @@ var require_argument = __commonJS((exports) => {
 });
 
 // ../../../node_modules/commander/lib/help.js
-var require_help = __commonJS((exports) => {
+var require_help = __commonJS(function(exports) {
   var { humanReadableArgName } = require_argument();
 
   class Help {
@@ -466,7 +466,7 @@ ${itemIndentStr}`);
 });
 
 // ../../../node_modules/commander/lib/option.js
-var require_option = __commonJS((exports) => {
+var require_option = __commonJS(function(exports) {
   var { InvalidArgumentError } = require_error();
 
   class Option {
@@ -650,7 +650,7 @@ var require_option = __commonJS((exports) => {
 });
 
 // ../../../node_modules/commander/lib/suggestSimilar.js
-var require_suggestSimilar = __commonJS((exports) => {
+var require_suggestSimilar = __commonJS(function(exports) {
   var maxDistance = 3;
   function editDistance(a, b) {
     if (Math.abs(a.length - b.length) > maxDistance)
@@ -723,7 +723,7 @@ var require_suggestSimilar = __commonJS((exports) => {
 });
 
 // ../../../node_modules/commander/lib/command.js
-var require_command = __commonJS((exports) => {
+var require_command = __commonJS(function(exports) {
   var EventEmitter = __require("node:events").EventEmitter;
   var childProcess = __require("node:child_process");
   var path2 = __require("node:path");
@@ -2078,7 +2078,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
 });
 
 // ../../../node_modules/commander/index.js
-var require_commander = __commonJS((exports) => {
+var require_commander = __commonJS(function(exports) {
   var { Argument } = require_argument();
   var { Command } = require_command();
   var { CommanderError, InvalidArgumentError } = require_error();
@@ -2100,7 +2100,7 @@ var require_commander = __commonJS((exports) => {
 var package_default = {
   name: "@uipath/llmgw-tool",
   license: "MIT",
-  version: "1.201.0",
+  version: "1.202.0-preview.136",
   description: "CLI plugin for UiPath AI Trust Layer Bring-Your-Own LLM connections.",
   private: false,
   repository: {
@@ -2169,7 +2169,7 @@ class NodeFileSystem {
   };
   utils = {
     open: async (url) => {
-      const { default: open } = await import("./index-91ejywfm.js");
+      const { default: open } = await import("./index-xnzgkhtg.js");
       await open(url);
     }
   };
@@ -2369,7 +2369,519 @@ class NodeFileSystem {
 var fsInstance = new NodeFileSystem;
 var getFileSystem = () => fsInstance;
 
+// ../../common/src/telemetry/pseudonymize.ts
+var PSEUDONYM_DOMAIN = "uipath-cli/telemetry/pseudonym/v1:";
+var PSEUDONYM_HEX_LENGTH = 32;
+var SHA256_K = new Uint32Array([
+  1116352408,
+  1899447441,
+  3049323471,
+  3921009573,
+  961987163,
+  1508970993,
+  2453635748,
+  2870763221,
+  3624381080,
+  310598401,
+  607225278,
+  1426881987,
+  1925078388,
+  2162078206,
+  2614888103,
+  3248222580,
+  3835390401,
+  4022224774,
+  264347078,
+  604807628,
+  770255983,
+  1249150122,
+  1555081692,
+  1996064986,
+  2554220882,
+  2821834349,
+  2952996808,
+  3210313671,
+  3336571891,
+  3584528711,
+  113926993,
+  338241895,
+  666307205,
+  773529912,
+  1294757372,
+  1396182291,
+  1695183700,
+  1986661051,
+  2177026350,
+  2456956037,
+  2730485921,
+  2820302411,
+  3259730800,
+  3345764771,
+  3516065817,
+  3600352804,
+  4094571909,
+  275423344,
+  430227734,
+  506948616,
+  659060556,
+  883997877,
+  958139571,
+  1322822218,
+  1537002063,
+  1747873779,
+  1955562222,
+  2024104815,
+  2227730452,
+  2361852424,
+  2428436474,
+  2756734187,
+  3204031479,
+  3329325298
+]);
+var SHA256_INITIAL_STATE = new Uint32Array([
+  1779033703,
+  3144134277,
+  1013904242,
+  2773480762,
+  1359893119,
+  2600822924,
+  528734635,
+  1541459225
+]);
+function rotr(value, bits) {
+  return (value >>> bits | value << 32 - bits) >>> 0;
+}
+function sha256Hex(input) {
+  const bytes = new TextEncoder().encode(input);
+  const paddedLength = bytes.length + 9 + 63 >> 6 << 6;
+  const buffer = new Uint8Array(paddedLength);
+  buffer.set(bytes);
+  buffer[bytes.length] = 128;
+  const view = new DataView(buffer.buffer);
+  const bitLength = bytes.length * 8;
+  view.setUint32(paddedLength - 8, Math.floor(bitLength / 4294967296));
+  view.setUint32(paddedLength - 4, bitLength >>> 0);
+  const state = SHA256_INITIAL_STATE.slice();
+  const schedule = new Uint32Array(64);
+  for (let offset = 0;offset < paddedLength; offset += 64) {
+    for (let i = 0;i < 16; i++) {
+      schedule[i] = view.getUint32(offset + i * 4);
+    }
+    for (let i = 16;i < 64; i++) {
+      const x = schedule[i - 15];
+      const y = schedule[i - 2];
+      const s0 = (rotr(x, 7) ^ rotr(x, 18) ^ x >>> 3) >>> 0;
+      const s1 = (rotr(y, 17) ^ rotr(y, 19) ^ y >>> 10) >>> 0;
+      schedule[i] = schedule[i - 16] + s0 + schedule[i - 7] + s1 >>> 0;
+    }
+    let a = state[0];
+    let b = state[1];
+    let c = state[2];
+    let d = state[3];
+    let e = state[4];
+    let f = state[5];
+    let g = state[6];
+    let h = state[7];
+    for (let i = 0;i < 64; i++) {
+      const s1 = (rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25)) >>> 0;
+      const ch = (e & f ^ ~e & g) >>> 0;
+      const temp1 = h + s1 + ch + SHA256_K[i] + schedule[i] >>> 0;
+      const s0 = (rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22)) >>> 0;
+      const maj = (a & b ^ a & c ^ b & c) >>> 0;
+      const temp2 = s0 + maj >>> 0;
+      h = g;
+      g = f;
+      f = e;
+      e = d + temp1 >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = temp1 + temp2 >>> 0;
+    }
+    state[0] = state[0] + a >>> 0;
+    state[1] = state[1] + b >>> 0;
+    state[2] = state[2] + c >>> 0;
+    state[3] = state[3] + d >>> 0;
+    state[4] = state[4] + e >>> 0;
+    state[5] = state[5] + f >>> 0;
+    state[6] = state[6] + g >>> 0;
+    state[7] = state[7] + h >>> 0;
+  }
+  let hex = "";
+  for (const word of state) {
+    hex += word.toString(16).padStart(8, "0");
+  }
+  return hex;
+}
+function resolveSha256Hex() {
+  try {
+    const nodeCrypto = __require("node:crypto");
+    const createHash = nodeCrypto?.createHash;
+    if (typeof createHash !== "function") {
+      return sha256Hex;
+    }
+    const native = (input) => createHash("sha256").update(input, "utf8").digest("hex");
+    return native("abc") === sha256Hex("abc") ? native : sha256Hex;
+  } catch {
+    return sha256Hex;
+  }
+}
+var cachedSha256Hex;
+function digest(input) {
+  cachedSha256Hex ??= resolveSha256Hex();
+  return cachedSha256Hex(input);
+}
+function pseudonymize(input) {
+  return digest(`${PSEUDONYM_DOMAIN}${input}`).slice(0, PSEUDONYM_HEX_LENGTH);
+}
+
+// ../../common/src/singleton.ts
+var PREFIX = "@uipath/common/";
+var _g = globalThis;
+function singleton(ctorOrName) {
+  const name = typeof ctorOrName === "string" ? ctorOrName : ctorOrName.name;
+  const key = Symbol.for(PREFIX + name);
+  return {
+    get(fallback) {
+      return _g[key] ?? fallback;
+    },
+    set(value) {
+      _g[key] = value;
+    },
+    clear() {
+      delete _g[key];
+    },
+    getOrInit(factory, guard) {
+      const existing = _g[key];
+      if (existing != null && typeof existing === "object") {
+        if (!guard || guard(existing)) {
+          return existing;
+        }
+      }
+      const instance = factory();
+      _g[key] = instance;
+      return instance;
+    }
+  };
+}
+
+// ../../common/src/telemetry/supplied-values.ts
+var suppliedValuesSlot = singleton("TelemetrySuppliedArgumentValues");
+function activeEntries() {
+  const existing = suppliedValuesSlot.get();
+  return Array.isArray(existing) ? existing : [];
+}
+var MIN_SCRUBBABLE_LENGTH = 4;
+function recordSuppliedArgumentValues(values) {
+  const flat = [];
+  const push = (value) => {
+    if (Array.isArray(value)) {
+      for (const item of value) {
+        push(item);
+      }
+      return;
+    }
+    if (typeof value === "string" && value.length >= MIN_SCRUBBABLE_LENGTH) {
+      flat.push(value);
+    }
+  };
+  push(values);
+  const entry = { values: flat };
+  suppliedValuesSlot.set([...activeEntries(), entry]);
+  return entry;
+}
+function releaseSuppliedArgumentValues(entry) {
+  suppliedValuesSlot.set(activeEntries().filter((held) => held !== entry));
+}
+function getSuppliedArgumentValues() {
+  const all = new Set;
+  for (const entry of activeEntries()) {
+    for (const value of entry.values) {
+      all.add(value);
+    }
+  }
+  return [...all].sort((a, b) => b.length - a.length);
+}
+
+// ../../common/src/telemetry/pii-redactor.ts
+var REDACTED = "[REDACTED]";
+var MAX_VALUE_LENGTH = 280;
+var MAX_STACK_LENGTH = 4096;
+var MAX_SCAN_LENGTH = MAX_STACK_LENGTH;
+function truncate(value, maxLength) {
+  return value.length > maxLength ? `${value.slice(0, maxLength)}…` : value;
+}
+var SENSITIVE_NAME_TOKENS = new Set([
+  "token",
+  "tokens",
+  "secret",
+  "secrets",
+  "password",
+  "passwords",
+  "pwd",
+  "credential",
+  "credentials",
+  "auth",
+  "authentication",
+  "authorization",
+  "authority",
+  "cert",
+  "certificate",
+  "certificates"
+]);
+var SENSITIVE_KEY_PREFIXES = new Set([
+  "api",
+  "access",
+  "client",
+  "private",
+  "public",
+  "signing",
+  "encryption",
+  "session",
+  "master",
+  "shared",
+  "root",
+  "ssh",
+  "rsa",
+  "aes",
+  "hmac",
+  "oauth"
+]);
+var UUID_PATTERN = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
+var EMAIL_PATTERN = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
+var JWT_PATTERN = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;
+var LONG_TOKEN_PATTERN = /\b[A-Za-z0-9_-]{40,}\b/g;
+var PADDED_BASE64_PATTERN = /[A-Za-z0-9+/]{16,}={1,2}(?![A-Za-z0-9+/=])/g;
+var BASE64_WITH_PLUS_PATTERN = /[A-Za-z0-9+/]{40,}/g;
+var USER_HOME_PATTERN = /(?<![A-Za-z0-9._-])([/\\])(Users|home|Profiles)([/\\])([^/\\]+)/gi;
+var UNC_PATH_PATTERN = /(^|[\s"'<>|=,;([{])(\\\\[^\s"'<>|]+)/g;
+var HOST_PORT_PATTERN = /(?<![/@.\w-])(?!\d+\.\d+\.\d+\.\d+:)[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?(?:\.[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?)+:\d{1,5}\b/g;
+var SOURCE_FILE_EXTENSIONS = new Set([
+  "ts",
+  "tsx",
+  "js",
+  "jsx",
+  "mjs",
+  "cjs",
+  "cts",
+  "mts",
+  "py",
+  "cs",
+  "java",
+  "go",
+  "rs",
+  "rb",
+  "php",
+  "sh",
+  "ps1",
+  "json",
+  "jsonc",
+  "yaml",
+  "yml",
+  "xml",
+  "xaml",
+  "md",
+  "txt",
+  "log",
+  "css",
+  "html",
+  "htm",
+  "csproj",
+  "nuspec",
+  "sql"
+]);
+var URL_PATTERN = /\bhttps?:\/\/[^\s,;]+/gi;
+var QUOTED_LITERAL_MAX_SPAN = 200;
+var QUOTED_LITERAL_PATTERN = new RegExp([
+  `(?<![A-Za-z0-9])'(?:[^\\
+]|\\.){2,${QUOTED_LITERAL_MAX_SPAN}}?'(?![A-Za-z0-9])`,
+  `(?<![A-Za-z0-9])"(?:[^\\
+]|\\.){2,${QUOTED_LITERAL_MAX_SPAN}}?"(?![A-Za-z0-9])`
+].join("|"), "g");
+var JSON_BODY_PATTERN = /[{[][^{}[\]]*[:,][^{}[\]]*[\]}]/g;
+var COLLAPSED_BODY = "{…}";
+var COLLAPSED_BODY_MARKER = "\x01body\x01";
+var MAX_BODY_NESTING = 8;
+function collapseJsonBodies(text) {
+  let out = text;
+  for (let pass = 0;pass < MAX_BODY_NESTING; pass++) {
+    const next = out.replace(JSON_BODY_PATTERN, COLLAPSED_BODY_MARKER);
+    if (next === out) {
+      break;
+    }
+    out = next;
+  }
+  return out.split(COLLAPSED_BODY_MARKER).join(COLLAPSED_BODY);
+}
+var TRAILING_PROSE_PUNCT = /[.,;:!?)\]}>'"]+$/;
+function peelTrailingPunctuation(match) {
+  const trailing = match.match(TRAILING_PROSE_PUNCT)?.[0] ?? "";
+  return trailing ? [match.slice(0, -trailing.length), trailing] : [match, ""];
+}
+function redactUrl(raw) {
+  try {
+    const url = new URL(raw);
+    return `${url.protocol}//${url.host}`;
+  } catch {
+    return `url#${pseudonymize(raw)}`;
+  }
+}
+function redactValueDetectors(value, maxLength = MAX_VALUE_LENGTH) {
+  let out = truncate(value, MAX_SCAN_LENGTH);
+  out = out.replace(JWT_PATTERN, () => REDACTED);
+  out = out.replace(URL_PATTERN, (match) => {
+    const [core, trailing] = peelTrailingPunctuation(match);
+    return `${redactUrl(core)}${trailing}`;
+  });
+  out = out.replace(USER_HOME_PATTERN, (_match, sep1, folder, sep2) => `${sep1}${folder}${sep2}<user>`);
+  out = out.replace(UNC_PATH_PATTERN, (_match, before, path2) => {
+    const [core, trailing] = peelTrailingPunctuation(path2);
+    return `${before}unc#${pseudonymize(core)}${trailing}`;
+  });
+  out = out.replace(EMAIL_PATTERN, (match) => `email#${pseudonymize(match)}`);
+  out = out.replace(UUID_PATTERN, (match) => `uuid#${pseudonymize(match)}`);
+  out = out.replace(HOST_PORT_PATTERN, (match) => {
+    const split = match.lastIndexOf(":");
+    const host = match.slice(0, split);
+    const extension = host.slice(host.lastIndexOf(".") + 1).toLowerCase();
+    if (SOURCE_FILE_EXTENSIONS.has(extension)) {
+      return match;
+    }
+    return `host#${pseudonymize(host)}:${match.slice(split + 1)}`;
+  });
+  out = out.replace(PADDED_BASE64_PATTERN, () => REDACTED);
+  out = out.replace(BASE64_WITH_PLUS_PATTERN, (match) => match.includes("+") ? REDACTED : match);
+  out = out.replace(LONG_TOKEN_PATTERN, () => REDACTED);
+  return truncate(out, maxLength);
+}
+function redactSpanName(name) {
+  return redactValueDetectors(truncate(name, MAX_SCAN_LENGTH).replace(QUOTED_LITERAL_PATTERN, (match) => `${match[0]}<redacted>${match[0]}`));
+}
+var HTTP_DEPENDENCY_NAME = /^([A-Z]+) (\/.*)$/s;
+function redactHttpDependencyName(name) {
+  const parts = HTTP_DEPENDENCY_NAME.exec(name);
+  if (!parts) {
+    return redactMessage(name);
+  }
+  return `${parts[1]} ${redactMessage(parts[2])}`;
+}
+function redactMessage(value) {
+  let out = collapseJsonBodies(truncate(value, MAX_SCAN_LENGTH)).replace(QUOTED_LITERAL_PATTERN, (match) => `${match[0]}<redacted>${match[0]}`);
+  for (const supplied of getSuppliedArgumentValues()) {
+    out = out.split(supplied).join(REDACTED);
+  }
+  return redactValueDetectors(out);
+}
+var MESSAGE_NAMES = new Set([
+  "message",
+  "errormessage",
+  "errmessage",
+  "error_message",
+  "msg",
+  "detail",
+  "details",
+  "reason",
+  "instructions",
+  "warning"
+]);
+function isFreeFormValue(name, value) {
+  return MESSAGE_NAMES.has(name.toLowerCase()) || /['"{[]/.test(value);
+}
+function redactError(error) {
+  const safe = new Error(redactMessage(error.message ?? ""));
+  safe.name = error.name;
+  safe.stack = typeof error.stack === "string" ? redactStack(error.stack) : undefined;
+  return safe;
+}
+function redactStack(stack) {
+  const bounded = truncate(stack, MAX_STACK_LENGTH);
+  const firstBreak = bounded.indexOf(`
+`);
+  if (firstBreak === -1) {
+    return redactMessage(bounded);
+  }
+  return `${redactMessage(bounded.slice(0, firstBreak))}
+${redactValueDetectors(bounded.slice(firstBreak + 1), MAX_STACK_LENGTH)}`;
+}
+function nameTokens(name) {
+  return name.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[\s._-]+/).map((t) => t.toLowerCase()).filter(Boolean);
+}
+function isSensitiveName(name) {
+  const tokens = nameTokens(name);
+  for (let i = 0;i < tokens.length; i++) {
+    const token = tokens[i];
+    if (SENSITIVE_NAME_TOKENS.has(token)) {
+      return true;
+    }
+    if (token === "key" || token === "keys") {
+      const prev = tokens[i - 1];
+      if (prev && SENSITIVE_KEY_PREFIXES.has(prev)) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+function redactProperty(name, value) {
+  if (value === undefined || value === null) {
+    return;
+  }
+  if (isSensitiveName(name)) {
+    return REDACTED;
+  }
+  if (typeof value === "boolean" || typeof value === "number") {
+    return value;
+  }
+  if (typeof value !== "string") {
+    return "[OBJECT]";
+  }
+  return isFreeFormValue(name, value) ? redactMessage(value) : redactValueDetectors(value);
+}
+function redactProperties(properties) {
+  const out = {};
+  for (const [name, value] of Object.entries(properties)) {
+    const redacted = redactProperty(name, value);
+    if (redacted !== undefined) {
+      out[name] = redacted;
+    }
+  }
+  return out;
+}
+
 // ../../common/src/catch-error.ts
+var MAX_SERIALIZED_LENGTH = 500;
+var TRUNCATION_SUFFIX = "…(truncated)";
+var REDACTED2 = "[REDACTED]";
+function cap(text) {
+  return text.length > MAX_SERIALIZED_LENGTH ? `${text.slice(0, MAX_SERIALIZED_LENGTH)}${TRUNCATION_SUFFIX}` : text;
+}
+function omitSensitive(key, value) {
+  return key.length > 0 && isSensitiveName(key) ? REDACTED2 : value;
+}
+function describeThrownValue(value) {
+  if (typeof value !== "object" || value === null) {
+    return String(value);
+  }
+  let message;
+  try {
+    message = value.message;
+  } catch {
+    message = undefined;
+  }
+  if (typeof message === "string" && message.length > 0) {
+    return cap(message);
+  }
+  try {
+    const json = JSON.stringify(value, omitSensitive);
+    if (json !== undefined) {
+      return cap(json);
+    }
+  } catch {}
+  return String(value);
+}
+function toError(error) {
+  return error instanceof Error ? error : new Error(describeThrownValue(error), { cause: error });
+}
 function isPromiseLike(value) {
   return value !== null && typeof value === "object" && typeof value.then === "function";
 }
@@ -2384,17 +2896,11 @@ function catchError(fnOrPromise) {
     }
     return [undefined, result];
   } catch (error) {
-    return [
-      error instanceof Error ? error : new Error(String(error)),
-      undefined
-    ];
+    return [toError(error), undefined];
   }
 }
 function settlePromiseLike(thenable) {
-  return Promise.resolve(thenable).then((data) => [undefined, data]).catch((error) => [
-    error instanceof Error ? error : new Error(String(error)),
-    undefined
-  ]);
+  return Promise.resolve(thenable).then((data) => [undefined, data]).catch((error) => [toError(error), undefined]);
 }
 
 // ../../common/src/error-handler.ts
@@ -2699,7 +3205,7 @@ async function extractErrorDetails(error, options) {
   } else if (typeof err.message === "string") {
     details = err.message;
   } else {
-    details = String(error);
+    details = describeThrownValue(error);
   }
   const context = {};
   if (status) {
@@ -2775,69 +3281,10 @@ async function extractErrorMessage(error, options) {
   const { message } = await extractErrorDetails(error, options);
   return message;
 }
-// ../../../node_modules/commander/esm.mjs
-var import__ = __toESM(require_commander(), 1);
-var {
-  program,
-  createCommand,
-  createArgument,
-  createOption,
-  CommanderError,
-  InvalidArgumentError,
-  InvalidOptionArgumentError,
-  Command,
-  Argument,
-  Option,
-  Help
-} = import__.default;
-
-// ../../common/src/command-examples.ts
-var examplesByCommand = new WeakMap;
-Command.prototype.examples = function(examples) {
-  examplesByCommand.set(this, examples);
-  return this;
-};
-// ../../common/src/singleton.ts
-var PREFIX = "@uipath/common/";
-var _g = globalThis;
-function singleton(ctorOrName) {
-  const name = typeof ctorOrName === "string" ? ctorOrName : ctorOrName.name;
-  const key = Symbol.for(PREFIX + name);
-  return {
-    get(fallback) {
-      return _g[key] ?? fallback;
-    },
-    set(value) {
-      _g[key] = value;
-    },
-    clear() {
-      delete _g[key];
-    },
-    getOrInit(factory, guard) {
-      const existing = _g[key];
-      if (existing != null && typeof existing === "object") {
-        if (!guard || guard(existing)) {
-          return existing;
-        }
-      }
-      const instance = factory();
-      _g[key] = instance;
-      return instance;
-    }
-  };
-}
-
-// ../../common/src/preview.ts
-var previewSlot = singleton("PreviewBuild");
-function isPreviewBuild() {
-  return previewSlot.get(false) ?? false;
+// ../../common/src/exit-code.ts
+function setExitCode(code) {
+  process.exitCode = code;
 }
-Command.prototype.previewCommand = function(nameAndArgs, opts) {
-  if (isPreviewBuild()) {
-    return this.command(nameAndArgs, opts);
-  }
-  return new Command(nameAndArgs.split(/\s+/)[0] ?? nameAndArgs);
-};
 
 // ../../common/src/output-context.ts
 function createStorage() {
@@ -2950,45 +3397,40 @@ class SimpleLogger {
       this.pendingInit
     ]).then(() => getFileSystem().appendFile(path2, `${timestamp} ${formatted}`).catch(() => {}));
   }
-  debug(message, ...args) {
-    if (this.level > 0 /* DEBUG */)
-      return;
-    const formatted = this.format(`[DEBUG] ${message}`, args);
+  write(formatted) {
     if (this.isFileLoggingActive()) {
       this.writeToFile(formatted);
     } else {
       getOutputSink().writeErr(formatted);
     }
   }
+  debug(message, ...args) {
+    if (this.level > 0 /* DEBUG */)
+      return;
+    const formatted = this.format(`[DEBUG] ${message}`, args);
+    this.write(formatted);
+  }
   info(message, ...args) {
     if (this.level > 1 /* INFO */)
       return;
     const formatted = this.format(message, args);
-    if (this.isFileLoggingActive()) {
-      this.writeToFile(formatted);
-    } else {
-      getOutputSink().writeErr(formatted);
-    }
+    this.write(formatted);
   }
   warn(message, ...args) {
     if (this.level > 2 /* WARN */)
       return;
     const formatted = this.format(`[WARN] ${message}`, args);
-    if (this.isFileLoggingActive()) {
-      this.writeToFile(formatted);
-    } else {
-      getOutputSink().writeErr(formatted);
-    }
+    this.write(formatted);
   }
   error(message, ...args) {
     if (this.level > 3 /* ERROR */)
       return;
     const formatted = this.format(`[ERROR] ${message}`, args);
-    if (this.isFileLoggingActive()) {
-      this.writeToFile(formatted);
-    } else {
-      getOutputSink().writeErr(formatted);
-    }
+    this.write(formatted);
+  }
+  report(message) {
+    const formatted = this.format(message, []);
+    this.write(formatted);
   }
   getLevel() {
     return this.level;
@@ -3067,12 +3509,12 @@ var jmespathSlot = singleton("JmespathCodec");
 async function loadOutputCodecsAsync(needed) {
   const loads = [];
   if (needed.yaml && yamlSlot.get() === undefined) {
-    loads.push(import("./js-yaml-eydtmn4r.js").then((mod) => {
+    loads.push(import("./js-yaml-71wj4em9.js").then((mod) => {
       yamlSlot.set(mod);
     }));
   }
   if (needed.filter && jmespathSlot.get() === undefined) {
-    loads.push(import("./index-xaqpc626.js").then((mod) => {
+    loads.push(import("./index-q6vc5bja.js").then((mod) => {
       jmespathSlot.set(mod);
     }));
   }
@@ -3350,27 +3792,41 @@ class LoggerTelemetryProvider {
       ...this.analyticsUniqueId ? { analyticsUniqueId: this.analyticsUniqueId } : {}
     };
   }
-  async trackEvent(eventName, properties) {
-    logger.debug(formatMessage("Event", eventName, this.enrich(properties)));
+  async trackEvent({ name, properties }) {
+    logger.debug(formatMessage("Event", name, this.enrich(properties)));
   }
-  async trackException(error, properties) {
+  async trackException({
+    error,
+    properties
+  }) {
     logger.error(formatMessage("Exception", error.message, this.enrich({
       ...properties,
       stack: error.stack
     })));
   }
-  async trackRequest(name, duration, success, properties) {
+  async trackRequest({
+    name,
+    durationMs,
+    success,
+    properties
+  }) {
     logger.debug(formatMessage("Request", name, this.enrich({
       ...properties,
-      duration: `${duration}ms`,
+      duration: `${durationMs}ms`,
       success
     })));
   }
-  async trackDependency(name, type, duration, success, properties) {
+  async trackDependency({
+    name,
+    type,
+    durationMs,
+    success,
+    properties
+  }) {
     logger.debug(formatMessage("Dependency", name, this.enrich({
       ...properties,
       type,
-      duration: `${duration}ms`,
+      duration: `${durationMs}ms`,
       success
     })));
   }
@@ -3567,203 +4023,75 @@ var INHERITED_SESSION_SOURCES = [
 var telemetrySessionSlot = singleton("TelemetrySession");
 var telemetryOperationIdSlot = singleton("TelemetryOperationId");
 function getProcessEnv2() {
-  return globalThis.process?.env;
-}
-function normalizeSessionId(value) {
-  if (typeof value !== "string" && typeof value !== "number" && typeof value !== "boolean") {
-    return;
-  }
-  const cleaned = String(value).replace(CONTROL_CHARACTERS, "").trim().slice(0, SESSION_ID_MAX_LENGTH);
-  return cleaned || undefined;
-}
-function getConfiguredTelemetrySessionId() {
-  return normalizeSessionId(getProcessEnv2()?.[TELEMETRY_SESSION_ID_ENV]);
-}
-function getInheritedSession(env) {
-  for (const candidate of INHERITED_SESSION_SOURCES) {
-    const handle = normalizeSessionId(env[candidate.envVar]);
-    if (handle) {
-      return { id: handle, source: candidate.source };
-    }
-  }
-  return;
-}
-function generateRandomSession() {
-  const bytes = new Uint8Array(RANDOM_SESSION_ID_LENGTH / 2);
-  crypto.getRandomValues(bytes);
-  let hex = "";
-  for (const byte of bytes) {
-    hex += byte.toString(16).padStart(2, "0");
-  }
-  return { id: hex, source: "random" };
-}
-function resolveTelemetrySession() {
-  const existing = telemetrySessionSlot.get();
-  if (existing) {
-    return existing;
-  }
-  const declaredHandle = getConfiguredTelemetrySessionId();
-  const resolved = declaredHandle ? { id: declaredHandle, source: "declared" } : getInheritedSession(getProcessEnv2() ?? {}) ?? generateRandomSession();
-  telemetrySessionSlot.set(resolved);
-  return resolved;
-}
-function getTelemetrySessionSource() {
-  return resolveTelemetrySession().source;
-}
-function getTelemetryOperationId() {
-  const existing = telemetryOperationIdSlot.get();
-  if (existing) {
-    return existing;
-  }
-  const inboundTraceId = getInboundTraceContext()?.traceId;
-  const generated = inboundTraceId ?? crypto.randomUUID().replaceAll("-", "");
-  telemetryOperationIdSlot.set(generated);
-  return generated;
-}
-// ../../common/src/telemetry/global-telemetry-properties.ts
-var telemetryPropsSlot = singleton("TelemetryDefaultProps");
-function getGlobalTelemetryProperties() {
-  return telemetryPropsSlot.get();
-}
-
-// ../../common/src/telemetry/pii-redactor.ts
-var REDACTED = "[REDACTED]";
-var MAX_VALUE_LENGTH = 200;
-var SENSITIVE_NAME_TOKENS = new Set([
-  "token",
-  "tokens",
-  "secret",
-  "secrets",
-  "password",
-  "passwords",
-  "pwd",
-  "credential",
-  "credentials",
-  "auth",
-  "authentication",
-  "authorization",
-  "authority",
-  "cert",
-  "certificate",
-  "certificates"
-]);
-var SENSITIVE_KEY_PREFIXES = new Set([
-  "api",
-  "access",
-  "client",
-  "private",
-  "public",
-  "signing",
-  "encryption",
-  "session",
-  "master",
-  "shared",
-  "root",
-  "ssh",
-  "rsa",
-  "aes",
-  "hmac",
-  "oauth"
-]);
-var UUID_PATTERN = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
-var EMAIL_PATTERN = /\b[^\s@]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
-var JWT_PATTERN = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;
-var LONG_TOKEN_PATTERN = /\b[A-Za-z0-9_-]{40,}\b/g;
-var USER_HOME_PATTERN = /([/\\])(Users|home)([/\\])([^/\\]+)/gi;
-var URL_PATTERN = /\bhttps?:\/\/[^\s,;]+/gi;
-var URL_TRAILING_PUNCT = /[.,;:!?)\]}>'"]+$/;
-function shortHash(input) {
-  let hash = 2166136261;
-  for (let i = 0;i < input.length; i++) {
-    hash ^= input.charCodeAt(i);
-    hash = Math.imul(hash, 16777619);
-  }
-  return (hash >>> 0).toString(16).padStart(8, "0");
-}
-function redactUrl(raw) {
-  try {
-    const url = new URL(raw);
-    return `${url.protocol}//${url.host}`;
-  } catch {
-    return `url#${shortHash(raw)}`;
-  }
-}
-function redactValueDetectors(value) {
-  let out = value;
-  out = out.replace(JWT_PATTERN, () => REDACTED);
-  out = out.replace(URL_PATTERN, (match) => {
-    const trailing = match.match(URL_TRAILING_PUNCT)?.[0] ?? "";
-    const core = trailing ? match.slice(0, -trailing.length) : match;
-    return `${redactUrl(core)}${trailing}`;
-  });
-  out = out.replace(USER_HOME_PATTERN, (_match, sep1, folder, sep2) => `${sep1}${folder}${sep2}<user>`);
-  out = out.replace(EMAIL_PATTERN, (match) => `email#${shortHash(match)}`);
-  out = out.replace(UUID_PATTERN, (match) => `uuid#${shortHash(match)}`);
-  out = out.replace(LONG_TOKEN_PATTERN, () => REDACTED);
-  if (out.length > MAX_VALUE_LENGTH) {
-    out = `${out.slice(0, MAX_VALUE_LENGTH)}…`;
-  }
-  return out;
-}
-function redactValue(value) {
-  return redactValueDetectors(value);
-}
-function redactError(error) {
-  const safe = new Error(redactValueDetectors(error.message ?? ""));
-  safe.name = error.name;
-  safe.stack = typeof error.stack === "string" ? redactValueDetectors(error.stack) : undefined;
-  return safe;
-}
-function nameTokens(name) {
-  return name.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[\s._-]+/).map((t) => t.toLowerCase()).filter(Boolean);
-}
-function isSensitiveName(name) {
-  const tokens = nameTokens(name);
-  for (let i = 0;i < tokens.length; i++) {
-    const token = tokens[i];
-    if (SENSITIVE_NAME_TOKENS.has(token)) {
-      return true;
-    }
-    if (token === "key" || token === "keys") {
-      const prev = tokens[i - 1];
-      if (prev && SENSITIVE_KEY_PREFIXES.has(prev)) {
-        return true;
-      }
-    }
-  }
-  return false;
+  return globalThis.process?.env;
 }
-function redactProperty(name, value) {
-  if (value === undefined || value === null) {
+function normalizeSessionId(value) {
+  if (typeof value !== "string" && typeof value !== "number" && typeof value !== "boolean") {
     return;
   }
-  if (isSensitiveName(name)) {
-    return REDACTED;
+  const cleaned = String(value).replace(CONTROL_CHARACTERS, "").trim().slice(0, SESSION_ID_MAX_LENGTH);
+  return cleaned || undefined;
+}
+function getConfiguredTelemetrySessionId() {
+  return normalizeSessionId(getProcessEnv2()?.[TELEMETRY_SESSION_ID_ENV]);
+}
+function getInheritedSession(env) {
+  for (const candidate of INHERITED_SESSION_SOURCES) {
+    const handle = normalizeSessionId(env[candidate.envVar]);
+    if (handle) {
+      return { id: handle, source: candidate.source };
+    }
   }
-  if (typeof value === "boolean" || typeof value === "number") {
-    return value;
+  return;
+}
+function generateRandomSession() {
+  const bytes = new Uint8Array(RANDOM_SESSION_ID_LENGTH / 2);
+  crypto.getRandomValues(bytes);
+  let hex = "";
+  for (const byte of bytes) {
+    hex += byte.toString(16).padStart(2, "0");
   }
-  if (typeof value !== "string") {
-    return "[OBJECT]";
+  return { id: hex, source: "random" };
+}
+function resolveTelemetrySession() {
+  const existing = telemetrySessionSlot.get();
+  if (existing) {
+    return existing;
   }
-  return redactValueDetectors(value);
+  const declaredHandle = getConfiguredTelemetrySessionId();
+  const resolved = declaredHandle ? { id: declaredHandle, source: "declared" } : getInheritedSession(getProcessEnv2() ?? {}) ?? generateRandomSession();
+  telemetrySessionSlot.set(resolved);
+  return resolved;
 }
-function redactProperties(properties) {
-  const out = {};
-  for (const [name, value] of Object.entries(properties)) {
-    const redacted = redactProperty(name, value);
-    if (redacted !== undefined) {
-      out[name] = redacted;
-    }
+function getTelemetrySessionSource() {
+  return resolveTelemetrySession().source;
+}
+function getTelemetryOperationId() {
+  const existing = telemetryOperationIdSlot.get();
+  if (existing) {
+    return existing;
   }
-  return out;
+  const inboundTraceId = getInboundTraceContext()?.traceId;
+  const generated = inboundTraceId ?? crypto.randomUUID().replaceAll("-", "");
+  telemetryOperationIdSlot.set(generated);
+  return generated;
+}
+// ../../common/src/telemetry/global-telemetry-properties.ts
+var telemetryPropsSlot = singleton("TelemetryDefaultProps");
+function getGlobalTelemetryProperties() {
+  return telemetryPropsSlot.get();
 }
 
-// ../../common/src/telemetry/telemetry-service.ts
-var TELEMETRY_OPERATION_ID_PROPERTY = "uip.trace.operation_id";
-var TELEMETRY_PARENT_ID_PROPERTY = "uip.trace.parent_id";
-var TELEMETRY_SPAN_ID_PROPERTY = "uip.trace.span_id";
+// ../../common/src/telemetry/span-clock.ts
+function startSpanClock() {
+  const started = performance.now();
+  return {
+    startedAt: new Date(performance.timeOrigin + started),
+    elapsedMs: () => performance.now() - started
+  };
+}
 
+// ../../common/src/telemetry/telemetry-service.ts
 class TelemetryService {
   telemetryProvider;
   contextStorage;
@@ -3783,36 +4111,39 @@ class TelemetryService {
     this.defaultProperties = properties === undefined ? undefined : { ...this.defaultProperties, ...properties };
   }
   trackEvent(name, properties) {
-    const context = this.getCurrentContext();
-    const enrichedProperties = this.enrichPropertiesWithContext(properties, context);
-    this.telemetryProvider.trackEvent(name, enrichedProperties);
+    this.telemetryProvider.trackEvent({
+      name: redactSpanName(name),
+      properties: this.enrichProperties(properties),
+      ...this.leafCorrelation()
+    });
   }
-  trackException(error, properties) {
-    const context = this.getCurrentContext();
-    const enrichedProperties = this.enrichPropertiesWithContext(properties, context);
-    this.telemetryProvider.trackException(redactError(error), enrichedProperties);
+  trackException(error, properties, context) {
+    this.telemetryProvider.trackException({
+      error: redactError(error),
+      properties: this.enrichProperties(properties),
+      ...this.leafCorrelation(context)
+    });
   }
   async trackRequest(name, fn, properties) {
-    const parentContext = this.getCurrentContext();
+    const parentContext = this.getActiveContext();
     const operationId = parentContext?.operationId ?? this.operationId ?? getTelemetryOperationId();
     const parentId = parentContext ? parentContext.id : this.inboundParentIdFor(operationId);
+    const clock = startSpanClock();
     const context = {
       operationId,
       ...parentId !== undefined ? { parentId } : {},
-      id: this.generateId()
+      id: this.generateId(),
+      startedAt: clock.startedAt
     };
-    const startTime = performance.now();
     try {
       const result = await this.contextStorage.run(context, fn);
-      const durationMs = performance.now() - startTime;
-      const enrichedProperties = this.enrichPropertiesWithContext(properties, context);
-      await this.telemetryProvider.trackRequest(name, durationMs, true, enrichedProperties);
+      const durationMs = clock.elapsedMs();
+      await this.telemetryProvider.trackRequest(this.spanFor(name, durationMs, true, properties, context));
       return result;
     } catch (error) {
-      const durationMs = performance.now() - startTime;
+      const durationMs = clock.elapsedMs();
       const err = error instanceof Error ? error : new Error(String(error));
-      const enrichedProperties = this.enrichPropertiesWithContext({ ...properties, errorMessage: err.message }, context);
-      await this.telemetryProvider.trackRequest(name, durationMs, false, enrichedProperties);
+      await this.telemetryProvider.trackRequest(this.spanFor(name, durationMs, false, { ...properties, errorMessage: err.message }, context));
       throw error;
     }
   }
@@ -3821,8 +4152,7 @@ class TelemetryService {
       operationId: this.operationId ?? getTelemetryOperationId(),
       id: this.generateId()
     };
-    const enrichedProperties = this.enrichPropertiesWithContext(properties, requestContext);
-    this.telemetryProvider.trackRequest(name, durationMs, success, enrichedProperties);
+    this.telemetryProvider.trackRequest(this.spanFor(name, durationMs, success, properties, requestContext));
   }
   createRequestContext() {
     const operationId = this.operationId ?? getTelemetryOperationId();
@@ -3830,7 +4160,8 @@ class TelemetryService {
     return {
       operationId,
       ...parentId !== undefined ? { parentId } : {},
-      id: this.generateId()
+      id: this.generateId(),
+      startedAt: startSpanClock().startedAt
     };
   }
   inboundParentIdFor(operationId) {
@@ -3841,58 +4172,84 @@ class TelemetryService {
     return this.contextStorage.run(context, fn);
   }
   createDependencyContext() {
-    const parentContext = this.getCurrentContext();
+    const parentContext = this.getActiveContext();
     if (!parentContext) {
       return;
     }
     return {
       operationId: parentContext.operationId,
       parentId: parentContext.id,
-      id: this.generateId()
+      id: this.generateId(),
+      startedAt: startSpanClock().startedAt
     };
   }
   trackDependencyResult(name, type, durationMs, success, properties, context, resultCode) {
-    const enrichedProperties = this.enrichPropertiesWithContext(properties, context);
-    this.telemetryProvider.trackDependency(redactValue(name), type, durationMs, success, enrichedProperties, resultCode);
+    this.telemetryProvider.trackDependency({
+      ...this.spanFor(redactHttpDependencyName(name), durationMs, success, properties, context),
+      type,
+      ...resultCode !== undefined ? { resultCode } : {}
+    });
   }
   async trackDependencyOperation(name, type, fn, properties) {
-    const parentContext = this.getCurrentContext();
+    const clock = startSpanClock();
+    const parentContext = this.getActiveContext();
     const childContext = parentContext !== undefined ? {
       operationId: parentContext.operationId,
       parentId: parentContext.id,
-      id: this.generateId()
-    } : this.createRequestContext();
-    const startTime = performance.now();
+      id: this.generateId(),
+      startedAt: clock.startedAt
+    } : {
+      ...this.createRequestContext(),
+      startedAt: clock.startedAt
+    };
     try {
       const result = await this.contextStorage.run(childContext, fn);
-      const durationMs = performance.now() - startTime;
-      const enrichedProperties = this.enrichPropertiesWithContext(properties, childContext);
-      await this.telemetryProvider.trackDependency(name, type, durationMs, true, enrichedProperties);
+      const durationMs = clock.elapsedMs();
+      await this.telemetryProvider.trackDependency({
+        ...this.spanFor(name, durationMs, true, properties, childContext),
+        type
+      });
       return result;
     } catch (error) {
-      const durationMs = performance.now() - startTime;
+      const durationMs = clock.elapsedMs();
       const err = error instanceof Error ? error : new Error(String(error));
-      const enrichedProperties = this.enrichPropertiesWithContext({ ...properties, errorMessage: err.message }, childContext);
-      await this.telemetryProvider.trackDependency(name, type, durationMs, false, enrichedProperties);
+      await this.telemetryProvider.trackDependency({
+        ...this.spanFor(name, durationMs, false, { ...properties, errorMessage: err.message }, childContext),
+        type
+      });
       throw error;
     }
   }
-  getCurrentContext() {
+  getActiveContext() {
     return this.contextStorage.getContext();
   }
-  enrichPropertiesWithContext(properties, context) {
+  leafCorrelation(explicit) {
+    const context = explicit ?? this.getActiveContext();
+    return {
+      operationId: context?.operationId ?? this.operationId ?? getTelemetryOperationId(),
+      ...context !== undefined ? { parentId: context.id } : {}
+    };
+  }
+  spanFor(name, durationMs, success, properties, context) {
+    return {
+      name: redactSpanName(name),
+      durationMs,
+      success,
+      properties: this.enrichProperties(properties),
+      operationId: context.operationId,
+      ...context.parentId !== undefined ? { parentId: context.parentId } : {},
+      id: context.id,
+      ...context.startedAt !== undefined ? { startedAt: context.startedAt } : {}
+    };
+  }
+  enrichProperties(properties) {
     const globalProperties = getGlobalTelemetryProperties();
     const enriched = {
       ...getExecutionContextTelemetryProperties(),
       ...globalProperties,
       ...this.defaultProperties,
       ...redactProperties(properties ?? {}),
-      [TELEMETRY_SESSION_SOURCE_PROPERTY]: getTelemetrySessionSource(),
-      ...context ? {
-        [TELEMETRY_OPERATION_ID_PROPERTY]: context.operationId,
-        ...context.parentId !== undefined ? { [TELEMETRY_PARENT_ID_PROPERTY]: context.parentId } : {},
-        [TELEMETRY_SPAN_ID_PROPERTY]: context.id
-      } : {}
+      [TELEMETRY_SESSION_SOURCE_PROPERTY]: getTelemetrySessionSource()
     };
     return enriched;
   }
@@ -3909,6 +4266,81 @@ class TelemetryService {
     return hex;
   }
 }
+// ../../common/src/timings.ts
+var TIMINGS_ENV_VAR = "UIP_TIMINGS";
+function createStorage2() {
+  const [error, mod] = catchError(() => __require("node:async_hooks"));
+  if (error || typeof mod?.AsyncLocalStorage !== "function") {
+    return {
+      getStore: () => {
+        return;
+      },
+      run: (_store, fn) => fn()
+    };
+  }
+  return new mod.AsyncLocalStorage;
+}
+var storageSlot = singleton("TimingStorage");
+var stateSlot = singleton("Timings");
+var rootStartedSlot = singleton("TimingsRootStarted");
+var longLivedHostSlot = singleton("TimingsLongLivedHost");
+var storage = storageSlot.getOrInit(createStorage2, (value) => ("getStore" in value));
+function newState(baseline) {
+  return { baseline, httpMs: 0, httpCalls: 0 };
+}
+function getState() {
+  const scoped = storage.getStore();
+  if (scoped) {
+    return scoped;
+  }
+  const pinned = livePinnedState();
+  if (pinned !== undefined) {
+    return pinned;
+  }
+  return newState(processStartIsInvocationStart() ? 0 : performance.now());
+}
+function livePinnedState() {
+  const pinned = stateSlot.get();
+  return pinned !== undefined && "httpCalls" in pinned && !pinned.finished ? pinned : undefined;
+}
+function processStartIsInvocationStart() {
+  return !rootStartedSlot.get(false) && !longLivedHostSlot.get(false);
+}
+function timingsEnabled() {
+  if (typeof process === "undefined") {
+    return false;
+  }
+  const value = process.env?.[TIMINGS_ENV_VAR];
+  if (value === undefined) {
+    return false;
+  }
+  const normalized = value.trim().toLowerCase();
+  return normalized === "1" || normalized === "true";
+}
+function recordExitCode(exitCode) {
+  if (!timingsEnabled()) {
+    return;
+  }
+  getState().exitCode = exitCode;
+}
+function invocationStartedAt() {
+  return new Date(performance.timeOrigin + getState().baseline);
+}
+function invocationElapsedMs() {
+  return performance.now() - getState().baseline;
+}
+function markCommandStart() {
+  if (!timingsEnabled()) {
+    return;
+  }
+  getState().commandStart = performance.now();
+}
+function recordCommandDuration(durationMs) {
+  if (!timingsEnabled()) {
+    return;
+  }
+  getState().commandMs = durationMs;
+}
 // ../../common/src/telemetry/proxy-http-agent.ts
 var slot = singleton("ProxyAuthHttpsAgent");
 
@@ -3929,6 +4361,9 @@ function getGlobalTelemetryInstance() {
   }
   return;
 }
+function setGlobalTelemetryInstance(instance) {
+  telemetryInstanceSlot.set(instance);
+}
 var _localTelemetryInstance;
 function getTelemetryInstance() {
   const global = getGlobalTelemetryInstance();
@@ -3936,6 +4371,7 @@ function getTelemetryInstance() {
     return global;
   if (!_localTelemetryInstance) {
     _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);
+    setGlobalTelemetryInstance(_localTelemetryInstance);
   }
   return _localTelemetryInstance;
 }
@@ -3948,6 +4384,14 @@ var telemetry = new Proxy({}, {
 });
 
 // ../../common/src/formatter.ts
+var ANSI_STYLES = {
+  red: "\x1B[31m",
+  dim: "\x1B[2m"
+};
+var ANSI_RESET = "\x1B[0m";
+function styleLine(line, style) {
+  return style ? `${ANSI_STYLES[style]}${line}${ANSI_RESET}` : line;
+}
 var CLI_ERROR_CODES = [
   "invalid_argument",
   "authentication_required",
@@ -3986,22 +4430,6 @@ var EXIT_CODES = {
   ValidationError: 3,
   TimeoutError: 4
 };
-class SuccessOutput {
-  Result = RESULTS.Success;
-  Code;
-  Data;
-  Pagination;
-  Instructions;
-  Log;
-  constructor(code, data) {
-    this.Code = code;
-    this.Data = data;
-    const logPath = getLogFilePath();
-    if (logPath) {
-      this.Log = logPath;
-    }
-  }
-}
 function escapeNonAscii(jsonText) {
   return jsonText.replace(/[\u0080-\uffff]/g, (c) => {
     const hex = c.charCodeAt(0).toString(16).padStart(4, "0");
@@ -4066,19 +4494,45 @@ function toPascalCaseKey(key) {
   const lowerCamelKey = toLowerCamelCaseKey(key);
   return lowerCamelKey ? lowerCamelKey.charAt(0).toUpperCase() + lowerCamelKey.slice(1) : lowerCamelKey;
 }
-function toPascalCaseData(value) {
+function collectVerbatimRefs(value, into) {
+  if (typeof value !== "object" || value === null)
+    return;
+  if (into.has(value))
+    return;
+  into.add(value);
+  for (const nested of Array.isArray(value) ? value : Object.values(value)) {
+    collectVerbatimRefs(nested, into);
+  }
+}
+function toPascalCaseData(value, verbatimKeys, subtrees) {
+  if (subtrees?.mode === "skip" && typeof value === "object" && value !== null && subtrees.refs.has(value)) {
+    return value;
+  }
   if (Array.isArray(value))
-    return value.map(toPascalCaseData);
+    return value.map((entry) => toPascalCaseData(entry, verbatimKeys, subtrees));
   if (!isPlainRecord(value))
     return value;
   const result = {};
   for (const [key, nestedValue] of Object.entries(value)) {
-    result[toPascalCaseKey(key)] = toPascalCaseData(nestedValue);
+    const pascalKey = toPascalCaseKey(key);
+    if (verbatimKeys?.has(pascalKey)) {
+      result[pascalKey] = nestedValue;
+      if (subtrees?.mode === "collect") {
+        collectVerbatimRefs(nestedValue, subtrees.refs);
+      }
+      continue;
+    }
+    result[pascalKey] = toPascalCaseData(nestedValue, verbatimKeys, subtrees);
   }
   return result;
 }
-function normalizeDataKeys(data) {
-  return toPascalCaseData(data);
+function normalizeDataKeys(data, verbatimKeys, subtrees) {
+  return toPascalCaseData(data, verbatimKeys, subtrees);
+}
+function toVerbatimKeySet(preserve) {
+  if (!Array.isArray(preserve))
+    return;
+  return new Set(preserve.map(toPascalCaseKey));
 }
 function normalizeOutputKeys(data) {
   const result = {};
@@ -4088,7 +4542,7 @@ function normalizeOutputKeys(data) {
   }
   return result;
 }
-function printOutput(data, format = "json", logFn, asciiSafe = false) {
+function printOutput(data, format = "json", logFn, asciiSafe = false, tableRowStyle) {
   if (!data) {
     logFn("Empty response object. No data to display.");
     return;
@@ -4123,7 +4577,7 @@ function printOutput(data, format = "json", logFn, asciiSafe = false) {
       if (hasData && !(rows !== null && rows.length === 0)) {
         const logValue = data.Log;
         if (rows !== null) {
-          printResizableTable(rows, logFn, logValue);
+          printResizableTable(rows, logFn, logValue, undefined, tableRowStyle);
         } else {
           printVerticalTable(data.Data, logFn, logValue);
         }
@@ -4134,10 +4588,11 @@ function printOutput(data, format = "json", logFn, asciiSafe = false) {
     }
   }
 }
-function logOutput(data, format = "json") {
+function logOutput(data, format = "json", tableRowStyle) {
   const sink = getOutputSink();
+  const styleFn = sink.capabilities.isInteractive && sink.capabilities.supportsColor ? tableRowStyle : undefined;
   printOutput(data, format, (msg) => sink.writeOut(`${msg}
-`), needsAsciiSafeJson(sink));
+`), needsAsciiSafeJson(sink), styleFn);
 }
 function cellToString(val) {
   return val != null && typeof val === "object" ? JSON.stringify(val) : String(val ?? "");
@@ -4151,7 +4606,7 @@ function wrapText(text, width) {
   }
   return lines;
 }
-function printTable(data, logFn, externalLogValue) {
+function printTable(data, logFn, externalLogValue, tableRowStyle) {
   if (data.length === 0)
     return;
   const keys = Object.keys(data[0]).filter((key) => !["code", "log"].includes(key.toLowerCase()));
@@ -4161,7 +4616,7 @@ function printTable(data, logFn, externalLogValue) {
   logFn(keys.map((_, i) => "-".repeat(maxWidths[i])).join("-|-"));
   data.forEach((item) => {
     const row = keys.map((key, i) => cellToString(item[key]).padEnd(maxWidths[i])).join(" | ");
-    logFn(row);
+    logFn(styleLine(row, tableRowStyle?.(item)));
   });
   if (externalLogValue) {
     logFn("");
@@ -4204,14 +4659,14 @@ function printVerticalTable(data, logFn = console.log, externalLogValue) {
     logFn(`Log: ${externalLogValue}`);
   }
 }
-function printResizableTable(data, logFn = console.log, externalLogValue, availableWidth) {
+function printResizableTable(data, logFn = console.log, externalLogValue, availableWidth, tableRowStyle) {
   if (data.length === 0)
     return;
   const keys = Object.keys(data[0]).filter((key) => !["code", "log"].includes(key.toLowerCase()));
   if (keys.length === 0)
     return;
   if (!process.stdout.isTTY) {
-    printTable(data, logFn, externalLogValue);
+    printTable(data, logFn, externalLogValue, tableRowStyle);
     return;
   }
   const naturalWidths = keys.map((key) => Math.max(key.length, ...data.map((item) => cellToString(item[key]).length)));
@@ -4219,7 +4674,7 @@ function printResizableTable(data, logFn = console.log, externalLogValue, availa
   const totalWidth = naturalWidths.reduce((a, b) => a + b, 0) + separatorTotal;
   const termWidth = availableWidth ?? (process.stdout.columns || 120);
   if (totalWidth <= termWidth) {
-    printTable(data, logFn, externalLogValue);
+    printTable(data, logFn, externalLogValue, tableRowStyle);
     return;
   }
   const overflow = totalWidth - termWidth;
@@ -4265,6 +4720,7 @@ function printResizableTable(data, logFn = console.log, externalLogValue, availa
   logFn(header);
   logFn(keys.map((_, i) => "-".repeat(finalWidths[i])).join("-|-"));
   data.forEach((item) => {
+    const style = tableRowStyle?.(item);
     const cellLines = keys.map((key, i) => wrapText(cellToString(item[key]), finalWidths[i]));
     const lineCount = Math.max(...cellLines.map((l) => l.length));
     for (let line = 0;line < lineCount; line++) {
@@ -4272,7 +4728,7 @@ function printResizableTable(data, logFn = console.log, externalLogValue, availa
         const val = line < cellLines[i].length ? cellLines[i][line] : "";
         return val.padEnd(finalWidths[i]);
       }).join(" | ");
-      logFn(row);
+      logFn(styleLine(row, style));
     }
   });
   if (externalLogValue) {
@@ -4416,30 +4872,36 @@ var OutputFormatter;
 ((OutputFormatter) => {
   function success(data, options) {
     data.Log ??= getLogFilePath() || undefined;
-    const normalize = !options?.preserveDataKeys;
+    const normalize = options?.preserveDataKeys !== true;
+    const verbatim = toVerbatimKeySet(options?.preserveDataKeys);
+    const subtrees = verbatim && {
+      refs: new Set,
+      mode: "collect"
+    };
     if (normalize) {
-      data.Data = normalizeDataKeys(data.Data);
+      data.Data = normalizeDataKeys(data.Data, verbatim, subtrees);
     }
     const filter = getOutputFilter();
     if (filter) {
       const filtered = applyFilter(data.Data, filter);
-      data.Data = normalize ? normalizeDataKeys(filtered) : filtered;
+      data.Data = normalize ? normalizeDataKeys(filtered, verbatim, subtrees && { refs: subtrees.refs, mode: "skip" }) : filtered;
     }
-    logOutput(normalizeOutputKeys(data), getOutputFormat());
+    logOutput(normalizeOutputKeys(data), getOutputFormat(), options?.tableRowStyle);
   }
   OutputFormatter.success = success;
   function error(data) {
     data.Log ??= getLogFilePath() || undefined;
     data.ErrorCode ??= defaultErrorCodeForFailure(data);
     data.Retry ??= defaultRetryForErrorCode(data.ErrorCode);
-    process.exitCode = EXIT_CODES[data.Result] ?? 1;
+    const exitCode = EXIT_CODES[data.Result] ?? 1;
+    setExitCode(exitCode);
     recordCommandFailureTelemetry({
       result: data.Result,
       errorCode: data.ErrorCode,
       retry: data.Retry,
       message: data.Message,
       context: data.Context,
-      exitCode: process.exitCode,
+      exitCode,
       errorClass: data.TelemetryErrorClass,
       terminalOutcome: data.TelemetryTerminalOutcome,
       terminalSignal: data.TelemetryTerminalSignal
@@ -4515,6 +4977,39 @@ var OutputFormatter;
   }
   OutputFormatter.formatToString = formatToString;
 })(OutputFormatter ||= {});
+// ../../../node_modules/commander/esm.mjs
+var import__ = __toESM(require_commander(), 1);
+var {
+  program,
+  createCommand,
+  createArgument,
+  createOption,
+  CommanderError,
+  InvalidArgumentError,
+  InvalidOptionArgumentError,
+  Command,
+  Argument,
+  Option,
+  Help
+} = import__.default;
+
+// ../../common/src/command-examples.ts
+var examplesByCommand = new WeakMap;
+Command.prototype.examples = function(examples) {
+  examplesByCommand.set(this, examples);
+  return this;
+};
+// ../../common/src/preview.ts
+var previewSlot = singleton("PreviewBuild");
+function isPreviewBuild() {
+  return previewSlot.get(false) ?? false;
+}
+Command.prototype.previewCommand = function(nameAndArgs, opts) {
+  if (isPreviewBuild()) {
+    return this.command(nameAndArgs, opts);
+  }
+  return new Command(nameAndArgs.split(/\s+/)[0] ?? nameAndArgs);
+};
 
 // ../../common/src/telemetry/command-attribution.ts
 var LEGACY_SKILL_NAMESPACE = "uipath:";
@@ -4669,6 +5164,57 @@ function buildCommandTelemetryAttribution(commandPath, skillSource) {
   };
 }
 
+// ../../common/src/telemetry/command-name.ts
+var TELEMETRY_COMMAND_ROOT = "uip";
+function commandTelemetryName(parts) {
+  const tokens = [];
+  for (const part of parts) {
+    const pieces = String(part ?? "").split(/\s+/).filter((token) => token && !token.startsWith("-") && token !== TELEMETRY_COMMAND_ROOT);
+    if (pieces.every(isCommandToken)) {
+      tokens.push(...pieces);
+      continue;
+    }
+    tokens.push(UNKNOWN_TOKEN);
+  }
+  return [TELEMETRY_COMMAND_ROOT, ...tokens].join(".");
+}
+var COMMAND_TOKEN_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+var MAX_COMMAND_TOKEN_LENGTH = 32;
+var GUID_TOKEN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+function isCommandToken(token) {
+  return token.length <= MAX_COMMAND_TOKEN_LENGTH && COMMAND_TOKEN_PATTERN.test(token) && !GUID_TOKEN.test(token) && !/^\d+$/.test(token);
+}
+var UNKNOWN_TOKEN = "<unknown>";
+
+// ../../common/src/telemetry/invocation-request.ts
+var requestContextSlot = singleton("TelemetryInvocationRequestContext");
+function activeContext() {
+  return telemetry.getActiveContext?.();
+}
+function runWithInvocationRequest(fn) {
+  const context = telemetry.createRequestContext();
+  context.startedAt = invocationStartedAt();
+  requestContextSlot.set(context);
+  return telemetry.runWithContext(context, fn);
+}
+function ensureInvocationRequestScope(fn) {
+  if (activeContext() !== undefined) {
+    return fn();
+  }
+  const kept = requestContextSlot.get();
+  return kept === undefined ? runWithInvocationRequest(fn) : telemetry.runWithContext(kept, fn);
+}
+function getInvocationRequestContext() {
+  return activeContext() ?? requestContextSlot.get();
+}
+function emitInvocationRequest(name, success, properties) {
+  const context = getInvocationRequestContext();
+  telemetry.trackRequestResult(name, invocationElapsedMs(), success, properties, context);
+  if (context !== undefined && requestContextSlot.get() === context) {
+    requestContextSlot.clear();
+  }
+}
+
 // ../../common/src/trackedAction.ts
 var pollSignalSlot = singleton("PollSignal");
 var cliErrorCodeValues = new Set(CLI_ERROR_CODES);
@@ -4676,28 +5222,74 @@ var retryHintValues = new Set(RETRY_HINTS);
 var TELEMETRY_COMMAND_ARG_PREFIX = "uip.cmd.arg.";
 var processContext = {
   exit: (code) => {
-    process.exitCode = code;
+    recordExitCode(code);
+    setExitCode(code);
   },
   get pollSignal() {
     return pollSignalSlot.get();
   }
 };
+var TELEMETRY_ARG_VALUE_WITHHELD = "<provided>";
+var TELEMETRY_ARG_VALUE_DEFAULTED = "<default>";
+function recordableArgValue(value, choices) {
+  if (typeof value === "boolean" || typeof value === "number") {
+    return value;
+  }
+  if (choices && choices.length > 0) {
+    if (typeof value === "string" && choices.includes(value)) {
+      return value;
+    }
+    if (Array.isArray(value) && value.length > 0 && value.every((entry) => typeof entry === "string" && choices.includes(entry))) {
+      return value.join(",");
+    }
+  }
+  return TELEMETRY_ARG_VALUE_WITHHELD;
+}
 function extractCommandParams(cmd) {
   const params = {};
-  const add = (name, value) => {
-    if (name && value !== undefined) {
-      params[`${TELEMETRY_COMMAND_ARG_PREFIX}${name}`] = value;
-    }
-  };
+  forEachSuppliedArgument(cmd, (name, value, choices, defaulted) => {
+    const recordable = recordableArgValue(value, choices);
+    params[`${TELEMETRY_COMMAND_ARG_PREFIX}${name}`] = recordable === TELEMETRY_ARG_VALUE_WITHHELD && defaulted ? TELEMETRY_ARG_VALUE_DEFAULTED : recordable;
+  });
+  return params;
+}
+function isDefaultedOption(cmd, name) {
+  const source = cmd.getOptionValueSource?.(name);
+  return source === "default" || source === "implied";
+}
+function isDefaultedPositional(cmd, index) {
+  return index >= (cmd.args?.length ?? 0);
+}
+function forEachSuppliedArgument(cmd, visit) {
   const registered = cmd.registeredArguments ?? [];
   const processed = cmd.processedArgs ?? [];
   for (let i = 0;i < registered.length; i++) {
-    add(registered[i].name(), processed[i]);
+    const name = registered[i].name();
+    if (name && processed[i] !== undefined) {
+      visit(name, processed[i], registered[i].argChoices, isDefaultedPositional(cmd, i));
+    }
+  }
+  const choicesByAttribute = new Map;
+  for (const option of cmd.options) {
+    choicesByAttribute.set(option.attributeName(), option.argChoices);
   }
   for (const [key, value] of Object.entries(cmd.opts())) {
-    add(key, value);
+    if (key && value !== undefined) {
+      visit(key, value, choicesByAttribute.get(key), isDefaultedOption(cmd, key));
+    }
   }
-  return params;
+}
+function withheldArgumentValues(cmd) {
+  const values = [];
+  forEachSuppliedArgument(cmd, (_name, value, choices, defaulted) => {
+    if (defaulted) {
+      return;
+    }
+    if (recordableArgValue(value, choices) === TELEMETRY_ARG_VALUE_WITHHELD) {
+      values.push(value);
+    }
+  });
+  return values;
 }
 function deriveCommandPath(cmd) {
   const parts = [];
@@ -4712,7 +5304,7 @@ function deriveCommandPath(cmd) {
   if (parts.length > 1) {
     parts.shift();
   }
-  return ["uip", ...parts.filter((p) => p !== "uip")].join(".");
+  return commandTelemetryName(parts);
 }
 function isCliErrorCode(value) {
   return typeof value === "string" && cliErrorCodeValues.has(value);
@@ -4752,68 +5344,77 @@ Command.prototype.trackedAction = function(context, fn, properties) {
     });
     const telemetryName = deriveCommandPath(command);
     const props = typeof properties === "function" ? properties(...args) : properties;
-    const requestContext = telemetry.createRequestContext();
-    const startTime = performance.now();
-    let errorMessage;
-    let fallbackExitCode = EXIT_CODES.Success;
-    clearRecordedCommandFailureTelemetry();
-    const [error] = await catchError(telemetry.runWithContext(requestContext, () => {
-      const violation = implicitLimitViolation(command);
-      if (violation) {
-        return Promise.reject(violation);
-      }
-      return fn(...args);
-    }));
-    if (error) {
-      errorMessage = error instanceof Error ? error.message : String(error);
-      logger.debug(`[trackedAction] ${telemetryName} failed: ${errorMessage}`);
-      const typed = error;
-      const customInstructions = typeof typed.instructions === "string" ? typed.instructions : undefined;
-      const customResult = typeof typed.result === "string" && typed.result !== RESULTS.Success && Object.values(RESULTS).includes(typed.result) ? typed.result : undefined;
-      const finalResult = customResult ?? RESULTS.Failure;
-      const typedErrorCode = typed.errorCode ?? typed.ErrorCode;
-      const customErrorCode = isCliErrorCode(typedErrorCode) ? typedErrorCode : undefined;
-      const typedRetry = typed.retry ?? typed.Retry;
-      const customRetry = isRetryHint(typedRetry) ? typedRetry : undefined;
-      const typedContext = typed.context ?? typed.Context;
-      const customContext = isErrorContext(typedContext) ? typedContext : undefined;
-      const cancellationExitCode = typed.exitCode === 130 || isPromptCancellation(error) ? 130 : undefined;
-      fallbackExitCode = cancellationExitCode ?? EXIT_CODES[finalResult];
-      OutputFormatter.error({
-        Result: finalResult,
-        ...customErrorCode ? { ErrorCode: customErrorCode } : {},
-        Message: errorMessage,
-        Instructions: customInstructions ?? commandHelpHint(telemetryName),
-        ...customRetry ? { Retry: customRetry } : {},
-        ...customContext ? { Context: customContext } : {}
+    markCommandStart();
+    const supplied = recordSuppliedArgumentValues(withheldArgumentValues(command));
+    try {
+      const startTime = performance.now();
+      let errorMessage;
+      let fallbackExitCode = EXIT_CODES.Success;
+      clearRecordedCommandFailureTelemetry();
+      const [error] = await catchError(ensureInvocationRequestScope(() => {
+        const violation = implicitLimitViolation(command);
+        if (violation) {
+          return Promise.reject(violation);
+        }
+        return fn(...args);
+      }));
+      if (error) {
+        errorMessage = error instanceof Error ? error.message : String(error);
+        logger.debug(`[trackedAction] ${telemetryName} failed: ${errorMessage}`);
+        const typed = error;
+        const customInstructions = typeof typed.instructions === "string" ? typed.instructions : undefined;
+        const customResult = typeof typed.result === "string" && typed.result !== RESULTS.Success && Object.values(RESULTS).includes(typed.result) ? typed.result : undefined;
+        const finalResult = customResult ?? RESULTS.Failure;
+        const typedErrorCode = typed.errorCode ?? typed.ErrorCode;
+        const customErrorCode = isCliErrorCode(typedErrorCode) ? typedErrorCode : undefined;
+        const typedRetry = typed.retry ?? typed.Retry;
+        const customRetry = isRetryHint(typedRetry) ? typedRetry : undefined;
+        const typedContext = typed.context ?? typed.Context;
+        const customContext = isErrorContext(typedContext) ? typedContext : undefined;
+        const cancellationExitCode = typed.exitCode === 130 || isPromptCancellation(error) ? 130 : undefined;
+        fallbackExitCode = cancellationExitCode ?? EXIT_CODES[finalResult];
+        OutputFormatter.error({
+          Result: finalResult,
+          ...customErrorCode ? { ErrorCode: customErrorCode } : {},
+          Message: errorMessage,
+          Instructions: customInstructions ?? commandHelpHint(telemetryName),
+          ...customRetry ? { Retry: customRetry } : {},
+          ...customContext ? { Context: customContext } : {}
+        });
+        context.exit(fallbackExitCode);
+      }
+      const durationMs = performance.now() - startTime;
+      recordCommandDuration(durationMs);
+      const exitCode = fallbackExitCode === 130 ? fallbackExitCode : exitCodeFromProcess(fallbackExitCode);
+      const recordedFailure = takeRecordedCommandFailureTelemetry();
+      const success = !error && exitCode === 0;
+      const terminalTelemetry = buildCommandTerminalTelemetryProperties({
+        error,
+        exitCode,
+        recordedFailure,
+        pollSignal: context.pollSignal
       });
-      context.exit(fallbackExitCode);
-    }
-    const durationMs = performance.now() - startTime;
-    const exitCode = fallbackExitCode === 130 ? fallbackExitCode : exitCodeFromProcess(fallbackExitCode);
-    const recordedFailure = takeRecordedCommandFailureTelemetry();
-    const success = !error && exitCode === 0;
-    const terminalTelemetry = buildCommandTerminalTelemetryProperties({
-      error,
-      exitCode,
-      recordedFailure,
-      pollSignal: context.pollSignal
-    });
-    const commandParams = extractCommandParams(command);
-    if (props) {
-      for (const key of Object.keys(props)) {
-        delete commandParams[`${TELEMETRY_COMMAND_ARG_PREFIX}${key}`];
-      }
-    }
-    const baseProperties = redactProperties({
-      ...commandParams,
-      ...props,
-      ...buildCommandTelemetryAttribution(telemetryName, process.env.UIPATH_SKILL),
-      command: "true",
-      ...terminalTelemetry,
-      ...errorMessage ? { errorMessage } : {}
-    });
-    telemetry.trackRequestResult(telemetryName, durationMs, success, baseProperties, requestContext);
+      if (terminalTelemetry.error_class === "internal" && error) {
+        telemetry.trackException(error instanceof Error ? error : new Error(String(error)), { command_name: telemetryName }, getInvocationRequestContext());
+      }
+      const commandParams = extractCommandParams(command);
+      if (props) {
+        for (const key of Object.keys(props)) {
+          delete commandParams[`${TELEMETRY_COMMAND_ARG_PREFIX}${key}`];
+        }
+      }
+      const baseProperties = redactProperties({
+        ...commandParams,
+        ...props,
+        ...buildCommandTelemetryAttribution(telemetryName, process.env.UIPATH_SKILL),
+        command: "true",
+        ...terminalTelemetry,
+        ...errorMessage ? { errorMessage } : {}
+      });
+      emitInvocationRequest(telemetryName, success, baseProperties);
+    } finally {
+      releaseSuppliedArgumentValues(supplied);
+    }
   });
 };
 // ../../common/src/completer.ts
@@ -4823,6 +5424,204 @@ var guardInstalledSlot = singleton("ConsoleGuardInstalled");
 var savedOriginalsSlot = singleton("ConsoleGuardOriginals");
 // ../../common/src/constants.ts
 var DEFAULT_AUTH_TIMEOUT_MS = 5 * 60 * 1000;
+// ../../common/src/entity-name-rules.ts
+var RESERVED_SQL_KEYWORDS_LOWER = new Set(["group", "order"]);
+var RESERVED_FIELD_NAMES_LOWER = new Set([
+  "id",
+  "createdby",
+  "createtime",
+  "updatedby",
+  "updatetime",
+  "recordowner",
+  "version"
+]);
+var RESERVED_KEYWORDS_LOWER = new Set([
+  "abstract",
+  "as",
+  "base",
+  "bool",
+  "break",
+  "byte",
+  "case",
+  "catch",
+  "char",
+  "checked",
+  "class",
+  "const",
+  "continue",
+  "decimal",
+  "default",
+  "delegate",
+  "do",
+  "double",
+  "else",
+  "enum",
+  "event",
+  "explicit",
+  "extern",
+  "false",
+  "finally",
+  "fixed",
+  "float",
+  "for",
+  "foreach",
+  "goto",
+  "if",
+  "implicit",
+  "in",
+  "int",
+  "interface",
+  "internal",
+  "is",
+  "lock",
+  "long",
+  "namespace",
+  "new",
+  "null",
+  "object",
+  "operator",
+  "out",
+  "override",
+  "params",
+  "private",
+  "protected",
+  "public",
+  "readonly",
+  "ref",
+  "return",
+  "sbyte",
+  "sealed",
+  "short",
+  "sizeof",
+  "stackalloc",
+  "static",
+  "string",
+  "struct",
+  "switch",
+  "this",
+  "throw",
+  "true",
+  "try",
+  "typeof",
+  "uint",
+  "ulong",
+  "unchecked",
+  "unsafe",
+  "ushort",
+  "using",
+  "virtual",
+  "void",
+  "volatile",
+  "while",
+  "addhandler",
+  "addressof",
+  "alias",
+  "and",
+  "andalso",
+  "boolean",
+  "byref",
+  "byval",
+  "call",
+  "cbool",
+  "cbyte",
+  "cchar",
+  "cdate",
+  "cdbl",
+  "cdec",
+  "cint",
+  "clng",
+  "cobj",
+  "csbyte",
+  "cshort",
+  "csng",
+  "cstr",
+  "ctype",
+  "cuint",
+  "culng",
+  "cushort",
+  "date",
+  "declare",
+  "dim",
+  "directcast",
+  "each",
+  "elseif",
+  "end",
+  "endif",
+  "erase",
+  "error",
+  "exit",
+  "friend",
+  "function",
+  "get",
+  "gettype",
+  "getxmlnamespace",
+  "global",
+  "gosub",
+  "goto",
+  "handles",
+  "implements",
+  "imports",
+  "inherits",
+  "integer",
+  "isnot",
+  "let",
+  "lib",
+  "like",
+  "loop",
+  "me",
+  "mod",
+  "module",
+  "mustinherit",
+  "mustoverride",
+  "mybase",
+  "myclass",
+  "narrowing",
+  "next",
+  "not",
+  "nothing",
+  "notinheritable",
+  "notoverridable",
+  "of",
+  "on",
+  "option",
+  "optional",
+  "or",
+  "orelse",
+  "overloads",
+  "overridable",
+  "overrides",
+  "paramarray",
+  "partial",
+  "property",
+  "raiseevent",
+  "redim",
+  "rem",
+  "removehandler",
+  "resume",
+  "select",
+  "set",
+  "shadows",
+  "shared",
+  "single",
+  "step",
+  "stop",
+  "structure",
+  "sub",
+  "synclock",
+  "then",
+  "to",
+  "trycast",
+  "uinteger",
+  "ushort",
+  "variant",
+  "wend",
+  "when",
+  "widening",
+  "with",
+  "withevents",
+  "writeonly",
+  "xor"
+]);
 // ../../common/src/host-global-options.ts
 var HOST_GLOBAL_OPTIONS_WITH_VALUE = [
   "--output",
@@ -5290,9 +6089,9 @@ var init_is_in_ssh = __esm(() => {
 });
 var exports_open = {};
 __export(exports_open, {
-  openApp: () => openApp,
+  apps: () => apps,
   default: () => open_default,
-  apps: () => apps
+  openApp: () => openApp
 });
 function detectArchBinary(binary) {
   if (typeof binary === "string" || Array.isArray(binary)) {
@@ -5841,7 +6640,7 @@ class InvalidBaseUrlError extends Error {
     super(`Invalid base URL: "${url}"
 ` + `Reason: ${reason}
 
-` + `Expected format: an https:// URL, e.g. https://cloud.uipath.com (commercial), https://govcloud.uipath.us (Public Sector), or your Automation Suite host (https://<your-host>).
+` + `Expected format: an https:// URL (or bare host — https:// is assumed), e.g. https://cloud.uipath.com (commercial), https://govcloud.uipath.us (Public Sector), or your Automation Suite host (https://<your-host>).
 ` + `You can specify the URL via:
 ` + `  • --authority flag
 ` + `  • UIPATH_URL environment variable
@@ -5862,10 +6661,16 @@ var normalizeAndValidateBaseUrl = (rawUrl) => {
   while (baseUrl.endsWith("/")) {
     baseUrl = baseUrl.slice(0, -1);
   }
+  const hasScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(baseUrl);
+  const [hostCandidate] = baseUrl.split(/[/?#]/, 1);
+  if (!hasScheme && hostCandidate.includes(".")) {
+    baseUrl = `https://${baseUrl}`;
+  }
   const resolvedBaseUrl = baseUrl;
   const [urlError, url] = catchError2(() => new URL(resolvedBaseUrl));
   if (urlError) {
-    throw new InvalidBaseUrlError(baseUrl, `Malformed URL. ${urlError instanceof Error ? urlError.message : "Unknown error"}`);
+    const shapeHint = !hasScheme && !hostCandidate.includes(".") ? ` "${rawUrl.trim()}" is not a URL or a host name. Pass the full authority URL — https://<host>, or just <host> (https:// is assumed).` : ` ${urlError instanceof Error ? urlError.message : "Unknown error"}`;
+    throw new InvalidBaseUrlError(baseUrl, `Malformed URL.${shapeHint}`);
   }
   if (url.protocol !== "https:") {
     throw new InvalidBaseUrlError(baseUrl, `Authority must use https:// scheme, got ${url.protocol}//. OIDC token exchange requires TLS end-to-end.`);
@@ -5949,9 +6754,9 @@ function getProfileStorage() {
   if (isAuthProfileStorage(existing)) {
     return existing;
   }
-  const storage = createProfileStorage();
-  globalSlot2[AUTH_PROFILE_STORAGE_KEY] = storage;
-  return storage;
+  const storage2 = createProfileStorage();
+  globalSlot2[AUTH_PROFILE_STORAGE_KEY] = storage2;
+  return storage2;
 }
 var profileStorage = getProfileStorage();
 
@@ -6143,6 +6948,17 @@ var requireEnv = (name) => {
   }
   return value;
 };
+var OPAQUE_TOKEN_BASE_URL_VAR = "UIPATH_URL";
+var resolveBaseUrl = (rawUrl, failureContext) => {
+  const [baseUrlError, baseUrl] = catchError2(() => normalizeAndValidateBaseUrl(rawUrl));
+  if (baseUrlError) {
+    if (baseUrlError instanceof InvalidBaseUrlError) {
+      throw baseUrlError;
+    }
+    throw new EnvAuthConfigError(`${failureContext}: ` + `${baseUrlError instanceof Error ? baseUrlError.message : String(baseUrlError)}`);
+  }
+  return baseUrl;
+};
 var readAuthFromEnv = () => {
   const accessToken = requireEnv(ENV_AUTH_VARS.token);
   const organizationName = requireEnv(ENV_AUTH_VARS.organizationName);
@@ -6151,19 +6967,29 @@ var readAuthFromEnv = () => {
   const tenantId = requireEnv(ENV_AUTH_VARS.tenantId);
   const [parseError, payload] = catchError2(() => parseJWT(accessToken));
   if (parseError) {
-    throw new EnvAuthConfigError(`${ENV_AUTH_VARS.token} is not a valid JWT: ` + `${parseError instanceof Error ? parseError.message : String(parseError)}`);
+    const parseErrorMessage = parseError instanceof Error ? parseError.message : String(parseError);
+    const rawUrl = process.env[OPAQUE_TOKEN_BASE_URL_VAR];
+    if (!rawUrl) {
+      throw new EnvAuthConfigError(`${ENV_AUTH_VARS.token} is not a JWT (treating it as an opaque token, ` + `e.g. a Personal Access Token). Set ${OPAQUE_TOKEN_BASE_URL_VAR} to the ` + `UiPath base URL if this is a PAT, or fix the token if it was meant to ` + `be a JWT (parse error: ${parseErrorMessage}).`);
+    }
+    const baseUrl2 = resolveBaseUrl(rawUrl, `Failed to validate ${OPAQUE_TOKEN_BASE_URL_VAR}`);
+    return {
+      loginStatus: "Logged in",
+      accessToken,
+      baseUrl: baseUrl2,
+      organizationName,
+      organizationId,
+      tenantName,
+      tenantId,
+      source: "env-vars",
+      hint: "Token is opaque (not a JWT) - expiration and identity cannot be " + "determined locally. Commands will fail with 401 once it is revoked or " + `expired. If this was meant to be a JWT instead of a PAT, note: ${parseErrorMessage}`
+    };
   }
   const iss = payload.iss;
   if (typeof iss !== "string" || iss.length === 0) {
     throw new EnvAuthConfigError(`${ENV_AUTH_VARS.token} has no 'iss' claim; cannot determine ` + `the UiPath server. Ensure the token was issued by a UiPath identity server.`);
   }
-  const [baseUrlError, baseUrl] = catchError2(() => normalizeAndValidateBaseUrl(iss));
-  if (baseUrlError) {
-    if (baseUrlError instanceof InvalidBaseUrlError) {
-      throw baseUrlError;
-    }
-    throw new EnvAuthConfigError(`Failed to derive server URL from token 'iss' claim: ` + `${baseUrlError instanceof Error ? baseUrlError.message : String(baseUrlError)}`);
-  }
+  const baseUrl = resolveBaseUrl(iss, "Failed to derive server URL from token 'iss' claim");
   const expiration = getTokenExpiration(accessToken);
   const loginStatus = expiration && expiration <= new Date ? "Expired" : "Logged in";
   const identity = resolveSessionIdentity(accessToken);
@@ -6188,8 +7014,8 @@ var SURFACE_WINDOW_MS = 60 * 60 * 1000;
 async function refreshTokenFingerprint(refreshToken) {
   const bytes = new TextEncoder().encode(refreshToken);
   if (globalThis.crypto?.subtle) {
-    const digest = await globalThis.crypto.subtle.digest("SHA-256", bytes);
-    return Array.from(new Uint8Array(digest), (b) => b.toString(16).padStart(2, "0")).join("").slice(0, 16);
+    const digest2 = await globalThis.crypto.subtle.digest("SHA-256", bytes);
+    return Array.from(new Uint8Array(digest2), (b) => b.toString(16).padStart(2, "0")).join("").slice(0, 16);
   }
   const { createHash } = await import("node:crypto");
   return createHash("sha256").update(refreshToken).digest("hex").slice(0, 16);
@@ -7059,6 +7885,7 @@ function errorMessage(error) {
 }
 init_constants();
 init_src();
+init_constants();
 var IDENTIFIER_STATUSES = new Set([400, 403, 404]);
 var TENANT_SELECTION_REQUIRED_CODE = "TENANT_SELECTION_REQUIRED";
 var INVALID_TENANT_CODE = "INVALID_TENANT";
@@ -8439,4 +9266,4 @@ var registerCommands = async (program2) => {
 
 export { Command, metadata, registerCommands };
 
-//# debugId=75913A1D064EFF9364756E2164756E21
+//# debugId=D23AB7B33280E41064756E2164756E21