@vee_stack/cli 6.3.18 → 6.3.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/bin/veestack.mjs CHANGED
@@ -9,18 +9,27 @@ const envPath = join(__dirname, '../.env');
9
9
 
10
10
  if (existsSync(envPath)) {
11
11
  const envContent = readFileSync(envPath, 'utf8');
12
+ const usedFallbackKeys = [];
12
13
  envContent.split('\n').forEach(line => {
13
14
  const [key, ...valueParts] = line.split('=');
14
15
  if (key && valueParts.length > 0) {
15
16
  const value = valueParts.join('=').trim();
16
17
  const finalValue = value.replace(/^["']|["']$/g, '');
17
- process.env[key.trim()] = finalValue;
18
+ const trimmedKey = key.trim();
19
+ if (process.env[trimmedKey] === undefined) {
20
+ process.env[trimmedKey] = finalValue;
21
+ usedFallbackKeys.push(trimmedKey);
22
+ }
18
23
  }
19
24
  });
20
25
 
21
26
  if (process.argv.includes('--debug')) {
22
27
  console.log('[veestack:debug] Environment loaded from:', envPath);
23
28
  console.log('[veestack:debug] VEESTACK_API_URL:', process.env.VEESTACK_API_URL);
29
+ const warnKeys = usedFallbackKeys.filter(k => k === 'VEESTACK_API_URL' || k === 'VEESTACK_WEB_URL' || k === 'NODE_ENV');
30
+ if (warnKeys.length > 0) {
31
+ console.warn(`[veestack:debug] ⚠️ Using .env fallback for: ${warnKeys.join(', ')}`);
32
+ }
24
33
  }
25
34
  }
26
35
 
package/dist/index.js CHANGED
@@ -1,182 +1,190 @@
1
1
  #!/usr/bin/env node
2
- import {createRequire}from'module';import v from'chalk';import*as oe from'fs';import {existsSync,readFileSync,statSync,writeFileSync}from'fs';import*as tt from'path';import {resolve,basename,join,dirname}from'path';import {fileURLToPath}from'url';import {Command}from'commander';import {execSync}from'child_process';import*as pe from'crypto';import pe__default from'crypto';import si from'ora';import {glob}from'glob';import ii from'cli-progress';import*as pt from'os';import {homedir}from'os';import*as V from'fs/promises';import wr from'prompts';import Ei from'readline';import {gzipSync}from'zlib';import Ni from'open';import ba from'omelette';createRequire(import.meta.url); globalThis.CLI_VERSION = "6.3.18"; globalThis.SNAPSHOT_VERSION = "6.0.0"; globalThis.ENGINE_TARGET = "6.0.0"; globalThis.AUDIT_VERSION = "6.0"; globalThis.SESSION_PAYLOAD_VERSION = "6.0.0"; globalThis.RULES_VERSION = "6.0.0"; globalThis.ANALYSIS_VERSION = "6.0.0"; globalThis.API_VERSION = "v6"; globalThis.MIN_NODE = 20;
3
- var Gr=Object.defineProperty;var Zr=(t,e)=>{for(var n in e)Gr(t,n,{get:e[n],enumerable:true});};var Kr=[/^--token[=\s]/i,/^-t[=\s]/i,/^--api-key[=\s]/i,/^--apikey[=\s]/i,/^--key[=\s]/i,/^--auth[=\s]/i,/^--bearer[=\s]/i,/token[=:]\s*[a-zA-Z0-9_-]{10,}/i,/api[_-]?key[=:]\s*[a-zA-Z0-9_-]{10,}/i],nt=/vs_[a-zA-Z0-9_-]{20,}/i;function Vn(){let t=process.argv.slice(2);for(let e of t){for(let n of Kr)n.test(e)&&(console.error(v.red(`
2
+ import {createRequire}from'module';import Go,{config}from'dotenv';import*as rt from'path';import {dirname,join,resolve,basename}from'path';import {fileURLToPath}from'url';import*as ie from'fs';import {existsSync,readFileSync,statSync,writeFileSync}from'fs';import v from'chalk';import {Command}from'commander';import {execSync}from'child_process';import*as ge from'crypto';import ge__default from'crypto';import gi from'ora';import {glob}from'glob';import hi from'cli-progress';import*as gt from'os';import {homedir}from'os';import*as V from'fs/promises';import Cr from'prompts';import Pi from'readline';import {gzipSync}from'zlib';import Mi from'open';import Fa from'omelette';globalThis.require = createRequire(import.meta.url); globalThis.CLI_VERSION = "6.3.19"; globalThis.SNAPSHOT_VERSION = "6.0.0"; globalThis.ENGINE_TARGET = "6.0.0"; globalThis.AUDIT_VERSION = "6.0"; globalThis.SESSION_PAYLOAD_VERSION = "6.0.0"; globalThis.RULES_VERSION = "6.0.0"; globalThis.ANALYSIS_VERSION = "6.0.0"; globalThis.API_VERSION = "v6"; globalThis.MIN_NODE = 20;
3
+ var es=Object.defineProperty;var be=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,n)=>(typeof require<"u"?require:e)[n]}):t)(function(t){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var ts=(t,e)=>{for(var n in e)es(t,n,{get:e[n],enumerable:true});};var ns=[/^--token[=\s]/i,/^-t[=\s]/i,/^--api-key[=\s]/i,/^--apikey[=\s]/i,/^--key[=\s]/i,/^--auth[=\s]/i,/^--bearer[=\s]/i,/token[=:]\s*[a-zA-Z0-9_-]{10,}/i,/api[_-]?key[=:]\s*[a-zA-Z0-9_-]{10,}/i],st=/vs_[a-zA-Z0-9_-]{20,}/i;function zn(){let t=process.argv.slice(2);for(let e of t){for(let n of ns)n.test(e)&&(console.error(v.red(`
4
4
  \u274C Security Error: Token detected in command line arguments`)),console.error(v.yellow(`
5
5
  Passing tokens via CLI arguments is not allowed.`)),console.error(v.yellow("This prevents tokens from being saved in shell history (~/.bash_history, ~/.zsh_history)")),console.error(v.gray(`
6
6
  Instead, use:`)),console.error(v.cyan(" veestack login")),console.error(v.gray(`
7
7
  Or set via environment variable:`)),console.error(v.cyan(" export VEESTACK_API_KEY=your_key")),console.error(v.gray(`
8
8
  Your token has been detected and blocked for your security.
9
- `)),process.exit(1));nt.test(e)&&(console.error(v.red(`
9
+ `)),process.exit(1));st.test(e)&&(console.error(v.red(`
10
10
  \u274C Security Error: VeeStack token detected in command line`)),console.error(v.yellow(`
11
11
  Tokens should never be passed as command arguments.`)),console.error(v.gray(`
12
- Use login instead:`)),console.error(v.cyan(" veestack login")),process.exit(1));}}function Un(){for(let t=0;t<process.argv.length;t++){let e=process.argv[t];nt.test(e)&&(process.argv[t]="[REDACTED_TOKEN]"),/authorization[:\s]/i.test(e)&&(process.argv[t]="[REDACTED_AUTH_HEADER]");}}function Mn(){let t=console.error,e=console.log,n=console.warn,r=s=>s.map(o=>typeof o=="string"?o.replace(nt,"[REDACTED]").replace(/Bearer\s+[a-zA-Z0-9_-]+/gi,"Bearer [REDACTED]"):o);console.log=(...s)=>e(...r(s)),console.error=(...s)=>t(...r(s)),console.warn=(...s)=>n(...r(s));}function Bn(){process.on("uncaughtException",t=>{console.error(`
13
- \u274C Fatal Error occurred`);let e=t.message||"Unknown error";if(e=e.replace(nt,"[REDACTED]").replace(/Bearer\s+[a-zA-Z0-9_-]+/gi,"Bearer [REDACTED]").replace(/Authorization[:\s][^\s]*/gi,"Authorization: [REDACTED]"),console.error(`Error: ${e}`),t.stack){let n=t.stack.split(`
14
- `).map(r=>r.replace(nt,"[REDACTED]").replace(/Bearer\s+[a-zA-Z0-9_-]+/gi,"Bearer [REDACTED]")).join(`
12
+ Use login instead:`)),console.error(v.cyan(" veestack login")),process.exit(1));}}function Hn(){for(let t=0;t<process.argv.length;t++){let e=process.argv[t];st.test(e)&&(process.argv[t]="[REDACTED_TOKEN]"),/authorization[:\s]/i.test(e)&&(process.argv[t]="[REDACTED_AUTH_HEADER]");}}function Jn(){let t=console.error,e=console.log,n=console.warn,r=s=>s.map(o=>typeof o=="string"?o.replace(st,"[REDACTED]").replace(/Bearer\s+[a-zA-Z0-9_-]+/gi,"Bearer [REDACTED]"):o);console.log=(...s)=>e(...r(s)),console.error=(...s)=>t(...r(s)),console.warn=(...s)=>n(...r(s));}function Kn(){process.on("uncaughtException",t=>{console.error(`
13
+ \u274C Fatal Error occurred`);let e=t.message||"Unknown error";if(e=e.replace(st,"[REDACTED]").replace(/Bearer\s+[a-zA-Z0-9_-]+/gi,"Bearer [REDACTED]").replace(/Authorization[:\s][^\s]*/gi,"Authorization: [REDACTED]"),console.error(`Error: ${e}`),t.stack){let n=t.stack.split(`
14
+ `).map(r=>r.replace(st,"[REDACTED]").replace(/Bearer\s+[a-zA-Z0-9_-]+/gi,"Bearer [REDACTED]")).join(`
15
15
  `);process.env.DEBUG||process.env.VEESTACK_DEBUG?console.error(`
16
16
  Stack trace:`,n):console.error(`
17
17
  Run with DEBUG=veestack for full stack trace (sanitized)`);}process.exit(1);}),process.on("unhandledRejection",t=>{let e=t instanceof Error?t:new Error(String(t));console.error(`
18
- \u274C Unhandled Promise Rejection`);let n=e.message||"Unknown error";n=n.replace(nt,"[REDACTED]").replace(/Bearer\s+[a-zA-Z0-9_-]+/gi,"Bearer [REDACTED]"),console.error(`Error: ${n}`),process.exit(1);});}var rt=["veestack-tools","@vee_stack/cli"],qr=["veestack","veestack-cli","veestacktool","veestack-tool","vee-stack","veestack-cli-tool","veestack-scanner","veestack-analyzer"],Yr=[/veestak/i,/veestac/i,/veestackk/i,/veestackh/i,/vvestack/i,/veee/i,/veestack-cli-hack/i,/veestack-free/i,/veestack-pro-free/i];function Fn(){try{let t=fileURLToPath(import.meta.url),n=tt.dirname(t);for(let r=0;r<5;r++){let s=tt.join(n,"package.json");if(oe.existsSync(s))return JSON.parse(oe.readFileSync(s,"utf-8")).name||"unknown";let o=tt.dirname(n);if(o===n)break;n=o;}}catch{}return "unknown"}function Xr(){let t=Fn(),e=[];if(rt.includes(t))return {isOfficial:true,warnings:[]};if(qr.includes(t))return e.push(`\u26A0\uFE0F WARNING: You are using "${t}" which is NOT the official VeeStack CLI.`),e.push(`The official package is: ${v.cyan(rt[0])}`),e.push("Unofficial packages may contain malware or steal your data."),{isOfficial:false,warnings:e};for(let n of Yr)if(n.test(t))return e.push(`\u26A0\uFE0F WARNING: Package name "${t}" looks suspicious.`),e.push("This might be a typosquatting attack."),e.push(`The official package is: ${v.cyan(rt[0])}`),{isOfficial:false,warnings:e};return e.push(`\u26A0\uFE0F WARNING: Unofficial package "${t}" detected.`),e.push(`The official package is: ${v.cyan(rt[0])}`),{isOfficial:false,warnings:e}}function zn(){let{isOfficial:t,warnings:e}=Xr();if(!t){console.log(v.red(`
18
+ \u274C Unhandled Promise Rejection`);let n=e.message||"Unknown error";n=n.replace(st,"[REDACTED]").replace(/Bearer\s+[a-zA-Z0-9_-]+/gi,"Bearer [REDACTED]"),console.error(`Error: ${n}`),process.exit(1);});}var ot=["veestack-tools","@vee_stack/cli"],ss=["veestack","veestack-cli","veestacktool","veestack-tool","vee-stack","veestack-cli-tool","veestack-scanner","veestack-analyzer"],os=[/veestak/i,/veestac/i,/veestackk/i,/veestackh/i,/vvestack/i,/veee/i,/veestack-cli-hack/i,/veestack-free/i,/veestack-pro-free/i];function Gn(){try{let t=fileURLToPath(import.meta.url),n=rt.dirname(t);for(let r=0;r<5;r++){let s=rt.join(n,"package.json");if(ie.existsSync(s))return JSON.parse(ie.readFileSync(s,"utf-8")).name||"unknown";let o=rt.dirname(n);if(o===n)break;n=o;}}catch{}return "unknown"}function is(){let t=Gn(),e=[];if(ot.includes(t))return {isOfficial:true,warnings:[]};if(ss.includes(t))return e.push(`\u26A0\uFE0F WARNING: You are using "${t}" which is NOT the official VeeStack CLI.`),e.push(`The official package is: ${v.cyan(ot[0])}`),e.push("Unofficial packages may contain malware or steal your data."),{isOfficial:false,warnings:e};for(let n of os)if(n.test(t))return e.push(`\u26A0\uFE0F WARNING: Package name "${t}" looks suspicious.`),e.push("This might be a typosquatting attack."),e.push(`The official package is: ${v.cyan(ot[0])}`),{isOfficial:false,warnings:e};return e.push(`\u26A0\uFE0F WARNING: Unofficial package "${t}" detected.`),e.push(`The official package is: ${v.cyan(ot[0])}`),{isOfficial:false,warnings:e}}function Zn(){let{isOfficial:t,warnings:e}=is();if(!t){console.log(v.red(`
19
19
  `+"\u2550".repeat(60))),console.log(v.red.bold(`\u{1F6A8} SECURITY WARNING
20
20
  `));for(let n of e)console.log(v.yellow(n));console.log(v.gray(`
21
21
  To install the official CLI:`)),console.log(v.cyan(" npm install -g veestack-tools")),console.log(v.red("\u2550".repeat(60)+`
22
- `)),process.exit(1);}process.env.VEESTACK_DEBUG==="true"&&console.log(v.gray(`\u2713 Official package verified: ${rt.join(" or ")}`));}function Vt(){let t=Fn(),e=rt.includes(t);return {packageName:t,isOfficial:e,homepage:"https://www.veestack.com",repository:"https://github.com/Mohmed-ElZehiry/VeeStack"}}var Qr=[".env",".env.local",".env.development",".env.production",".env.test",".env.example",".envrc",".env.*","id_rsa","id_rsa.pub","id_dsa","id_dsa.pub","id_ecdsa","id_ecdsa.pub","id_ed25519","id_ed25519.pub","*.pem","*.key","*.p12","*.pfx","*.crt","*.cer","*.der","credentials",".aws/credentials",".aws/config",".docker/config.json","kubeconfig","*.kubeconfig",".npmrc",".yarnrc",".pnpmrc",".git-credentials","*.sqlite","*.sqlite3","*.db","secrets/","secret/",".secrets/","config.json","settings.json","local.settings.json"],es=["veestack.config.json","package.json","tsconfig.json","jsconfig.json",".eslintrc.json",".prettierrc.json","README.md"],ts=[{name:"AWS Access Key ID",pattern:/AKIA[0-9A-Z]{16}/g,severity:"critical",description:"AWS Access Key ID detected"},{name:"AWS Secret Access Key",pattern:/['"\s][A-Za-z0-9/+=]{40}['"\s]/g,severity:"critical",description:"Potential AWS Secret Key detected"},{name:"Private Key",pattern:/-----BEGIN (RSA |DSA |EC |OPENSSH |PGP )?PRIVATE KEY-----/g,severity:"critical",description:"Private key detected"},{name:"JWT Token",pattern:/eyJ[a-zA-Z0-9_-]*\.eyJ[a-zA-Z0-9_-]*\.[a-zA-Z0-9_-]*/g,severity:"high",description:"JWT token detected"},{name:"Bearer Token",pattern:/Bearer\s+[a-zA-Z0-9_-]{20,}/gi,severity:"high",description:"Bearer token detected"},{name:"API Key",pattern:/(?:api[_-]?key|apikey|api_token|apiToken)['"\s]*[:=]\s*['"][a-zA-Z0-9_-]{16,}['"]/gi,severity:"high",description:"API key detected"},{name:"Password in URL",pattern:/[a-zA-Z]+:\/\/[^\s:@]+:[^\s:@]+@[^\s]+/g,severity:"high",description:"Password in URL detected"},{name:"Password Assignment",pattern:/(?:password|passwd|pwd)\s*[=:]\s*['"][^'"]{8,}['"]/gi,severity:"medium",description:"Password assignment detected"},{name:"GitHub Token",pattern:/gh[pousr]_[A-Za-z0-9_]{36,}/g,severity:"critical",description:"GitHub token detected"},{name:"Slack Token",pattern:/xox[baprs]-[0-9]{10,13}-[0-9]{10,13}(-[a-zA-Z0-9]{24})?/g,severity:"critical",description:"Slack token detected"},{name:"Generic Secret",pattern:/(?:secret|token|key)\s*[=:]\s*['"][a-zA-Z0-9_-]{20,}['"]/gi,severity:"medium",description:"Potential secret detected"},{name:"Connection String",pattern:/(?:mongodb|postgres|mysql|redis|amqp):\/\/[^\s]+/gi,severity:"high",description:"Database connection string detected"},{name:"VeeStack Token",pattern:/vs_[a-zA-Z0-9_-]{20,}/g,severity:"critical",description:"VeeStack token detected"}];function Hn(t){let e=t.replace(/\\/g,"/").toLowerCase(),n=tt.basename(e);for(let r of es)if(n===r.toLowerCase())return false;for(let r of Qr){if(n===r.toLowerCase())return true;if(r.includes("*")){let s=r.toLowerCase().replace(/\./g,"\\.").replace(/\*/g,".*"),o=new RegExp(s);if(o.test(n)||o.test(e))return true}if(e.includes(r.toLowerCase().replace("*","")))return true}return false}function ns(t,e){let n=[],r=e.split(`
23
- `);for(let s of ts){s.pattern.lastIndex=0;for(let o=0;o<r.length;o++){let a=r[o],i;for(;(i=s.pattern.exec(a))!==null;)n.push({filePath:t,type:"secret_content",secretName:s.name,severity:s.severity,description:s.description,lineNumber:o+1,match:i[0].substring(0,20)+"..."});s.pattern.lastIndex=0;}}return n}async function rs(t){let e=[];if(Hn(t))return e.push({filePath:t,type:"sensitive_file",secretName:"Sensitive File",severity:"critical",description:`Sensitive file type detected: ${tt.basename(t)}`}),e;try{if(oe.statSync(t).size>1024*1024)return e;let r=oe.readFileSync(t,"utf-8"),s=ns(t,r);e.push(...s);}catch{}return e}async function Jn(t,e){let n=[];for(let i of e){let c=tt.join(t,i),l=await rs(c);for(let d of l)d.filePath=i,n.push(d);}let r=n.filter(i=>i.severity==="critical").length,s=n.filter(i=>i.severity==="high").length,o=n.filter(i=>i.severity==="medium").length,a=n.filter(i=>i.severity==="low").length;return {totalFiles:e.length,secretsFound:n.length,criticalCount:r,highCount:s,mediumCount:o,lowCount:a,results:n}}function Gn(t){let e=[],n=[];for(let r of t)Hn(r)?n.push(r):e.push(r);return {safe:e,blocked:n}}var un=(t=>typeof Proxy<"u"?new Proxy(t,{get:(e,n)=>e[n]}):t)(function(t){throw Error('Dynamic require of "'+t+'" is not supported')}),Zn=typeof process<"u"&&process.versions?.node,ss=Zn&&(Array.isArray(process.argv)&&process.argv.includes("--debug")||process.env.VEESTACK_DEBUG==="1"),dn=globalThis||{},pn=null;if(Zn)try{let t=function(){let b=d,$=0;for(;b!==i(b)&&$<10;){let I=a(b,"package.json");try{if(o(I)){let C=JSON.parse(s(I,"utf-8"));if(C.name==="vee_stack")return C}}catch{}b=i(b),$++;}return null};os=t;let e=un("fs"),n=un("path"),r=un("url"),{readFileSync:s,existsSync:o}=e,{join:a,dirname:i}=n,{fileURLToPath:c}=r,l=c(import.meta.url),d=i(l);pn=t();}catch{ss&&console.debug("[veestack:debug] Failed to load package.json dynamically, using defaults");}var os,Te=pn?.versions||dn.VEESTACK_VERSIONS||{},te=pn?.version||dn.VEESTACK_VERSION||dn.CLI_VERSION||"unknown",fn=`vs_cli_v${te}`;Te.snapshot||"unknown";Te.engine_target||"unknown";Te.audit||"unknown";Te.session_payload||"unknown";Te.rules||"unknown";Te.analysis||"unknown";Te.api||"unknown";Te.min_node||"unknown";var p={};Zr(p,{BRAND:()=>$s,DIRTY:()=>Pe,EMPTY_PATH:()=>gs,INVALID:()=>h,NEVER:()=>wo,OK:()=>G,ParseStatus:()=>H,Schema:()=>w,ZodAny:()=>be,ZodArray:()=>ve,ZodBigInt:()=>De,ZodBoolean:()=>je,ZodBranded:()=>Tt,ZodCatch:()=>Ge,ZodDate:()=>$e,ZodDefault:()=>Je,ZodDiscriminatedUnion:()=>Ht,ZodEffects:()=>se,ZodEnum:()=>ze,ZodError:()=>q,ZodFirstPartyTypeKind:()=>y,ZodFunction:()=>Gt,ZodIntersection:()=>Me,ZodIssueCode:()=>u,ZodLazy:()=>Be,ZodLiteral:()=>Fe,ZodMap:()=>lt,ZodNaN:()=>dt,ZodNativeEnum:()=>He,ZodNever:()=>ie,ZodNull:()=>Ve,ZodNullable:()=>de,ZodNumber:()=>Oe,ZodObject:()=>Y,ZodOptional:()=>ne,ZodParsedType:()=>g,ZodPipeline:()=>At,ZodPromise:()=>Re,ZodReadonly:()=>Ze,ZodRecord:()=>Jt,ZodSchema:()=>w,ZodSet:()=>ut,ZodString:()=>xe,ZodSymbol:()=>at,ZodTransformer:()=>se,ZodTuple:()=>ue,ZodType:()=>w,ZodUndefined:()=>Le,ZodUnion:()=>Ue,ZodUnknown:()=>ye,ZodVoid:()=>ct,addIssueToContext:()=>f,any:()=>Js,array:()=>Ws,bigint:()=>Ms,boolean:()=>sr,coerce:()=>_o,custom:()=>tr,date:()=>Bs,datetimeRegex:()=>Qn,defaultErrorMap:()=>me,discriminatedUnion:()=>Qs,effect:()=>po,enum:()=>co,function:()=>oo,getErrorMap:()=>st,getParsedType:()=>le,instanceof:()=>Vs,intersection:()=>eo,isAborted:()=>Ft,isAsync:()=>ot,isDirty:()=>zt,isValid:()=>Ae,late:()=>Ls,lazy:()=>io,literal:()=>ao,makeIssue:()=>Et,map:()=>ro,nan:()=>Us,nativeEnum:()=>lo,never:()=>Zs,null:()=>Hs,nullable:()=>go,number:()=>rr,object:()=>qs,objectUtil:()=>hn,oboolean:()=>ko,onumber:()=>vo,optional:()=>fo,ostring:()=>yo,pipeline:()=>ho,preprocess:()=>mo,promise:()=>uo,quotelessJson:()=>ds,record:()=>no,set:()=>so,setErrorMap:()=>fs,strictObject:()=>Ys,string:()=>nr,symbol:()=>Fs,transformer:()=>po,tuple:()=>to,undefined:()=>zs,union:()=>Xs,unknown:()=>Gs,util:()=>E,void:()=>Ks});var E;(function(t){t.assertEqual=s=>{};function e(s){}t.assertIs=e;function n(s){throw new Error}t.assertNever=n,t.arrayToEnum=s=>{let o={};for(let a of s)o[a]=a;return o},t.getValidEnumValues=s=>{let o=t.objectKeys(s).filter(i=>typeof s[s[i]]!="number"),a={};for(let i of o)a[i]=s[i];return t.objectValues(a)},t.objectValues=s=>t.objectKeys(s).map(function(o){return s[o]}),t.objectKeys=typeof Object.keys=="function"?s=>Object.keys(s):s=>{let o=[];for(let a in s)Object.prototype.hasOwnProperty.call(s,a)&&o.push(a);return o},t.find=(s,o)=>{for(let a of s)if(o(a))return a},t.isInteger=typeof Number.isInteger=="function"?s=>Number.isInteger(s):s=>typeof s=="number"&&Number.isFinite(s)&&Math.floor(s)===s;function r(s,o=" | "){return s.map(a=>typeof a=="string"?`'${a}'`:a).join(o)}t.joinValues=r,t.jsonStringifyReplacer=(s,o)=>typeof o=="bigint"?o.toString():o;})(E||(E={}));var hn;(function(t){t.mergeShapes=(e,n)=>({...e,...n});})(hn||(hn={}));var g=E.arrayToEnum(["string","nan","number","integer","float","boolean","date","bigint","symbol","function","undefined","null","array","object","unknown","promise","void","never","map","set"]),le=t=>{switch(typeof t){case "undefined":return g.undefined;case "string":return g.string;case "number":return Number.isNaN(t)?g.nan:g.number;case "boolean":return g.boolean;case "function":return g.function;case "bigint":return g.bigint;case "symbol":return g.symbol;case "object":return Array.isArray(t)?g.array:t===null?g.null:t.then&&typeof t.then=="function"&&t.catch&&typeof t.catch=="function"?g.promise:typeof Map<"u"&&t instanceof Map?g.map:typeof Set<"u"&&t instanceof Set?g.set:typeof Date<"u"&&t instanceof Date?g.date:g.object;default:return g.unknown}};var u=E.arrayToEnum(["invalid_type","invalid_literal","custom","invalid_union","invalid_union_discriminator","invalid_enum_value","unrecognized_keys","invalid_arguments","invalid_return_type","invalid_date","invalid_string","too_small","too_big","invalid_intersection_types","not_multiple_of","not_finite"]),ds=t=>JSON.stringify(t,null,2).replace(/"([^"]+)":/g,"$1:"),q=class t extends Error{get errors(){return this.issues}constructor(e){super(),this.issues=[],this.addIssue=r=>{this.issues=[...this.issues,r];},this.addIssues=(r=[])=>{this.issues=[...this.issues,...r];};let n=new.target.prototype;Object.setPrototypeOf?Object.setPrototypeOf(this,n):this.__proto__=n,this.name="ZodError",this.issues=e;}format(e){let n=e||function(o){return o.message},r={_errors:[]},s=o=>{for(let a of o.issues)if(a.code==="invalid_union")a.unionErrors.map(s);else if(a.code==="invalid_return_type")s(a.returnTypeError);else if(a.code==="invalid_arguments")s(a.argumentsError);else if(a.path.length===0)r._errors.push(n(a));else {let i=r,c=0;for(;c<a.path.length;){let l=a.path[c];c===a.path.length-1?(i[l]=i[l]||{_errors:[]},i[l]._errors.push(n(a))):i[l]=i[l]||{_errors:[]},i=i[l],c++;}}};return s(this),r}static assert(e){if(!(e instanceof t))throw new Error(`Not a ZodError: ${e}`)}toString(){return this.message}get message(){return JSON.stringify(this.issues,E.jsonStringifyReplacer,2)}get isEmpty(){return this.issues.length===0}flatten(e=n=>n.message){let n={},r=[];for(let s of this.issues)if(s.path.length>0){let o=s.path[0];n[o]=n[o]||[],n[o].push(e(s));}else r.push(e(s));return {formErrors:r,fieldErrors:n}}get formErrors(){return this.flatten()}};q.create=t=>new q(t);var ps=(t,e)=>{let n;switch(t.code){case u.invalid_type:t.received===g.undefined?n="Required":n=`Expected ${t.expected}, received ${t.received}`;break;case u.invalid_literal:n=`Invalid literal value, expected ${JSON.stringify(t.expected,E.jsonStringifyReplacer)}`;break;case u.unrecognized_keys:n=`Unrecognized key(s) in object: ${E.joinValues(t.keys,", ")}`;break;case u.invalid_union:n="Invalid input";break;case u.invalid_union_discriminator:n=`Invalid discriminator value. Expected ${E.joinValues(t.options)}`;break;case u.invalid_enum_value:n=`Invalid enum value. Expected ${E.joinValues(t.options)}, received '${t.received}'`;break;case u.invalid_arguments:n="Invalid function arguments";break;case u.invalid_return_type:n="Invalid function return type";break;case u.invalid_date:n="Invalid date";break;case u.invalid_string:typeof t.validation=="object"?"includes"in t.validation?(n=`Invalid input: must include "${t.validation.includes}"`,typeof t.validation.position=="number"&&(n=`${n} at one or more positions greater than or equal to ${t.validation.position}`)):"startsWith"in t.validation?n=`Invalid input: must start with "${t.validation.startsWith}"`:"endsWith"in t.validation?n=`Invalid input: must end with "${t.validation.endsWith}"`:E.assertNever(t.validation):t.validation!=="regex"?n=`Invalid ${t.validation}`:n="Invalid";break;case u.too_small:t.type==="array"?n=`Array must contain ${t.exact?"exactly":t.inclusive?"at least":"more than"} ${t.minimum} element(s)`:t.type==="string"?n=`String must contain ${t.exact?"exactly":t.inclusive?"at least":"over"} ${t.minimum} character(s)`:t.type==="number"?n=`Number must be ${t.exact?"exactly equal to ":t.inclusive?"greater than or equal to ":"greater than "}${t.minimum}`:t.type==="bigint"?n=`Number must be ${t.exact?"exactly equal to ":t.inclusive?"greater than or equal to ":"greater than "}${t.minimum}`:t.type==="date"?n=`Date must be ${t.exact?"exactly equal to ":t.inclusive?"greater than or equal to ":"greater than "}${new Date(Number(t.minimum))}`:n="Invalid input";break;case u.too_big:t.type==="array"?n=`Array must contain ${t.exact?"exactly":t.inclusive?"at most":"less than"} ${t.maximum} element(s)`:t.type==="string"?n=`String must contain ${t.exact?"exactly":t.inclusive?"at most":"under"} ${t.maximum} character(s)`:t.type==="number"?n=`Number must be ${t.exact?"exactly":t.inclusive?"less than or equal to":"less than"} ${t.maximum}`:t.type==="bigint"?n=`BigInt must be ${t.exact?"exactly":t.inclusive?"less than or equal to":"less than"} ${t.maximum}`:t.type==="date"?n=`Date must be ${t.exact?"exactly":t.inclusive?"smaller than or equal to":"smaller than"} ${new Date(Number(t.maximum))}`:n="Invalid input";break;case u.custom:n="Invalid input";break;case u.invalid_intersection_types:n="Intersection results could not be merged";break;case u.not_multiple_of:n=`Number must be a multiple of ${t.multipleOf}`;break;case u.not_finite:n="Number must be finite";break;default:n=e.defaultError,E.assertNever(t);}return {message:n}},me=ps;var Kn=me;function fs(t){Kn=t;}function st(){return Kn}var Et=t=>{let{data:e,path:n,errorMaps:r,issueData:s}=t,o=[...n,...s.path||[]],a={...s,path:o};if(s.message!==void 0)return {...s,path:o,message:s.message};let i="",c=r.filter(l=>!!l).slice().reverse();for(let l of c)i=l(a,{data:e,defaultError:i}).message;return {...s,path:o,message:i}},gs=[];function f(t,e){let n=st(),r=Et({issueData:e,data:t.data,path:t.path,errorMaps:[t.common.contextualErrorMap,t.schemaErrorMap,n,n===me?void 0:me].filter(s=>!!s)});t.common.issues.push(r);}var H=class t{constructor(){this.value="valid";}dirty(){this.value==="valid"&&(this.value="dirty");}abort(){this.value!=="aborted"&&(this.value="aborted");}static mergeArray(e,n){let r=[];for(let s of n){if(s.status==="aborted")return h;s.status==="dirty"&&e.dirty(),r.push(s.value);}return {status:e.value,value:r}}static async mergeObjectAsync(e,n){let r=[];for(let s of n){let o=await s.key,a=await s.value;r.push({key:o,value:a});}return t.mergeObjectSync(e,r)}static mergeObjectSync(e,n){let r={};for(let s of n){let{key:o,value:a}=s;if(o.status==="aborted"||a.status==="aborted")return h;o.status==="dirty"&&e.dirty(),a.status==="dirty"&&e.dirty(),o.value!=="__proto__"&&(typeof a.value<"u"||s.alwaysSet)&&(r[o.value]=a.value);}return {status:e.value,value:r}}},h=Object.freeze({status:"aborted"}),Pe=t=>({status:"dirty",value:t}),G=t=>({status:"valid",value:t}),Ft=t=>t.status==="aborted",zt=t=>t.status==="dirty",Ae=t=>t.status==="valid",ot=t=>typeof Promise<"u"&&t instanceof Promise;var m;(function(t){t.errToObj=e=>typeof e=="string"?{message:e}:e||{},t.toString=e=>typeof e=="string"?e:e?.message;})(m||(m={}));var re=class{constructor(e,n,r,s){this._cachedPath=[],this.parent=e,this.data=n,this._path=r,this._key=s;}get path(){return this._cachedPath.length||(Array.isArray(this._key)?this._cachedPath.push(...this._path,...this._key):this._cachedPath.push(...this._path,this._key)),this._cachedPath}},Wn=(t,e)=>{if(Ae(e))return {success:true,data:e.value};if(!t.common.issues.length)throw new Error("Validation failed but no issues detected.");return {success:false,get error(){if(this._error)return this._error;let n=new q(t.common.issues);return this._error=n,this._error}}};function _(t){if(!t)return {};let{errorMap:e,invalid_type_error:n,required_error:r,description:s}=t;if(e&&(n||r))throw new Error(`Can't use "invalid_type_error" or "required_error" in conjunction with custom error map.`);return e?{errorMap:e,description:s}:{errorMap:(a,i)=>{let{message:c}=t;return a.code==="invalid_enum_value"?{message:c??i.defaultError}:typeof i.data>"u"?{message:c??r??i.defaultError}:a.code!=="invalid_type"?{message:i.defaultError}:{message:c??n??i.defaultError}},description:s}}var w=class{get description(){return this._def.description}_getType(e){return le(e.data)}_getOrReturnCtx(e,n){return n||{common:e.parent.common,data:e.data,parsedType:le(e.data),schemaErrorMap:this._def.errorMap,path:e.path,parent:e.parent}}_processInputParams(e){return {status:new H,ctx:{common:e.parent.common,data:e.data,parsedType:le(e.data),schemaErrorMap:this._def.errorMap,path:e.path,parent:e.parent}}}_parseSync(e){let n=this._parse(e);if(ot(n))throw new Error("Synchronous parse encountered promise.");return n}_parseAsync(e){let n=this._parse(e);return Promise.resolve(n)}parse(e,n){let r=this.safeParse(e,n);if(r.success)return r.data;throw r.error}safeParse(e,n){let r={common:{issues:[],async:n?.async??false,contextualErrorMap:n?.errorMap},path:n?.path||[],schemaErrorMap:this._def.errorMap,parent:null,data:e,parsedType:le(e)},s=this._parseSync({data:e,path:r.path,parent:r});return Wn(r,s)}"~validate"(e){let n={common:{issues:[],async:!!this["~standard"].async},path:[],schemaErrorMap:this._def.errorMap,parent:null,data:e,parsedType:le(e)};if(!this["~standard"].async)try{let r=this._parseSync({data:e,path:[],parent:n});return Ae(r)?{value:r.value}:{issues:n.common.issues}}catch(r){r?.message?.toLowerCase()?.includes("encountered")&&(this["~standard"].async=true),n.common={issues:[],async:true};}return this._parseAsync({data:e,path:[],parent:n}).then(r=>Ae(r)?{value:r.value}:{issues:n.common.issues})}async parseAsync(e,n){let r=await this.safeParseAsync(e,n);if(r.success)return r.data;throw r.error}async safeParseAsync(e,n){let r={common:{issues:[],contextualErrorMap:n?.errorMap,async:true},path:n?.path||[],schemaErrorMap:this._def.errorMap,parent:null,data:e,parsedType:le(e)},s=this._parse({data:e,path:r.path,parent:r}),o=await(ot(s)?s:Promise.resolve(s));return Wn(r,o)}refine(e,n){let r=s=>typeof n=="string"||typeof n>"u"?{message:n}:typeof n=="function"?n(s):n;return this._refinement((s,o)=>{let a=e(s),i=()=>o.addIssue({code:u.custom,...r(s)});return typeof Promise<"u"&&a instanceof Promise?a.then(c=>c?true:(i(),false)):a?true:(i(),false)})}refinement(e,n){return this._refinement((r,s)=>e(r)?true:(s.addIssue(typeof n=="function"?n(r,s):n),false))}_refinement(e){return new se({schema:this,typeName:y.ZodEffects,effect:{type:"refinement",refinement:e}})}superRefine(e){return this._refinement(e)}constructor(e){this.spa=this.safeParseAsync,this._def=e,this.parse=this.parse.bind(this),this.safeParse=this.safeParse.bind(this),this.parseAsync=this.parseAsync.bind(this),this.safeParseAsync=this.safeParseAsync.bind(this),this.spa=this.spa.bind(this),this.refine=this.refine.bind(this),this.refinement=this.refinement.bind(this),this.superRefine=this.superRefine.bind(this),this.optional=this.optional.bind(this),this.nullable=this.nullable.bind(this),this.nullish=this.nullish.bind(this),this.array=this.array.bind(this),this.promise=this.promise.bind(this),this.or=this.or.bind(this),this.and=this.and.bind(this),this.transform=this.transform.bind(this),this.brand=this.brand.bind(this),this.default=this.default.bind(this),this.catch=this.catch.bind(this),this.describe=this.describe.bind(this),this.pipe=this.pipe.bind(this),this.readonly=this.readonly.bind(this),this.isNullable=this.isNullable.bind(this),this.isOptional=this.isOptional.bind(this),this["~standard"]={version:1,vendor:"zod",validate:n=>this["~validate"](n)};}optional(){return ne.create(this,this._def)}nullable(){return de.create(this,this._def)}nullish(){return this.nullable().optional()}array(){return ve.create(this)}promise(){return Re.create(this,this._def)}or(e){return Ue.create([this,e],this._def)}and(e){return Me.create(this,e,this._def)}transform(e){return new se({..._(this._def),schema:this,typeName:y.ZodEffects,effect:{type:"transform",transform:e}})}default(e){let n=typeof e=="function"?e:()=>e;return new Je({..._(this._def),innerType:this,defaultValue:n,typeName:y.ZodDefault})}brand(){return new Tt({typeName:y.ZodBranded,type:this,..._(this._def)})}catch(e){let n=typeof e=="function"?e:()=>e;return new Ge({..._(this._def),innerType:this,catchValue:n,typeName:y.ZodCatch})}describe(e){let n=this.constructor;return new n({...this._def,description:e})}pipe(e){return At.create(this,e)}readonly(){return Ze.create(this)}isOptional(){return this.safeParse(void 0).success}isNullable(){return this.safeParse(null).success}},ms=/^c[^\s-]{8,}$/i,hs=/^[0-9a-z]+$/,ys=/^[0-9A-HJKMNP-TV-Z]{26}$/i,vs=/^[0-9a-fA-F]{8}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{12}$/i,ks=/^[a-z0-9_-]{21}$/i,_s=/^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/,ws=/^[-+]?P(?!$)(?:(?:[-+]?\d+Y)|(?:[-+]?\d+[.,]\d+Y$))?(?:(?:[-+]?\d+M)|(?:[-+]?\d+[.,]\d+M$))?(?:(?:[-+]?\d+W)|(?:[-+]?\d+[.,]\d+W$))?(?:(?:[-+]?\d+D)|(?:[-+]?\d+[.,]\d+D$))?(?:T(?=[\d+-])(?:(?:[-+]?\d+H)|(?:[-+]?\d+[.,]\d+H$))?(?:(?:[-+]?\d+M)|(?:[-+]?\d+[.,]\d+M$))?(?:[-+]?\d+(?:[.,]\d+)?S)?)??$/,Ss=/^(?!\.)(?!.*\.\.)([A-Z0-9_'+\-\.]*)[A-Z0-9_+-]@([A-Z0-9][A-Z0-9\-]*\.)+[A-Z]{2,}$/i,Es="^(\\p{Extended_Pictographic}|\\p{Emoji_Component})+$",yn,Ts=/^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/,As=/^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/(3[0-2]|[12]?[0-9])$/,xs=/^(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))$/,bs=/^(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$/,Rs=/^([0-9a-zA-Z+/]{4})*(([0-9a-zA-Z+/]{2}==)|([0-9a-zA-Z+/]{3}=))?$/,Cs=/^([0-9a-zA-Z-_]{4})*(([0-9a-zA-Z-_]{2}(==)?)|([0-9a-zA-Z-_]{3}(=)?))?$/,Yn="((\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-((0[13578]|1[02])-(0[1-9]|[12]\\d|3[01])|(0[469]|11)-(0[1-9]|[12]\\d|30)|(02)-(0[1-9]|1\\d|2[0-8])))",Is=new RegExp(`^${Yn}$`);function Xn(t){let e="[0-5]\\d";t.precision?e=`${e}\\.\\d{${t.precision}}`:t.precision==null&&(e=`${e}(\\.\\d+)?`);let n=t.precision?"+":"?";return `([01]\\d|2[0-3]):[0-5]\\d(:${e})${n}`}function Ns(t){return new RegExp(`^${Xn(t)}$`)}function Qn(t){let e=`${Yn}T${Xn(t)}`,n=[];return n.push(t.local?"Z?":"Z"),t.offset&&n.push("([+-]\\d{2}:?\\d{2})"),e=`${e}(${n.join("|")})`,new RegExp(`^${e}$`)}function Ps(t,e){return !!((e==="v4"||!e)&&Ts.test(t)||(e==="v6"||!e)&&xs.test(t))}function Os(t,e){if(!_s.test(t))return false;try{let[n]=t.split(".");if(!n)return !1;let r=n.replace(/-/g,"+").replace(/_/g,"/").padEnd(n.length+(4-n.length%4)%4,"="),s=JSON.parse(atob(r));return !(typeof s!="object"||s===null||"typ"in s&&s?.typ!=="JWT"||!s.alg||e&&s.alg!==e)}catch{return false}}function Ds(t,e){return !!((e==="v4"||!e)&&As.test(t)||(e==="v6"||!e)&&bs.test(t))}var xe=class t extends w{_parse(e){if(this._def.coerce&&(e.data=String(e.data)),this._getType(e)!==g.string){let o=this._getOrReturnCtx(e);return f(o,{code:u.invalid_type,expected:g.string,received:o.parsedType}),h}let r=new H,s;for(let o of this._def.checks)if(o.kind==="min")e.data.length<o.value&&(s=this._getOrReturnCtx(e,s),f(s,{code:u.too_small,minimum:o.value,type:"string",inclusive:true,exact:false,message:o.message}),r.dirty());else if(o.kind==="max")e.data.length>o.value&&(s=this._getOrReturnCtx(e,s),f(s,{code:u.too_big,maximum:o.value,type:"string",inclusive:true,exact:false,message:o.message}),r.dirty());else if(o.kind==="length"){let a=e.data.length>o.value,i=e.data.length<o.value;(a||i)&&(s=this._getOrReturnCtx(e,s),a?f(s,{code:u.too_big,maximum:o.value,type:"string",inclusive:true,exact:true,message:o.message}):i&&f(s,{code:u.too_small,minimum:o.value,type:"string",inclusive:true,exact:true,message:o.message}),r.dirty());}else if(o.kind==="email")Ss.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"email",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="emoji")yn||(yn=new RegExp(Es,"u")),yn.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"emoji",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="uuid")vs.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"uuid",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="nanoid")ks.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"nanoid",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="cuid")ms.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"cuid",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="cuid2")hs.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"cuid2",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="ulid")ys.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"ulid",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="url")try{new URL(e.data);}catch{s=this._getOrReturnCtx(e,s),f(s,{validation:"url",code:u.invalid_string,message:o.message}),r.dirty();}else o.kind==="regex"?(o.regex.lastIndex=0,o.regex.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"regex",code:u.invalid_string,message:o.message}),r.dirty())):o.kind==="trim"?e.data=e.data.trim():o.kind==="includes"?e.data.includes(o.value,o.position)||(s=this._getOrReturnCtx(e,s),f(s,{code:u.invalid_string,validation:{includes:o.value,position:o.position},message:o.message}),r.dirty()):o.kind==="toLowerCase"?e.data=e.data.toLowerCase():o.kind==="toUpperCase"?e.data=e.data.toUpperCase():o.kind==="startsWith"?e.data.startsWith(o.value)||(s=this._getOrReturnCtx(e,s),f(s,{code:u.invalid_string,validation:{startsWith:o.value},message:o.message}),r.dirty()):o.kind==="endsWith"?e.data.endsWith(o.value)||(s=this._getOrReturnCtx(e,s),f(s,{code:u.invalid_string,validation:{endsWith:o.value},message:o.message}),r.dirty()):o.kind==="datetime"?Qn(o).test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{code:u.invalid_string,validation:"datetime",message:o.message}),r.dirty()):o.kind==="date"?Is.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{code:u.invalid_string,validation:"date",message:o.message}),r.dirty()):o.kind==="time"?Ns(o).test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{code:u.invalid_string,validation:"time",message:o.message}),r.dirty()):o.kind==="duration"?ws.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"duration",code:u.invalid_string,message:o.message}),r.dirty()):o.kind==="ip"?Ps(e.data,o.version)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"ip",code:u.invalid_string,message:o.message}),r.dirty()):o.kind==="jwt"?Os(e.data,o.alg)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"jwt",code:u.invalid_string,message:o.message}),r.dirty()):o.kind==="cidr"?Ds(e.data,o.version)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"cidr",code:u.invalid_string,message:o.message}),r.dirty()):o.kind==="base64"?Rs.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"base64",code:u.invalid_string,message:o.message}),r.dirty()):o.kind==="base64url"?Cs.test(e.data)||(s=this._getOrReturnCtx(e,s),f(s,{validation:"base64url",code:u.invalid_string,message:o.message}),r.dirty()):E.assertNever(o);return {status:r.value,value:e.data}}_regex(e,n,r){return this.refinement(s=>e.test(s),{validation:n,code:u.invalid_string,...m.errToObj(r)})}_addCheck(e){return new t({...this._def,checks:[...this._def.checks,e]})}email(e){return this._addCheck({kind:"email",...m.errToObj(e)})}url(e){return this._addCheck({kind:"url",...m.errToObj(e)})}emoji(e){return this._addCheck({kind:"emoji",...m.errToObj(e)})}uuid(e){return this._addCheck({kind:"uuid",...m.errToObj(e)})}nanoid(e){return this._addCheck({kind:"nanoid",...m.errToObj(e)})}cuid(e){return this._addCheck({kind:"cuid",...m.errToObj(e)})}cuid2(e){return this._addCheck({kind:"cuid2",...m.errToObj(e)})}ulid(e){return this._addCheck({kind:"ulid",...m.errToObj(e)})}base64(e){return this._addCheck({kind:"base64",...m.errToObj(e)})}base64url(e){return this._addCheck({kind:"base64url",...m.errToObj(e)})}jwt(e){return this._addCheck({kind:"jwt",...m.errToObj(e)})}ip(e){return this._addCheck({kind:"ip",...m.errToObj(e)})}cidr(e){return this._addCheck({kind:"cidr",...m.errToObj(e)})}datetime(e){return typeof e=="string"?this._addCheck({kind:"datetime",precision:null,offset:false,local:false,message:e}):this._addCheck({kind:"datetime",precision:typeof e?.precision>"u"?null:e?.precision,offset:e?.offset??false,local:e?.local??false,...m.errToObj(e?.message)})}date(e){return this._addCheck({kind:"date",message:e})}time(e){return typeof e=="string"?this._addCheck({kind:"time",precision:null,message:e}):this._addCheck({kind:"time",precision:typeof e?.precision>"u"?null:e?.precision,...m.errToObj(e?.message)})}duration(e){return this._addCheck({kind:"duration",...m.errToObj(e)})}regex(e,n){return this._addCheck({kind:"regex",regex:e,...m.errToObj(n)})}includes(e,n){return this._addCheck({kind:"includes",value:e,position:n?.position,...m.errToObj(n?.message)})}startsWith(e,n){return this._addCheck({kind:"startsWith",value:e,...m.errToObj(n)})}endsWith(e,n){return this._addCheck({kind:"endsWith",value:e,...m.errToObj(n)})}min(e,n){return this._addCheck({kind:"min",value:e,...m.errToObj(n)})}max(e,n){return this._addCheck({kind:"max",value:e,...m.errToObj(n)})}length(e,n){return this._addCheck({kind:"length",value:e,...m.errToObj(n)})}nonempty(e){return this.min(1,m.errToObj(e))}trim(){return new t({...this._def,checks:[...this._def.checks,{kind:"trim"}]})}toLowerCase(){return new t({...this._def,checks:[...this._def.checks,{kind:"toLowerCase"}]})}toUpperCase(){return new t({...this._def,checks:[...this._def.checks,{kind:"toUpperCase"}]})}get isDatetime(){return !!this._def.checks.find(e=>e.kind==="datetime")}get isDate(){return !!this._def.checks.find(e=>e.kind==="date")}get isTime(){return !!this._def.checks.find(e=>e.kind==="time")}get isDuration(){return !!this._def.checks.find(e=>e.kind==="duration")}get isEmail(){return !!this._def.checks.find(e=>e.kind==="email")}get isURL(){return !!this._def.checks.find(e=>e.kind==="url")}get isEmoji(){return !!this._def.checks.find(e=>e.kind==="emoji")}get isUUID(){return !!this._def.checks.find(e=>e.kind==="uuid")}get isNANOID(){return !!this._def.checks.find(e=>e.kind==="nanoid")}get isCUID(){return !!this._def.checks.find(e=>e.kind==="cuid")}get isCUID2(){return !!this._def.checks.find(e=>e.kind==="cuid2")}get isULID(){return !!this._def.checks.find(e=>e.kind==="ulid")}get isIP(){return !!this._def.checks.find(e=>e.kind==="ip")}get isCIDR(){return !!this._def.checks.find(e=>e.kind==="cidr")}get isBase64(){return !!this._def.checks.find(e=>e.kind==="base64")}get isBase64url(){return !!this._def.checks.find(e=>e.kind==="base64url")}get minLength(){let e=null;for(let n of this._def.checks)n.kind==="min"&&(e===null||n.value>e)&&(e=n.value);return e}get maxLength(){let e=null;for(let n of this._def.checks)n.kind==="max"&&(e===null||n.value<e)&&(e=n.value);return e}};xe.create=t=>new xe({checks:[],typeName:y.ZodString,coerce:t?.coerce??false,..._(t)});function js(t,e){let n=(t.toString().split(".")[1]||"").length,r=(e.toString().split(".")[1]||"").length,s=n>r?n:r,o=Number.parseInt(t.toFixed(s).replace(".","")),a=Number.parseInt(e.toFixed(s).replace(".",""));return o%a/10**s}var Oe=class t extends w{constructor(){super(...arguments),this.min=this.gte,this.max=this.lte,this.step=this.multipleOf;}_parse(e){if(this._def.coerce&&(e.data=Number(e.data)),this._getType(e)!==g.number){let o=this._getOrReturnCtx(e);return f(o,{code:u.invalid_type,expected:g.number,received:o.parsedType}),h}let r,s=new H;for(let o of this._def.checks)o.kind==="int"?E.isInteger(e.data)||(r=this._getOrReturnCtx(e,r),f(r,{code:u.invalid_type,expected:"integer",received:"float",message:o.message}),s.dirty()):o.kind==="min"?(o.inclusive?e.data<o.value:e.data<=o.value)&&(r=this._getOrReturnCtx(e,r),f(r,{code:u.too_small,minimum:o.value,type:"number",inclusive:o.inclusive,exact:false,message:o.message}),s.dirty()):o.kind==="max"?(o.inclusive?e.data>o.value:e.data>=o.value)&&(r=this._getOrReturnCtx(e,r),f(r,{code:u.too_big,maximum:o.value,type:"number",inclusive:o.inclusive,exact:false,message:o.message}),s.dirty()):o.kind==="multipleOf"?js(e.data,o.value)!==0&&(r=this._getOrReturnCtx(e,r),f(r,{code:u.not_multiple_of,multipleOf:o.value,message:o.message}),s.dirty()):o.kind==="finite"?Number.isFinite(e.data)||(r=this._getOrReturnCtx(e,r),f(r,{code:u.not_finite,message:o.message}),s.dirty()):E.assertNever(o);return {status:s.value,value:e.data}}gte(e,n){return this.setLimit("min",e,true,m.toString(n))}gt(e,n){return this.setLimit("min",e,false,m.toString(n))}lte(e,n){return this.setLimit("max",e,true,m.toString(n))}lt(e,n){return this.setLimit("max",e,false,m.toString(n))}setLimit(e,n,r,s){return new t({...this._def,checks:[...this._def.checks,{kind:e,value:n,inclusive:r,message:m.toString(s)}]})}_addCheck(e){return new t({...this._def,checks:[...this._def.checks,e]})}int(e){return this._addCheck({kind:"int",message:m.toString(e)})}positive(e){return this._addCheck({kind:"min",value:0,inclusive:false,message:m.toString(e)})}negative(e){return this._addCheck({kind:"max",value:0,inclusive:false,message:m.toString(e)})}nonpositive(e){return this._addCheck({kind:"max",value:0,inclusive:true,message:m.toString(e)})}nonnegative(e){return this._addCheck({kind:"min",value:0,inclusive:true,message:m.toString(e)})}multipleOf(e,n){return this._addCheck({kind:"multipleOf",value:e,message:m.toString(n)})}finite(e){return this._addCheck({kind:"finite",message:m.toString(e)})}safe(e){return this._addCheck({kind:"min",inclusive:true,value:Number.MIN_SAFE_INTEGER,message:m.toString(e)})._addCheck({kind:"max",inclusive:true,value:Number.MAX_SAFE_INTEGER,message:m.toString(e)})}get minValue(){let e=null;for(let n of this._def.checks)n.kind==="min"&&(e===null||n.value>e)&&(e=n.value);return e}get maxValue(){let e=null;for(let n of this._def.checks)n.kind==="max"&&(e===null||n.value<e)&&(e=n.value);return e}get isInt(){return !!this._def.checks.find(e=>e.kind==="int"||e.kind==="multipleOf"&&E.isInteger(e.value))}get isFinite(){let e=null,n=null;for(let r of this._def.checks){if(r.kind==="finite"||r.kind==="int"||r.kind==="multipleOf")return true;r.kind==="min"?(n===null||r.value>n)&&(n=r.value):r.kind==="max"&&(e===null||r.value<e)&&(e=r.value);}return Number.isFinite(n)&&Number.isFinite(e)}};Oe.create=t=>new Oe({checks:[],typeName:y.ZodNumber,coerce:t?.coerce||false,..._(t)});var De=class t extends w{constructor(){super(...arguments),this.min=this.gte,this.max=this.lte;}_parse(e){if(this._def.coerce)try{e.data=BigInt(e.data);}catch{return this._getInvalidInput(e)}if(this._getType(e)!==g.bigint)return this._getInvalidInput(e);let r,s=new H;for(let o of this._def.checks)o.kind==="min"?(o.inclusive?e.data<o.value:e.data<=o.value)&&(r=this._getOrReturnCtx(e,r),f(r,{code:u.too_small,type:"bigint",minimum:o.value,inclusive:o.inclusive,message:o.message}),s.dirty()):o.kind==="max"?(o.inclusive?e.data>o.value:e.data>=o.value)&&(r=this._getOrReturnCtx(e,r),f(r,{code:u.too_big,type:"bigint",maximum:o.value,inclusive:o.inclusive,message:o.message}),s.dirty()):o.kind==="multipleOf"?e.data%o.value!==BigInt(0)&&(r=this._getOrReturnCtx(e,r),f(r,{code:u.not_multiple_of,multipleOf:o.value,message:o.message}),s.dirty()):E.assertNever(o);return {status:s.value,value:e.data}}_getInvalidInput(e){let n=this._getOrReturnCtx(e);return f(n,{code:u.invalid_type,expected:g.bigint,received:n.parsedType}),h}gte(e,n){return this.setLimit("min",e,true,m.toString(n))}gt(e,n){return this.setLimit("min",e,false,m.toString(n))}lte(e,n){return this.setLimit("max",e,true,m.toString(n))}lt(e,n){return this.setLimit("max",e,false,m.toString(n))}setLimit(e,n,r,s){return new t({...this._def,checks:[...this._def.checks,{kind:e,value:n,inclusive:r,message:m.toString(s)}]})}_addCheck(e){return new t({...this._def,checks:[...this._def.checks,e]})}positive(e){return this._addCheck({kind:"min",value:BigInt(0),inclusive:false,message:m.toString(e)})}negative(e){return this._addCheck({kind:"max",value:BigInt(0),inclusive:false,message:m.toString(e)})}nonpositive(e){return this._addCheck({kind:"max",value:BigInt(0),inclusive:true,message:m.toString(e)})}nonnegative(e){return this._addCheck({kind:"min",value:BigInt(0),inclusive:true,message:m.toString(e)})}multipleOf(e,n){return this._addCheck({kind:"multipleOf",value:e,message:m.toString(n)})}get minValue(){let e=null;for(let n of this._def.checks)n.kind==="min"&&(e===null||n.value>e)&&(e=n.value);return e}get maxValue(){let e=null;for(let n of this._def.checks)n.kind==="max"&&(e===null||n.value<e)&&(e=n.value);return e}};De.create=t=>new De({checks:[],typeName:y.ZodBigInt,coerce:t?.coerce??false,..._(t)});var je=class extends w{_parse(e){if(this._def.coerce&&(e.data=!!e.data),this._getType(e)!==g.boolean){let r=this._getOrReturnCtx(e);return f(r,{code:u.invalid_type,expected:g.boolean,received:r.parsedType}),h}return G(e.data)}};je.create=t=>new je({typeName:y.ZodBoolean,coerce:t?.coerce||false,..._(t)});var $e=class t extends w{_parse(e){if(this._def.coerce&&(e.data=new Date(e.data)),this._getType(e)!==g.date){let o=this._getOrReturnCtx(e);return f(o,{code:u.invalid_type,expected:g.date,received:o.parsedType}),h}if(Number.isNaN(e.data.getTime())){let o=this._getOrReturnCtx(e);return f(o,{code:u.invalid_date}),h}let r=new H,s;for(let o of this._def.checks)o.kind==="min"?e.data.getTime()<o.value&&(s=this._getOrReturnCtx(e,s),f(s,{code:u.too_small,message:o.message,inclusive:true,exact:false,minimum:o.value,type:"date"}),r.dirty()):o.kind==="max"?e.data.getTime()>o.value&&(s=this._getOrReturnCtx(e,s),f(s,{code:u.too_big,message:o.message,inclusive:true,exact:false,maximum:o.value,type:"date"}),r.dirty()):E.assertNever(o);return {status:r.value,value:new Date(e.data.getTime())}}_addCheck(e){return new t({...this._def,checks:[...this._def.checks,e]})}min(e,n){return this._addCheck({kind:"min",value:e.getTime(),message:m.toString(n)})}max(e,n){return this._addCheck({kind:"max",value:e.getTime(),message:m.toString(n)})}get minDate(){let e=null;for(let n of this._def.checks)n.kind==="min"&&(e===null||n.value>e)&&(e=n.value);return e!=null?new Date(e):null}get maxDate(){let e=null;for(let n of this._def.checks)n.kind==="max"&&(e===null||n.value<e)&&(e=n.value);return e!=null?new Date(e):null}};$e.create=t=>new $e({checks:[],coerce:t?.coerce||false,typeName:y.ZodDate,..._(t)});var at=class extends w{_parse(e){if(this._getType(e)!==g.symbol){let r=this._getOrReturnCtx(e);return f(r,{code:u.invalid_type,expected:g.symbol,received:r.parsedType}),h}return G(e.data)}};at.create=t=>new at({typeName:y.ZodSymbol,..._(t)});var Le=class extends w{_parse(e){if(this._getType(e)!==g.undefined){let r=this._getOrReturnCtx(e);return f(r,{code:u.invalid_type,expected:g.undefined,received:r.parsedType}),h}return G(e.data)}};Le.create=t=>new Le({typeName:y.ZodUndefined,..._(t)});var Ve=class extends w{_parse(e){if(this._getType(e)!==g.null){let r=this._getOrReturnCtx(e);return f(r,{code:u.invalid_type,expected:g.null,received:r.parsedType}),h}return G(e.data)}};Ve.create=t=>new Ve({typeName:y.ZodNull,..._(t)});var be=class extends w{constructor(){super(...arguments),this._any=true;}_parse(e){return G(e.data)}};be.create=t=>new be({typeName:y.ZodAny,..._(t)});var ye=class extends w{constructor(){super(...arguments),this._unknown=true;}_parse(e){return G(e.data)}};ye.create=t=>new ye({typeName:y.ZodUnknown,..._(t)});var ie=class extends w{_parse(e){let n=this._getOrReturnCtx(e);return f(n,{code:u.invalid_type,expected:g.never,received:n.parsedType}),h}};ie.create=t=>new ie({typeName:y.ZodNever,..._(t)});var ct=class extends w{_parse(e){if(this._getType(e)!==g.undefined){let r=this._getOrReturnCtx(e);return f(r,{code:u.invalid_type,expected:g.void,received:r.parsedType}),h}return G(e.data)}};ct.create=t=>new ct({typeName:y.ZodVoid,..._(t)});var ve=class t extends w{_parse(e){let{ctx:n,status:r}=this._processInputParams(e),s=this._def;if(n.parsedType!==g.array)return f(n,{code:u.invalid_type,expected:g.array,received:n.parsedType}),h;if(s.exactLength!==null){let a=n.data.length>s.exactLength.value,i=n.data.length<s.exactLength.value;(a||i)&&(f(n,{code:a?u.too_big:u.too_small,minimum:i?s.exactLength.value:void 0,maximum:a?s.exactLength.value:void 0,type:"array",inclusive:true,exact:true,message:s.exactLength.message}),r.dirty());}if(s.minLength!==null&&n.data.length<s.minLength.value&&(f(n,{code:u.too_small,minimum:s.minLength.value,type:"array",inclusive:true,exact:false,message:s.minLength.message}),r.dirty()),s.maxLength!==null&&n.data.length>s.maxLength.value&&(f(n,{code:u.too_big,maximum:s.maxLength.value,type:"array",inclusive:true,exact:false,message:s.maxLength.message}),r.dirty()),n.common.async)return Promise.all([...n.data].map((a,i)=>s.type._parseAsync(new re(n,a,n.path,i)))).then(a=>H.mergeArray(r,a));let o=[...n.data].map((a,i)=>s.type._parseSync(new re(n,a,n.path,i)));return H.mergeArray(r,o)}get element(){return this._def.type}min(e,n){return new t({...this._def,minLength:{value:e,message:m.toString(n)}})}max(e,n){return new t({...this._def,maxLength:{value:e,message:m.toString(n)}})}length(e,n){return new t({...this._def,exactLength:{value:e,message:m.toString(n)}})}nonempty(e){return this.min(1,e)}};ve.create=(t,e)=>new ve({type:t,minLength:null,maxLength:null,exactLength:null,typeName:y.ZodArray,..._(e)});function it(t){if(t instanceof Y){let e={};for(let n in t.shape){let r=t.shape[n];e[n]=ne.create(it(r));}return new Y({...t._def,shape:()=>e})}else return t instanceof ve?new ve({...t._def,type:it(t.element)}):t instanceof ne?ne.create(it(t.unwrap())):t instanceof de?de.create(it(t.unwrap())):t instanceof ue?ue.create(t.items.map(e=>it(e))):t}var Y=class t extends w{constructor(){super(...arguments),this._cached=null,this.nonstrict=this.passthrough,this.augment=this.extend;}_getCached(){if(this._cached!==null)return this._cached;let e=this._def.shape(),n=E.objectKeys(e);return this._cached={shape:e,keys:n},this._cached}_parse(e){if(this._getType(e)!==g.object){let l=this._getOrReturnCtx(e);return f(l,{code:u.invalid_type,expected:g.object,received:l.parsedType}),h}let{status:r,ctx:s}=this._processInputParams(e),{shape:o,keys:a}=this._getCached(),i=[];if(!(this._def.catchall instanceof ie&&this._def.unknownKeys==="strip"))for(let l in s.data)a.includes(l)||i.push(l);let c=[];for(let l of a){let d=o[l],b=s.data[l];c.push({key:{status:"valid",value:l},value:d._parse(new re(s,b,s.path,l)),alwaysSet:l in s.data});}if(this._def.catchall instanceof ie){let l=this._def.unknownKeys;if(l==="passthrough")for(let d of i)c.push({key:{status:"valid",value:d},value:{status:"valid",value:s.data[d]}});else if(l==="strict")i.length>0&&(f(s,{code:u.unrecognized_keys,keys:i}),r.dirty());else if(l!=="strip")throw new Error("Internal ZodObject error: invalid unknownKeys value.")}else {let l=this._def.catchall;for(let d of i){let b=s.data[d];c.push({key:{status:"valid",value:d},value:l._parse(new re(s,b,s.path,d)),alwaysSet:d in s.data});}}return s.common.async?Promise.resolve().then(async()=>{let l=[];for(let d of c){let b=await d.key,$=await d.value;l.push({key:b,value:$,alwaysSet:d.alwaysSet});}return l}).then(l=>H.mergeObjectSync(r,l)):H.mergeObjectSync(r,c)}get shape(){return this._def.shape()}strict(e){return m.errToObj,new t({...this._def,unknownKeys:"strict",...e!==void 0?{errorMap:(n,r)=>{let s=this._def.errorMap?.(n,r).message??r.defaultError;return n.code==="unrecognized_keys"?{message:m.errToObj(e).message??s}:{message:s}}}:{}})}strip(){return new t({...this._def,unknownKeys:"strip"})}passthrough(){return new t({...this._def,unknownKeys:"passthrough"})}extend(e){return new t({...this._def,shape:()=>({...this._def.shape(),...e})})}merge(e){return new t({unknownKeys:e._def.unknownKeys,catchall:e._def.catchall,shape:()=>({...this._def.shape(),...e._def.shape()}),typeName:y.ZodObject})}setKey(e,n){return this.augment({[e]:n})}catchall(e){return new t({...this._def,catchall:e})}pick(e){let n={};for(let r of E.objectKeys(e))e[r]&&this.shape[r]&&(n[r]=this.shape[r]);return new t({...this._def,shape:()=>n})}omit(e){let n={};for(let r of E.objectKeys(this.shape))e[r]||(n[r]=this.shape[r]);return new t({...this._def,shape:()=>n})}deepPartial(){return it(this)}partial(e){let n={};for(let r of E.objectKeys(this.shape)){let s=this.shape[r];e&&!e[r]?n[r]=s:n[r]=s.optional();}return new t({...this._def,shape:()=>n})}required(e){let n={};for(let r of E.objectKeys(this.shape))if(e&&!e[r])n[r]=this.shape[r];else {let o=this.shape[r];for(;o instanceof ne;)o=o._def.innerType;n[r]=o;}return new t({...this._def,shape:()=>n})}keyof(){return er(E.objectKeys(this.shape))}};Y.create=(t,e)=>new Y({shape:()=>t,unknownKeys:"strip",catchall:ie.create(),typeName:y.ZodObject,..._(e)});Y.strictCreate=(t,e)=>new Y({shape:()=>t,unknownKeys:"strict",catchall:ie.create(),typeName:y.ZodObject,..._(e)});Y.lazycreate=(t,e)=>new Y({shape:t,unknownKeys:"strip",catchall:ie.create(),typeName:y.ZodObject,..._(e)});var Ue=class extends w{_parse(e){let{ctx:n}=this._processInputParams(e),r=this._def.options;function s(o){for(let i of o)if(i.result.status==="valid")return i.result;for(let i of o)if(i.result.status==="dirty")return n.common.issues.push(...i.ctx.common.issues),i.result;let a=o.map(i=>new q(i.ctx.common.issues));return f(n,{code:u.invalid_union,unionErrors:a}),h}if(n.common.async)return Promise.all(r.map(async o=>{let a={...n,common:{...n.common,issues:[]},parent:null};return {result:await o._parseAsync({data:n.data,path:n.path,parent:a}),ctx:a}})).then(s);{let o,a=[];for(let c of r){let l={...n,common:{...n.common,issues:[]},parent:null},d=c._parseSync({data:n.data,path:n.path,parent:l});if(d.status==="valid")return d;d.status==="dirty"&&!o&&(o={result:d,ctx:l}),l.common.issues.length&&a.push(l.common.issues);}if(o)return n.common.issues.push(...o.ctx.common.issues),o.result;let i=a.map(c=>new q(c));return f(n,{code:u.invalid_union,unionErrors:i}),h}}get options(){return this._def.options}};Ue.create=(t,e)=>new Ue({options:t,typeName:y.ZodUnion,..._(e)});var he=t=>t instanceof Be?he(t.schema):t instanceof se?he(t.innerType()):t instanceof Fe?[t.value]:t instanceof ze?t.options:t instanceof He?E.objectValues(t.enum):t instanceof Je?he(t._def.innerType):t instanceof Le?[void 0]:t instanceof Ve?[null]:t instanceof ne?[void 0,...he(t.unwrap())]:t instanceof de?[null,...he(t.unwrap())]:t instanceof Tt||t instanceof Ze?he(t.unwrap()):t instanceof Ge?he(t._def.innerType):[],Ht=class t extends w{_parse(e){let{ctx:n}=this._processInputParams(e);if(n.parsedType!==g.object)return f(n,{code:u.invalid_type,expected:g.object,received:n.parsedType}),h;let r=this.discriminator,s=n.data[r],o=this.optionsMap.get(s);return o?n.common.async?o._parseAsync({data:n.data,path:n.path,parent:n}):o._parseSync({data:n.data,path:n.path,parent:n}):(f(n,{code:u.invalid_union_discriminator,options:Array.from(this.optionsMap.keys()),path:[r]}),h)}get discriminator(){return this._def.discriminator}get options(){return this._def.options}get optionsMap(){return this._def.optionsMap}static create(e,n,r){let s=new Map;for(let o of n){let a=he(o.shape[e]);if(!a.length)throw new Error(`A discriminator value for key \`${e}\` could not be extracted from all schema options`);for(let i of a){if(s.has(i))throw new Error(`Discriminator property ${String(e)} has duplicate value ${String(i)}`);s.set(i,o);}}return new t({typeName:y.ZodDiscriminatedUnion,discriminator:e,options:n,optionsMap:s,..._(r)})}};function vn(t,e){let n=le(t),r=le(e);if(t===e)return {valid:true,data:t};if(n===g.object&&r===g.object){let s=E.objectKeys(e),o=E.objectKeys(t).filter(i=>s.indexOf(i)!==-1),a={...t,...e};for(let i of o){let c=vn(t[i],e[i]);if(!c.valid)return {valid:false};a[i]=c.data;}return {valid:true,data:a}}else if(n===g.array&&r===g.array){if(t.length!==e.length)return {valid:false};let s=[];for(let o=0;o<t.length;o++){let a=t[o],i=e[o],c=vn(a,i);if(!c.valid)return {valid:false};s.push(c.data);}return {valid:true,data:s}}else return n===g.date&&r===g.date&&+t==+e?{valid:true,data:t}:{valid:false}}var Me=class extends w{_parse(e){let{status:n,ctx:r}=this._processInputParams(e),s=(o,a)=>{if(Ft(o)||Ft(a))return h;let i=vn(o.value,a.value);return i.valid?((zt(o)||zt(a))&&n.dirty(),{status:n.value,value:i.data}):(f(r,{code:u.invalid_intersection_types}),h)};return r.common.async?Promise.all([this._def.left._parseAsync({data:r.data,path:r.path,parent:r}),this._def.right._parseAsync({data:r.data,path:r.path,parent:r})]).then(([o,a])=>s(o,a)):s(this._def.left._parseSync({data:r.data,path:r.path,parent:r}),this._def.right._parseSync({data:r.data,path:r.path,parent:r}))}};Me.create=(t,e,n)=>new Me({left:t,right:e,typeName:y.ZodIntersection,..._(n)});var ue=class t extends w{_parse(e){let{status:n,ctx:r}=this._processInputParams(e);if(r.parsedType!==g.array)return f(r,{code:u.invalid_type,expected:g.array,received:r.parsedType}),h;if(r.data.length<this._def.items.length)return f(r,{code:u.too_small,minimum:this._def.items.length,inclusive:true,exact:false,type:"array"}),h;!this._def.rest&&r.data.length>this._def.items.length&&(f(r,{code:u.too_big,maximum:this._def.items.length,inclusive:true,exact:false,type:"array"}),n.dirty());let o=[...r.data].map((a,i)=>{let c=this._def.items[i]||this._def.rest;return c?c._parse(new re(r,a,r.path,i)):null}).filter(a=>!!a);return r.common.async?Promise.all(o).then(a=>H.mergeArray(n,a)):H.mergeArray(n,o)}get items(){return this._def.items}rest(e){return new t({...this._def,rest:e})}};ue.create=(t,e)=>{if(!Array.isArray(t))throw new Error("You must pass an array of schemas to z.tuple([ ... ])");return new ue({items:t,typeName:y.ZodTuple,rest:null,..._(e)})};var Jt=class t extends w{get keySchema(){return this._def.keyType}get valueSchema(){return this._def.valueType}_parse(e){let{status:n,ctx:r}=this._processInputParams(e);if(r.parsedType!==g.object)return f(r,{code:u.invalid_type,expected:g.object,received:r.parsedType}),h;let s=[],o=this._def.keyType,a=this._def.valueType;for(let i in r.data)s.push({key:o._parse(new re(r,i,r.path,i)),value:a._parse(new re(r,r.data[i],r.path,i)),alwaysSet:i in r.data});return r.common.async?H.mergeObjectAsync(n,s):H.mergeObjectSync(n,s)}get element(){return this._def.valueType}static create(e,n,r){return n instanceof w?new t({keyType:e,valueType:n,typeName:y.ZodRecord,..._(r)}):new t({keyType:xe.create(),valueType:e,typeName:y.ZodRecord,..._(n)})}},lt=class extends w{get keySchema(){return this._def.keyType}get valueSchema(){return this._def.valueType}_parse(e){let{status:n,ctx:r}=this._processInputParams(e);if(r.parsedType!==g.map)return f(r,{code:u.invalid_type,expected:g.map,received:r.parsedType}),h;let s=this._def.keyType,o=this._def.valueType,a=[...r.data.entries()].map(([i,c],l)=>({key:s._parse(new re(r,i,r.path,[l,"key"])),value:o._parse(new re(r,c,r.path,[l,"value"]))}));if(r.common.async){let i=new Map;return Promise.resolve().then(async()=>{for(let c of a){let l=await c.key,d=await c.value;if(l.status==="aborted"||d.status==="aborted")return h;(l.status==="dirty"||d.status==="dirty")&&n.dirty(),i.set(l.value,d.value);}return {status:n.value,value:i}})}else {let i=new Map;for(let c of a){let l=c.key,d=c.value;if(l.status==="aborted"||d.status==="aborted")return h;(l.status==="dirty"||d.status==="dirty")&&n.dirty(),i.set(l.value,d.value);}return {status:n.value,value:i}}}};lt.create=(t,e,n)=>new lt({valueType:e,keyType:t,typeName:y.ZodMap,..._(n)});var ut=class t extends w{_parse(e){let{status:n,ctx:r}=this._processInputParams(e);if(r.parsedType!==g.set)return f(r,{code:u.invalid_type,expected:g.set,received:r.parsedType}),h;let s=this._def;s.minSize!==null&&r.data.size<s.minSize.value&&(f(r,{code:u.too_small,minimum:s.minSize.value,type:"set",inclusive:true,exact:false,message:s.minSize.message}),n.dirty()),s.maxSize!==null&&r.data.size>s.maxSize.value&&(f(r,{code:u.too_big,maximum:s.maxSize.value,type:"set",inclusive:true,exact:false,message:s.maxSize.message}),n.dirty());let o=this._def.valueType;function a(c){let l=new Set;for(let d of c){if(d.status==="aborted")return h;d.status==="dirty"&&n.dirty(),l.add(d.value);}return {status:n.value,value:l}}let i=[...r.data.values()].map((c,l)=>o._parse(new re(r,c,r.path,l)));return r.common.async?Promise.all(i).then(c=>a(c)):a(i)}min(e,n){return new t({...this._def,minSize:{value:e,message:m.toString(n)}})}max(e,n){return new t({...this._def,maxSize:{value:e,message:m.toString(n)}})}size(e,n){return this.min(e,n).max(e,n)}nonempty(e){return this.min(1,e)}};ut.create=(t,e)=>new ut({valueType:t,minSize:null,maxSize:null,typeName:y.ZodSet,..._(e)});var Gt=class t extends w{constructor(){super(...arguments),this.validate=this.implement;}_parse(e){let{ctx:n}=this._processInputParams(e);if(n.parsedType!==g.function)return f(n,{code:u.invalid_type,expected:g.function,received:n.parsedType}),h;function r(i,c){return Et({data:i,path:n.path,errorMaps:[n.common.contextualErrorMap,n.schemaErrorMap,st(),me].filter(l=>!!l),issueData:{code:u.invalid_arguments,argumentsError:c}})}function s(i,c){return Et({data:i,path:n.path,errorMaps:[n.common.contextualErrorMap,n.schemaErrorMap,st(),me].filter(l=>!!l),issueData:{code:u.invalid_return_type,returnTypeError:c}})}let o={errorMap:n.common.contextualErrorMap},a=n.data;if(this._def.returns instanceof Re){let i=this;return G(async function(...c){let l=new q([]),d=await i._def.args.parseAsync(c,o).catch(I=>{throw l.addIssue(r(c,I)),l}),b=await Reflect.apply(a,this,d);return await i._def.returns._def.type.parseAsync(b,o).catch(I=>{throw l.addIssue(s(b,I)),l})})}else {let i=this;return G(function(...c){let l=i._def.args.safeParse(c,o);if(!l.success)throw new q([r(c,l.error)]);let d=Reflect.apply(a,this,l.data),b=i._def.returns.safeParse(d,o);if(!b.success)throw new q([s(d,b.error)]);return b.data})}}parameters(){return this._def.args}returnType(){return this._def.returns}args(...e){return new t({...this._def,args:ue.create(e).rest(ye.create())})}returns(e){return new t({...this._def,returns:e})}implement(e){return this.parse(e)}strictImplement(e){return this.parse(e)}static create(e,n,r){return new t({args:e||ue.create([]).rest(ye.create()),returns:n||ye.create(),typeName:y.ZodFunction,..._(r)})}},Be=class extends w{get schema(){return this._def.getter()}_parse(e){let{ctx:n}=this._processInputParams(e);return this._def.getter()._parse({data:n.data,path:n.path,parent:n})}};Be.create=(t,e)=>new Be({getter:t,typeName:y.ZodLazy,..._(e)});var Fe=class extends w{_parse(e){if(e.data!==this._def.value){let n=this._getOrReturnCtx(e);return f(n,{received:n.data,code:u.invalid_literal,expected:this._def.value}),h}return {status:"valid",value:e.data}}get value(){return this._def.value}};Fe.create=(t,e)=>new Fe({value:t,typeName:y.ZodLiteral,..._(e)});function er(t,e){return new ze({values:t,typeName:y.ZodEnum,..._(e)})}var ze=class t extends w{_parse(e){if(typeof e.data!="string"){let n=this._getOrReturnCtx(e),r=this._def.values;return f(n,{expected:E.joinValues(r),received:n.parsedType,code:u.invalid_type}),h}if(this._cache||(this._cache=new Set(this._def.values)),!this._cache.has(e.data)){let n=this._getOrReturnCtx(e),r=this._def.values;return f(n,{received:n.data,code:u.invalid_enum_value,options:r}),h}return G(e.data)}get options(){return this._def.values}get enum(){let e={};for(let n of this._def.values)e[n]=n;return e}get Values(){let e={};for(let n of this._def.values)e[n]=n;return e}get Enum(){let e={};for(let n of this._def.values)e[n]=n;return e}extract(e,n=this._def){return t.create(e,{...this._def,...n})}exclude(e,n=this._def){return t.create(this.options.filter(r=>!e.includes(r)),{...this._def,...n})}};ze.create=er;var He=class extends w{_parse(e){let n=E.getValidEnumValues(this._def.values),r=this._getOrReturnCtx(e);if(r.parsedType!==g.string&&r.parsedType!==g.number){let s=E.objectValues(n);return f(r,{expected:E.joinValues(s),received:r.parsedType,code:u.invalid_type}),h}if(this._cache||(this._cache=new Set(E.getValidEnumValues(this._def.values))),!this._cache.has(e.data)){let s=E.objectValues(n);return f(r,{received:r.data,code:u.invalid_enum_value,options:s}),h}return G(e.data)}get enum(){return this._def.values}};He.create=(t,e)=>new He({values:t,typeName:y.ZodNativeEnum,..._(e)});var Re=class extends w{unwrap(){return this._def.type}_parse(e){let{ctx:n}=this._processInputParams(e);if(n.parsedType!==g.promise&&n.common.async===false)return f(n,{code:u.invalid_type,expected:g.promise,received:n.parsedType}),h;let r=n.parsedType===g.promise?n.data:Promise.resolve(n.data);return G(r.then(s=>this._def.type.parseAsync(s,{path:n.path,errorMap:n.common.contextualErrorMap})))}};Re.create=(t,e)=>new Re({type:t,typeName:y.ZodPromise,..._(e)});var se=class extends w{innerType(){return this._def.schema}sourceType(){return this._def.schema._def.typeName===y.ZodEffects?this._def.schema.sourceType():this._def.schema}_parse(e){let{status:n,ctx:r}=this._processInputParams(e),s=this._def.effect||null,o={addIssue:a=>{f(r,a),a.fatal?n.abort():n.dirty();},get path(){return r.path}};if(o.addIssue=o.addIssue.bind(o),s.type==="preprocess"){let a=s.transform(r.data,o);if(r.common.async)return Promise.resolve(a).then(async i=>{if(n.value==="aborted")return h;let c=await this._def.schema._parseAsync({data:i,path:r.path,parent:r});return c.status==="aborted"?h:c.status==="dirty"?Pe(c.value):n.value==="dirty"?Pe(c.value):c});{if(n.value==="aborted")return h;let i=this._def.schema._parseSync({data:a,path:r.path,parent:r});return i.status==="aborted"?h:i.status==="dirty"?Pe(i.value):n.value==="dirty"?Pe(i.value):i}}if(s.type==="refinement"){let a=i=>{let c=s.refinement(i,o);if(r.common.async)return Promise.resolve(c);if(c instanceof Promise)throw new Error("Async refinement encountered during synchronous parse operation. Use .parseAsync instead.");return i};if(r.common.async===false){let i=this._def.schema._parseSync({data:r.data,path:r.path,parent:r});return i.status==="aborted"?h:(i.status==="dirty"&&n.dirty(),a(i.value),{status:n.value,value:i.value})}else return this._def.schema._parseAsync({data:r.data,path:r.path,parent:r}).then(i=>i.status==="aborted"?h:(i.status==="dirty"&&n.dirty(),a(i.value).then(()=>({status:n.value,value:i.value}))))}if(s.type==="transform")if(r.common.async===false){let a=this._def.schema._parseSync({data:r.data,path:r.path,parent:r});if(!Ae(a))return h;let i=s.transform(a.value,o);if(i instanceof Promise)throw new Error("Asynchronous transform encountered during synchronous parse operation. Use .parseAsync instead.");return {status:n.value,value:i}}else return this._def.schema._parseAsync({data:r.data,path:r.path,parent:r}).then(a=>Ae(a)?Promise.resolve(s.transform(a.value,o)).then(i=>({status:n.value,value:i})):h);E.assertNever(s);}};se.create=(t,e,n)=>new se({schema:t,typeName:y.ZodEffects,effect:e,..._(n)});se.createWithPreprocess=(t,e,n)=>new se({schema:e,effect:{type:"preprocess",transform:t},typeName:y.ZodEffects,..._(n)});var ne=class extends w{_parse(e){return this._getType(e)===g.undefined?G(void 0):this._def.innerType._parse(e)}unwrap(){return this._def.innerType}};ne.create=(t,e)=>new ne({innerType:t,typeName:y.ZodOptional,..._(e)});var de=class extends w{_parse(e){return this._getType(e)===g.null?G(null):this._def.innerType._parse(e)}unwrap(){return this._def.innerType}};de.create=(t,e)=>new de({innerType:t,typeName:y.ZodNullable,..._(e)});var Je=class extends w{_parse(e){let{ctx:n}=this._processInputParams(e),r=n.data;return n.parsedType===g.undefined&&(r=this._def.defaultValue()),this._def.innerType._parse({data:r,path:n.path,parent:n})}removeDefault(){return this._def.innerType}};Je.create=(t,e)=>new Je({innerType:t,typeName:y.ZodDefault,defaultValue:typeof e.default=="function"?e.default:()=>e.default,..._(e)});var Ge=class extends w{_parse(e){let{ctx:n}=this._processInputParams(e),r={...n,common:{...n.common,issues:[]}},s=this._def.innerType._parse({data:r.data,path:r.path,parent:{...r}});return ot(s)?s.then(o=>({status:"valid",value:o.status==="valid"?o.value:this._def.catchValue({get error(){return new q(r.common.issues)},input:r.data})})):{status:"valid",value:s.status==="valid"?s.value:this._def.catchValue({get error(){return new q(r.common.issues)},input:r.data})}}removeCatch(){return this._def.innerType}};Ge.create=(t,e)=>new Ge({innerType:t,typeName:y.ZodCatch,catchValue:typeof e.catch=="function"?e.catch:()=>e.catch,..._(e)});var dt=class extends w{_parse(e){if(this._getType(e)!==g.nan){let r=this._getOrReturnCtx(e);return f(r,{code:u.invalid_type,expected:g.nan,received:r.parsedType}),h}return {status:"valid",value:e.data}}};dt.create=t=>new dt({typeName:y.ZodNaN,..._(t)});var $s=Symbol("zod_brand"),Tt=class extends w{_parse(e){let{ctx:n}=this._processInputParams(e),r=n.data;return this._def.type._parse({data:r,path:n.path,parent:n})}unwrap(){return this._def.type}},At=class t extends w{_parse(e){let{status:n,ctx:r}=this._processInputParams(e);if(r.common.async)return (async()=>{let o=await this._def.in._parseAsync({data:r.data,path:r.path,parent:r});return o.status==="aborted"?h:o.status==="dirty"?(n.dirty(),Pe(o.value)):this._def.out._parseAsync({data:o.value,path:r.path,parent:r})})();{let s=this._def.in._parseSync({data:r.data,path:r.path,parent:r});return s.status==="aborted"?h:s.status==="dirty"?(n.dirty(),{status:"dirty",value:s.value}):this._def.out._parseSync({data:s.value,path:r.path,parent:r})}}static create(e,n){return new t({in:e,out:n,typeName:y.ZodPipeline})}},Ze=class extends w{_parse(e){let n=this._def.innerType._parse(e),r=s=>(Ae(s)&&(s.value=Object.freeze(s.value)),s);return ot(n)?n.then(s=>r(s)):r(n)}unwrap(){return this._def.innerType}};Ze.create=(t,e)=>new Ze({innerType:t,typeName:y.ZodReadonly,..._(e)});function qn(t,e){let n=typeof t=="function"?t(e):typeof t=="string"?{message:t}:t;return typeof n=="string"?{message:n}:n}function tr(t,e={},n){return t?be.create().superRefine((r,s)=>{let o=t(r);if(o instanceof Promise)return o.then(a=>{if(!a){let i=qn(e,r),c=i.fatal??n??true;s.addIssue({code:"custom",...i,fatal:c});}});if(!o){let a=qn(e,r),i=a.fatal??n??true;s.addIssue({code:"custom",...a,fatal:i});}}):be.create()}var Ls={object:Y.lazycreate},y;(function(t){t.ZodString="ZodString",t.ZodNumber="ZodNumber",t.ZodNaN="ZodNaN",t.ZodBigInt="ZodBigInt",t.ZodBoolean="ZodBoolean",t.ZodDate="ZodDate",t.ZodSymbol="ZodSymbol",t.ZodUndefined="ZodUndefined",t.ZodNull="ZodNull",t.ZodAny="ZodAny",t.ZodUnknown="ZodUnknown",t.ZodNever="ZodNever",t.ZodVoid="ZodVoid",t.ZodArray="ZodArray",t.ZodObject="ZodObject",t.ZodUnion="ZodUnion",t.ZodDiscriminatedUnion="ZodDiscriminatedUnion",t.ZodIntersection="ZodIntersection",t.ZodTuple="ZodTuple",t.ZodRecord="ZodRecord",t.ZodMap="ZodMap",t.ZodSet="ZodSet",t.ZodFunction="ZodFunction",t.ZodLazy="ZodLazy",t.ZodLiteral="ZodLiteral",t.ZodEnum="ZodEnum",t.ZodEffects="ZodEffects",t.ZodNativeEnum="ZodNativeEnum",t.ZodOptional="ZodOptional",t.ZodNullable="ZodNullable",t.ZodDefault="ZodDefault",t.ZodCatch="ZodCatch",t.ZodPromise="ZodPromise",t.ZodBranded="ZodBranded",t.ZodPipeline="ZodPipeline",t.ZodReadonly="ZodReadonly";})(y||(y={}));var Vs=(t,e={message:`Input not instance of ${t.name}`})=>tr(n=>n instanceof t,e),nr=xe.create,rr=Oe.create,Us=dt.create,Ms=De.create,sr=je.create,Bs=$e.create,Fs=at.create,zs=Le.create,Hs=Ve.create,Js=be.create,Gs=ye.create,Zs=ie.create,Ks=ct.create,Ws=ve.create,qs=Y.create,Ys=Y.strictCreate,Xs=Ue.create,Qs=Ht.create,eo=Me.create,to=ue.create,no=Jt.create,ro=lt.create,so=ut.create,oo=Gt.create,io=Be.create,ao=Fe.create,co=ze.create,lo=He.create,uo=Re.create,po=se.create,fo=ne.create,go=de.create,mo=se.createWithPreprocess,ho=At.create,yo=()=>nr().optional(),vo=()=>rr().optional(),ko=()=>sr().optional(),_o={string:(t=>xe.create({...t,coerce:true})),number:(t=>Oe.create({...t,coerce:true})),boolean:(t=>je.create({...t,coerce:true})),bigint:(t=>De.create({...t,coerce:true})),date:(t=>$e.create({...t,coerce:true}))};var wo=h;var So={api:{rateLimit:{windowMs:900*1e3,maxRequests:100}}};p.object({snapshot_version:p.string(),engine_target_version:p.string(),project_id:p.string(),generated_at:p.string(),root_path_hash:p.string(),metadata:p.object({total_files:p.number().int().nonnegative(),total_dependencies:p.number().int().nonnegative(),total_size_bytes:p.number().int().nonnegative(),total_lines:p.number().int().nonnegative(),max_directory_depth:p.number().int().nonnegative(),language_breakdown:p.record(p.string(),p.number().int().nonnegative())}),files:p.array(p.object({id:p.string(),path_hash:p.string(),depth:p.number().int().nonnegative(),size_bytes:p.number().int().nonnegative(),estimated_lines:p.number().int().nonnegative(),extension:p.string(),is_binary:p.boolean(),import_count:p.number().int().nonnegative().optional(),function_count:p.number().int().nonnegative().optional(),class_count:p.number().int().nonnegative().optional()})),dependencies:p.array(p.object({id:p.string(),name_hash:p.string(),major_version:p.number().int().nonnegative(),minor_version:p.number().int().nonnegative(),category:p.enum(["dev","prod","peer"])}))});p.object({name:p.string().min(1).max(100)});p.object({analysis_version:p.string(),snapshot_schema_version:p.string(),total_score:p.number().min(0).max(100),severity_band:p.enum(["HEALTHY","STABLE","STRUCTURAL_CONCERN","HIGH_RISK"]),engines:p.array(p.object({engine_name:p.string(),score_impact:p.number(),risk_level:p.enum(["HEALTHY","STABLE","STRUCTURAL_CONCERN","HIGH_RISK"]),metrics:p.record(p.number()),findings:p.array(p.object({rule_id:p.string(),title:p.string(),message:p.string(),severity:p.enum(["CRITICAL","HIGH","MEDIUM","LOW"]),category:p.enum(["SECURITY","STRUCTURE","COMPLEXITY","DEPENDENCY","REPOSITORY_HYGIENE","DOCUMENTATION","QUALITY"]),evidence:p.array(p.string()).optional(),explanation:p.string().optional(),impact:p.string().optional(),effort:p.enum(["Low","Medium","High"]).optional(),recommendations:p.array(p.string()).optional()}))})),summary:p.object({total_findings:p.number().int().nonnegative(),critical_count:p.number().int().nonnegative(),high_count:p.number().int().nonnegative(),medium_count:p.number().int().nonnegative(),low_count:p.number().int().nonnegative(),categories:p.record(p.string(),p.number().int().nonnegative())}),generated_at:p.string()});var Eo=p.object({NEXT_PUBLIC_SUPABASE_URL:p.string().url("Invalid SUPABASE_URL"),NEXT_PUBLIC_SUPABASE_ANON_KEY:p.string().min(1,"SUPABASE_ANON_KEY is required"),SUPABASE_SERVICE_ROLE_KEY:p.string().min(1,"SERVICE_ROLE_KEY is required"),NODE_ENV:p.enum(["development","production","test"],{errorMap:()=>({message:"NODE_ENV must be development, production, or test"})}),JWT_SECRET:p.string().min(32,"JWT_SECRET must be at least 32 characters").optional()});function To(){try{return Eo.parse(process.env)}catch(t){if(t instanceof p.ZodError){let e=t.errors.map(n=>n.path.join(".")).join(", ");throw new Error(`Environment validation failed:
22
+ `)),process.exit(1);}process.env.VEESTACK_DEBUG==="true"&&console.log(v.gray(`\u2713 Official package verified: ${ot.join(" or ")}`));}function Bt(){let t=Gn(),e=ot.includes(t);return {packageName:t,isOfficial:e,homepage:"https://www.veestack.com",repository:"https://github.com/Mohmed-ElZehiry/VeeStack"}}var as=[".env",".env.local",".env.development",".env.production",".env.test",".env.example",".envrc",".env.*","id_rsa","id_rsa.pub","id_dsa","id_dsa.pub","id_ecdsa","id_ecdsa.pub","id_ed25519","id_ed25519.pub","*.pem","*.key","*.p12","*.pfx","*.crt","*.cer","*.der","credentials",".aws/credentials",".aws/config",".docker/config.json","kubeconfig","*.kubeconfig",".npmrc",".yarnrc",".pnpmrc",".git-credentials","*.sqlite","*.sqlite3","*.db","secrets/","secret/",".secrets/","config.json","settings.json","local.settings.json"],cs=["veestack.config.json","package.json","tsconfig.json","jsconfig.json",".eslintrc.json",".prettierrc.json","README.md"],ls=[{name:"AWS Access Key ID",pattern:/AKIA[0-9A-Z]{16}/g,severity:"critical",description:"AWS Access Key ID detected"},{name:"AWS Secret Access Key",pattern:/['"\s][A-Za-z0-9/+=]{40}['"\s]/g,severity:"critical",description:"Potential AWS Secret Key detected"},{name:"Private Key",pattern:/-----BEGIN (RSA |DSA |EC |OPENSSH |PGP )?PRIVATE KEY-----/g,severity:"critical",description:"Private key detected"},{name:"JWT Token",pattern:/eyJ[a-zA-Z0-9_-]*\.eyJ[a-zA-Z0-9_-]*\.[a-zA-Z0-9_-]*/g,severity:"high",description:"JWT token detected"},{name:"Bearer Token",pattern:/Bearer\s+[a-zA-Z0-9_-]{20,}/gi,severity:"high",description:"Bearer token detected"},{name:"API Key",pattern:/(?:api[_-]?key|apikey|api_token|apiToken)['"\s]*[:=]\s*['"][a-zA-Z0-9_-]{16,}['"]/gi,severity:"high",description:"API key detected"},{name:"Password in URL",pattern:/[a-zA-Z]+:\/\/[^\s:@]+:[^\s:@]+@[^\s]+/g,severity:"high",description:"Password in URL detected"},{name:"Password Assignment",pattern:/(?:password|passwd|pwd)\s*[=:]\s*['"][^'"]{8,}['"]/gi,severity:"medium",description:"Password assignment detected"},{name:"GitHub Token",pattern:/gh[pousr]_[A-Za-z0-9_]{36,}/g,severity:"critical",description:"GitHub token detected"},{name:"Slack Token",pattern:/xox[baprs]-[0-9]{10,13}-[0-9]{10,13}(-[a-zA-Z0-9]{24})?/g,severity:"critical",description:"Slack token detected"},{name:"Generic Secret",pattern:/(?:secret|token|key)\s*[=:]\s*['"][a-zA-Z0-9_-]{20,}['"]/gi,severity:"medium",description:"Potential secret detected"},{name:"Connection String",pattern:/(?:mongodb|postgres|mysql|redis|amqp):\/\/[^\s]+/gi,severity:"high",description:"Database connection string detected"},{name:"VeeStack Token",pattern:/vs_[a-zA-Z0-9_-]{20,}/g,severity:"critical",description:"VeeStack token detected"}];function Wn(t){let e=t.replace(/\\/g,"/").toLowerCase(),n=rt.basename(e);for(let r of cs)if(n===r.toLowerCase())return false;for(let r of as){if(n===r.toLowerCase())return true;if(r.includes("*")){let s=r.toLowerCase().replace(/\./g,"\\.").replace(/\*/g,".*"),o=new RegExp(s);if(o.test(n)||o.test(e))return true}if(e.includes(r.toLowerCase().replace("*","")))return true}return false}function us(t,e){let n=[],r=e.split(`
23
+ `);for(let s of ls){s.pattern.lastIndex=0;for(let o=0;o<r.length;o++){let a=r[o],i;for(;(i=s.pattern.exec(a))!==null;)n.push({filePath:t,type:"secret_content",secretName:s.name,severity:s.severity,description:s.description,lineNumber:o+1,match:i[0].substring(0,20)+"..."});s.pattern.lastIndex=0;}}return n}async function ds(t){let e=[];if(Wn(t))return e.push({filePath:t,type:"sensitive_file",secretName:"Sensitive File",severity:"critical",description:`Sensitive file type detected: ${rt.basename(t)}`}),e;try{if(ie.statSync(t).size>1024*1024)return e;let r=ie.readFileSync(t,"utf-8"),s=us(t,r);e.push(...s);}catch{}return e}async function qn(t,e){let n=[];for(let i of e){let c=rt.join(t,i),l=await ds(c);for(let d of l)d.filePath=i,n.push(d);}let r=n.filter(i=>i.severity==="critical").length,s=n.filter(i=>i.severity==="high").length,o=n.filter(i=>i.severity==="medium").length,a=n.filter(i=>i.severity==="low").length;return {totalFiles:e.length,secretsFound:n.length,criticalCount:r,highCount:s,mediumCount:o,lowCount:a,results:n}}function Yn(t){let e=[],n=[];for(let r of t)Wn(r)?n.push(r):e.push(r);return {safe:e,blocked:n}}var hn=(t=>typeof be<"u"?be:typeof Proxy<"u"?new Proxy(t,{get:(e,n)=>(typeof be<"u"?be:e)[n]}):t)(function(t){if(typeof be<"u")return be.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')}),Xn=typeof process<"u"&&process.versions?.node,fs=Xn&&(Array.isArray(process.argv)&&process.argv.includes("--debug")||process.env.VEESTACK_DEBUG==="1"),yn=globalThis||{},vn=null;if(Xn)try{let t=function(){let b=d,L=0;for(;b!==i(b)&&L<10;){let N=a(b,"package.json");try{if(o(N)){let I=JSON.parse(s(N,"utf-8"));if(I.name==="vee_stack")return I}}catch{}b=i(b),L++;}return null};ps=t;let e=hn("fs"),n=hn("path"),r=hn("url"),{readFileSync:s,existsSync:o}=e,{join:a,dirname:i}=n,{fileURLToPath:c}=r,l=c(import.meta.url),d=i(l);vn=t();}catch{fs&&console.debug("[veestack:debug] Failed to load package.json dynamically, using defaults");}var ps,xe=vn?.versions||yn.VEESTACK_VERSIONS||{},ne=vn?.version||yn.VEESTACK_VERSION||yn.CLI_VERSION||"unknown",kn=`vs_cli_v${ne}`;xe.snapshot||"unknown";xe.engine_target||"unknown";xe.audit||"unknown";xe.session_payload||"unknown";xe.rules||"unknown";xe.analysis||"unknown";xe.api||"unknown";xe.min_node||"unknown";var f={};ts(f,{BRAND:()=>Hs,DIRTY:()=>De,EMPTY_PATH:()=>Es,INVALID:()=>h,NEVER:()=>Co,OK:()=>K,ParseStatus:()=>H,Schema:()=>w,ZodAny:()=>Ie,ZodArray:()=>_e,ZodBigInt:()=>Le,ZodBoolean:()=>$e,ZodBranded:()=>xt,ZodCatch:()=>Ze,ZodDate:()=>Ve,ZodDefault:()=>Ge,ZodDiscriminatedUnion:()=>Gt,ZodEffects:()=>oe,ZodEnum:()=>Je,ZodError:()=>Y,ZodFirstPartyTypeKind:()=>y,ZodFunction:()=>Wt,ZodIntersection:()=>Fe,ZodIssueCode:()=>u,ZodLazy:()=>ze,ZodLiteral:()=>He,ZodMap:()=>dt,ZodNaN:()=>pt,ZodNativeEnum:()=>Ke,ZodNever:()=>ae,ZodNull:()=>Me,ZodNullable:()=>pe,ZodNumber:()=>je,ZodObject:()=>X,ZodOptional:()=>re,ZodParsedType:()=>g,ZodPipeline:()=>Rt,ZodPromise:()=>Ne,ZodReadonly:()=>We,ZodRecord:()=>Zt,ZodSchema:()=>w,ZodSet:()=>ft,ZodString:()=>Ce,ZodSymbol:()=>lt,ZodTransformer:()=>oe,ZodTuple:()=>fe,ZodType:()=>w,ZodUndefined:()=>Ue,ZodUnion:()=>Be,ZodUnknown:()=>ke,ZodVoid:()=>ut,addIssueToContext:()=>p,any:()=>Qs,array:()=>ro,bigint:()=>Zs,boolean:()=>lr,coerce:()=>Ro,custom:()=>ir,date:()=>Ws,datetimeRegex:()=>sr,defaultErrorMap:()=>ye,discriminatedUnion:()=>ao,effect:()=>_o,enum:()=>yo,function:()=>go,getErrorMap:()=>it,getParsedType:()=>de,instanceof:()=>Ks,intersection:()=>co,isAborted:()=>Jt,isAsync:()=>at,isDirty:()=>Kt,isValid:()=>Re,late:()=>Js,lazy:()=>mo,literal:()=>ho,makeIssue:()=>bt,map:()=>fo,nan:()=>Gs,nativeEnum:()=>vo,never:()=>to,null:()=>Xs,nullable:()=>Eo,number:()=>cr,object:()=>so,objectUtil:()=>En,oboolean:()=>xo,onumber:()=>bo,optional:()=>wo,ostring:()=>Ao,pipeline:()=>To,preprocess:()=>So,promise:()=>ko,quotelessJson:()=>ks,record:()=>uo,set:()=>po,setErrorMap:()=>ws,strictObject:()=>oo,string:()=>ar,symbol:()=>qs,transformer:()=>_o,tuple:()=>lo,undefined:()=>Ys,union:()=>io,unknown:()=>eo,util:()=>S,void:()=>no});var S;(function(t){t.assertEqual=s=>{};function e(s){}t.assertIs=e;function n(s){throw new Error}t.assertNever=n,t.arrayToEnum=s=>{let o={};for(let a of s)o[a]=a;return o},t.getValidEnumValues=s=>{let o=t.objectKeys(s).filter(i=>typeof s[s[i]]!="number"),a={};for(let i of o)a[i]=s[i];return t.objectValues(a)},t.objectValues=s=>t.objectKeys(s).map(function(o){return s[o]}),t.objectKeys=typeof Object.keys=="function"?s=>Object.keys(s):s=>{let o=[];for(let a in s)Object.prototype.hasOwnProperty.call(s,a)&&o.push(a);return o},t.find=(s,o)=>{for(let a of s)if(o(a))return a},t.isInteger=typeof Number.isInteger=="function"?s=>Number.isInteger(s):s=>typeof s=="number"&&Number.isFinite(s)&&Math.floor(s)===s;function r(s,o=" | "){return s.map(a=>typeof a=="string"?`'${a}'`:a).join(o)}t.joinValues=r,t.jsonStringifyReplacer=(s,o)=>typeof o=="bigint"?o.toString():o;})(S||(S={}));var En;(function(t){t.mergeShapes=(e,n)=>({...e,...n});})(En||(En={}));var g=S.arrayToEnum(["string","nan","number","integer","float","boolean","date","bigint","symbol","function","undefined","null","array","object","unknown","promise","void","never","map","set"]),de=t=>{switch(typeof t){case "undefined":return g.undefined;case "string":return g.string;case "number":return Number.isNaN(t)?g.nan:g.number;case "boolean":return g.boolean;case "function":return g.function;case "bigint":return g.bigint;case "symbol":return g.symbol;case "object":return Array.isArray(t)?g.array:t===null?g.null:t.then&&typeof t.then=="function"&&t.catch&&typeof t.catch=="function"?g.promise:typeof Map<"u"&&t instanceof Map?g.map:typeof Set<"u"&&t instanceof Set?g.set:typeof Date<"u"&&t instanceof Date?g.date:g.object;default:return g.unknown}};var u=S.arrayToEnum(["invalid_type","invalid_literal","custom","invalid_union","invalid_union_discriminator","invalid_enum_value","unrecognized_keys","invalid_arguments","invalid_return_type","invalid_date","invalid_string","too_small","too_big","invalid_intersection_types","not_multiple_of","not_finite"]),ks=t=>JSON.stringify(t,null,2).replace(/"([^"]+)":/g,"$1:"),Y=class t extends Error{get errors(){return this.issues}constructor(e){super(),this.issues=[],this.addIssue=r=>{this.issues=[...this.issues,r];},this.addIssues=(r=[])=>{this.issues=[...this.issues,...r];};let n=new.target.prototype;Object.setPrototypeOf?Object.setPrototypeOf(this,n):this.__proto__=n,this.name="ZodError",this.issues=e;}format(e){let n=e||function(o){return o.message},r={_errors:[]},s=o=>{for(let a of o.issues)if(a.code==="invalid_union")a.unionErrors.map(s);else if(a.code==="invalid_return_type")s(a.returnTypeError);else if(a.code==="invalid_arguments")s(a.argumentsError);else if(a.path.length===0)r._errors.push(n(a));else {let i=r,c=0;for(;c<a.path.length;){let l=a.path[c];c===a.path.length-1?(i[l]=i[l]||{_errors:[]},i[l]._errors.push(n(a))):i[l]=i[l]||{_errors:[]},i=i[l],c++;}}};return s(this),r}static assert(e){if(!(e instanceof t))throw new Error(`Not a ZodError: ${e}`)}toString(){return this.message}get message(){return JSON.stringify(this.issues,S.jsonStringifyReplacer,2)}get isEmpty(){return this.issues.length===0}flatten(e=n=>n.message){let n={},r=[];for(let s of this.issues)if(s.path.length>0){let o=s.path[0];n[o]=n[o]||[],n[o].push(e(s));}else r.push(e(s));return {formErrors:r,fieldErrors:n}}get formErrors(){return this.flatten()}};Y.create=t=>new Y(t);var _s=(t,e)=>{let n;switch(t.code){case u.invalid_type:t.received===g.undefined?n="Required":n=`Expected ${t.expected}, received ${t.received}`;break;case u.invalid_literal:n=`Invalid literal value, expected ${JSON.stringify(t.expected,S.jsonStringifyReplacer)}`;break;case u.unrecognized_keys:n=`Unrecognized key(s) in object: ${S.joinValues(t.keys,", ")}`;break;case u.invalid_union:n="Invalid input";break;case u.invalid_union_discriminator:n=`Invalid discriminator value. Expected ${S.joinValues(t.options)}`;break;case u.invalid_enum_value:n=`Invalid enum value. Expected ${S.joinValues(t.options)}, received '${t.received}'`;break;case u.invalid_arguments:n="Invalid function arguments";break;case u.invalid_return_type:n="Invalid function return type";break;case u.invalid_date:n="Invalid date";break;case u.invalid_string:typeof t.validation=="object"?"includes"in t.validation?(n=`Invalid input: must include "${t.validation.includes}"`,typeof t.validation.position=="number"&&(n=`${n} at one or more positions greater than or equal to ${t.validation.position}`)):"startsWith"in t.validation?n=`Invalid input: must start with "${t.validation.startsWith}"`:"endsWith"in t.validation?n=`Invalid input: must end with "${t.validation.endsWith}"`:S.assertNever(t.validation):t.validation!=="regex"?n=`Invalid ${t.validation}`:n="Invalid";break;case u.too_small:t.type==="array"?n=`Array must contain ${t.exact?"exactly":t.inclusive?"at least":"more than"} ${t.minimum} element(s)`:t.type==="string"?n=`String must contain ${t.exact?"exactly":t.inclusive?"at least":"over"} ${t.minimum} character(s)`:t.type==="number"?n=`Number must be ${t.exact?"exactly equal to ":t.inclusive?"greater than or equal to ":"greater than "}${t.minimum}`:t.type==="bigint"?n=`Number must be ${t.exact?"exactly equal to ":t.inclusive?"greater than or equal to ":"greater than "}${t.minimum}`:t.type==="date"?n=`Date must be ${t.exact?"exactly equal to ":t.inclusive?"greater than or equal to ":"greater than "}${new Date(Number(t.minimum))}`:n="Invalid input";break;case u.too_big:t.type==="array"?n=`Array must contain ${t.exact?"exactly":t.inclusive?"at most":"less than"} ${t.maximum} element(s)`:t.type==="string"?n=`String must contain ${t.exact?"exactly":t.inclusive?"at most":"under"} ${t.maximum} character(s)`:t.type==="number"?n=`Number must be ${t.exact?"exactly":t.inclusive?"less than or equal to":"less than"} ${t.maximum}`:t.type==="bigint"?n=`BigInt must be ${t.exact?"exactly":t.inclusive?"less than or equal to":"less than"} ${t.maximum}`:t.type==="date"?n=`Date must be ${t.exact?"exactly":t.inclusive?"smaller than or equal to":"smaller than"} ${new Date(Number(t.maximum))}`:n="Invalid input";break;case u.custom:n="Invalid input";break;case u.invalid_intersection_types:n="Intersection results could not be merged";break;case u.not_multiple_of:n=`Number must be a multiple of ${t.multipleOf}`;break;case u.not_finite:n="Number must be finite";break;default:n=e.defaultError,S.assertNever(t);}return {message:n}},ye=_s;var Qn=ye;function ws(t){Qn=t;}function it(){return Qn}var bt=t=>{let{data:e,path:n,errorMaps:r,issueData:s}=t,o=[...n,...s.path||[]],a={...s,path:o};if(s.message!==void 0)return {...s,path:o,message:s.message};let i="",c=r.filter(l=>!!l).slice().reverse();for(let l of c)i=l(a,{data:e,defaultError:i}).message;return {...s,path:o,message:i}},Es=[];function p(t,e){let n=it(),r=bt({issueData:e,data:t.data,path:t.path,errorMaps:[t.common.contextualErrorMap,t.schemaErrorMap,n,n===ye?void 0:ye].filter(s=>!!s)});t.common.issues.push(r);}var H=class t{constructor(){this.value="valid";}dirty(){this.value==="valid"&&(this.value="dirty");}abort(){this.value!=="aborted"&&(this.value="aborted");}static mergeArray(e,n){let r=[];for(let s of n){if(s.status==="aborted")return h;s.status==="dirty"&&e.dirty(),r.push(s.value);}return {status:e.value,value:r}}static async mergeObjectAsync(e,n){let r=[];for(let s of n){let o=await s.key,a=await s.value;r.push({key:o,value:a});}return t.mergeObjectSync(e,r)}static mergeObjectSync(e,n){let r={};for(let s of n){let{key:o,value:a}=s;if(o.status==="aborted"||a.status==="aborted")return h;o.status==="dirty"&&e.dirty(),a.status==="dirty"&&e.dirty(),o.value!=="__proto__"&&(typeof a.value<"u"||s.alwaysSet)&&(r[o.value]=a.value);}return {status:e.value,value:r}}},h=Object.freeze({status:"aborted"}),De=t=>({status:"dirty",value:t}),K=t=>({status:"valid",value:t}),Jt=t=>t.status==="aborted",Kt=t=>t.status==="dirty",Re=t=>t.status==="valid",at=t=>typeof Promise<"u"&&t instanceof Promise;var m;(function(t){t.errToObj=e=>typeof e=="string"?{message:e}:e||{},t.toString=e=>typeof e=="string"?e:e?.message;})(m||(m={}));var se=class{constructor(e,n,r,s){this._cachedPath=[],this.parent=e,this.data=n,this._path=r,this._key=s;}get path(){return this._cachedPath.length||(Array.isArray(this._key)?this._cachedPath.push(...this._path,...this._key):this._cachedPath.push(...this._path,this._key)),this._cachedPath}},er=(t,e)=>{if(Re(e))return {success:true,data:e.value};if(!t.common.issues.length)throw new Error("Validation failed but no issues detected.");return {success:false,get error(){if(this._error)return this._error;let n=new Y(t.common.issues);return this._error=n,this._error}}};function _(t){if(!t)return {};let{errorMap:e,invalid_type_error:n,required_error:r,description:s}=t;if(e&&(n||r))throw new Error(`Can't use "invalid_type_error" or "required_error" in conjunction with custom error map.`);return e?{errorMap:e,description:s}:{errorMap:(a,i)=>{let{message:c}=t;return a.code==="invalid_enum_value"?{message:c??i.defaultError}:typeof i.data>"u"?{message:c??r??i.defaultError}:a.code!=="invalid_type"?{message:i.defaultError}:{message:c??n??i.defaultError}},description:s}}var w=class{get description(){return this._def.description}_getType(e){return de(e.data)}_getOrReturnCtx(e,n){return n||{common:e.parent.common,data:e.data,parsedType:de(e.data),schemaErrorMap:this._def.errorMap,path:e.path,parent:e.parent}}_processInputParams(e){return {status:new H,ctx:{common:e.parent.common,data:e.data,parsedType:de(e.data),schemaErrorMap:this._def.errorMap,path:e.path,parent:e.parent}}}_parseSync(e){let n=this._parse(e);if(at(n))throw new Error("Synchronous parse encountered promise.");return n}_parseAsync(e){let n=this._parse(e);return Promise.resolve(n)}parse(e,n){let r=this.safeParse(e,n);if(r.success)return r.data;throw r.error}safeParse(e,n){let r={common:{issues:[],async:n?.async??false,contextualErrorMap:n?.errorMap},path:n?.path||[],schemaErrorMap:this._def.errorMap,parent:null,data:e,parsedType:de(e)},s=this._parseSync({data:e,path:r.path,parent:r});return er(r,s)}"~validate"(e){let n={common:{issues:[],async:!!this["~standard"].async},path:[],schemaErrorMap:this._def.errorMap,parent:null,data:e,parsedType:de(e)};if(!this["~standard"].async)try{let r=this._parseSync({data:e,path:[],parent:n});return Re(r)?{value:r.value}:{issues:n.common.issues}}catch(r){r?.message?.toLowerCase()?.includes("encountered")&&(this["~standard"].async=true),n.common={issues:[],async:true};}return this._parseAsync({data:e,path:[],parent:n}).then(r=>Re(r)?{value:r.value}:{issues:n.common.issues})}async parseAsync(e,n){let r=await this.safeParseAsync(e,n);if(r.success)return r.data;throw r.error}async safeParseAsync(e,n){let r={common:{issues:[],contextualErrorMap:n?.errorMap,async:true},path:n?.path||[],schemaErrorMap:this._def.errorMap,parent:null,data:e,parsedType:de(e)},s=this._parse({data:e,path:r.path,parent:r}),o=await(at(s)?s:Promise.resolve(s));return er(r,o)}refine(e,n){let r=s=>typeof n=="string"||typeof n>"u"?{message:n}:typeof n=="function"?n(s):n;return this._refinement((s,o)=>{let a=e(s),i=()=>o.addIssue({code:u.custom,...r(s)});return typeof Promise<"u"&&a instanceof Promise?a.then(c=>c?true:(i(),false)):a?true:(i(),false)})}refinement(e,n){return this._refinement((r,s)=>e(r)?true:(s.addIssue(typeof n=="function"?n(r,s):n),false))}_refinement(e){return new oe({schema:this,typeName:y.ZodEffects,effect:{type:"refinement",refinement:e}})}superRefine(e){return this._refinement(e)}constructor(e){this.spa=this.safeParseAsync,this._def=e,this.parse=this.parse.bind(this),this.safeParse=this.safeParse.bind(this),this.parseAsync=this.parseAsync.bind(this),this.safeParseAsync=this.safeParseAsync.bind(this),this.spa=this.spa.bind(this),this.refine=this.refine.bind(this),this.refinement=this.refinement.bind(this),this.superRefine=this.superRefine.bind(this),this.optional=this.optional.bind(this),this.nullable=this.nullable.bind(this),this.nullish=this.nullish.bind(this),this.array=this.array.bind(this),this.promise=this.promise.bind(this),this.or=this.or.bind(this),this.and=this.and.bind(this),this.transform=this.transform.bind(this),this.brand=this.brand.bind(this),this.default=this.default.bind(this),this.catch=this.catch.bind(this),this.describe=this.describe.bind(this),this.pipe=this.pipe.bind(this),this.readonly=this.readonly.bind(this),this.isNullable=this.isNullable.bind(this),this.isOptional=this.isOptional.bind(this),this["~standard"]={version:1,vendor:"zod",validate:n=>this["~validate"](n)};}optional(){return re.create(this,this._def)}nullable(){return pe.create(this,this._def)}nullish(){return this.nullable().optional()}array(){return _e.create(this)}promise(){return Ne.create(this,this._def)}or(e){return Be.create([this,e],this._def)}and(e){return Fe.create(this,e,this._def)}transform(e){return new oe({..._(this._def),schema:this,typeName:y.ZodEffects,effect:{type:"transform",transform:e}})}default(e){let n=typeof e=="function"?e:()=>e;return new Ge({..._(this._def),innerType:this,defaultValue:n,typeName:y.ZodDefault})}brand(){return new xt({typeName:y.ZodBranded,type:this,..._(this._def)})}catch(e){let n=typeof e=="function"?e:()=>e;return new Ze({..._(this._def),innerType:this,catchValue:n,typeName:y.ZodCatch})}describe(e){let n=this.constructor;return new n({...this._def,description:e})}pipe(e){return Rt.create(this,e)}readonly(){return We.create(this)}isOptional(){return this.safeParse(void 0).success}isNullable(){return this.safeParse(null).success}},Ss=/^c[^\s-]{8,}$/i,Ts=/^[0-9a-z]+$/,As=/^[0-9A-HJKMNP-TV-Z]{26}$/i,bs=/^[0-9a-fA-F]{8}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{12}$/i,xs=/^[a-z0-9_-]{21}$/i,Rs=/^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/,Cs=/^[-+]?P(?!$)(?:(?:[-+]?\d+Y)|(?:[-+]?\d+[.,]\d+Y$))?(?:(?:[-+]?\d+M)|(?:[-+]?\d+[.,]\d+M$))?(?:(?:[-+]?\d+W)|(?:[-+]?\d+[.,]\d+W$))?(?:(?:[-+]?\d+D)|(?:[-+]?\d+[.,]\d+D$))?(?:T(?=[\d+-])(?:(?:[-+]?\d+H)|(?:[-+]?\d+[.,]\d+H$))?(?:(?:[-+]?\d+M)|(?:[-+]?\d+[.,]\d+M$))?(?:[-+]?\d+(?:[.,]\d+)?S)?)??$/,Is=/^(?!\.)(?!.*\.\.)([A-Z0-9_'+\-\.]*)[A-Z0-9_+-]@([A-Z0-9][A-Z0-9\-]*\.)+[A-Z]{2,}$/i,Ns="^(\\p{Extended_Pictographic}|\\p{Emoji_Component})+$",Sn,Os=/^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/,Ps=/^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/(3[0-2]|[12]?[0-9])$/,Ds=/^(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))$/,js=/^(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$/,Ls=/^([0-9a-zA-Z+/]{4})*(([0-9a-zA-Z+/]{2}==)|([0-9a-zA-Z+/]{3}=))?$/,$s=/^([0-9a-zA-Z-_]{4})*(([0-9a-zA-Z-_]{2}(==)?)|([0-9a-zA-Z-_]{3}(=)?))?$/,nr="((\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-((0[13578]|1[02])-(0[1-9]|[12]\\d|3[01])|(0[469]|11)-(0[1-9]|[12]\\d|30)|(02)-(0[1-9]|1\\d|2[0-8])))",Vs=new RegExp(`^${nr}$`);function rr(t){let e="[0-5]\\d";t.precision?e=`${e}\\.\\d{${t.precision}}`:t.precision==null&&(e=`${e}(\\.\\d+)?`);let n=t.precision?"+":"?";return `([01]\\d|2[0-3]):[0-5]\\d(:${e})${n}`}function Us(t){return new RegExp(`^${rr(t)}$`)}function sr(t){let e=`${nr}T${rr(t)}`,n=[];return n.push(t.local?"Z?":"Z"),t.offset&&n.push("([+-]\\d{2}:?\\d{2})"),e=`${e}(${n.join("|")})`,new RegExp(`^${e}$`)}function Ms(t,e){return !!((e==="v4"||!e)&&Os.test(t)||(e==="v6"||!e)&&Ds.test(t))}function Bs(t,e){if(!Rs.test(t))return false;try{let[n]=t.split(".");if(!n)return !1;let r=n.replace(/-/g,"+").replace(/_/g,"/").padEnd(n.length+(4-n.length%4)%4,"="),s=JSON.parse(atob(r));return !(typeof s!="object"||s===null||"typ"in s&&s?.typ!=="JWT"||!s.alg||e&&s.alg!==e)}catch{return false}}function Fs(t,e){return !!((e==="v4"||!e)&&Ps.test(t)||(e==="v6"||!e)&&js.test(t))}var Ce=class t extends w{_parse(e){if(this._def.coerce&&(e.data=String(e.data)),this._getType(e)!==g.string){let o=this._getOrReturnCtx(e);return p(o,{code:u.invalid_type,expected:g.string,received:o.parsedType}),h}let r=new H,s;for(let o of this._def.checks)if(o.kind==="min")e.data.length<o.value&&(s=this._getOrReturnCtx(e,s),p(s,{code:u.too_small,minimum:o.value,type:"string",inclusive:true,exact:false,message:o.message}),r.dirty());else if(o.kind==="max")e.data.length>o.value&&(s=this._getOrReturnCtx(e,s),p(s,{code:u.too_big,maximum:o.value,type:"string",inclusive:true,exact:false,message:o.message}),r.dirty());else if(o.kind==="length"){let a=e.data.length>o.value,i=e.data.length<o.value;(a||i)&&(s=this._getOrReturnCtx(e,s),a?p(s,{code:u.too_big,maximum:o.value,type:"string",inclusive:true,exact:true,message:o.message}):i&&p(s,{code:u.too_small,minimum:o.value,type:"string",inclusive:true,exact:true,message:o.message}),r.dirty());}else if(o.kind==="email")Is.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"email",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="emoji")Sn||(Sn=new RegExp(Ns,"u")),Sn.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"emoji",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="uuid")bs.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"uuid",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="nanoid")xs.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"nanoid",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="cuid")Ss.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"cuid",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="cuid2")Ts.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"cuid2",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="ulid")As.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"ulid",code:u.invalid_string,message:o.message}),r.dirty());else if(o.kind==="url")try{new URL(e.data);}catch{s=this._getOrReturnCtx(e,s),p(s,{validation:"url",code:u.invalid_string,message:o.message}),r.dirty();}else o.kind==="regex"?(o.regex.lastIndex=0,o.regex.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"regex",code:u.invalid_string,message:o.message}),r.dirty())):o.kind==="trim"?e.data=e.data.trim():o.kind==="includes"?e.data.includes(o.value,o.position)||(s=this._getOrReturnCtx(e,s),p(s,{code:u.invalid_string,validation:{includes:o.value,position:o.position},message:o.message}),r.dirty()):o.kind==="toLowerCase"?e.data=e.data.toLowerCase():o.kind==="toUpperCase"?e.data=e.data.toUpperCase():o.kind==="startsWith"?e.data.startsWith(o.value)||(s=this._getOrReturnCtx(e,s),p(s,{code:u.invalid_string,validation:{startsWith:o.value},message:o.message}),r.dirty()):o.kind==="endsWith"?e.data.endsWith(o.value)||(s=this._getOrReturnCtx(e,s),p(s,{code:u.invalid_string,validation:{endsWith:o.value},message:o.message}),r.dirty()):o.kind==="datetime"?sr(o).test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{code:u.invalid_string,validation:"datetime",message:o.message}),r.dirty()):o.kind==="date"?Vs.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{code:u.invalid_string,validation:"date",message:o.message}),r.dirty()):o.kind==="time"?Us(o).test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{code:u.invalid_string,validation:"time",message:o.message}),r.dirty()):o.kind==="duration"?Cs.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"duration",code:u.invalid_string,message:o.message}),r.dirty()):o.kind==="ip"?Ms(e.data,o.version)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"ip",code:u.invalid_string,message:o.message}),r.dirty()):o.kind==="jwt"?Bs(e.data,o.alg)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"jwt",code:u.invalid_string,message:o.message}),r.dirty()):o.kind==="cidr"?Fs(e.data,o.version)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"cidr",code:u.invalid_string,message:o.message}),r.dirty()):o.kind==="base64"?Ls.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"base64",code:u.invalid_string,message:o.message}),r.dirty()):o.kind==="base64url"?$s.test(e.data)||(s=this._getOrReturnCtx(e,s),p(s,{validation:"base64url",code:u.invalid_string,message:o.message}),r.dirty()):S.assertNever(o);return {status:r.value,value:e.data}}_regex(e,n,r){return this.refinement(s=>e.test(s),{validation:n,code:u.invalid_string,...m.errToObj(r)})}_addCheck(e){return new t({...this._def,checks:[...this._def.checks,e]})}email(e){return this._addCheck({kind:"email",...m.errToObj(e)})}url(e){return this._addCheck({kind:"url",...m.errToObj(e)})}emoji(e){return this._addCheck({kind:"emoji",...m.errToObj(e)})}uuid(e){return this._addCheck({kind:"uuid",...m.errToObj(e)})}nanoid(e){return this._addCheck({kind:"nanoid",...m.errToObj(e)})}cuid(e){return this._addCheck({kind:"cuid",...m.errToObj(e)})}cuid2(e){return this._addCheck({kind:"cuid2",...m.errToObj(e)})}ulid(e){return this._addCheck({kind:"ulid",...m.errToObj(e)})}base64(e){return this._addCheck({kind:"base64",...m.errToObj(e)})}base64url(e){return this._addCheck({kind:"base64url",...m.errToObj(e)})}jwt(e){return this._addCheck({kind:"jwt",...m.errToObj(e)})}ip(e){return this._addCheck({kind:"ip",...m.errToObj(e)})}cidr(e){return this._addCheck({kind:"cidr",...m.errToObj(e)})}datetime(e){return typeof e=="string"?this._addCheck({kind:"datetime",precision:null,offset:false,local:false,message:e}):this._addCheck({kind:"datetime",precision:typeof e?.precision>"u"?null:e?.precision,offset:e?.offset??false,local:e?.local??false,...m.errToObj(e?.message)})}date(e){return this._addCheck({kind:"date",message:e})}time(e){return typeof e=="string"?this._addCheck({kind:"time",precision:null,message:e}):this._addCheck({kind:"time",precision:typeof e?.precision>"u"?null:e?.precision,...m.errToObj(e?.message)})}duration(e){return this._addCheck({kind:"duration",...m.errToObj(e)})}regex(e,n){return this._addCheck({kind:"regex",regex:e,...m.errToObj(n)})}includes(e,n){return this._addCheck({kind:"includes",value:e,position:n?.position,...m.errToObj(n?.message)})}startsWith(e,n){return this._addCheck({kind:"startsWith",value:e,...m.errToObj(n)})}endsWith(e,n){return this._addCheck({kind:"endsWith",value:e,...m.errToObj(n)})}min(e,n){return this._addCheck({kind:"min",value:e,...m.errToObj(n)})}max(e,n){return this._addCheck({kind:"max",value:e,...m.errToObj(n)})}length(e,n){return this._addCheck({kind:"length",value:e,...m.errToObj(n)})}nonempty(e){return this.min(1,m.errToObj(e))}trim(){return new t({...this._def,checks:[...this._def.checks,{kind:"trim"}]})}toLowerCase(){return new t({...this._def,checks:[...this._def.checks,{kind:"toLowerCase"}]})}toUpperCase(){return new t({...this._def,checks:[...this._def.checks,{kind:"toUpperCase"}]})}get isDatetime(){return !!this._def.checks.find(e=>e.kind==="datetime")}get isDate(){return !!this._def.checks.find(e=>e.kind==="date")}get isTime(){return !!this._def.checks.find(e=>e.kind==="time")}get isDuration(){return !!this._def.checks.find(e=>e.kind==="duration")}get isEmail(){return !!this._def.checks.find(e=>e.kind==="email")}get isURL(){return !!this._def.checks.find(e=>e.kind==="url")}get isEmoji(){return !!this._def.checks.find(e=>e.kind==="emoji")}get isUUID(){return !!this._def.checks.find(e=>e.kind==="uuid")}get isNANOID(){return !!this._def.checks.find(e=>e.kind==="nanoid")}get isCUID(){return !!this._def.checks.find(e=>e.kind==="cuid")}get isCUID2(){return !!this._def.checks.find(e=>e.kind==="cuid2")}get isULID(){return !!this._def.checks.find(e=>e.kind==="ulid")}get isIP(){return !!this._def.checks.find(e=>e.kind==="ip")}get isCIDR(){return !!this._def.checks.find(e=>e.kind==="cidr")}get isBase64(){return !!this._def.checks.find(e=>e.kind==="base64")}get isBase64url(){return !!this._def.checks.find(e=>e.kind==="base64url")}get minLength(){let e=null;for(let n of this._def.checks)n.kind==="min"&&(e===null||n.value>e)&&(e=n.value);return e}get maxLength(){let e=null;for(let n of this._def.checks)n.kind==="max"&&(e===null||n.value<e)&&(e=n.value);return e}};Ce.create=t=>new Ce({checks:[],typeName:y.ZodString,coerce:t?.coerce??false,..._(t)});function zs(t,e){let n=(t.toString().split(".")[1]||"").length,r=(e.toString().split(".")[1]||"").length,s=n>r?n:r,o=Number.parseInt(t.toFixed(s).replace(".","")),a=Number.parseInt(e.toFixed(s).replace(".",""));return o%a/10**s}var je=class t extends w{constructor(){super(...arguments),this.min=this.gte,this.max=this.lte,this.step=this.multipleOf;}_parse(e){if(this._def.coerce&&(e.data=Number(e.data)),this._getType(e)!==g.number){let o=this._getOrReturnCtx(e);return p(o,{code:u.invalid_type,expected:g.number,received:o.parsedType}),h}let r,s=new H;for(let o of this._def.checks)o.kind==="int"?S.isInteger(e.data)||(r=this._getOrReturnCtx(e,r),p(r,{code:u.invalid_type,expected:"integer",received:"float",message:o.message}),s.dirty()):o.kind==="min"?(o.inclusive?e.data<o.value:e.data<=o.value)&&(r=this._getOrReturnCtx(e,r),p(r,{code:u.too_small,minimum:o.value,type:"number",inclusive:o.inclusive,exact:false,message:o.message}),s.dirty()):o.kind==="max"?(o.inclusive?e.data>o.value:e.data>=o.value)&&(r=this._getOrReturnCtx(e,r),p(r,{code:u.too_big,maximum:o.value,type:"number",inclusive:o.inclusive,exact:false,message:o.message}),s.dirty()):o.kind==="multipleOf"?zs(e.data,o.value)!==0&&(r=this._getOrReturnCtx(e,r),p(r,{code:u.not_multiple_of,multipleOf:o.value,message:o.message}),s.dirty()):o.kind==="finite"?Number.isFinite(e.data)||(r=this._getOrReturnCtx(e,r),p(r,{code:u.not_finite,message:o.message}),s.dirty()):S.assertNever(o);return {status:s.value,value:e.data}}gte(e,n){return this.setLimit("min",e,true,m.toString(n))}gt(e,n){return this.setLimit("min",e,false,m.toString(n))}lte(e,n){return this.setLimit("max",e,true,m.toString(n))}lt(e,n){return this.setLimit("max",e,false,m.toString(n))}setLimit(e,n,r,s){return new t({...this._def,checks:[...this._def.checks,{kind:e,value:n,inclusive:r,message:m.toString(s)}]})}_addCheck(e){return new t({...this._def,checks:[...this._def.checks,e]})}int(e){return this._addCheck({kind:"int",message:m.toString(e)})}positive(e){return this._addCheck({kind:"min",value:0,inclusive:false,message:m.toString(e)})}negative(e){return this._addCheck({kind:"max",value:0,inclusive:false,message:m.toString(e)})}nonpositive(e){return this._addCheck({kind:"max",value:0,inclusive:true,message:m.toString(e)})}nonnegative(e){return this._addCheck({kind:"min",value:0,inclusive:true,message:m.toString(e)})}multipleOf(e,n){return this._addCheck({kind:"multipleOf",value:e,message:m.toString(n)})}finite(e){return this._addCheck({kind:"finite",message:m.toString(e)})}safe(e){return this._addCheck({kind:"min",inclusive:true,value:Number.MIN_SAFE_INTEGER,message:m.toString(e)})._addCheck({kind:"max",inclusive:true,value:Number.MAX_SAFE_INTEGER,message:m.toString(e)})}get minValue(){let e=null;for(let n of this._def.checks)n.kind==="min"&&(e===null||n.value>e)&&(e=n.value);return e}get maxValue(){let e=null;for(let n of this._def.checks)n.kind==="max"&&(e===null||n.value<e)&&(e=n.value);return e}get isInt(){return !!this._def.checks.find(e=>e.kind==="int"||e.kind==="multipleOf"&&S.isInteger(e.value))}get isFinite(){let e=null,n=null;for(let r of this._def.checks){if(r.kind==="finite"||r.kind==="int"||r.kind==="multipleOf")return true;r.kind==="min"?(n===null||r.value>n)&&(n=r.value):r.kind==="max"&&(e===null||r.value<e)&&(e=r.value);}return Number.isFinite(n)&&Number.isFinite(e)}};je.create=t=>new je({checks:[],typeName:y.ZodNumber,coerce:t?.coerce||false,..._(t)});var Le=class t extends w{constructor(){super(...arguments),this.min=this.gte,this.max=this.lte;}_parse(e){if(this._def.coerce)try{e.data=BigInt(e.data);}catch{return this._getInvalidInput(e)}if(this._getType(e)!==g.bigint)return this._getInvalidInput(e);let r,s=new H;for(let o of this._def.checks)o.kind==="min"?(o.inclusive?e.data<o.value:e.data<=o.value)&&(r=this._getOrReturnCtx(e,r),p(r,{code:u.too_small,type:"bigint",minimum:o.value,inclusive:o.inclusive,message:o.message}),s.dirty()):o.kind==="max"?(o.inclusive?e.data>o.value:e.data>=o.value)&&(r=this._getOrReturnCtx(e,r),p(r,{code:u.too_big,type:"bigint",maximum:o.value,inclusive:o.inclusive,message:o.message}),s.dirty()):o.kind==="multipleOf"?e.data%o.value!==BigInt(0)&&(r=this._getOrReturnCtx(e,r),p(r,{code:u.not_multiple_of,multipleOf:o.value,message:o.message}),s.dirty()):S.assertNever(o);return {status:s.value,value:e.data}}_getInvalidInput(e){let n=this._getOrReturnCtx(e);return p(n,{code:u.invalid_type,expected:g.bigint,received:n.parsedType}),h}gte(e,n){return this.setLimit("min",e,true,m.toString(n))}gt(e,n){return this.setLimit("min",e,false,m.toString(n))}lte(e,n){return this.setLimit("max",e,true,m.toString(n))}lt(e,n){return this.setLimit("max",e,false,m.toString(n))}setLimit(e,n,r,s){return new t({...this._def,checks:[...this._def.checks,{kind:e,value:n,inclusive:r,message:m.toString(s)}]})}_addCheck(e){return new t({...this._def,checks:[...this._def.checks,e]})}positive(e){return this._addCheck({kind:"min",value:BigInt(0),inclusive:false,message:m.toString(e)})}negative(e){return this._addCheck({kind:"max",value:BigInt(0),inclusive:false,message:m.toString(e)})}nonpositive(e){return this._addCheck({kind:"max",value:BigInt(0),inclusive:true,message:m.toString(e)})}nonnegative(e){return this._addCheck({kind:"min",value:BigInt(0),inclusive:true,message:m.toString(e)})}multipleOf(e,n){return this._addCheck({kind:"multipleOf",value:e,message:m.toString(n)})}get minValue(){let e=null;for(let n of this._def.checks)n.kind==="min"&&(e===null||n.value>e)&&(e=n.value);return e}get maxValue(){let e=null;for(let n of this._def.checks)n.kind==="max"&&(e===null||n.value<e)&&(e=n.value);return e}};Le.create=t=>new Le({checks:[],typeName:y.ZodBigInt,coerce:t?.coerce??false,..._(t)});var $e=class extends w{_parse(e){if(this._def.coerce&&(e.data=!!e.data),this._getType(e)!==g.boolean){let r=this._getOrReturnCtx(e);return p(r,{code:u.invalid_type,expected:g.boolean,received:r.parsedType}),h}return K(e.data)}};$e.create=t=>new $e({typeName:y.ZodBoolean,coerce:t?.coerce||false,..._(t)});var Ve=class t extends w{_parse(e){if(this._def.coerce&&(e.data=new Date(e.data)),this._getType(e)!==g.date){let o=this._getOrReturnCtx(e);return p(o,{code:u.invalid_type,expected:g.date,received:o.parsedType}),h}if(Number.isNaN(e.data.getTime())){let o=this._getOrReturnCtx(e);return p(o,{code:u.invalid_date}),h}let r=new H,s;for(let o of this._def.checks)o.kind==="min"?e.data.getTime()<o.value&&(s=this._getOrReturnCtx(e,s),p(s,{code:u.too_small,message:o.message,inclusive:true,exact:false,minimum:o.value,type:"date"}),r.dirty()):o.kind==="max"?e.data.getTime()>o.value&&(s=this._getOrReturnCtx(e,s),p(s,{code:u.too_big,message:o.message,inclusive:true,exact:false,maximum:o.value,type:"date"}),r.dirty()):S.assertNever(o);return {status:r.value,value:new Date(e.data.getTime())}}_addCheck(e){return new t({...this._def,checks:[...this._def.checks,e]})}min(e,n){return this._addCheck({kind:"min",value:e.getTime(),message:m.toString(n)})}max(e,n){return this._addCheck({kind:"max",value:e.getTime(),message:m.toString(n)})}get minDate(){let e=null;for(let n of this._def.checks)n.kind==="min"&&(e===null||n.value>e)&&(e=n.value);return e!=null?new Date(e):null}get maxDate(){let e=null;for(let n of this._def.checks)n.kind==="max"&&(e===null||n.value<e)&&(e=n.value);return e!=null?new Date(e):null}};Ve.create=t=>new Ve({checks:[],coerce:t?.coerce||false,typeName:y.ZodDate,..._(t)});var lt=class extends w{_parse(e){if(this._getType(e)!==g.symbol){let r=this._getOrReturnCtx(e);return p(r,{code:u.invalid_type,expected:g.symbol,received:r.parsedType}),h}return K(e.data)}};lt.create=t=>new lt({typeName:y.ZodSymbol,..._(t)});var Ue=class extends w{_parse(e){if(this._getType(e)!==g.undefined){let r=this._getOrReturnCtx(e);return p(r,{code:u.invalid_type,expected:g.undefined,received:r.parsedType}),h}return K(e.data)}};Ue.create=t=>new Ue({typeName:y.ZodUndefined,..._(t)});var Me=class extends w{_parse(e){if(this._getType(e)!==g.null){let r=this._getOrReturnCtx(e);return p(r,{code:u.invalid_type,expected:g.null,received:r.parsedType}),h}return K(e.data)}};Me.create=t=>new Me({typeName:y.ZodNull,..._(t)});var Ie=class extends w{constructor(){super(...arguments),this._any=true;}_parse(e){return K(e.data)}};Ie.create=t=>new Ie({typeName:y.ZodAny,..._(t)});var ke=class extends w{constructor(){super(...arguments),this._unknown=true;}_parse(e){return K(e.data)}};ke.create=t=>new ke({typeName:y.ZodUnknown,..._(t)});var ae=class extends w{_parse(e){let n=this._getOrReturnCtx(e);return p(n,{code:u.invalid_type,expected:g.never,received:n.parsedType}),h}};ae.create=t=>new ae({typeName:y.ZodNever,..._(t)});var ut=class extends w{_parse(e){if(this._getType(e)!==g.undefined){let r=this._getOrReturnCtx(e);return p(r,{code:u.invalid_type,expected:g.void,received:r.parsedType}),h}return K(e.data)}};ut.create=t=>new ut({typeName:y.ZodVoid,..._(t)});var _e=class t extends w{_parse(e){let{ctx:n,status:r}=this._processInputParams(e),s=this._def;if(n.parsedType!==g.array)return p(n,{code:u.invalid_type,expected:g.array,received:n.parsedType}),h;if(s.exactLength!==null){let a=n.data.length>s.exactLength.value,i=n.data.length<s.exactLength.value;(a||i)&&(p(n,{code:a?u.too_big:u.too_small,minimum:i?s.exactLength.value:void 0,maximum:a?s.exactLength.value:void 0,type:"array",inclusive:true,exact:true,message:s.exactLength.message}),r.dirty());}if(s.minLength!==null&&n.data.length<s.minLength.value&&(p(n,{code:u.too_small,minimum:s.minLength.value,type:"array",inclusive:true,exact:false,message:s.minLength.message}),r.dirty()),s.maxLength!==null&&n.data.length>s.maxLength.value&&(p(n,{code:u.too_big,maximum:s.maxLength.value,type:"array",inclusive:true,exact:false,message:s.maxLength.message}),r.dirty()),n.common.async)return Promise.all([...n.data].map((a,i)=>s.type._parseAsync(new se(n,a,n.path,i)))).then(a=>H.mergeArray(r,a));let o=[...n.data].map((a,i)=>s.type._parseSync(new se(n,a,n.path,i)));return H.mergeArray(r,o)}get element(){return this._def.type}min(e,n){return new t({...this._def,minLength:{value:e,message:m.toString(n)}})}max(e,n){return new t({...this._def,maxLength:{value:e,message:m.toString(n)}})}length(e,n){return new t({...this._def,exactLength:{value:e,message:m.toString(n)}})}nonempty(e){return this.min(1,e)}};_e.create=(t,e)=>new _e({type:t,minLength:null,maxLength:null,exactLength:null,typeName:y.ZodArray,..._(e)});function ct(t){if(t instanceof X){let e={};for(let n in t.shape){let r=t.shape[n];e[n]=re.create(ct(r));}return new X({...t._def,shape:()=>e})}else return t instanceof _e?new _e({...t._def,type:ct(t.element)}):t instanceof re?re.create(ct(t.unwrap())):t instanceof pe?pe.create(ct(t.unwrap())):t instanceof fe?fe.create(t.items.map(e=>ct(e))):t}var X=class t extends w{constructor(){super(...arguments),this._cached=null,this.nonstrict=this.passthrough,this.augment=this.extend;}_getCached(){if(this._cached!==null)return this._cached;let e=this._def.shape(),n=S.objectKeys(e);return this._cached={shape:e,keys:n},this._cached}_parse(e){if(this._getType(e)!==g.object){let l=this._getOrReturnCtx(e);return p(l,{code:u.invalid_type,expected:g.object,received:l.parsedType}),h}let{status:r,ctx:s}=this._processInputParams(e),{shape:o,keys:a}=this._getCached(),i=[];if(!(this._def.catchall instanceof ae&&this._def.unknownKeys==="strip"))for(let l in s.data)a.includes(l)||i.push(l);let c=[];for(let l of a){let d=o[l],b=s.data[l];c.push({key:{status:"valid",value:l},value:d._parse(new se(s,b,s.path,l)),alwaysSet:l in s.data});}if(this._def.catchall instanceof ae){let l=this._def.unknownKeys;if(l==="passthrough")for(let d of i)c.push({key:{status:"valid",value:d},value:{status:"valid",value:s.data[d]}});else if(l==="strict")i.length>0&&(p(s,{code:u.unrecognized_keys,keys:i}),r.dirty());else if(l!=="strip")throw new Error("Internal ZodObject error: invalid unknownKeys value.")}else {let l=this._def.catchall;for(let d of i){let b=s.data[d];c.push({key:{status:"valid",value:d},value:l._parse(new se(s,b,s.path,d)),alwaysSet:d in s.data});}}return s.common.async?Promise.resolve().then(async()=>{let l=[];for(let d of c){let b=await d.key,L=await d.value;l.push({key:b,value:L,alwaysSet:d.alwaysSet});}return l}).then(l=>H.mergeObjectSync(r,l)):H.mergeObjectSync(r,c)}get shape(){return this._def.shape()}strict(e){return m.errToObj,new t({...this._def,unknownKeys:"strict",...e!==void 0?{errorMap:(n,r)=>{let s=this._def.errorMap?.(n,r).message??r.defaultError;return n.code==="unrecognized_keys"?{message:m.errToObj(e).message??s}:{message:s}}}:{}})}strip(){return new t({...this._def,unknownKeys:"strip"})}passthrough(){return new t({...this._def,unknownKeys:"passthrough"})}extend(e){return new t({...this._def,shape:()=>({...this._def.shape(),...e})})}merge(e){return new t({unknownKeys:e._def.unknownKeys,catchall:e._def.catchall,shape:()=>({...this._def.shape(),...e._def.shape()}),typeName:y.ZodObject})}setKey(e,n){return this.augment({[e]:n})}catchall(e){return new t({...this._def,catchall:e})}pick(e){let n={};for(let r of S.objectKeys(e))e[r]&&this.shape[r]&&(n[r]=this.shape[r]);return new t({...this._def,shape:()=>n})}omit(e){let n={};for(let r of S.objectKeys(this.shape))e[r]||(n[r]=this.shape[r]);return new t({...this._def,shape:()=>n})}deepPartial(){return ct(this)}partial(e){let n={};for(let r of S.objectKeys(this.shape)){let s=this.shape[r];e&&!e[r]?n[r]=s:n[r]=s.optional();}return new t({...this._def,shape:()=>n})}required(e){let n={};for(let r of S.objectKeys(this.shape))if(e&&!e[r])n[r]=this.shape[r];else {let o=this.shape[r];for(;o instanceof re;)o=o._def.innerType;n[r]=o;}return new t({...this._def,shape:()=>n})}keyof(){return or(S.objectKeys(this.shape))}};X.create=(t,e)=>new X({shape:()=>t,unknownKeys:"strip",catchall:ae.create(),typeName:y.ZodObject,..._(e)});X.strictCreate=(t,e)=>new X({shape:()=>t,unknownKeys:"strict",catchall:ae.create(),typeName:y.ZodObject,..._(e)});X.lazycreate=(t,e)=>new X({shape:t,unknownKeys:"strip",catchall:ae.create(),typeName:y.ZodObject,..._(e)});var Be=class extends w{_parse(e){let{ctx:n}=this._processInputParams(e),r=this._def.options;function s(o){for(let i of o)if(i.result.status==="valid")return i.result;for(let i of o)if(i.result.status==="dirty")return n.common.issues.push(...i.ctx.common.issues),i.result;let a=o.map(i=>new Y(i.ctx.common.issues));return p(n,{code:u.invalid_union,unionErrors:a}),h}if(n.common.async)return Promise.all(r.map(async o=>{let a={...n,common:{...n.common,issues:[]},parent:null};return {result:await o._parseAsync({data:n.data,path:n.path,parent:a}),ctx:a}})).then(s);{let o,a=[];for(let c of r){let l={...n,common:{...n.common,issues:[]},parent:null},d=c._parseSync({data:n.data,path:n.path,parent:l});if(d.status==="valid")return d;d.status==="dirty"&&!o&&(o={result:d,ctx:l}),l.common.issues.length&&a.push(l.common.issues);}if(o)return n.common.issues.push(...o.ctx.common.issues),o.result;let i=a.map(c=>new Y(c));return p(n,{code:u.invalid_union,unionErrors:i}),h}}get options(){return this._def.options}};Be.create=(t,e)=>new Be({options:t,typeName:y.ZodUnion,..._(e)});var ve=t=>t instanceof ze?ve(t.schema):t instanceof oe?ve(t.innerType()):t instanceof He?[t.value]:t instanceof Je?t.options:t instanceof Ke?S.objectValues(t.enum):t instanceof Ge?ve(t._def.innerType):t instanceof Ue?[void 0]:t instanceof Me?[null]:t instanceof re?[void 0,...ve(t.unwrap())]:t instanceof pe?[null,...ve(t.unwrap())]:t instanceof xt||t instanceof We?ve(t.unwrap()):t instanceof Ze?ve(t._def.innerType):[],Gt=class t extends w{_parse(e){let{ctx:n}=this._processInputParams(e);if(n.parsedType!==g.object)return p(n,{code:u.invalid_type,expected:g.object,received:n.parsedType}),h;let r=this.discriminator,s=n.data[r],o=this.optionsMap.get(s);return o?n.common.async?o._parseAsync({data:n.data,path:n.path,parent:n}):o._parseSync({data:n.data,path:n.path,parent:n}):(p(n,{code:u.invalid_union_discriminator,options:Array.from(this.optionsMap.keys()),path:[r]}),h)}get discriminator(){return this._def.discriminator}get options(){return this._def.options}get optionsMap(){return this._def.optionsMap}static create(e,n,r){let s=new Map;for(let o of n){let a=ve(o.shape[e]);if(!a.length)throw new Error(`A discriminator value for key \`${e}\` could not be extracted from all schema options`);for(let i of a){if(s.has(i))throw new Error(`Discriminator property ${String(e)} has duplicate value ${String(i)}`);s.set(i,o);}}return new t({typeName:y.ZodDiscriminatedUnion,discriminator:e,options:n,optionsMap:s,..._(r)})}};function Tn(t,e){let n=de(t),r=de(e);if(t===e)return {valid:true,data:t};if(n===g.object&&r===g.object){let s=S.objectKeys(e),o=S.objectKeys(t).filter(i=>s.indexOf(i)!==-1),a={...t,...e};for(let i of o){let c=Tn(t[i],e[i]);if(!c.valid)return {valid:false};a[i]=c.data;}return {valid:true,data:a}}else if(n===g.array&&r===g.array){if(t.length!==e.length)return {valid:false};let s=[];for(let o=0;o<t.length;o++){let a=t[o],i=e[o],c=Tn(a,i);if(!c.valid)return {valid:false};s.push(c.data);}return {valid:true,data:s}}else return n===g.date&&r===g.date&&+t==+e?{valid:true,data:t}:{valid:false}}var Fe=class extends w{_parse(e){let{status:n,ctx:r}=this._processInputParams(e),s=(o,a)=>{if(Jt(o)||Jt(a))return h;let i=Tn(o.value,a.value);return i.valid?((Kt(o)||Kt(a))&&n.dirty(),{status:n.value,value:i.data}):(p(r,{code:u.invalid_intersection_types}),h)};return r.common.async?Promise.all([this._def.left._parseAsync({data:r.data,path:r.path,parent:r}),this._def.right._parseAsync({data:r.data,path:r.path,parent:r})]).then(([o,a])=>s(o,a)):s(this._def.left._parseSync({data:r.data,path:r.path,parent:r}),this._def.right._parseSync({data:r.data,path:r.path,parent:r}))}};Fe.create=(t,e,n)=>new Fe({left:t,right:e,typeName:y.ZodIntersection,..._(n)});var fe=class t extends w{_parse(e){let{status:n,ctx:r}=this._processInputParams(e);if(r.parsedType!==g.array)return p(r,{code:u.invalid_type,expected:g.array,received:r.parsedType}),h;if(r.data.length<this._def.items.length)return p(r,{code:u.too_small,minimum:this._def.items.length,inclusive:true,exact:false,type:"array"}),h;!this._def.rest&&r.data.length>this._def.items.length&&(p(r,{code:u.too_big,maximum:this._def.items.length,inclusive:true,exact:false,type:"array"}),n.dirty());let o=[...r.data].map((a,i)=>{let c=this._def.items[i]||this._def.rest;return c?c._parse(new se(r,a,r.path,i)):null}).filter(a=>!!a);return r.common.async?Promise.all(o).then(a=>H.mergeArray(n,a)):H.mergeArray(n,o)}get items(){return this._def.items}rest(e){return new t({...this._def,rest:e})}};fe.create=(t,e)=>{if(!Array.isArray(t))throw new Error("You must pass an array of schemas to z.tuple([ ... ])");return new fe({items:t,typeName:y.ZodTuple,rest:null,..._(e)})};var Zt=class t extends w{get keySchema(){return this._def.keyType}get valueSchema(){return this._def.valueType}_parse(e){let{status:n,ctx:r}=this._processInputParams(e);if(r.parsedType!==g.object)return p(r,{code:u.invalid_type,expected:g.object,received:r.parsedType}),h;let s=[],o=this._def.keyType,a=this._def.valueType;for(let i in r.data)s.push({key:o._parse(new se(r,i,r.path,i)),value:a._parse(new se(r,r.data[i],r.path,i)),alwaysSet:i in r.data});return r.common.async?H.mergeObjectAsync(n,s):H.mergeObjectSync(n,s)}get element(){return this._def.valueType}static create(e,n,r){return n instanceof w?new t({keyType:e,valueType:n,typeName:y.ZodRecord,..._(r)}):new t({keyType:Ce.create(),valueType:e,typeName:y.ZodRecord,..._(n)})}},dt=class extends w{get keySchema(){return this._def.keyType}get valueSchema(){return this._def.valueType}_parse(e){let{status:n,ctx:r}=this._processInputParams(e);if(r.parsedType!==g.map)return p(r,{code:u.invalid_type,expected:g.map,received:r.parsedType}),h;let s=this._def.keyType,o=this._def.valueType,a=[...r.data.entries()].map(([i,c],l)=>({key:s._parse(new se(r,i,r.path,[l,"key"])),value:o._parse(new se(r,c,r.path,[l,"value"]))}));if(r.common.async){let i=new Map;return Promise.resolve().then(async()=>{for(let c of a){let l=await c.key,d=await c.value;if(l.status==="aborted"||d.status==="aborted")return h;(l.status==="dirty"||d.status==="dirty")&&n.dirty(),i.set(l.value,d.value);}return {status:n.value,value:i}})}else {let i=new Map;for(let c of a){let l=c.key,d=c.value;if(l.status==="aborted"||d.status==="aborted")return h;(l.status==="dirty"||d.status==="dirty")&&n.dirty(),i.set(l.value,d.value);}return {status:n.value,value:i}}}};dt.create=(t,e,n)=>new dt({valueType:e,keyType:t,typeName:y.ZodMap,..._(n)});var ft=class t extends w{_parse(e){let{status:n,ctx:r}=this._processInputParams(e);if(r.parsedType!==g.set)return p(r,{code:u.invalid_type,expected:g.set,received:r.parsedType}),h;let s=this._def;s.minSize!==null&&r.data.size<s.minSize.value&&(p(r,{code:u.too_small,minimum:s.minSize.value,type:"set",inclusive:true,exact:false,message:s.minSize.message}),n.dirty()),s.maxSize!==null&&r.data.size>s.maxSize.value&&(p(r,{code:u.too_big,maximum:s.maxSize.value,type:"set",inclusive:true,exact:false,message:s.maxSize.message}),n.dirty());let o=this._def.valueType;function a(c){let l=new Set;for(let d of c){if(d.status==="aborted")return h;d.status==="dirty"&&n.dirty(),l.add(d.value);}return {status:n.value,value:l}}let i=[...r.data.values()].map((c,l)=>o._parse(new se(r,c,r.path,l)));return r.common.async?Promise.all(i).then(c=>a(c)):a(i)}min(e,n){return new t({...this._def,minSize:{value:e,message:m.toString(n)}})}max(e,n){return new t({...this._def,maxSize:{value:e,message:m.toString(n)}})}size(e,n){return this.min(e,n).max(e,n)}nonempty(e){return this.min(1,e)}};ft.create=(t,e)=>new ft({valueType:t,minSize:null,maxSize:null,typeName:y.ZodSet,..._(e)});var Wt=class t extends w{constructor(){super(...arguments),this.validate=this.implement;}_parse(e){let{ctx:n}=this._processInputParams(e);if(n.parsedType!==g.function)return p(n,{code:u.invalid_type,expected:g.function,received:n.parsedType}),h;function r(i,c){return bt({data:i,path:n.path,errorMaps:[n.common.contextualErrorMap,n.schemaErrorMap,it(),ye].filter(l=>!!l),issueData:{code:u.invalid_arguments,argumentsError:c}})}function s(i,c){return bt({data:i,path:n.path,errorMaps:[n.common.contextualErrorMap,n.schemaErrorMap,it(),ye].filter(l=>!!l),issueData:{code:u.invalid_return_type,returnTypeError:c}})}let o={errorMap:n.common.contextualErrorMap},a=n.data;if(this._def.returns instanceof Ne){let i=this;return K(async function(...c){let l=new Y([]),d=await i._def.args.parseAsync(c,o).catch(N=>{throw l.addIssue(r(c,N)),l}),b=await Reflect.apply(a,this,d);return await i._def.returns._def.type.parseAsync(b,o).catch(N=>{throw l.addIssue(s(b,N)),l})})}else {let i=this;return K(function(...c){let l=i._def.args.safeParse(c,o);if(!l.success)throw new Y([r(c,l.error)]);let d=Reflect.apply(a,this,l.data),b=i._def.returns.safeParse(d,o);if(!b.success)throw new Y([s(d,b.error)]);return b.data})}}parameters(){return this._def.args}returnType(){return this._def.returns}args(...e){return new t({...this._def,args:fe.create(e).rest(ke.create())})}returns(e){return new t({...this._def,returns:e})}implement(e){return this.parse(e)}strictImplement(e){return this.parse(e)}static create(e,n,r){return new t({args:e||fe.create([]).rest(ke.create()),returns:n||ke.create(),typeName:y.ZodFunction,..._(r)})}},ze=class extends w{get schema(){return this._def.getter()}_parse(e){let{ctx:n}=this._processInputParams(e);return this._def.getter()._parse({data:n.data,path:n.path,parent:n})}};ze.create=(t,e)=>new ze({getter:t,typeName:y.ZodLazy,..._(e)});var He=class extends w{_parse(e){if(e.data!==this._def.value){let n=this._getOrReturnCtx(e);return p(n,{received:n.data,code:u.invalid_literal,expected:this._def.value}),h}return {status:"valid",value:e.data}}get value(){return this._def.value}};He.create=(t,e)=>new He({value:t,typeName:y.ZodLiteral,..._(e)});function or(t,e){return new Je({values:t,typeName:y.ZodEnum,..._(e)})}var Je=class t extends w{_parse(e){if(typeof e.data!="string"){let n=this._getOrReturnCtx(e),r=this._def.values;return p(n,{expected:S.joinValues(r),received:n.parsedType,code:u.invalid_type}),h}if(this._cache||(this._cache=new Set(this._def.values)),!this._cache.has(e.data)){let n=this._getOrReturnCtx(e),r=this._def.values;return p(n,{received:n.data,code:u.invalid_enum_value,options:r}),h}return K(e.data)}get options(){return this._def.values}get enum(){let e={};for(let n of this._def.values)e[n]=n;return e}get Values(){let e={};for(let n of this._def.values)e[n]=n;return e}get Enum(){let e={};for(let n of this._def.values)e[n]=n;return e}extract(e,n=this._def){return t.create(e,{...this._def,...n})}exclude(e,n=this._def){return t.create(this.options.filter(r=>!e.includes(r)),{...this._def,...n})}};Je.create=or;var Ke=class extends w{_parse(e){let n=S.getValidEnumValues(this._def.values),r=this._getOrReturnCtx(e);if(r.parsedType!==g.string&&r.parsedType!==g.number){let s=S.objectValues(n);return p(r,{expected:S.joinValues(s),received:r.parsedType,code:u.invalid_type}),h}if(this._cache||(this._cache=new Set(S.getValidEnumValues(this._def.values))),!this._cache.has(e.data)){let s=S.objectValues(n);return p(r,{received:r.data,code:u.invalid_enum_value,options:s}),h}return K(e.data)}get enum(){return this._def.values}};Ke.create=(t,e)=>new Ke({values:t,typeName:y.ZodNativeEnum,..._(e)});var Ne=class extends w{unwrap(){return this._def.type}_parse(e){let{ctx:n}=this._processInputParams(e);if(n.parsedType!==g.promise&&n.common.async===false)return p(n,{code:u.invalid_type,expected:g.promise,received:n.parsedType}),h;let r=n.parsedType===g.promise?n.data:Promise.resolve(n.data);return K(r.then(s=>this._def.type.parseAsync(s,{path:n.path,errorMap:n.common.contextualErrorMap})))}};Ne.create=(t,e)=>new Ne({type:t,typeName:y.ZodPromise,..._(e)});var oe=class extends w{innerType(){return this._def.schema}sourceType(){return this._def.schema._def.typeName===y.ZodEffects?this._def.schema.sourceType():this._def.schema}_parse(e){let{status:n,ctx:r}=this._processInputParams(e),s=this._def.effect||null,o={addIssue:a=>{p(r,a),a.fatal?n.abort():n.dirty();},get path(){return r.path}};if(o.addIssue=o.addIssue.bind(o),s.type==="preprocess"){let a=s.transform(r.data,o);if(r.common.async)return Promise.resolve(a).then(async i=>{if(n.value==="aborted")return h;let c=await this._def.schema._parseAsync({data:i,path:r.path,parent:r});return c.status==="aborted"?h:c.status==="dirty"?De(c.value):n.value==="dirty"?De(c.value):c});{if(n.value==="aborted")return h;let i=this._def.schema._parseSync({data:a,path:r.path,parent:r});return i.status==="aborted"?h:i.status==="dirty"?De(i.value):n.value==="dirty"?De(i.value):i}}if(s.type==="refinement"){let a=i=>{let c=s.refinement(i,o);if(r.common.async)return Promise.resolve(c);if(c instanceof Promise)throw new Error("Async refinement encountered during synchronous parse operation. Use .parseAsync instead.");return i};if(r.common.async===false){let i=this._def.schema._parseSync({data:r.data,path:r.path,parent:r});return i.status==="aborted"?h:(i.status==="dirty"&&n.dirty(),a(i.value),{status:n.value,value:i.value})}else return this._def.schema._parseAsync({data:r.data,path:r.path,parent:r}).then(i=>i.status==="aborted"?h:(i.status==="dirty"&&n.dirty(),a(i.value).then(()=>({status:n.value,value:i.value}))))}if(s.type==="transform")if(r.common.async===false){let a=this._def.schema._parseSync({data:r.data,path:r.path,parent:r});if(!Re(a))return h;let i=s.transform(a.value,o);if(i instanceof Promise)throw new Error("Asynchronous transform encountered during synchronous parse operation. Use .parseAsync instead.");return {status:n.value,value:i}}else return this._def.schema._parseAsync({data:r.data,path:r.path,parent:r}).then(a=>Re(a)?Promise.resolve(s.transform(a.value,o)).then(i=>({status:n.value,value:i})):h);S.assertNever(s);}};oe.create=(t,e,n)=>new oe({schema:t,typeName:y.ZodEffects,effect:e,..._(n)});oe.createWithPreprocess=(t,e,n)=>new oe({schema:e,effect:{type:"preprocess",transform:t},typeName:y.ZodEffects,..._(n)});var re=class extends w{_parse(e){return this._getType(e)===g.undefined?K(void 0):this._def.innerType._parse(e)}unwrap(){return this._def.innerType}};re.create=(t,e)=>new re({innerType:t,typeName:y.ZodOptional,..._(e)});var pe=class extends w{_parse(e){return this._getType(e)===g.null?K(null):this._def.innerType._parse(e)}unwrap(){return this._def.innerType}};pe.create=(t,e)=>new pe({innerType:t,typeName:y.ZodNullable,..._(e)});var Ge=class extends w{_parse(e){let{ctx:n}=this._processInputParams(e),r=n.data;return n.parsedType===g.undefined&&(r=this._def.defaultValue()),this._def.innerType._parse({data:r,path:n.path,parent:n})}removeDefault(){return this._def.innerType}};Ge.create=(t,e)=>new Ge({innerType:t,typeName:y.ZodDefault,defaultValue:typeof e.default=="function"?e.default:()=>e.default,..._(e)});var Ze=class extends w{_parse(e){let{ctx:n}=this._processInputParams(e),r={...n,common:{...n.common,issues:[]}},s=this._def.innerType._parse({data:r.data,path:r.path,parent:{...r}});return at(s)?s.then(o=>({status:"valid",value:o.status==="valid"?o.value:this._def.catchValue({get error(){return new Y(r.common.issues)},input:r.data})})):{status:"valid",value:s.status==="valid"?s.value:this._def.catchValue({get error(){return new Y(r.common.issues)},input:r.data})}}removeCatch(){return this._def.innerType}};Ze.create=(t,e)=>new Ze({innerType:t,typeName:y.ZodCatch,catchValue:typeof e.catch=="function"?e.catch:()=>e.catch,..._(e)});var pt=class extends w{_parse(e){if(this._getType(e)!==g.nan){let r=this._getOrReturnCtx(e);return p(r,{code:u.invalid_type,expected:g.nan,received:r.parsedType}),h}return {status:"valid",value:e.data}}};pt.create=t=>new pt({typeName:y.ZodNaN,..._(t)});var Hs=Symbol("zod_brand"),xt=class extends w{_parse(e){let{ctx:n}=this._processInputParams(e),r=n.data;return this._def.type._parse({data:r,path:n.path,parent:n})}unwrap(){return this._def.type}},Rt=class t extends w{_parse(e){let{status:n,ctx:r}=this._processInputParams(e);if(r.common.async)return (async()=>{let o=await this._def.in._parseAsync({data:r.data,path:r.path,parent:r});return o.status==="aborted"?h:o.status==="dirty"?(n.dirty(),De(o.value)):this._def.out._parseAsync({data:o.value,path:r.path,parent:r})})();{let s=this._def.in._parseSync({data:r.data,path:r.path,parent:r});return s.status==="aborted"?h:s.status==="dirty"?(n.dirty(),{status:"dirty",value:s.value}):this._def.out._parseSync({data:s.value,path:r.path,parent:r})}}static create(e,n){return new t({in:e,out:n,typeName:y.ZodPipeline})}},We=class extends w{_parse(e){let n=this._def.innerType._parse(e),r=s=>(Re(s)&&(s.value=Object.freeze(s.value)),s);return at(n)?n.then(s=>r(s)):r(n)}unwrap(){return this._def.innerType}};We.create=(t,e)=>new We({innerType:t,typeName:y.ZodReadonly,..._(e)});function tr(t,e){let n=typeof t=="function"?t(e):typeof t=="string"?{message:t}:t;return typeof n=="string"?{message:n}:n}function ir(t,e={},n){return t?Ie.create().superRefine((r,s)=>{let o=t(r);if(o instanceof Promise)return o.then(a=>{if(!a){let i=tr(e,r),c=i.fatal??n??true;s.addIssue({code:"custom",...i,fatal:c});}});if(!o){let a=tr(e,r),i=a.fatal??n??true;s.addIssue({code:"custom",...a,fatal:i});}}):Ie.create()}var Js={object:X.lazycreate},y;(function(t){t.ZodString="ZodString",t.ZodNumber="ZodNumber",t.ZodNaN="ZodNaN",t.ZodBigInt="ZodBigInt",t.ZodBoolean="ZodBoolean",t.ZodDate="ZodDate",t.ZodSymbol="ZodSymbol",t.ZodUndefined="ZodUndefined",t.ZodNull="ZodNull",t.ZodAny="ZodAny",t.ZodUnknown="ZodUnknown",t.ZodNever="ZodNever",t.ZodVoid="ZodVoid",t.ZodArray="ZodArray",t.ZodObject="ZodObject",t.ZodUnion="ZodUnion",t.ZodDiscriminatedUnion="ZodDiscriminatedUnion",t.ZodIntersection="ZodIntersection",t.ZodTuple="ZodTuple",t.ZodRecord="ZodRecord",t.ZodMap="ZodMap",t.ZodSet="ZodSet",t.ZodFunction="ZodFunction",t.ZodLazy="ZodLazy",t.ZodLiteral="ZodLiteral",t.ZodEnum="ZodEnum",t.ZodEffects="ZodEffects",t.ZodNativeEnum="ZodNativeEnum",t.ZodOptional="ZodOptional",t.ZodNullable="ZodNullable",t.ZodDefault="ZodDefault",t.ZodCatch="ZodCatch",t.ZodPromise="ZodPromise",t.ZodBranded="ZodBranded",t.ZodPipeline="ZodPipeline",t.ZodReadonly="ZodReadonly";})(y||(y={}));var Ks=(t,e={message:`Input not instance of ${t.name}`})=>ir(n=>n instanceof t,e),ar=Ce.create,cr=je.create,Gs=pt.create,Zs=Le.create,lr=$e.create,Ws=Ve.create,qs=lt.create,Ys=Ue.create,Xs=Me.create,Qs=Ie.create,eo=ke.create,to=ae.create,no=ut.create,ro=_e.create,so=X.create,oo=X.strictCreate,io=Be.create,ao=Gt.create,co=Fe.create,lo=fe.create,uo=Zt.create,fo=dt.create,po=ft.create,go=Wt.create,mo=ze.create,ho=He.create,yo=Je.create,vo=Ke.create,ko=Ne.create,_o=oe.create,wo=re.create,Eo=pe.create,So=oe.createWithPreprocess,To=Rt.create,Ao=()=>ar().optional(),bo=()=>cr().optional(),xo=()=>lr().optional(),Ro={string:(t=>Ce.create({...t,coerce:true})),number:(t=>je.create({...t,coerce:true})),boolean:(t=>$e.create({...t,coerce:true})),bigint:(t=>Le.create({...t,coerce:true})),date:(t=>Ve.create({...t,coerce:true}))};var Co=h;var Io={api:{rateLimit:{windowMs:900*1e3,maxRequests:100}}};f.object({snapshot_version:f.string(),engine_target_version:f.string(),project_id:f.string(),generated_at:f.string(),root_path_hash:f.string(),metadata:f.object({total_files:f.number().int().nonnegative(),total_dependencies:f.number().int().nonnegative(),total_size_bytes:f.number().int().nonnegative(),total_lines:f.number().int().nonnegative(),max_directory_depth:f.number().int().nonnegative(),language_breakdown:f.record(f.string(),f.number().int().nonnegative())}),files:f.array(f.object({id:f.string(),path_hash:f.string(),depth:f.number().int().nonnegative(),size_bytes:f.number().int().nonnegative(),estimated_lines:f.number().int().nonnegative(),extension:f.string(),is_binary:f.boolean(),import_count:f.number().int().nonnegative().optional(),function_count:f.number().int().nonnegative().optional(),class_count:f.number().int().nonnegative().optional()})),dependencies:f.array(f.object({id:f.string(),name_hash:f.string(),major_version:f.number().int().nonnegative(),minor_version:f.number().int().nonnegative(),category:f.enum(["dev","prod","peer"])}))});f.object({name:f.string().min(1).max(100)});f.object({analysis_version:f.string(),snapshot_schema_version:f.string(),total_score:f.number().min(0).max(100),severity_band:f.enum(["HEALTHY","STABLE","STRUCTURAL_CONCERN","HIGH_RISK"]),engines:f.array(f.object({engine_name:f.string(),score_impact:f.number(),risk_level:f.enum(["HEALTHY","STABLE","STRUCTURAL_CONCERN","HIGH_RISK"]),metrics:f.record(f.number()),findings:f.array(f.object({rule_id:f.string(),title:f.string(),message:f.string(),severity:f.enum(["CRITICAL","HIGH","MEDIUM","LOW"]),category:f.enum(["SECURITY","STRUCTURE","COMPLEXITY","DEPENDENCY","REPOSITORY_HYGIENE","DOCUMENTATION","QUALITY"]),evidence:f.array(f.string()).optional(),explanation:f.string().optional(),impact:f.string().optional(),effort:f.enum(["Low","Medium","High"]).optional(),recommendations:f.array(f.string()).optional()}))})),summary:f.object({total_findings:f.number().int().nonnegative(),critical_count:f.number().int().nonnegative(),high_count:f.number().int().nonnegative(),medium_count:f.number().int().nonnegative(),low_count:f.number().int().nonnegative(),categories:f.record(f.string(),f.number().int().nonnegative())}),generated_at:f.string()});var No=f.object({NEXT_PUBLIC_SUPABASE_URL:f.string().url("Invalid SUPABASE_URL"),NEXT_PUBLIC_SUPABASE_ANON_KEY:f.string().min(1,"SUPABASE_ANON_KEY is required"),SUPABASE_SERVICE_ROLE_KEY:f.string().min(1,"SERVICE_ROLE_KEY is required"),NODE_ENV:f.enum(["development","production","test"],{errorMap:()=>({message:"NODE_ENV must be development, production, or test"})}),JWT_SECRET:f.string().min(32,"JWT_SECRET must be at least 32 characters").optional()});function Oo(){try{return No.parse(process.env)}catch(t){if(t instanceof f.ZodError){let e=t.errors.map(n=>n.path.join(".")).join(", ");throw new Error(`Environment validation failed:
24
24
  Missing or invalid variables: ${e}
25
- Please check your .env file and ensure all required variables are set.`)}throw t}}var kn=null;function Ao(){return kn||(kn=To()),kn}new Proxy({},{get(t,e){return Ao()[e]}});var Ke=new Map;function xo(t=So.api.rateLimit){let{windowMs:e,maxRequests:n,message:r}=t;return {check(s){let o=Date.now(),a=Ke.get(s);a&&o>a.resetTime&&Ke.delete(s);let i=Ke.get(s)||{count:0,resetTime:o+e};return i.count>=n?{success:false,remaining:0,resetTime:i.resetTime,error:r||"Too many requests"}:(i.count++,Ke.set(s,i),{success:true,remaining:n-i.count,resetTime:i.resetTime})},reset(s){Ke.delete(s);},cleanup(){let s=Date.now();for(let[o,a]of Ke.entries())s>a.resetTime&&Ke.delete(o);}}}xo();var Ro={TOKEN_BINDING_SALT:fn};function ir(t,e){let n=`${t}:${e}:${Ro.TOKEN_BINDING_SALT}`;return pe.createHash("sha256").update(n).digest("hex")}function ar(t,e,n,r,s="cli"){let o=new Date().toISOString(),a=Po(),i=Co(t,e,n,o,a),c=Io(o,s,i),l=No(r,o,s,c);return {signature:l,timestamp:o,nonce:a,headers:{"X-Signature":l,"X-Timestamp":o,"X-Nonce":a,"X-Signed-Headers":"host;x-timestamp;x-nonce"}}}function Co(t,e,n,r,s){let o=pe.createHash("sha256").update(n).digest("hex");return [t.toUpperCase(),e,"",`host:www.veestack.com
25
+ Please check your .env file and ensure all required variables are set.`)}throw t}}var An=null;function Po(){return An||(An=Oo()),An}new Proxy({},{get(t,e){return Po()[e]}});var qe=new Map;function Do(t=Io.api.rateLimit){let{windowMs:e,maxRequests:n,message:r}=t;return {check(s){let o=Date.now(),a=qe.get(s);a&&o>a.resetTime&&qe.delete(s);let i=qe.get(s)||{count:0,resetTime:o+e};return i.count>=n?{success:false,remaining:0,resetTime:i.resetTime,error:r||"Too many requests"}:(i.count++,qe.set(s,i),{success:true,remaining:n-i.count,resetTime:i.resetTime})},reset(s){qe.delete(s);},cleanup(){let s=Date.now();for(let[o,a]of qe.entries())s>a.resetTime&&qe.delete(o);}}}Do();var Lo={TOKEN_BINDING_SALT:kn};function dr(t,e){let n=`${t}:${e}:${Lo.TOKEN_BINDING_SALT}`;return ge.createHash("sha256").update(n).digest("hex")}function fr(t,e,n,r,s="cli"){let o=new Date().toISOString(),a=Mo(),i=$o(t,e,n,o,a),c=Vo(o,s,i),l=Uo(r,o,s,c);return {signature:l,timestamp:o,nonce:a,headers:{"X-Signature":l,"X-Timestamp":o,"X-Nonce":a,"X-Signed-Headers":"host;x-timestamp;x-nonce"}}}function $o(t,e,n,r,s){let o=ge.createHash("sha256").update(n).digest("hex");return [t.toUpperCase(),e,"",`host:www.veestack.com
26
26
  `,`x-timestamp:${r}
27
27
  `,`x-nonce:${s}
28
28
  `,"host;x-timestamp;x-nonce",o].join(`
29
- `)}function Io(t,e,n){let r=t.substring(0,10).replace(/-/g,""),s=pe.createHash("sha256").update(n).digest("hex");return ["VEESTACK-HMAC-SHA256",t,`${r}/veestack/${e}/veestack_request`,s].join(`
30
- `)}function No(t,e,n,r){let s=e.substring(0,10).replace(/-/g,""),o=bt("VEESTACK"+t,s),a=bt(o,"veestack"),i=bt(a,n),c=bt(i,"veestack_request");return bt(c,r,"hex")}function bt(t,e,n){return pe.createHmac("sha256",t).update(e).digest(n||"hex")}function Po(){return pe.randomBytes(16).toString("hex")}var Kt=null;async function qt(){if(Kt)return Kt;try{return Kt=await import('keytar'),Kt}catch{return null}}var It=tt.join(pt.homedir(),".veestack"),ke=tt.join(It,"tokens.enc"),cr=tt.join(It,"salt"),lr=tt.join(It,".key"),Yt="VeeStack CLI",Xt="auth_tokens",Oo=1e5,Do=32,jo=16;function Wt(){return process.env.DEBUG?.includes("veestack")||process.env.DEBUG?.includes("*")||process.env.NODE_ENV==="development"||process.env.VEESTACK_DEBUG==="true"}async function $o(){try{let e=await V.readFile(cr).catch(()=>null);if(e)return e}catch{}let t=pe.randomBytes(32);return await V.mkdir(It,{recursive:true,mode:448}),await V.writeFile(cr,t,{mode:384}),t}async function ur(){try{let r=await V.readFile(lr,"utf-8").catch(()=>null);if(r){let s=Buffer.from(r,"hex");return await V.unlink(lr).catch(()=>{}),s}}catch{}let t=`${pt.userInfo().username}@${pt.hostname()}`,e=await $o();return pe.pbkdf2Sync(t,e,Oo,Do,"sha256")}function Rt(t){Buffer.isBuffer(t)&&t.fill(0);}async function Nt(t){let e=await qt();if(e)try{let l=JSON.stringify(t);await e.setPassword(Yt,Xt,l),Wt()&&console.log(" Tokens saved to OS Keychain");return}catch(l){Wt()&&console.log(" Keychain failed, falling back to encrypted file:",l);}let n=await ur(),r=pe.randomBytes(jo),s=pe.createCipheriv("aes-256-gcm",n,r),o=JSON.stringify(t),a=Buffer.concat([s.update(o,"utf8"),s.final()]),i=s.getAuthTag(),c={iv:r.toString("hex"),data:a.toString("hex"),authTag:i.toString("hex"),timestamp:Date.now(),version:2};await V.mkdir(It,{recursive:true,mode:448}),await V.writeFile(ke,JSON.stringify(c),{mode:384}),Rt(n),Wt()&&console.log(" Tokens saved to encrypted file (AES-256-GCM)");}async function dr(){let t=await qt();if(t)try{let e=await t.getPassword(Yt,Xt);if(e)return JSON.parse(e)}catch(e){Wt()&&console.log("\u26A0\uFE0F Keychain read failed, trying encrypted file:",e);}try{let e=await V.readFile(ke,"utf-8"),n=JSON.parse(e);if(n.version===1)return await Lo(n);let r=await ur(),s=null;try{let o=Buffer.from(n.iv,"hex"),a=Buffer.from(n.data,"hex"),i=Buffer.from(n.authTag,"hex"),c=pe.createDecipheriv("aes-256-gcm",r,o);c.setAuthTag(i),s=Buffer.concat([c.update(a),c.final()]);let l=JSON.parse(s.toString("utf8"));return Rt(s),Rt(r),l}catch(o){throw s&&Rt(s),Rt(r),o}}catch{return null}}async function Lo(t){try{return console.log("\u{1F510} Migrating from legacy encryption format..."),await V.unlink(ke).catch(()=>{}),null}catch{return null}}async function ft(){try{return await V.access(ke),!0}catch{return false}}async function We(){try{let t=await V.stat(ke).catch(()=>null);if(!t)return;let e=t.size,n=3;for(let s=0;s<n;s++){let o=pe.randomBytes(e);await V.writeFile(ke,o);}await V.unlink(ke);let r=await qt();r&&await r.deletePassword(Yt,Xt).catch(()=>{});}catch{}}async function pr(){let t=await qt(),e=!!t,n=false;if(t)try{n=!!await t.getPassword(Yt,Xt);}catch{}let r=false,s,o,a=0;try{let i=await V.stat(ke);r=!0,s=i.mode.toString(8),o=i.size;let c=await V.readFile(ke,"utf-8");a=JSON.parse(c).version||1;}catch{}return {keychainAvailable:e,keychainHasTokens:n,fileExists:r,filePermissions:s,fileSize:o,encryptionVersion:a}}var Vo=[{name:"bearer_token",regex:/Bearer\s+[a-zA-Z0-9_-]{20,}/gi,replacement:"Bearer [REDACTED]"},{name:"api_key",regex:/api[_-]?key['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"api_key: [REDACTED]"},{name:"access_token",regex:/access[_-]?token['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"access_token: [REDACTED]"},{name:"refresh_token",regex:/refresh[_-]?token['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"refresh_token: [REDACTED]"},{name:"auth_token",regex:/auth[_-]?token['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"auth_token: [REDACTED]"},{name:"password",regex:/password['"\s]*[:=]\s*['"]?([^'"\s]{8,})/gi,replacement:"password: [REDACTED]"},{name:"secret",regex:/secret['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"secret: [REDACTED]"},{name:"private_key",regex:/private[_-]?key['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"private_key: [REDACTED]"},{name:"jwt_token",regex:/eyJ[a-zA-Z0-9_-]*\.eyJ[a-zA-Z0-9_-]*\.[a-zA-Z0-9_-]*/g,replacement:"[REDACTED_JWT]"},{name:"supabase_key",regex:/eyJ[a-zA-Z0-9_-]{20,}\.[a-zA-Z0-9_-]{20,}\.[a-zA-Z0-9_-]{20,}/g,replacement:"[REDACTED_SUPABASE_KEY]"}];function qe(t){if(!t||typeof t!="string")return t;let e=t;for(let n of Vo)e=e.replace(n.regex,n.replacement);return e}function _n(t){return t instanceof Error?qe(t.message).slice(0,500):typeof t=="string"?qe(t).slice(0,500):qe(String(t)).slice(0,500)}function Qt(t){if(!t||typeof t!="object")return t;let e=["token","accessToken","refreshToken","apiKey","api_key","secret","password","privateKey","private_key","authToken","auth_token","jwt","credential","credentials"];if(Array.isArray(t))return t.map(r=>Qt(r));let n={};for(let[r,s]of Object.entries(t)){let o=r.toLowerCase();e.some(a=>o.includes(a))?n[r]="[REDACTED]":typeof s=="object"&&s!==null?n[r]=Qt(s):typeof s=="string"?n[r]=qe(s):n[r]=s;}return n}function Pt(t,e,...n){let r=qe(e),s=n.map(o=>typeof o=="string"?qe(o):typeof o=="object"&&o!==null?Qt(o):o);console[t](r,...s);}var _e={log:(t,...e)=>Pt("log",t,...e),error:(t,...e)=>Pt("error",t,...e),warn:(t,...e)=>Pt("warn",t,...e),info:(t,...e)=>Pt("info",t,...e),debug:(t,...e)=>Pt("debug",t,...e)};var en=process.env.NODE_ENV==="development"||process.env.VEESTACK_WEB_URL?.includes("localhost")||process.env.VEESTACK_WEB_URL?.includes("127.0.0.1")||process.env.SUPABASE_URL?.includes("localhost")||process.env.SUPABASE_URL?.includes("127.0.0.1"),fe=process.env.VEESTACK_API_URL??(en?"http://localhost:3000":"https://api.veestack.dev"),gt=process.env.VEESTACK_WEB_URL??(en?"http://localhost:3000":"https://www.veestack.com"),we=`${fe}/api/cli`,Ie={device:`${we}/device`,authorize:`${we}/authorize`,verifyCode:`${we}/verify-code`,token:`${we}/token`,refresh:`${we}/refresh`,logout:`${we}/logout`,whoami:`${we}/whoami`,status:`${we}/status`,projects:`${fe}/api/projects`,upload:`${fe}/api/upload`};function fr(){return {environment:en?"development":"production",apiVersion:"unversioned",apiBaseUrl:fe,webBaseUrl:gt,cliApiBase:we,endpoints:Ie}}function gr(){let t=[];return fe||t.push("API_BASE_URL is not set"),fe.includes("localhost")&&!en&&t.push('Using localhost URL but NODE_ENV is not "development"'),{valid:t.length===0,errors:t}}var Uo=globalThis,mr=Uo.CLI_VERSION,vr=tt.join(pt.homedir(),".veestack"),tn=tt.join(vr,"config.json");async function Bo(){try{if(!oe.existsSync(tn))return;let t=oe.readFileSync(tn,"utf-8"),e=JSON.parse(t);if(await ft()){try{oe.unlinkSync(tn);}catch{}return}let n={token:e.token,refreshToken:e.refreshToken,tokenType:e.tokenType,tokenExpiresAt:e.tokenExpiresAt,device:e.device,user:e.user,subscription:e.subscription,lastLoginAt:e.lastLoginAt,apiKey:e.apiKey};await Nt(n);try{oe.unlinkSync(tn);}catch{}_e.info("\u{1F510} Authentication migrated to encrypted storage");}catch{}}async function K(){await Bo();let t=await dr();return t?{token:t.token,tokenType:t.tokenType,refreshToken:t.refreshToken,tokenExpiresAt:t.tokenExpiresAt,device:t.device,user:t.user,subscription:t.subscription,lastLoginAt:t.lastLoginAt,apiKey:t.apiKey}:null}async function Se(){let t=await K();if(!t)return false;let e=t.token!==void 0&&t.token.length>0,n=t.apiKey!==void 0&&t.apiKey.length>0;return e||n}async function Fo(){let t=await K();return t&&(t.token||t.apiKey)||null}async function zo(){let t=await K();return {id:t?.device?.id,fingerprint:t?.device?.fingerprint}}async function ge(t="GET",e="",n="",r=["project:read"]){let s=await Fo();if(!s)return {};let o=await K(),a=await zo();if(!a.id||!a.fingerprint||!o?.refreshToken)return {};let i=ir(o.refreshToken,a.fingerprint),c=ar(t,e,n,o.refreshToken,"cli");return {Authorization:`Bearer ${s}`,"Content-Type":"application/json","X-Device-ID":a.id,"X-CLI-Version":mr||"unknown","X-Device-Fingerprint":a.fingerprint,"X-Token-Binding":i,"X-Signature":c.signature,"X-Timestamp":c.timestamp,"X-Nonce":c.nonce,"X-Scope":r.join(","),"X-Security-Version":mr||"unknown"}}function Sn(t){if(!t.tokenExpiresAt)return true;let e=new Date(t.tokenExpiresAt),n=300*1e3;return Date.now()>=e.getTime()-n}async function Ho(t){if(!t.refreshToken)return null;try{let e={"Content-Type":"application/json"},n=Ie.refresh,r=JSON.stringify({refresh_token:t.refreshToken,device_id:t.device?.id,device_fingerprint:t.device?.fingerprint}),s=await fetch(n,{method:"POST",headers:e,body:r});if(s.status===401){let i=await s.json().catch(()=>({}));throw i.code==="device_mismatch"&&(await We(),console.log(v.red(`
29
+ `)}function Vo(t,e,n){let r=t.substring(0,10).replace(/-/g,""),s=ge.createHash("sha256").update(n).digest("hex");return ["VEESTACK-HMAC-SHA256",t,`${r}/veestack/${e}/veestack_request`,s].join(`
30
+ `)}function Uo(t,e,n,r){let s=e.substring(0,10).replace(/-/g,""),o=It("VEESTACK"+t,s),a=It(o,"veestack"),i=It(a,n),c=It(i,"veestack_request");return It(c,r,"hex")}function It(t,e,n){return ge.createHmac("sha256",t).update(e).digest(n||"hex")}function Mo(){return ge.randomBytes(16).toString("hex")}var Yt=null;async function Qt(){if(Yt)return Yt;try{return Yt=await import('keytar'),Yt}catch{return null}}var Pt=rt.join(gt.homedir(),".veestack"),we=rt.join(Pt,"tokens.enc"),pr=rt.join(Pt,"salt"),gr=rt.join(Pt,".key"),en="VeeStack CLI",tn="auth_tokens",Bo=1e5,Fo=32,zo=16;function Xt(){return process.env.DEBUG?.includes("veestack")||process.env.DEBUG?.includes("*")||process.env.NODE_ENV==="development"||process.env.VEESTACK_DEBUG==="true"}async function Ho(){try{let e=await V.readFile(pr).catch(()=>null);if(e)return e}catch{}let t=ge.randomBytes(32);return await V.mkdir(Pt,{recursive:true,mode:448}),await V.writeFile(pr,t,{mode:384}),t}async function mr(){try{let r=await V.readFile(gr,"utf-8").catch(()=>null);if(r){let s=Buffer.from(r,"hex");return await V.unlink(gr).catch(()=>{}),s}}catch{}let t=`${gt.userInfo().username}@${gt.hostname()}`,e=await Ho();return ge.pbkdf2Sync(t,e,Bo,Fo,"sha256")}function Nt(t){Buffer.isBuffer(t)&&t.fill(0);}async function Dt(t){let e=await Qt();if(e)try{let l=JSON.stringify(t);await e.setPassword(en,tn,l),Xt()&&console.log(" Tokens saved to OS Keychain");return}catch(l){Xt()&&console.log(" Keychain failed, falling back to encrypted file:",l);}let n=await mr(),r=ge.randomBytes(zo),s=ge.createCipheriv("aes-256-gcm",n,r),o=JSON.stringify(t),a=Buffer.concat([s.update(o,"utf8"),s.final()]),i=s.getAuthTag(),c={iv:r.toString("hex"),data:a.toString("hex"),authTag:i.toString("hex"),timestamp:Date.now(),version:2};await V.mkdir(Pt,{recursive:true,mode:448}),await V.writeFile(we,JSON.stringify(c),{mode:384}),Nt(n),Xt()&&console.log(" Tokens saved to encrypted file (AES-256-GCM)");}async function hr(){let t=await Qt();if(t)try{let e=await t.getPassword(en,tn);if(e)return JSON.parse(e)}catch(e){Xt()&&console.log("\u26A0\uFE0F Keychain read failed, trying encrypted file:",e);}try{let e=await V.readFile(we,"utf-8"),n=JSON.parse(e);if(n.version===1)return await Jo(n);let r=await mr(),s=null;try{let o=Buffer.from(n.iv,"hex"),a=Buffer.from(n.data,"hex"),i=Buffer.from(n.authTag,"hex"),c=ge.createDecipheriv("aes-256-gcm",r,o);c.setAuthTag(i),s=Buffer.concat([c.update(a),c.final()]);let l=JSON.parse(s.toString("utf8"));return Nt(s),Nt(r),l}catch(o){throw s&&Nt(s),Nt(r),o}}catch{return null}}async function Jo(t){try{return console.log("\u{1F510} Migrating from legacy encryption format..."),await V.unlink(we).catch(()=>{}),null}catch{return null}}async function mt(){try{return await V.access(we),!0}catch{return false}}async function Ye(){try{let t=await V.stat(we).catch(()=>null);if(!t)return;let e=t.size,n=3;for(let s=0;s<n;s++){let o=ge.randomBytes(e);await V.writeFile(we,o);}await V.unlink(we);let r=await Qt();r&&await r.deletePassword(en,tn).catch(()=>{});}catch{}}async function nn(){let t=await Qt(),e=!!t,n=false;if(t)try{n=!!await t.getPassword(en,tn);}catch{}let r=false,s,o,a=0;try{let i=await V.stat(we);r=!0,s=i.mode.toString(8),o=i.size;let c=await V.readFile(we,"utf-8");a=JSON.parse(c).version||1;}catch{}return {keychainAvailable:e,keychainHasTokens:n,fileExists:r,filePermissions:s,fileSize:o,encryptionVersion:a}}var Ko=[{name:"bearer_token",regex:/Bearer\s+[a-zA-Z0-9_-]{20,}/gi,replacement:"Bearer [REDACTED]"},{name:"api_key",regex:/api[_-]?key['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"api_key: [REDACTED]"},{name:"access_token",regex:/access[_-]?token['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"access_token: [REDACTED]"},{name:"refresh_token",regex:/refresh[_-]?token['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"refresh_token: [REDACTED]"},{name:"auth_token",regex:/auth[_-]?token['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"auth_token: [REDACTED]"},{name:"password",regex:/password['"\s]*[:=]\s*['"]?([^'"\s]{8,})/gi,replacement:"password: [REDACTED]"},{name:"secret",regex:/secret['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"secret: [REDACTED]"},{name:"private_key",regex:/private[_-]?key['"\s]*[:=]\s*['"]?([a-zA-Z0-9_-]{16,})/gi,replacement:"private_key: [REDACTED]"},{name:"jwt_token",regex:/eyJ[a-zA-Z0-9_-]*\.eyJ[a-zA-Z0-9_-]*\.[a-zA-Z0-9_-]*/g,replacement:"[REDACTED_JWT]"},{name:"supabase_key",regex:/eyJ[a-zA-Z0-9_-]{20,}\.[a-zA-Z0-9_-]{20,}\.[a-zA-Z0-9_-]{20,}/g,replacement:"[REDACTED_SUPABASE_KEY]"}];function Xe(t){if(!t||typeof t!="string")return t;let e=t;for(let n of Ko)e=e.replace(n.regex,n.replacement);return e}function bn(t){return t instanceof Error?Xe(t.message).slice(0,500):typeof t=="string"?Xe(t).slice(0,500):Xe(String(t)).slice(0,500)}function rn(t){if(!t||typeof t!="object")return t;let e=["token","accessToken","refreshToken","apiKey","api_key","secret","password","privateKey","private_key","authToken","auth_token","jwt","credential","credentials"];if(Array.isArray(t))return t.map(r=>rn(r));let n={};for(let[r,s]of Object.entries(t)){let o=r.toLowerCase();e.some(a=>o.includes(a))?n[r]="[REDACTED]":typeof s=="object"&&s!==null?n[r]=rn(s):typeof s=="string"?n[r]=Xe(s):n[r]=s;}return n}function jt(t,e,...n){let r=Xe(e),s=n.map(o=>typeof o=="string"?Xe(o):typeof o=="object"&&o!==null?rn(o):o);console[t](r,...s);}var Ee={log:(t,...e)=>jt("log",t,...e),error:(t,...e)=>jt("error",t,...e),warn:(t,...e)=>jt("warn",t,...e),info:(t,...e)=>jt("info",t,...e),debug:(t,...e)=>jt("debug",t,...e)};var yr=/^\d+(ms|s|m|h|d)$/,Zo=f.object({NODE_ENV:f.enum(["development","production","test"]).default("production"),VEESTACK_API_URL:f.string().url(),VEESTACK_WEB_URL:f.string().url(),ACCESS_TOKEN_TTL:f.string().regex(yr).default("15m"),REFRESH_TOKEN_TTL:f.string().regex(yr).default("30d"),LOG_LEVEL:f.enum(["debug","info","warn","error"]).default("info")});function kr(t={}){let e=[];Go.config(t.dotenvPath?{path:t.dotenvPath}:void 0);let n=process.env.NODE_ENV||"production",r=n==="development"?"http://localhost:3000":"https://api.veestack.dev",s=n==="development"?"http://localhost:3000":"https://www.veestack.com",o={NODE_ENV:n,VEESTACK_API_URL:process.env.VEESTACK_API_URL||r,VEESTACK_WEB_URL:process.env.VEESTACK_WEB_URL||s,ACCESS_TOKEN_TTL:process.env.ACCESS_TOKEN_TTL,REFRESH_TOKEN_TTL:process.env.REFRESH_TOKEN_TTL,LOG_LEVEL:process.env.LOG_LEVEL},a=Zo.safeParse(o);if(!a.success){let i=a.error.format();console.error("\u274C Invalid environment variables:"),console.error(i),process.exit(1);}return {env:a.data,usedDotenvFallbackKeys:e}}function vr(t){return t.includes("veestack.com")||t.includes("api.veestack.dev")}function sn(t){return t.includes("localhost")||t.includes("127.0.0.1")}function an(t){let e=[],n=[],r=t.NODE_ENV==="development";r&&vr(t.VEESTACK_API_URL)&&e.push("Mismatch: NODE_ENV=development cannot use production API URL. Set VEESTACK_API_URL to http://localhost:3000"),r&&vr(t.VEESTACK_WEB_URL)&&e.push("Mismatch: NODE_ENV=development cannot use production WEB URL. Set VEESTACK_WEB_URL to http://localhost:3000"),!r&&sn(t.VEESTACK_API_URL)&&e.push("Mismatch: production mode cannot use localhost API URL."),!r&&sn(t.VEESTACK_WEB_URL)&&e.push("Mismatch: production mode cannot use localhost WEB URL.");try{let s=new URL(t.VEESTACK_API_URL).host,o=new URL(t.VEESTACK_WEB_URL).host;s!==o&&sn(t.VEESTACK_API_URL)&&sn(t.VEESTACK_WEB_URL)||s!==o&&n.push(`Heads-up: API host (${s}) != WEB host (${o}). Ensure this is intentional.`);}catch{}return {ok:e.length===0,errors:e,warnings:n}}var{env:_r}=kr(),on=an(_r);on.ok||(console.error("\u274C Environment validation failed:"),on.errors.forEach(t=>console.error(`- ${t}`)),process.exit(1));process.argv.includes("--debug")&&on.warnings.length>0&&(console.warn("\u26A0\uFE0F Environment warnings:"),on.warnings.forEach(t=>console.warn(`- ${t}`)));var ce=_r;ce.NODE_ENV==="development";var Z=ce.VEESTACK_API_URL,ht=ce.VEESTACK_WEB_URL,me=`${Z}/api/cli`,Se={device:`${me}/device`,authorize:`${me}/authorize`,token:`${me}/token`,refresh:`${me}/refresh`,logout:`${me}/logout`,whoami:`${me}/whoami`,status:`${me}/status`,createAuth:`${me}/device`,verifyCode:`${me}/token`,projects:`${Z}/api/projects`,upload:`${Z}/api/upload`};function wr(){let t=an(ce);return {environment:ce.NODE_ENV,apiVersion:"unversioned",apiBaseUrl:Z,webBaseUrl:ht,cliApiBase:me,endpoints:Se,validated:t.ok,warnings:t.warnings}}function Er(){let t=an(ce);return {valid:t.ok,errors:t.errors}}var Wo=globalThis,Sr=Wo.CLI_VERSION,br=rt.join(gt.homedir(),".veestack"),cn=rt.join(br,"config.json");async function Yo(){try{if(!ie.existsSync(cn))return;let t=ie.readFileSync(cn,"utf-8"),e=JSON.parse(t);if(await mt()){try{ie.unlinkSync(cn);}catch{}return}let n={token:e.token,refreshToken:e.refreshToken,tokenType:e.tokenType,tokenExpiresAt:e.tokenExpiresAt,device:e.device,user:e.user,subscription:e.subscription,lastLoginAt:e.lastLoginAt,apiKey:e.apiKey};await Dt(n);try{ie.unlinkSync(cn);}catch{}Ee.info("\u{1F510} Authentication migrated to encrypted storage");}catch{}}async function W(){await Yo();let t=await hr();return t?{token:t.token,tokenType:t.tokenType,refreshToken:t.refreshToken,tokenExpiresAt:t.tokenExpiresAt,device:t.device,user:t.user,subscription:t.subscription,lastLoginAt:t.lastLoginAt,apiKey:t.apiKey}:null}async function Te(){let t=await W();if(!t)return false;let e=t.token!==void 0&&t.token.length>0,n=t.apiKey!==void 0&&t.apiKey.length>0;return e||n}async function Xo(){let t=await W();return t&&(t.token||t.apiKey)||null}async function Qo(){let t=await W();return {id:t?.device?.id,fingerprint:t?.device?.fingerprint}}async function he(t="GET",e="",n="",r=["project:read"]){let s=await Xo();if(!s)return {};let o=await W(),a=await Qo();if(!a.id||!a.fingerprint||!o?.refreshToken)return {};let i=dr(o.refreshToken,a.fingerprint),c=fr(t,e,n,o.refreshToken,"cli");return {Authorization:`Bearer ${s}`,"Content-Type":"application/json","X-Device-ID":a.id,"X-CLI-Version":Sr||"unknown","X-Device-Fingerprint":a.fingerprint,"X-Token-Binding":i,"X-Signature":c.signature,"X-Timestamp":c.timestamp,"X-Nonce":c.nonce,"X-Scope":r.join(","),"X-Security-Version":Sr||"unknown"}}function Rn(t){if(!t.tokenExpiresAt)return true;let e=new Date(t.tokenExpiresAt),n=300*1e3;return Date.now()>=e.getTime()-n}async function ei(t){if(!t.refreshToken)return null;try{let e={"Content-Type":"application/json"},n=Se.refresh,r=JSON.stringify({refresh_token:t.refreshToken,device_id:t.device?.id,device_fingerprint:t.device?.fingerprint}),s=await fetch(n,{method:"POST",headers:e,body:r});if(s.status===401){let i=await s.json().catch(()=>({}));throw i.code==="device_mismatch"&&(await Ye(),console.log(v.red(`
31
31
  \u274C Security Alert: Device mismatch`)),console.log(v.yellow(`
32
- Your token was used from a different device.`)),console.log(v.gray("This could indicate a token theft attempt.")),console.log(v.gray("Please login again:")),console.log(v.cyan(" veestack login")),process.exit(1)),i.code==="device_revoked"&&(await We(),console.log(v.red(`
32
+ Your token was used from a different device.`)),console.log(v.gray("This could indicate a token theft attempt.")),console.log(v.gray("Please login again:")),console.log(v.cyan(" veestack login")),process.exit(1)),i.code==="device_revoked"&&(await Ye(),console.log(v.red(`
33
33
  \u274C Device authorization revoked`)),console.log(v.yellow(`
34
- Your device was removed from authorized devices.`)),console.log(v.gray("Please login again:")),console.log(v.cyan(" veestack login")),process.exit(1)),(i.code==="token_invalid"||i.code==="session_expired")&&(await We(),console.log(v.red(`
34
+ Your device was removed from authorized devices.`)),console.log(v.gray("Please login again:")),console.log(v.cyan(" veestack login")),process.exit(1)),(i.code==="token_invalid"||i.code==="session_expired")&&(await Ye(),console.log(v.red(`
35
35
  \u274C Session expired`)),console.log(v.yellow(`
36
- Your session has expired or your password was changed.`)),console.log(v.gray("Please login again:")),console.log(v.cyan(" veestack login")),process.exit(1)),new Error("Token refresh failed: Unauthorized")}if(!s.ok)throw new Error("Token refresh failed");let o=await s.json(),a={...t,token:o.access_token,tokenExpiresAt:new Date(Date.now()+o.expires_in*1e3).toISOString()};return o.refresh_token&&(a.refreshToken=o.refresh_token),await Nt({token:a.token,refreshToken:a.refreshToken,tokenType:a.tokenType,tokenExpiresAt:a.tokenExpiresAt,device:a.device,user:a.user,subscription:a.subscription,lastLoginAt:a.lastLoginAt,apiKey:a.apiKey}),a}catch(e){return e instanceof Error&&e.message.includes("fetch")&&(_e.warn(`
37
- \u26A0\uFE0F Network error`),_e.info("Could not connect to authentication server."),_e.info("Please check your connection and try again.")),null}}async function Ne(){let t=await K();if(!t)return console.log(v.yellow(`
36
+ Your session has expired or your password was changed.`)),console.log(v.gray("Please login again:")),console.log(v.cyan(" veestack login")),process.exit(1)),new Error("Token refresh failed: Unauthorized")}if(!s.ok)throw new Error("Token refresh failed");let o=await s.json(),a={...t,token:o.access_token,tokenExpiresAt:new Date(Date.now()+o.expires_in*1e3).toISOString()};return o.refresh_token&&(a.refreshToken=o.refresh_token),await Dt({token:a.token,refreshToken:a.refreshToken,tokenType:a.tokenType,tokenExpiresAt:a.tokenExpiresAt,device:a.device,user:a.user,subscription:a.subscription,lastLoginAt:a.lastLoginAt,apiKey:a.apiKey}),a}catch(e){return e instanceof Error&&e.message.includes("fetch")&&(Ee.warn(`
37
+ \u26A0\uFE0F Network error`),Ee.info("Could not connect to authentication server."),Ee.info("Please check your connection and try again.")),null}}async function Pe(){let t=await W();if(!t)return console.log(v.yellow(`
38
38
  \u26A0\uFE0F You are not logged in`)),console.log(v.gray(`
39
39
  Login to enable:`)),console.log(v.gray(" \u2022 Cloud reports")),console.log(v.gray(" \u2022 Team dashboard")),console.log(v.gray(` \u2022 Historical scans
40
- `)),console.log(v.gray("Run:")),console.log(v.cyan(" veestack login")),null;if(t.refreshToken&&Sn(t)){console.log(v.yellow("Token expired, refreshing..."));let e=await Ho(t);return e?(console.log(v.green("\u2713 Token refreshed")),e):(await We(),console.log(v.red(`
41
- \u274C Session expired`)),console.log(v.yellow("Your refresh token has expired.")),console.log(v.gray("Run: veestack login")),null)}return t}async function nn(){let t=await K();return !t||!t.subscription?"free":t.subscription.tier}async function kr(){let t=await K();return !t||!t.subscription||t.subscription.tier==="free"?true:t.subscription.expiresAt?new Date(t.subscription.expiresAt)>new Date&&t.subscription.isActive:t.subscription.isActive}function _r(t){if(t.user)try{let e=join(vr,"accounts"),n=(void 0)("fs");n.mkdirSync(e,{recursive:!0});let r=join(e,`${t.user.id}.json`);n.writeFileSync(r,JSON.stringify(t,null,2),{mode:384});}catch{}}var Er=process.env.VEESTACK_API_URL||"https://api.veestack.dev";async function Tr(){try{let t=await fetch(`${Er}/v1/cli/version`,{method:"GET",headers:{Accept:"application/json"}});if(t.ok){let n=(await t.json()).version;n&&n!==te&&(console.log(v.yellow(`
42
- \u2728 New version available: ${v.bold(n)} (current: ${te})`)),console.log(v.gray(` Run: ${v.cyan("veestack upgrade")} to update
43
- `)));}}catch{}}async function Go(){let t=process.cwd(),e=join(t,"package.json"),n=[{name:"Next.js",files:["next.config.js","next.config.ts","next.config.mjs"]},{name:"Nuxt.js",files:["nuxt.config.js","nuxt.config.ts"]},{name:"Vue CLI",files:["vue.config.js"]},{name:"Angular",files:["angular.json"]},{name:"SvelteKit",files:["svelte.config.js","svelte.config.ts"]},{name:"Vite",files:["vite.config.js","vite.config.ts"]},{name:"Remix",files:["remix.config.js"]},{name:"Gatsby",files:["gatsby-config.js","gatsby-config.ts"]},{name:"Astro",files:["astro.config.mjs","astro.config.js"]}];for(let r of n)for(let s of r.files)if(existsSync(join(t,s)))return {name:r.name,confidence:95};if(!existsSync(e)){if(existsSync(join(t,"requirements.txt"))){let r=readFileSync(join(t,"requirements.txt"),"utf-8").toLowerCase();if(r.includes("django"))return {name:"Django",confidence:85};if(r.includes("flask"))return {name:"Flask",confidence:85}}return existsSync(join(t,"Gemfile"))&&readFileSync(join(t,"Gemfile"),"utf-8").toLowerCase().includes("rails")?{name:"Ruby on Rails",confidence:85}:existsSync(join(t,"pom.xml"))&&readFileSync(join(t,"pom.xml"),"utf-8").toLowerCase().includes("spring-boot")?{name:"Spring Boot",confidence:85}:{name:"unknown",confidence:0}}try{let r=JSON.parse(readFileSync(e,"utf-8")),s={...r.dependencies,...r.devDependencies},o=[{name:"Next.js",primary:["next"],secondary:["next/core-web-vitals","@next/bundle-analyzer"],indicators:["app","pages"]},{name:"React",primary:["react","react-dom"],secondary:["@types/react","react-scripts","create-react-app"],indicators:["src/components","src/App.js","src/App.tsx"]},{name:"Vue",primary:["vue"],secondary:["vue-router","vuex","pinia","@vue/cli-service"],indicators:["src/views","src/components"]},{name:"Angular",primary:["@angular/core"],secondary:["@angular/cli","@angular/common","@angular/router"],indicators:["src/app"]},{name:"Svelte",primary:["svelte"],secondary:["svelte-check","@sveltejs/kit"],indicators:["src/routes"]},{name:"Express",primary:["express"],secondary:["cors","helmet","morgan","body-parser"],indicators:["routes","controllers"]},{name:"NestJS",primary:["@nestjs/core"],secondary:["@nestjs/common","@nestjs/platform-express"],indicators:["src/modules"]},{name:"Fastify",primary:["fastify"],secondary:["@fastify/cors","@fastify/helmet"],indicators:["routes"]}];for(let a of o){let i=0;for(let l of a.primary)if(s[l]){i+=70;break}let c=0;for(let l of a.secondary)s[l]&&c<2&&(i+=10,c++);for(let l of a.indicators)existsSync(join(t,l))&&(i+=10);if(i>=60)return a.name==="Next.js"&&s.next?{name:a.name,confidence:100}:{name:a.name,confidence:Math.min(i,95)}}return s.astro?{name:"Astro",confidence:80}:s.remix?{name:"Remix",confidence:80}:s.gatsby?{name:"Gatsby",confidence:80}:s.nuxt?{name:"Nuxt.js",confidence:80}:s["@sveltejs/kit"]?{name:"SvelteKit",confidence:85}:{name:"unknown",confidence:0}}catch{return {name:"unknown",confidence:0}}}async function Zo(t,e){try{let n=await ge(),r=await fetch(`${Er}/v1/projects`,{method:"POST",headers:n,body:JSON.stringify({name:t,framework:e,source:"cli-init"})});if(!r.ok){let s=await r.json().catch(()=>({error:"Unknown error"}));throw new Error(s.error||`HTTP ${r.status}`)}return await r.json()}catch(n){return _e.error("Failed to create project:",n instanceof Error?n.message:String(n)),null}}function Sr(t){let e={"Next.js":["**/*.{js,jsx,ts,tsx,json,mjs,cjs}"],React:["**/*.{js,jsx,ts,tsx,json}"],Vue:["**/*.{js,jsx,ts,tsx,vue,json}"],Angular:["**/*.{ts,html,json}"],Svelte:["**/*.{js,ts,svelte,json}"],Express:["**/*.{js,ts,json}"],NestJS:["**/*.{ts,json}"],unknown:["**/*.{js,ts,jsx,tsx,json,py,go,rs,rb,php,cs,cpp,c,h}"]};return e[t]||e.unknown}function Ko(){return ["node_modules/**/*",".git/**/*","dist/**/*","build/**/*",".next/**/*","coverage/**/*","*.test.ts","*.spec.ts","*.min.js"]}function Wo(t){let e=join(process.cwd(),"veestack.config.json");writeFileSync(e,JSON.stringify(t,null,2));}function qo(){let t=join(process.cwd(),"veestack.config.json");if(existsSync(t))try{return JSON.parse(readFileSync(t,"utf-8"))}catch{return null}return null}function Yo(t){let e=process.cwd(),n=[],r=["src","app","lib","components","pages","routes","controllers","models","utils"];for(let s of r){let o=join(e,s);existsSync(o)&&n.push(`${s}/**/*`);}return n}function Xo(){let t=process.cwd(),e=join(t,".git");return existsSync(e)}function Qo(){let t=process.cwd();return existsSync(join(t,"pnpm-lock.yaml"))?"pnpm":existsSync(join(t,"yarn.lock"))?"yarn":existsSync(join(t,"package-lock.json"))?"npm":existsSync(join(t,"bun.lockb"))?"bun":"npm"}function ei(){return `Node ${process.version}`}async function ht(t){t?.skipAuthCheck||console.log(v.bold.cyan(`
40
+ `)),console.log(v.gray("Run:")),console.log(v.cyan(" veestack login")),null;if(t.refreshToken&&Rn(t)){console.log(v.yellow("Token expired, refreshing..."));let e=await ei(t);return e?(console.log(v.green("\u2713 Token refreshed")),e):(await Ye(),console.log(v.red(`
41
+ \u274C Session expired`)),console.log(v.yellow("Your refresh token has expired.")),console.log(v.gray("Run: veestack login")),null)}return t}async function ln(){let t=await W();return !t||!t.subscription?"free":t.subscription.tier||"free"}async function xr(){let t=await W();return !t||!t.subscription||t.subscription.tier==="free"?true:t.subscription.expiresAt?new Date(t.subscription.expiresAt)>new Date&&t.subscription.isActive:t.subscription.isActive}function Rr(t){if(t.user)try{let e=join(br,"accounts"),n=be("fs");n.mkdirSync(e,{recursive:!0});let r=join(e,`${t.user.id}.json`);n.writeFileSync(r,JSON.stringify(t,null,2),{mode:384});}catch{}}async function Nr(){try{let t=await fetch(`${Z}/v1/cli/version`,{method:"GET",headers:{Accept:"application/json"}});if(t.ok){let n=(await t.json()).version;n&&n!==ne&&(console.log(v.yellow(`
42
+ \u2728 New version available: ${v.bold(n)} (current: ${ne})`)),console.log(v.gray(` Run: ${v.cyan("veestack upgrade")} to update
43
+ `)));}}catch{}}async function ni(){let t=process.cwd(),e=join(t,"package.json"),n=[{name:"Next.js",files:["next.config.js","next.config.ts","next.config.mjs"]},{name:"Nuxt.js",files:["nuxt.config.js","nuxt.config.ts"]},{name:"Vue CLI",files:["vue.config.js"]},{name:"Angular",files:["angular.json"]},{name:"SvelteKit",files:["svelte.config.js","svelte.config.ts"]},{name:"Vite",files:["vite.config.js","vite.config.ts"]},{name:"Remix",files:["remix.config.js"]},{name:"Gatsby",files:["gatsby-config.js","gatsby-config.ts"]},{name:"Astro",files:["astro.config.mjs","astro.config.js"]}];for(let r of n)for(let s of r.files)if(existsSync(join(t,s)))return {name:r.name,confidence:95};if(!existsSync(e)){if(existsSync(join(t,"requirements.txt"))){let r=readFileSync(join(t,"requirements.txt"),"utf-8").toLowerCase();if(r.includes("django"))return {name:"Django",confidence:85};if(r.includes("flask"))return {name:"Flask",confidence:85}}return existsSync(join(t,"Gemfile"))&&readFileSync(join(t,"Gemfile"),"utf-8").toLowerCase().includes("rails")?{name:"Ruby on Rails",confidence:85}:existsSync(join(t,"pom.xml"))&&readFileSync(join(t,"pom.xml"),"utf-8").toLowerCase().includes("spring-boot")?{name:"Spring Boot",confidence:85}:{name:"unknown",confidence:0}}try{let r=JSON.parse(readFileSync(e,"utf-8")),s={...r.dependencies,...r.devDependencies},o=[{name:"Next.js",primary:["next"],secondary:["next/core-web-vitals","@next/bundle-analyzer"],indicators:["app","pages"]},{name:"React",primary:["react","react-dom"],secondary:["@types/react","react-scripts","create-react-app"],indicators:["src/components","src/App.js","src/App.tsx"]},{name:"Vue",primary:["vue"],secondary:["vue-router","vuex","pinia","@vue/cli-service"],indicators:["src/views","src/components"]},{name:"Angular",primary:["@angular/core"],secondary:["@angular/cli","@angular/common","@angular/router"],indicators:["src/app"]},{name:"Svelte",primary:["svelte"],secondary:["svelte-check","@sveltejs/kit"],indicators:["src/routes"]},{name:"Express",primary:["express"],secondary:["cors","helmet","morgan","body-parser"],indicators:["routes","controllers"]},{name:"NestJS",primary:["@nestjs/core"],secondary:["@nestjs/common","@nestjs/platform-express"],indicators:["src/modules"]},{name:"Fastify",primary:["fastify"],secondary:["@fastify/cors","@fastify/helmet"],indicators:["routes"]}];for(let a of o){let i=0;for(let l of a.primary)if(s[l]){i+=70;break}let c=0;for(let l of a.secondary)s[l]&&c<2&&(i+=10,c++);for(let l of a.indicators)existsSync(join(t,l))&&(i+=10);if(i>=60)return a.name==="Next.js"&&s.next?{name:a.name,confidence:100}:{name:a.name,confidence:Math.min(i,95)}}return s.astro?{name:"Astro",confidence:80}:s.remix?{name:"Remix",confidence:80}:s.gatsby?{name:"Gatsby",confidence:80}:s.nuxt?{name:"Nuxt.js",confidence:80}:s["@sveltejs/kit"]?{name:"SvelteKit",confidence:85}:{name:"unknown",confidence:0}}catch{return {name:"unknown",confidence:0}}}async function ri(t,e){try{let n=await he(),r=await fetch(`${Z}/v1/projects`,{method:"POST",headers:n,body:JSON.stringify({name:t,framework:e,source:"cli-init"})});if(!r.ok){let s=await r.json().catch(()=>({error:"Unknown error"}));throw new Error(s.error||`HTTP ${r.status}`)}return await r.json()}catch(n){return Ee.error("Failed to create project:",n instanceof Error?n.message:String(n)),null}}function Ir(t){let e={"Next.js":["**/*.{js,jsx,ts,tsx,json,mjs,cjs}"],React:["**/*.{js,jsx,ts,tsx,json}"],Vue:["**/*.{js,jsx,ts,tsx,vue,json}"],Angular:["**/*.{ts,html,json}"],Svelte:["**/*.{js,ts,svelte,json}"],Express:["**/*.{js,ts,json}"],NestJS:["**/*.{ts,json}"],unknown:["**/*.{js,ts,jsx,tsx,json,py,go,rs,rb,php,cs,cpp,c,h}"]};return e[t]||e.unknown}function si(){return ["node_modules/**/*",".git/**/*","dist/**/*","build/**/*",".next/**/*","coverage/**/*","*.test.ts","*.spec.ts","*.min.js"]}function oi(t){let e=join(process.cwd(),"veestack.config.json");writeFileSync(e,JSON.stringify(t,null,2));}function ii(){let t=join(process.cwd(),"veestack.config.json");if(existsSync(t))try{return JSON.parse(readFileSync(t,"utf-8"))}catch{return null}return null}function ai(t){let e=process.cwd(),n=[],r=["src","app","lib","components","pages","routes","controllers","models","utils"];for(let s of r){let o=join(e,s);existsSync(o)&&n.push(`${s}/**/*`);}return n}function ci(){let t=process.cwd(),e=join(t,".git");return existsSync(e)}function li(){let t=process.cwd();return existsSync(join(t,"pnpm-lock.yaml"))?"pnpm":existsSync(join(t,"yarn.lock"))?"yarn":existsSync(join(t,"package-lock.json"))?"npm":existsSync(join(t,"bun.lockb"))?"bun":"npm"}function ui(){return `Node ${process.version}`}async function vt(t){t?.skipAuthCheck||console.log(v.bold.cyan(`
44
44
  \u{1F680} Initializing VeeStack...
45
- `));let e=false;t?.skipAuthCheck||(e=await Ne()!==null,!e&&t?.ci&&console.log(v.yellow("\u26A0 Not logged in. Cloud reports and team dashboard are disabled in CI mode.")));let n=qo();if(n?.projectId&&!t?.ci&&t?.interactive){let{overwrite:U}=await wr({type:"confirm",name:"overwrite",message:`Project already linked to ${n.name||n.projectId}. Re-initialize?`,initial:false});if(!U){console.log(v.gray(`
45
+ `));let e=false;t?.skipAuthCheck||(e=await Pe()!==null,!e&&t?.ci&&console.log(v.yellow("\u26A0 Not logged in. Cloud reports and team dashboard are disabled in CI mode.")));let n=ii();if(n?.projectId&&!t?.ci&&t?.interactive){let{overwrite:U}=await Cr({type:"confirm",name:"overwrite",message:`Project already linked to ${n.name||n.projectId}. Re-initialize?`,initial:false});if(!U){console.log(v.gray(`
46
46
  Cancelled. Existing configuration preserved.
47
- `));return}}let r=await Go(),s=r.name!=="unknown"?r.name:"Unknown";r.confidence>70?console.log(v.green(`\u2714 Framework detected: ${r.name}`)):r.confidence>0?console.log(v.yellow(`\u26A0 Framework detected: ${r.name} (low confidence)`)):(console.log(v.yellow('\u26A0 Framework detection failed. Using "Unknown".')),console.log(v.gray(" Some analysis rules may not apply correctly.")),console.log(v.gray(` \u2139 You can manually edit ${v.cyan("veestack.config.json")} later for better analysis.`)));let o=Yo(r.name);o.length>0&&console.log(v.green(`\u2714 Structure detected: ${o.length} source directories`));let a=Qo(),i=ei();console.log(v.green(`\u2714 Package manager: ${a}`)),console.log(v.green(`\u2714 Runtime: ${i}`)),Xo()&&console.log(v.green("\u2714 Git repository detected"));let c="",l=join(process.cwd(),"package.json");if(existsSync(l))try{c=JSON.parse(readFileSync(l,"utf-8")).name||"";}catch{}c||(c=process.cwd().split(/[\\/]/).pop()||"my-project");let d;if(!(!t?.ci&&(t?.interactive||r.confidence<30)))d={projectName:c,framework:s,scanPatterns:o.length>0?o:Sr(r.name),createProject:false},console.log(v.gray(`
47
+ `));return}}let r=await ni(),s=r.name!=="unknown"?r.name:"Unknown";r.confidence>70?console.log(v.green(`\u2714 Framework detected: ${r.name}`)):r.confidence>0?console.log(v.yellow(`\u26A0 Framework detected: ${r.name} (low confidence)`)):(console.log(v.yellow('\u26A0 Framework detection failed. Using "Unknown".')),console.log(v.gray(" Some analysis rules may not apply correctly.")),console.log(v.gray(` \u2139 You can manually edit ${v.cyan("veestack.config.json")} later for better analysis.`)));let o=ai(r.name);o.length>0&&console.log(v.green(`\u2714 Structure detected: ${o.length} source directories`));let a=li(),i=ui();console.log(v.green(`\u2714 Package manager: ${a}`)),console.log(v.green(`\u2714 Runtime: ${i}`)),ci()&&console.log(v.green("\u2714 Git repository detected"));let c="",l=join(process.cwd(),"package.json");if(existsSync(l))try{c=JSON.parse(readFileSync(l,"utf-8")).name||"";}catch{}c||(c=process.cwd().split(/[\\/]/).pop()||"my-project");let d;if(!(!t?.ci&&(t?.interactive||r.confidence<30)))d={projectName:c,framework:s,scanPatterns:o.length>0?o:Ir(r.name),createProject:false},console.log(v.gray(`
48
48
  Project name: ${c}`)),console.log(v.gray(`Framework: ${d.framework}`)),console.log(v.gray(`Scan directories: ${d.scanPatterns.join(", ")}`));else if(console.log(v.gray(`
49
49
  Configure your project:
50
- `)),d=await wr([{type:"text",name:"projectName",message:"Project name:",initial:c||"my-project",validate:U=>U.length>0||"Project name is required"},{type:"text",name:"framework",message:"Framework:",initial:r.name!=="unknown"?r.name:"Unknown"},{type:"multiselect",name:"scanPatterns",message:"Select directories to scan:",choices:Sr(r.name).map(U=>({title:U,value:U,selected:true})),hint:"Space to toggle, Enter to confirm"},{type:e?"confirm":null,name:"createProject",message:"Create project on VeeStack dashboard?",initial:true}],{onCancel:()=>{console.log(v.gray(`
50
+ `)),d=await Cr([{type:"text",name:"projectName",message:"Project name:",initial:c||"my-project",validate:U=>U.length>0||"Project name is required"},{type:"text",name:"framework",message:"Framework:",initial:r.name!=="unknown"?r.name:"Unknown"},{type:"multiselect",name:"scanPatterns",message:"Select directories to scan:",choices:Ir(r.name).map(U=>({title:U,value:U,selected:true})),hint:"Space to toggle, Enter to confirm"},{type:e?"confirm":null,name:"createProject",message:"Create project on VeeStack dashboard?",initial:true}],{onCancel:()=>{console.log(v.gray(`
51
51
  Cancelled.
52
52
  `)),process.exit(0);}}),!d.projectName){console.log(v.gray(`
53
53
  Cancelled.
54
- `));return}let $;if(d.createProject){console.log(v.gray(`
55
- Creating project on VeeStack...`));let U=await Zo(d.projectName,d.framework);U?($=U.id,console.log(v.green("\u2714 Project created"))):console.log(v.yellow("\u26A0\uFE0F Could not create project on server (offline mode)"));}let I={projectId:$,name:d.projectName,framework:d.framework,scanPatterns:d.scanPatterns,excludePatterns:Ko()};Wo(I);let C=r.confidence===0;if(t?.skipNextSteps){console.log(v.green(`
56
- \u2714 Configuration saved to veestack.config.json`)),C&&console.log(v.yellow("\u26A0 Framework detection failed. Some settings may need manual adjustment."));return}console.log(v.green(`
57
- \u2714 Configuration saved to veestack.config.json`)),C&&console.log(v.yellow("\u26A0 Framework detection failed. Some settings may need manual adjustment.")),console.log(v.bold(`
58
- Next steps:`)),console.log(v.gray(" 1. Run analysis:")),console.log(v.cyan(" veestack scan")),console.log(v.gray(" 2. Upload results:")),console.log(v.cyan(" veestack upload")),console.log(v.gray(" 3. View in dashboard:")),console.log(v.cyan(` https://www.veestack.com/dashboard${$?`/projects/${$}`:""}
59
- `));}var En=globalThis,ci=En.CLI_VERSION||"unknown",li=En.SNAPSHOT_VERSION||"unknown",ui=En.ENGINE_TARGET||"unknown";function di(t){let e={},n=t.split(/\r?\n/),r=false,s=null;for(let o of n){let a=o.replace(/\t/g," "),i=a.trim();if(!r){/^packages\s*:\s*$/.test(i)&&(r=true,s=a.match(/^\s*/)?.[0].length??0);continue}if(i!==""&&!i.startsWith("#")){let I=a.match(/^\s*/)?.[0].length??0;if(s!==null&&I<=s)break}let c=i.match(/^\/?([^\s]+)\s*:\s*$/);if(!c)continue;let l=c[1].replace(/^\/+/,""),d=l.lastIndexOf("@");if(d<=0)continue;let b=l.slice(0,d),$=l.slice(d+1);!b||!$||!/^\d+\./.test($)||(e[b]=$);}return e}function pi(){if(process.env.GITHUB_ACTIONS){let[t,e]=(process.env.GITHUB_REPOSITORY||"").split("/");return {provider:"github_actions",repo_owner:t,repo_name:e,commit_sha:process.env.GITHUB_SHA,run_id:process.env.GITHUB_RUN_ID,event_name:process.env.GITHUB_EVENT_NAME,pr_number:process.env.GITHUB_REF?.includes("refs/pull/")?parseInt(process.env.GITHUB_REF.split("/")[2]):void 0}}}function Tn(t){return pe__default.createHash("sha256").update(t).digest("hex")}function fi(t){let e=[".exe",".dll",".so",".dylib",".bin",".png",".jpg",".jpeg",".gif",".pdf",".zip",".tar",".gz",".7z",".woff",".woff2",".ttf",".eot"],n=t.split(".").pop()?.toLowerCase();return n?e.includes("."+n):false}function gi(t){return {ts:"TypeScript",js:"JavaScript",tsx:"TypeScript",jsx:"JavaScript",py:"Python",go:"Go",rs:"Rust",java:"Java",kt:"Kotlin",rb:"Ruby",php:"PHP",cs:"C#",cpp:"C++",c:"C",h:"C",json:"JSON",yaml:"YAML",yml:"YAML",md:"Markdown",html:"HTML",css:"CSS",scss:"SCSS",sql:"SQL",sh:"Shell",mjs:"JavaScript",cjs:"JavaScript",svelte:"Svelte",vue:"Vue"}[t]||"Other"}function mi(t){let e={};for(let n of t){let r=gi(n.extension.toLowerCase());e[r]=(e[r]||0)+1;}return e}function hi(t,e){let a=0,i={critical:0,high:0,medium:0,low:0};e&&(i={critical:e.criticalCount||0,high:e.highCount||0,medium:e.mediumCount||0,low:e.lowCount||0},a=i.critical*25+i.high*15+i.medium*5+i.low*2);let c=Math.max(0,100-a),l="F";return c===100?l="A+":c>=90?l="A":c>=80?l="B":c>=70?l="C":c>=60&&(l="D"),{score:c,grade:l,breakdown:i}}async function yi(t){try{return execSync("git diff --name-only HEAD",{cwd:t,encoding:"utf-8"}).split(`
60
- `).filter(Boolean)}catch{return []}}async function vi(t,e,n,r=false){let s=[],o=await glob(e,{cwd:t,ignore:n,nodir:true,dot:true,absolute:false});if(r){let i=await yi(t);i.length>0&&(o=o.filter(c=>i.includes(c)));}let a=o.filter(i=>!i.replace(/\\/g,"/").match(/(node_modules|\.next|dist|build|\.git)\//));for(let i of a){let c=statSync(join(t,i));c.isFile()&&s.push({id:pe__default.randomUUID(),path:i,path_hash:Tn(i),depth:i.split(/[\\/]/).length,size_bytes:c.size,estimated_lines:Math.floor(c.size/50),extension:i.split(".").pop()||"",is_binary:fi(i)});}return s.sort((i,c)=>i.path_hash.localeCompare(c.path_hash))}async function ki(t){let e=[];try{let n=join(t,"package.json");if(!existsSync(n))return [];let r=JSON.parse(readFileSync(n,"utf-8")),s={},o=join(t,"pnpm-lock.yaml"),a=join(t,"package-lock.json");if(existsSync(o))s=di(readFileSync(o,"utf8"));else if(existsSync(a)){let c=JSON.parse(readFileSync(a,"utf8"));for(let[l,d]of Object.entries(c.packages||{}))l&&d.version&&(s[l.replace("node_modules/","")]=d.version);}let i=(c,l)=>{for(let[d,b]of Object.entries(c)){let $=s[d]||b.replace(/[\^~]/,""),I=$.match(/^(\d+)\.(\d+)/);e.push({id:pe__default.randomUUID(),name_hash:Tn(d),name:d,version:$,major_version:I?parseInt(I[1]):0,minor_version:I?parseInt(I[2]):0,category:l});}};r.dependencies&&i(r.dependencies,"prod"),r.devDependencies&&i(r.devDependencies,"dev"),r.peerDependencies&&i(r.peerDependencies,"peer");}catch{}return e.sort((n,r)=>n.name_hash.localeCompare(r.name_hash))}async function _i(t,e){let n=await ki(t);return {snapshot_version:li,engine_target_version:ui,project_id:pe__default.randomUUID(),generated_at:new Date().toISOString(),root_path_hash:Tn(t),project_root:resolve(t),metadata:{total_files:e.length,total_dependencies:n.length,total_size_bytes:e.reduce((r,s)=>r+s.size_bytes,0),total_lines:e.reduce((r,s)=>r+(s.estimated_lines||0),0),max_directory_depth:Math.max(...e.map(r=>r.depth),0),language_breakdown:mi(e)},files:e,dependencies:n,ci_metadata:pi()}}async function An(t){let e=t.quiet||t.json,n=t.ci||process.env.CI==="true",r=resolve(t.path),s=basename(r),o=s,a=join(r,"package.json"),i=join(r,"veestack.config.json");if(existsSync(a))try{let d=JSON.parse(readFileSync(a,"utf-8"));d.name&&(o=d.name);}catch{}if(existsSync(i))try{let d=JSON.parse(readFileSync(i,"utf-8"));d.name&&(o=d.name);}catch{}e||(console.log(v.bold.cyan(`
61
- VeeStack Security Scan`)),console.log(v.gray("\u2500".repeat(40))));await Se();if(!existsSync(i)&&!t.json){if(n)console.log(v.gray(`
62
- \u26A1 CI mode detected: Using default project name and scan directories`)),await ht({ci:true,skipAuthCheck:true,skipNextSteps:true});else if(!e){console.log(v.cyan(`
54
+ `));return}let L;if(d.createProject){console.log(v.gray(`
55
+ Creating project on VeeStack...`));let U=await ri(d.projectName,d.framework);U?(L=U.id,console.log(v.green("\u2714 Project created"))):console.log(v.yellow("\u26A0\uFE0F Could not create project on server (offline mode)"));}let N={projectId:L,name:d.projectName,framework:d.framework,scanPatterns:d.scanPatterns,excludePatterns:si()};oi(N);let I=r.confidence===0;if(t?.skipNextSteps){console.log(v.green(`
56
+ \u2714 Configuration saved to veestack.config.json`)),I&&console.log(v.yellow("\u26A0 Framework detection failed. Some settings may need manual adjustment."));return}console.log(v.green(`
57
+ \u2714 Configuration saved to veestack.config.json`)),I&&console.log(v.yellow("\u26A0 Framework detection failed. Some settings may need manual adjustment.")),console.log(v.bold(`
58
+ Next steps:`)),console.log(v.gray(" 1. Run analysis:")),console.log(v.cyan(" veestack scan")),console.log(v.gray(" 2. Upload results:")),console.log(v.cyan(" veestack upload")),console.log(v.gray(" 3. View in dashboard:")),console.log(v.cyan(` https://www.veestack.com/dashboard${L?`/projects/${L}`:""}
59
+ `));}var Cn=globalThis,vi=Cn.CLI_VERSION||"unknown",ki=Cn.SNAPSHOT_VERSION||"unknown",_i=Cn.ENGINE_TARGET||"unknown";function wi(t){let e={},n=t.split(/\r?\n/),r=false,s=null;for(let o of n){let a=o.replace(/\t/g," "),i=a.trim();if(!r){/^packages\s*:\s*$/.test(i)&&(r=true,s=a.match(/^\s*/)?.[0].length??0);continue}if(i!==""&&!i.startsWith("#")){let N=a.match(/^\s*/)?.[0].length??0;if(s!==null&&N<=s)break}let c=i.match(/^\/?([^\s]+)\s*:\s*$/);if(!c)continue;let l=c[1].replace(/^\/+/,""),d=l.lastIndexOf("@");if(d<=0)continue;let b=l.slice(0,d),L=l.slice(d+1);!b||!L||!/^\d+\./.test(L)||(e[b]=L);}return e}function Ei(){if(process.env.GITHUB_ACTIONS){let[t,e]=(process.env.GITHUB_REPOSITORY||"").split("/");return {provider:"github_actions",repo_owner:t,repo_name:e,commit_sha:process.env.GITHUB_SHA,run_id:process.env.GITHUB_RUN_ID,event_name:process.env.GITHUB_EVENT_NAME,pr_number:process.env.GITHUB_REF?.includes("refs/pull/")?parseInt(process.env.GITHUB_REF.split("/")[2]):void 0}}}function In(t){return ge__default.createHash("sha256").update(t).digest("hex")}function Si(t){let e=[".exe",".dll",".so",".dylib",".bin",".png",".jpg",".jpeg",".gif",".pdf",".zip",".tar",".gz",".7z",".woff",".woff2",".ttf",".eot"],n=t.split(".").pop()?.toLowerCase();return n?e.includes("."+n):false}function Ti(t){return {ts:"TypeScript",js:"JavaScript",tsx:"TypeScript",jsx:"JavaScript",py:"Python",go:"Go",rs:"Rust",java:"Java",kt:"Kotlin",rb:"Ruby",php:"PHP",cs:"C#",cpp:"C++",c:"C",h:"C",json:"JSON",yaml:"YAML",yml:"YAML",md:"Markdown",html:"HTML",css:"CSS",scss:"SCSS",sql:"SQL",sh:"Shell",mjs:"JavaScript",cjs:"JavaScript",svelte:"Svelte",vue:"Vue"}[t]||"Other"}function Ai(t){let e={};for(let n of t){let r=Ti(n.extension.toLowerCase());e[r]=(e[r]||0)+1;}return e}function bi(t,e){let a=0,i={critical:0,high:0,medium:0,low:0};e&&(i={critical:e.criticalCount||0,high:e.highCount||0,medium:e.mediumCount||0,low:e.lowCount||0},a=i.critical*25+i.high*15+i.medium*5+i.low*2);let c=Math.max(0,100-a),l="F";return c===100?l="A+":c>=90?l="A":c>=80?l="B":c>=70?l="C":c>=60&&(l="D"),{score:c,grade:l,breakdown:i}}async function xi(t){try{return execSync("git diff --name-only HEAD",{cwd:t,encoding:"utf-8"}).split(`
60
+ `).filter(Boolean)}catch{return []}}async function Ri(t,e,n,r=false){let s=[],o=await glob(e,{cwd:t,ignore:n,nodir:true,dot:true,absolute:false});if(r){let i=await xi(t);i.length>0&&(o=o.filter(c=>i.includes(c)));}let a=o.filter(i=>!i.replace(/\\/g,"/").match(/(node_modules|\.next|dist|build|\.git)\//));for(let i of a){let c=statSync(join(t,i));c.isFile()&&s.push({id:ge__default.randomUUID(),path:i,path_hash:In(i),depth:i.split(/[\\/]/).length,size_bytes:c.size,estimated_lines:Math.floor(c.size/50),extension:i.split(".").pop()||"",is_binary:Si(i)});}return s.sort((i,c)=>i.path_hash.localeCompare(c.path_hash))}async function Ci(t){let e=[];try{let n=join(t,"package.json");if(!existsSync(n))return [];let r=JSON.parse(readFileSync(n,"utf-8")),s={},o=join(t,"pnpm-lock.yaml"),a=join(t,"package-lock.json");if(existsSync(o))s=wi(readFileSync(o,"utf8"));else if(existsSync(a)){let c=JSON.parse(readFileSync(a,"utf8"));for(let[l,d]of Object.entries(c.packages||{}))l&&d.version&&(s[l.replace("node_modules/","")]=d.version);}let i=(c,l)=>{for(let[d,b]of Object.entries(c)){let L=s[d]||b.replace(/[\^~]/,""),N=L.match(/^(\d+)\.(\d+)/);e.push({id:ge__default.randomUUID(),name_hash:In(d),name:d,version:L,major_version:N?parseInt(N[1]):0,minor_version:N?parseInt(N[2]):0,category:l});}};r.dependencies&&i(r.dependencies,"prod"),r.devDependencies&&i(r.devDependencies,"dev"),r.peerDependencies&&i(r.peerDependencies,"peer");}catch{}return e.sort((n,r)=>n.name_hash.localeCompare(r.name_hash))}async function Ii(t,e){let n=await Ci(t);return {snapshot_version:ki,engine_target_version:_i,project_id:ge__default.randomUUID(),generated_at:new Date().toISOString(),root_path_hash:In(t),project_root:resolve(t),metadata:{total_files:e.length,total_dependencies:n.length,total_size_bytes:e.reduce((r,s)=>r+s.size_bytes,0),total_lines:e.reduce((r,s)=>r+(s.estimated_lines||0),0),max_directory_depth:Math.max(...e.map(r=>r.depth),0),language_breakdown:Ai(e)},files:e,dependencies:n,ci_metadata:Ei()}}async function Nn(t){let e=t.quiet||t.json,n=t.ci||process.env.CI==="true",r=resolve(t.path),s=basename(r),o=s,a=join(r,"package.json"),i=join(r,"veestack.config.json");if(existsSync(a))try{let d=JSON.parse(readFileSync(a,"utf-8"));d.name&&(o=d.name);}catch{}if(existsSync(i))try{let d=JSON.parse(readFileSync(i,"utf-8"));d.name&&(o=d.name);}catch{}e||(console.log(v.bold.cyan(`
61
+ VeeStack Security Scan`)),console.log(v.gray("\u2500".repeat(40))));await Te();if(!existsSync(i)&&!t.json){if(n)console.log(v.gray(`
62
+ \u26A1 CI mode detected: Using default project name and scan directories`)),await vt({ci:true,skipAuthCheck:true,skipNextSteps:true});else if(!e){console.log(v.cyan(`
63
63
  \u2728 Welcome to VeeStack!`)),console.log(v.gray(`Let's configure your project to start scanning for security issues.
64
- `));let{runInit:d}=await wr({type:"confirm",name:"runInit",message:"Would you like to run 'veestack init' first?",initial:true});d?await ht({skipAuthCheck:true,skipNextSteps:true}):console.log(v.gray(`
65
- Using smart defaults for this scan...`));}}let l=si({text:"Preparing scan...",spinner:"dots",stream:process.stdout});e||(console.log(`
64
+ `));let{runInit:d}=await Cr({type:"confirm",name:"runInit",message:"Would you like to run 'veestack init' first?",initial:true});d?await vt({skipAuthCheck:true,skipNextSteps:true}):console.log(v.gray(`
65
+ Using smart defaults for this scan...`));}}let l=gi({text:"Preparing scan...",spinner:"dots",stream:process.stdout});e||(console.log(`
66
66
  `+v.bold.cyan("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501")),console.log(v.bold.white(" Analyzing Project")),console.log(v.bold.cyan(`\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
67
- `)),l.start());try{let d=Date.now(),b=existsSync(i)?JSON.parse(readFileSync(i,"utf-8")):{},$=b.scanPatterns||["**/*.{js,jsx,ts,tsx,json,py,go,rs,rb,php,cs,cpp,c,h,mjs,cjs,svelte,vue,html}"],I=b.excludePatterns||["**/node_modules/**","**/.next/**","**/dist/**","**/build/**","**/.git/**","**/coverage/**","**/*.test.ts","**/*.spec.ts"],C=await vi(r,$,I,t.diff);if(C.length===0&&!t.json){e||console.log(v.yellow(`
68
- \u26A0 No source files found to scan.`));return}let U=new ii.SingleBar({format:"Scanning |"+v.cyan("{bar}")+"| {percentage}% ({value}/{total} files)",barCompleteChar:"\u2588",barIncompleteChar:"\u2591",hideCursor:!0});e||U.start(C.length,0);let M=await Jn(r,C.map(Q=>Q.path));e||(U.update(Math.floor(C.length*.5)),l.text="Analyzing security...");let L=hi(C.length,M),_t=`report-${o}-security.json`;if(M.secretsFound&&M.secretsFound.length>0){let Q={project:o,directory:s,timestamp:new Date().toISOString(),score:L.score,grade:L.grade,criticalIssues:M.criticalCount,issues:M.secretsFound};await(await import('fs/promises')).writeFile(_t,JSON.stringify(Q,null,2));}t.json&&(console.log(JSON.stringify({version:ci,timestamp:new Date().toISOString(),score:L.score,grade:L.grade,files:C.length,issues:L.breakdown,project:o,directory:s},null,2)),process.exit(0)),M.criticalCount>0&&(e||(U.stop(),l.fail("Security validation failed"),console.log(v.red(`
69
- \u274C ${M.criticalCount} Critical security risks detected.`)),M.secretsFound&&M.secretsFound.length>0&&(console.log(v.gray(`
70
- Issues detail:`)),M.secretsFound.slice(0,5).forEach(Q=>{console.log(v.yellow(` \u2022 ${Q.ruleId}: `)+v.gray(`${Q.filePath}:${Q.line}`));}),M.secretsFound.length>5&&console.log(v.gray(` ... and ${M.secretsFound.length-5} more issues.`))),console.log(v.cyan(`
71
- \u{1F4C4} Detailed report saved to: ${_t}`)),console.log(v.yellow(`
67
+ `)),l.start());try{let d=Date.now(),b=existsSync(i)?JSON.parse(readFileSync(i,"utf-8")):{},L=b.scanPatterns||["**/*.{js,jsx,ts,tsx,json,py,go,rs,rb,php,cs,cpp,c,h,mjs,cjs,svelte,vue,html}"],N=b.excludePatterns||["**/node_modules/**","**/.next/**","**/dist/**","**/build/**","**/.git/**","**/coverage/**","**/*.test.ts","**/*.spec.ts"],I=await Ri(r,L,N,t.diff);if(I.length===0&&!t.json){e||console.log(v.yellow(`
68
+ \u26A0 No source files found to scan.`));return}let U=new hi.SingleBar({format:"Scanning |"+v.cyan("{bar}")+"| {percentage}% ({value}/{total} files)",barCompleteChar:"\u2588",barIncompleteChar:"\u2591",hideCursor:!0});e||U.start(I.length,0);let F=await qn(r,I.map(ee=>ee.path));e||(U.update(Math.floor(I.length*.5)),l.text="Analyzing security...");let $=bi(I.length,F),St=`report-${o}-security.json`;if(F.secretsFound>0){let ee={project:o,directory:s,timestamp:new Date().toISOString(),score:$.score,grade:$.grade,criticalIssues:F.criticalCount,issues:F.results};await(await import('fs/promises')).writeFile(St,JSON.stringify(ee,null,2));}t.json&&(console.log(JSON.stringify({version:vi,timestamp:new Date().toISOString(),score:$.score,grade:$.grade,files:I.length,issues:$.breakdown,project:o,directory:s},null,2)),process.exit(0)),F.criticalCount>0&&(e||(U.stop(),l.fail("Security validation failed"),console.log(v.red(`
69
+ \u274C ${F.criticalCount} Critical security risks detected.`)),F.secretsFound>0&&(console.log(v.gray(`
70
+ Issues detail:`)),F.results.slice(0,5).forEach(ee=>{console.log(v.yellow(` \u2022 ${ee.ruleId}: `)+v.gray(`${ee.filePath}:${ee.line}`));}),F.secretsFound>5&&console.log(v.gray(` ... and ${F.secretsFound-5} more issues.`))),console.log(v.cyan(`
71
+ \u{1F4C4} Detailed report saved to: ${St}`)),console.log(v.yellow(`
72
72
  For your protection, local snapshot generation is blocked.`)),console.log(v.gray(`
73
- \u2139 Recommended actions:`)),console.log(v.gray(" 1. Open the affected file(s) and review the reported security issue.")),console.log(v.gray(" 2. Fix the vulnerability or sensitive data exposure.")),console.log(v.gray(" 3. Run 'veestack scan' again.")),process.exit(1)));let{safe:z}=Gn(C.map(Q=>Q.path)),ae=await _i(r,C.filter(Q=>z.includes(Q.path)));if(e||(U.update(C.length),U.stop(),l.succeed(`Analysis prepared in ${((Date.now()-d)/1e3).toFixed(1)}s`)),e)console.log(v.green(`\u2714 Scan completed. Score: ${L.grade}`));else {console.log(v.gray(`
74
- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`)),console.log(v.bold.cyan(" Security Summary")),console.log(v.gray("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")),console.log(v.gray("Project: "),v.white(o)),o!==s&&console.log(v.gray("Directory: "),v.white(s));let Q=L.score>=90?v.green:L.score>=70?v.yellow:v.red;console.log(v.gray("Score: "),Q(`${L.score} Grade: ${L.grade}`)),console.log(v.gray("Issues found: "),v.white(`${L.breakdown.critical+L.breakdown.high+L.breakdown.medium+L.breakdown.low}`)),console.log(v.gray("Dependencies: "),v.white(ae.metadata.total_dependencies)),console.log(v.gray("Files: "),v.white(C.length)),console.log(v.gray(`
73
+ \u2139 Recommended actions:`)),console.log(v.gray(" 1. Open the affected file(s) and review the reported security issue.")),console.log(v.gray(" 2. Fix the vulnerability or sensitive data exposure.")),console.log(v.gray(" 3. Run 'veestack scan' again.")),process.exit(1)));let{safe:z}=Yn(I.map(ee=>ee.path)),le=await Ii(r,I.filter(ee=>z.includes(ee.path)));if(e||(U.update(I.length),U.stop(),l.succeed(`Analysis prepared in ${((Date.now()-d)/1e3).toFixed(1)}s`)),e)console.log(v.green(`\u2714 Scan completed. Score: ${$.grade}`));else {console.log(v.gray(`
74
+ \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`)),console.log(v.bold.cyan(" Security Summary")),console.log(v.gray("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")),console.log(v.gray("Project: "),v.white(o)),o!==s&&console.log(v.gray("Directory: "),v.white(s));let ee=$.score>=90?v.green:$.score>=70?v.yellow:v.red;console.log(v.gray("Score: "),ee(`${$.score} Grade: ${$.grade}`)),console.log(v.gray("Issues found: "),v.white(`${$.breakdown.critical+$.breakdown.high+$.breakdown.medium+$.breakdown.low}`)),console.log(v.gray("Dependencies: "),v.white(le.metadata.total_dependencies)),console.log(v.gray("Files: "),v.white(I.length)),console.log(v.gray(`
75
75
  Next steps:`)),console.log(v.gray(" 1. Upload results to dashboard:")),console.log(v.cyan(" veestack login")),console.log(v.cyan(" veestack upload")),console.log(v.gray(`
76
76
  2. View detailed report:`)),console.log(v.cyan(` ${t.output}`)),console.log(v.gray(`
77
77
  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
78
- `));}await(await import('fs/promises')).writeFile(t.output,JSON.stringify(ae,null,2)),console.log(`
78
+ `));}await(await import('fs/promises')).writeFile(t.output,JSON.stringify(le,null,2)),console.log(`
79
79
  \u2705 Snapshot saved to ${t.output}`);}catch(d){l.fail("Scan failed"),console.error(v.red(`
80
- \u274C Error:`),d),process.exit(1);}}var Ai=3e4;async function xn(t,e={}){let{timeout:n=Ai}=e,r=new AbortController,s=setTimeout(()=>r.abort(),n);try{let o=await fetch(t,{...e,signal:r.signal});return clearTimeout(s),o}catch(o){throw clearTimeout(s),o instanceof Error&&o.name==="AbortError"?new Error(`Request timed out after ${n/1e3}s. Please check your connection.`):o}}async function xi(){try{let t=await ge("GET","/api/projects"),e=await xn(`${fe}/api/projects`,{headers:t});return e.ok?(await e.json()).projects||[]:[]}catch{return []}}async function xr(t){try{let e=JSON.stringify({name:t}),n=await ge("POST","/api/projects",e),r=await xn(`${fe}/api/projects`,{method:"POST",headers:n,body:e});if(r.ok){let s=await r.json();return s.project?.id||s.id||null}return null}catch{return null}}function sn(t){let e=Ei.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{e.question(t,r=>{e.close(),n(r);});})}async function bi(){console.log(v.blue(`
80
+ \u274C Error:`),d),process.exit(1);}}var ji=3e4;async function On(t,e={}){let{timeout:n=ji}=e,r=new AbortController,s=setTimeout(()=>r.abort(),n);try{let o=await fetch(t,{...e,signal:r.signal});return clearTimeout(s),o}catch(o){throw clearTimeout(s),o instanceof Error&&o.name==="AbortError"?new Error(`Request timed out after ${n/1e3}s. Please check your connection.`):o}}async function Li(){try{let t=await he("GET","/api/projects"),e=await On(`${Z}/api/projects`,{headers:t});return e.ok?(await e.json()).projects||[]:[]}catch{return []}}async function Pr(t){try{let e=JSON.stringify({name:t}),n=await he("POST","/api/projects",e),r=await On(`${Z}/api/projects`,{method:"POST",headers:n,body:e});if(r.ok){let s=await r.json();return s.project?.id||s.id||null}return null}catch{return null}}function dn(t){let e=Pi.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{e.question(t,r=>{e.close(),n(r);});})}async function $i(){console.log(v.blue(`
81
81
  \u{1F4C1} Loading projects...
82
- `));let t=await xi();if(t.length===0){if(console.log(v.yellow(`No projects found.
83
- `)),(await sn("Do you want to create a new project? (y/n): ")).toLowerCase()==="y"){let s=await sn("Enter project name: ");if(s.trim()){let o=await xr(s.trim());if(o)return console.log(v.green(`
82
+ `));let t=await Li();if(t.length===0){if(console.log(v.yellow(`No projects found.
83
+ `)),(await dn("Do you want to create a new project? (y/n): ")).toLowerCase()==="y"){let s=await dn("Enter project name: ");if(s.trim()){let o=await Pr(s.trim());if(o)return console.log(v.green(`
84
84
  \u2705 Project "${s}" created successfully!`)),o}}return null}console.log(v.white(`Select a project:
85
85
  `)),console.log(v.gray(`0. [+] Create new project
86
86
  `)),t.forEach((r,s)=>{console.log(v.white(`${s+1}. ${r.name}`)),console.log(v.gray(` ID: ${r.id}`)),console.log(v.gray(` Created: ${new Date(r.created_at).toLocaleDateString()}
87
- `));});let e=await sn("Enter number (0-"+t.length+"): "),n=parseInt(e,10);if(n===0){let r=await sn(`
88
- Enter project name: `);if(r.trim()){let s=await xr(r.trim());if(s)return console.log(v.green(`
87
+ `));});let e=await dn("Enter number (0-"+t.length+"): "),n=parseInt(e,10);if(n===0){let r=await dn(`
88
+ Enter project name: `);if(r.trim()){let s=await Pr(r.trim());if(s)return console.log(v.green(`
89
89
  \u2705 Project "${r}" created successfully!`)),s}return null}else if(n>0&&n<=t.length){let r=t[n-1];return console.log(v.green(`
90
90
  \u2705 Selected project: "${r.name}"`)),r.id}else return console.log(v.red(`
91
- \u274C Invalid selection`)),null}async function bn(t){let e=t.ci||process.env.CI==="true",n=e,r=await Ne();if(!r){if(e){console.log(v.yellow(`
91
+ \u274C Invalid selection`)),null}async function Pn(t){let e=t.ci||process.env.CI==="true",n=e,r=await Pe();if(!r){if(e){console.log(v.yellow(`
92
92
  \u26A0 Skipping cloud upload in CI mode because login is not available.`)),console.log(v.gray(`Snapshot saved locally: ${t.file||"snapshot.json"}`));return}console.log(v.yellow(`
93
93
  \u26A0 Oops! You're not logged in.`)),console.log(v.gray(`Run 'veestack login' to upload your snapshot and unlock cloud features.
94
- `)),console.log(v.cyan(" veestack login")),process.exit(1);}let s=await nn();n||(console.log(v.blue(`
94
+ `)),console.log(v.cyan(" veestack login")),process.exit(1);}let s=await ln();n||(console.log(v.blue(`
95
95
  \u{1F510} Authentication verified`)),r.user&&console.log(v.gray(`User: ${r.user.name}`)),console.log(v.gray(`Subscription tier: ${s==="pro"?"Pro":"Free"}`)),console.log(v.gray("\u2500".repeat(40)+`
96
- `)));let o=si({text:"Preparing upload...",isSilent:n}).start();try{let a=await import('fs/promises');existsSync(t.file)||(o.fail(`File not found: ${t.file}`),n||console.log(v.yellow(`
97
- Tip: Run "veestack scan" first to generate a snapshot.`)),process.exit(1));let i=await a.readFile(t.file,"utf-8"),c=JSON.parse(i),l=t.projectId||process.env.VEESTACK_PROJECT_ID;if(!l){n&&(o.fail("Project ID is required in CI mode. Please set VEESTACK_PROJECT_ID."),process.exit(1)),o.stop();let ae=await bi();ae||(console.log(v.red(`
98
- \u274C No project selected. Exiting.`)),process.exit(1)),l=ae,o.start("Uploading snapshot...");}o.text="Compressing and uploading snapshot...";let d=gzipSync(JSON.stringify(c)).toString("base64"),b=JSON.stringify({project_id:l,snapshot:d,compressed:!0,encoding:"base64"}),$=await ge("POST","/api/snapshots/upload",b),I=await xn(`${fe}/api/snapshots/upload`,{method:"POST",headers:$,body:b});if(!I.ok){let ae=await I.json().catch(()=>({}));o.fail("Upload failed"),console.error(v.red(`Error: ${ae.message||ae.error||"Server error"}`)),process.exit(1);}let C=await I.json(),{snapshotId:U,reportId:M,score:L,severity:_t,findings:z}=C;if(o.succeed("Analysis complete"),n)console.log(`\u2714 Upload successful. Report: ${gt}/dashboard/reports/${M}?project=${l}`);else {console.log(v.green(`
99
- \u2705 Report generated and saved to VeeStack`)),console.log(v.gray("Project ID: "),v.white(l)),console.log(v.gray("Snapshot ID: "),v.white(U)),console.log(v.gray("Report ID: "),v.white(M)),console.log(v.bold(`
100
- \u{1F4CA} Security Score:`),L>=90?v.green(L):L>=70?v.yellow(L):v.red(L)),console.log(v.gray("Severity: "),_t),console.log(v.gray("Findings: "),z);let ae=`${gt}/dashboard/reports/${M}?project=${l}`;console.log(v.blue(`
101
- \u{1F517} View your full report at:`)),console.log(v.underline(ae));}}catch(a){o.fail("Upload failed"),console.error(a),process.exit(1);}}var Ri=process.env.VEESTACK_API_URL||"https://api.veestack.dev";async function br(t){t.format==="sarif"?await Ci(t):console.log(v.red('\u274C Unsupported format. Currently only "sarif" is supported.'));}async function Ci(t){await Ne()||(console.error(v.red("\u274C Authentication required. Please login first.")),process.exit(1));let n=t.reportId;n||(console.error(v.red("\u274C Report ID is required for SARIF export.")),process.exit(1)),console.log(v.blue(`
102
- \u{1F4CA} Fetching report ${n} for SARIF export...`));try{let r=await ge("GET",`/api/reports/${n}/sarif`),s=await fetch(`${Ri}/api/reports/${n}/sarif`,{headers:r});if(!s.ok){let c=await s.json().catch(()=>({}));throw new Error(c.message||"Failed to fetch SARIF report")}let o=await s.json(),a=t.output||"veestack-results.sarif";await(await import('fs/promises')).writeFile(a,JSON.stringify(o,null,2)),console.log(v.green(`
96
+ `)));let o=gi({text:"Preparing upload...",isSilent:n}).start();try{let a=await import('fs/promises');existsSync(t.file)||(o.fail(`File not found: ${t.file}`),n||console.log(v.yellow(`
97
+ Tip: Run "veestack scan" first to generate a snapshot.`)),process.exit(1));let i=await a.readFile(t.file,"utf-8"),c=JSON.parse(i),l=t.projectId||process.env.VEESTACK_PROJECT_ID;if(!l){n&&(o.fail("Project ID is required in CI mode. Please set VEESTACK_PROJECT_ID."),process.exit(1)),o.stop();let le=await $i();le||(console.log(v.red(`
98
+ \u274C No project selected. Exiting.`)),process.exit(1)),l=le,o.start("Uploading snapshot...");}o.text="Compressing and uploading snapshot...";let d=gzipSync(JSON.stringify(c)).toString("base64"),b=JSON.stringify({project_id:l,snapshot:d,compressed:!0,encoding:"base64"}),L=await he("POST","/api/snapshots/upload",b),N=await On(`${Z}/api/snapshots/upload`,{method:"POST",headers:L,body:b});if(!N.ok){let le=await N.json().catch(()=>({}));o.fail("Upload failed"),console.error(v.red(`Error: ${le.message||le.error||"Server error"}`)),process.exit(1);}let I=await N.json(),{snapshotId:U,reportId:F,score:$,severity:St,findings:z}=I;if(o.succeed("Analysis complete"),n)console.log(`\u2714 Upload successful. Report: ${ht}/dashboard/reports/${F}?project=${l}`);else {console.log(v.green(`
99
+ \u2705 Report generated and saved to VeeStack`)),console.log(v.gray("Project ID: "),v.white(l)),console.log(v.gray("Snapshot ID: "),v.white(U)),console.log(v.gray("Report ID: "),v.white(F)),console.log(v.bold(`
100
+ \u{1F4CA} Security Score:`),$>=90?v.green($):$>=70?v.yellow($):v.red($)),console.log(v.gray("Severity: "),St),console.log(v.gray("Findings: "),z);let le=`${ht}/dashboard/reports/${F}?project=${l}`;console.log(v.blue(`
101
+ \u{1F517} View your full report at:`)),console.log(v.underline(le));}}catch(a){o.fail("Upload failed"),console.error(a),process.exit(1);}}async function Dr(t){t.format==="sarif"?await Vi(t):console.log(v.red('\u274C Unsupported format. Currently only "sarif" is supported.'));}async function Vi(t){await Pe()||(console.error(v.red("\u274C Authentication required. Please login first.")),process.exit(1));let n=t.reportId;n||(console.error(v.red("\u274C Report ID is required for SARIF export.")),process.exit(1)),console.log(v.blue(`
102
+ \u{1F4CA} Fetching report ${n} for SARIF export...`));try{let r=await he("GET",`/api/reports/${n}/sarif`),s=await fetch(`${Z}/api/reports/${n}/sarif`,{headers:r});if(!s.ok){let c=await s.json().catch(()=>({}));throw new Error(c.message||"Failed to fetch SARIF report")}let o=await s.json(),a=t.output||"veestack-results.sarif";await(await import('fs/promises')).writeFile(a,JSON.stringify(o,null,2)),console.log(v.green(`
103
103
  \u2705 SARIF report exported to: ${a}`)),console.log(v.gray("You can now upload this to GitHub Security Tab."));}catch(r){console.error(v.red(`
104
- \u274C Export failed:`),r instanceof Error?r.message:r),process.exit(1);}}var Oi=globalThis,Di=Oi.CLI_VERSION||"unknown";function ji(){let t=process.platform,e=pt.hostname(),n=Di,r=e||pe__default.randomBytes(8).toString("hex"),s=pe__default.createHash("sha256").update(`${r}:${t}:${n}`).digest("hex"),o=pe__default.randomBytes(12).toString("hex"),a=`${e||"Unknown"} (${t==="win32"?"Windows":t==="darwin"?"macOS":"Linux"})`;return {id:o,name:a,fingerprint:s,os:t,version:n}}function $i(){return new Promise(t=>{console.log(v.gray(`
105
- \u{1F4A1} Tip: Right-click to paste, then press Enter
106
- `));let e=Ei.createInterface({input:process.stdin,output:process.stdout});e.question(v.cyan("Enter the code from your browser: "),n=>{e.close(),t(n.trim().toUpperCase());});})}async function Li(t,e){try{console.log(v.gray(`[DEBUG] Attempting fetch to: ${Ie.verifyCode}`));let n=await fetch(Ie.verifyCode,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({user_code:t,device_info:e})});if(n.status===202)return null;if(!n.ok){let r=await n.json().catch(()=>({}));throw console.log(v.red(`
107
- \u274C Server error: ${r.error||n.statusText}`)),new Error(r.error||`Failed to verify code: ${n.statusText}`)}return await n.json()}catch(n){throw console.log(v.red(`
108
- \u274C Connection error: ${n instanceof Error?n.message:"Unknown error"}`)),n}}async function Ot(){console.log(v.bold.cyan(`
104
+ \u274C Export failed:`),r instanceof Error?r.message:r),process.exit(1);}}var Bi=globalThis,Fi=Bi.CLI_VERSION||"unknown";function zi(){return ge__default.randomBytes(16).toString("hex")}function Hi(){let t=ge__default.randomBytes(32).toString("base64url"),e=ge__default.createHash("sha256").update(t).digest("base64url");return {code_verifier:t,code_challenge:e}}function Ji(){let t=process.platform,e=gt.hostname(),n=Fi,r=e||ge__default.randomBytes(8).toString("hex"),s=ge__default.createHash("sha256").update(`${r}:${t}:${n}`).digest("hex"),o=ge__default.randomBytes(12).toString("hex"),a=`${e||"Unknown"} (${t==="win32"?"Windows":t==="darwin"?"macOS":"Linux"})`;return {id:o,name:a,fingerprint:s,os:t,cli_version:n}}async function Ki(t,e){try{let n=new URL(Se.token);n.searchParams.set("device_code",t),n.searchParams.set("code_verifier",e);let r=await fetch(n.toString(),{method:"GET",headers:{"Content-Type":"application/json"}});if(r.status===202)return null;if(!r.ok){let s=await r.json().catch(()=>({}));if(s.code==="slow_down")return await new Promise(o=>setTimeout(o,2e3)),null;throw new Error(s.error||`Failed to poll for token: ${r.statusText}`)}return await r.json()}catch{return null}}async function Gi(t,e){try{let n=zi();console.log(v.gray(`[DEBUG] Creating device request at: ${Se.device}`));let r=await fetch(Se.device,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_code:n,client_id:t.id,code_challenge:e.code_challenge,code_challenge_method:"S256",device_info:t})});if(!r.ok){let s=await r.json().catch(()=>({}));throw console.log(v.red(`
105
+ \u274C Server error: ${s.error||r.statusText}`)),new Error(s.error||`Failed to create device request: ${r.statusText}`)}return await r.json()}catch(n){throw console.log(v.red(`
106
+ \u274C Connection error: ${n instanceof Error?n.message:"Unknown error"}`)),n}}async function Lt(){console.log(v.bold.cyan(`
109
107
  \u{1F510} Login to VeeStack
110
- `));let t=ji(),e=`${gt}/cli-auth`;console.log(v.yellow(`Opening browser to authenticate...
111
- `)),console.log(v.gray(`Please copy the code from your browser and paste it here.
112
- `)),await Ni(e);let n=await $i();(!n||n.length<6)&&(console.log(v.red(`
113
- \u274C Invalid code. Please try again.`)),process.exit(1));let r=si({text:"Verifying code...",spinner:"dots",stream:process.stdout});r.start();try{let s=null,o=0,a=300;for(;!s&&o<a;){await new Promise(c=>setTimeout(c,2e3));try{s=await Li(n,t);}catch(c){c instanceof Error&&c.message.includes("Invalid or expired")&&(r.fail("Verification failed"),console.log(v.red(`
114
- \u274C Invalid or expired code. Please try again.`)),process.exit(1)),c instanceof Error&&console.log(v.yellow(`
115
- \u26A0\uFE0F API error: ${c.message}`));}o++,s||(r.text=`Waiting for browser authorization... (${o*2}s)`);}s||(r.fail("Authentication timeout"),console.log(v.red(`
116
- \u274C Authentication timed out after 10 minutes.`)),console.log(v.yellow("Please try again with: veestack login")),process.exit(1)),r.succeed("Authentication successful");let i={token:s.access_token,tokenType:s.token_type,refreshToken:s.refresh_token,tokenExpiresAt:new Date(Date.now()+s.expires_in*1e3).toISOString(),device:{id:t.id,name:t.name,fingerprint:t.fingerprint},user:{id:s.user.id,email:s.user.email,name:s.user.name,provider:s.user.provider},subscription:s.subscription||{tier:"free",isActive:!0},lastLoginAt:new Date().toISOString()};try{await Nt(i),console.log(v.green(`
108
+ `));let t=Ji(),e=Hi();console.log(v.gray("Creating device authorization request..."));let n;try{if(n=await Gi(t,e),!n)throw new Error("Failed to create device request");console.log(v.gray(`Device request created
109
+ `));}catch(c){console.log(v.red(`
110
+ \u274C Failed to create device request`)),console.error(c),process.exit(1);}n||(console.log(v.red(`
111
+ \u274C Failed to get authorization data`)),process.exit(1));let r=`${ht}/cli-auth?code=${n.user_code}`;console.log(v.yellow(`Opening browser to authenticate...
112
+ `)),console.log(v.gray(`Your code: ${n.user_code}
113
+ `));try{await Mi(r),console.log(v.gray(`If your browser did not open, visit: ${r}
114
+ `));}catch{console.log(v.yellow(`\u26A0\uFE0F Could not open browser automatically
115
+ `)),console.log(v.gray(`Please visit: ${r}
116
+ `));}let s=gi({text:"Waiting for browser authorization...",spinner:"dots",stream:process.stdout});s.start();let o=null,a=0,i=300;try{for(;!o&&a<i;)if(await new Promise(d=>setTimeout(d,2e3)),o=await Ki(n.device_code,e.code_verifier),a++,!o){let d=a*2,b=i*2-d;s.text=`Waiting for browser authorization... (${d}s elapsed, ${b}s remaining)`;}o||(s.fail("Authentication timeout"),console.log(v.red(`
117
+ \u274C Authentication request expired after 10 minutes.`)),console.log(v.yellow(`
118
+ The device code has expired for security reasons.`)),console.log(v.gray("Device codes are valid for 10 minutes only.")),console.log(v.yellow(`
119
+ Please try again with: `)+v.cyan(`veestack login
120
+ `)),process.exit(1)),s.succeed("Authentication successful");let c=typeof o.expires_in=="number"?o.expires_in:900,l={token:o.access_token,tokenType:o.token_type,refreshToken:o.refresh_token,tokenExpiresAt:new Date(Date.now()+c*1e3).toISOString(),device:{id:t.id,name:t.name,fingerprint:t.fingerprint},user:{id:o.user.id,email:o.user.email,name:o.user.name,provider:o.user.provider},subscription:o.subscription||{tier:"free",isActive:!0},lastLoginAt:new Date().toISOString()};try{await Dt(l);let d=await nn();console.log(v.green(`
117
121
  \u2714 Authentication successful
118
- `)),console.log(v.gray("Account: ")+v.white(i.user.name)),console.log(v.gray("Email: ")+v.white(i.user.email)),console.log(v.gray("Device: ")+v.white(i.device.name)),console.log(v.gray("Subscription: ")+(i.subscription?.tier==="pro"?v.cyan("Pro"):v.blue("Free"))),console.log(v.gray(`
122
+ `)),console.log(v.gray("Account: ")+v.white(l.user.name)),console.log(v.gray("Email: ")+v.white(l.user.email)),console.log(v.gray("Device: ")+v.white(l.device.name)),console.log(v.gray("Subscription: ")+(l.subscription?.tier==="pro"?v.cyan("Pro"):v.blue("Free"))),d.keychainAvailable&&d.keychainHasTokens?console.log(v.gray(`
119
123
  Token saved securely to OS Keychain
120
- `)),_r({token:i.token,tokenType:i.tokenType,refreshToken:i.refreshToken,tokenExpiresAt:i.tokenExpiresAt,device:i.device,user:i.user,subscription:i.subscription,lastLoginAt:i.lastLoginAt});}catch(c){r.fail("Failed to save authentication"),console.error(v.red(`
121
- \u274C Could not securely store tokens:`),c),process.exit(1);}}catch(s){r.fail("Authentication failed"),console.error(v.red(`
122
- \u274C Error:`),s instanceof Error?s.message:s),process.exit(1);}}async function Cr(){try{let t=await K();if(!t){console.log(v.yellow("\u26A0\uFE0F Not logged in"));return}if(console.log(v.bold.cyan(`
124
+ `)):d.fileExists?console.log(v.gray(`
125
+ Tokens saved to encrypted file (AES-256-GCM)
126
+ `)):console.log(v.gray(`
127
+ Token storage completed
128
+ `)),Rr({token:l.token,tokenType:l.tokenType,refreshToken:l.refreshToken,tokenExpiresAt:l.tokenExpiresAt,device:l.device,user:l.user,subscription:l.subscription,lastLoginAt:l.lastLoginAt});}catch(d){s.fail("Failed to save authentication"),console.error(v.red(`
129
+ \u274C Could not securely store tokens:`),d),process.exit(1);}}catch(c){console.error(v.red(`
130
+ \u274C Error:`),c instanceof Error?c.message:c),process.exit(1);}}async function Lr(){try{let t=await W();if(!t){console.log(v.yellow("\u26A0\uFE0F Not logged in"));return}if(console.log(v.bold.cyan(`
123
131
  \u{1F6AA} Logout from VeeStack
124
- `)),t.token||t.apiKey)try{let e=t.token||t.apiKey;await fetch(Ie.logout,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e}`},body:JSON.stringify({device_id:t.device?.id})});}catch{}await ft()&&await We();try{let{existsSync:e,unlinkSync:n}=await import('fs'),{join:r}=await import('path'),{homedir:s}=await import('os'),o=r(s(),".veestack"),a=r(o,"config.json");e(a)&&n(a);}catch{}t.user?console.log(v.green(`\u2714 Logged out ${t.user.name}`)):console.log(v.green("\u2714 Logged out")),console.log(v.gray(`
132
+ `)),t.token||t.apiKey)try{let e=t.token||t.apiKey;await fetch(Se.logout,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e}`},body:JSON.stringify({device_id:t.device?.id})});}catch{}await mt()&&await Ye();try{let{existsSync:e,unlinkSync:n}=await import('fs'),{join:r}=await import('path'),{homedir:s}=await import('os'),o=r(s(),".veestack"),a=r(o,"config.json");e(a)&&n(a);}catch{}t.user?console.log(v.green(`\u2714 Logged out ${t.user.name}`)):console.log(v.green("\u2714 Logged out")),console.log(v.gray(`
125
133
  \u{1F510} All local tokens securely deleted`)),console.log(v.gray("See you soon! \u{1F44B}")),console.log(v.gray(`Run "veestack login" to authenticate again.
126
- `));}catch(t){_e.error("\u274C Error during logout:",_n(t)),process.exit(1);}}async function Ir(){try{let t=await Ne();t||(console.log(v.yellow("\u26A0\uFE0F Not authenticated")),console.log(v.gray(`
134
+ `));}catch(t){Ee.error("\u274C Error during logout:",bn(t)),process.exit(1);}}async function $r(){try{let t=await Pe();t||(console.log(v.yellow("\u26A0\uFE0F Not authenticated")),console.log(v.gray(`
127
135
  Please login first:`)),console.log(v.cyan(" veestack login")),process.exit(1)),console.log(v.bold.cyan(`
128
136
  \u{1F464} VeeStack Account
129
- `)),t.user&&(console.log(v.gray("User: ")+v.white(t.user.name)),console.log(v.gray("Email: ")+v.white(t.user.email)),console.log(v.gray("Provider: ")+v.cyan(t.user.provider))),t.device&&(console.log(v.gray("Device: ")+v.white(t.device.name)),console.log(v.gray("Device ID: ")+v.gray(t.device.id.substring(0,8)+"...")));let e=t.subscription?.tier||"free";if(console.log(v.gray("Subscription: ")+(e==="pro"?v.cyan("Pro"):v.blue("Free"))),t.tokenExpiresAt){let r=Sn(t)?v.red("Expired (will refresh)"):v.green("Valid");console.log(v.gray("Token Status: ")+r),console.log(v.gray("Expires: ")+v.yellow(new Date(t.tokenExpiresAt).toLocaleString()));}t.lastLoginAt&&console.log(v.gray("Last Login: ")+v.gray(new Date(t.lastLoginAt).toLocaleString())),console.log();}catch(t){console.error(v.red("\u274C Error:"),t instanceof Error?t.message:t),process.exit(1);}}function Pr(){return join(homedir(),".veestack","accounts")}function Vi(){try{let t=Pr();if(!oe.existsSync(t))return [];let e=[],n=oe.readdirSync(t);for(let r of n)if(r.endsWith(".json")){let s=oe.readFileSync(join(t,r),"utf-8"),o=JSON.parse(s);o.user&&e.push({id:o.user.id,name:o.user.name,email:o.user.email,provider:o.user.provider,config:o});}return e}catch{return []}}function Ui(t){try{let e=Pr();if(oe.mkdirSync(e,{recursive:!0}),t.user){let n=join(e,`${t.user.id}.json`);oe.writeFileSync(n,JSON.stringify(t,null,2),{mode:384});}}catch{}}async function Or(){let t=await K(),e=Vi();console.log(v.bold.cyan(`
137
+ `)),t.user&&(console.log(v.gray("User: ")+v.white(t.user.name)),console.log(v.gray("Email: ")+v.white(t.user.email)),console.log(v.gray("Provider: ")+v.cyan(t.user.provider))),t.device&&(console.log(v.gray("Device: ")+v.white(t.device.name)),console.log(v.gray("Device ID: ")+v.gray(t.device.id.substring(0,8)+"...")));let e=t.subscription?.tier||"free";if(console.log(v.gray("Subscription: ")+(e==="pro"?v.cyan("Pro"):v.blue("Free"))),t.tokenExpiresAt){let r=Rn(t)?v.red("Expired (will refresh)"):v.green("Valid");console.log(v.gray("Token Status: ")+r),console.log(v.gray("Expires: ")+v.yellow(new Date(t.tokenExpiresAt).toLocaleString()));}t.lastLoginAt&&console.log(v.gray("Last Login: ")+v.gray(new Date(t.lastLoginAt).toLocaleString())),console.log();}catch(t){console.error(v.red("\u274C Error:"),t instanceof Error?t.message:t),process.exit(1);}}function Ur(){return join(homedir(),".veestack","accounts")}function Zi(){try{let t=Ur();if(!ie.existsSync(t))return [];let e=[],n=ie.readdirSync(t);for(let r of n)if(r.endsWith(".json")){let s=ie.readFileSync(join(t,r),"utf-8"),o=JSON.parse(s);o.user&&e.push({id:o.user.id,name:o.user.name,email:o.user.email,provider:o.user.provider,config:o});}return e}catch{return []}}function Wi(t){try{let e=Ur();if(ie.mkdirSync(e,{recursive:!0}),t.user){let n=join(e,`${t.user.id}.json`);ie.writeFileSync(n,JSON.stringify(t,null,2),{mode:384});}}catch{}}async function Mr(){let t=await W(),e=Zi();console.log(v.bold.cyan(`
130
138
  \u{1F464} Switch Account
131
139
  `)),t?.user&&(console.log(v.gray("Currently logged in as:")),console.log(v.white(` ${t.user.name} (${t.user.email})`)),console.log(v.gray(` Provider: ${t.user.provider}`)),console.log());let n=e.filter(i=>i.id!==t?.user?.id);if(n.length===0){console.log(v.yellow("No other saved accounts found.")),console.log(v.gray(`
132
140
  To add a new account:`)),console.log(v.cyan(" veestack login")),console.log();return}console.log(v.gray("Available accounts:")),n.forEach((i,c)=>{console.log(v.white(`
133
141
  ${c+1}) ${i.name}`)),console.log(v.gray(` ${i.email}`)),console.log(v.gray(` Provider: ${i.provider}`));}),console.log(v.gray(`
134
- 0) Add new account`)),console.log();let s=(await import('readline')).createInterface({input:process.stdin,output:process.stdout}),o=await new Promise(i=>{s.question(v.white("Select account (number): "),c=>{s.close(),i(c);});}),a=parseInt(o,10);if(a===0){await Ot();return}if(a>0&&a<=n.length){let i=n[a-1];t&&Ui(t);let c=join(homedir(),".veestack"),l=join(c,"config.json");oe.mkdirSync(c,{recursive:true}),oe.writeFileSync(l,JSON.stringify(i.config,null,2),{mode:384}),console.log(v.green(`
142
+ 0) Add new account`)),console.log();let s=(await import('readline')).createInterface({input:process.stdin,output:process.stdout}),o=await new Promise(i=>{s.question(v.white("Select account (number): "),c=>{s.close(),i(c);});}),a=parseInt(o,10);if(a===0){await Lt();return}if(a>0&&a<=n.length){let i=n[a-1];t&&Wi(t);let c=join(homedir(),".veestack"),l=join(c,"config.json");ie.mkdirSync(c,{recursive:true}),ie.writeFileSync(l,JSON.stringify(i.config,null,2),{mode:384}),console.log(v.green(`
135
143
  \u2714 Switched to ${i.name}`)),console.log(v.gray(` ${i.email}`)),console.log();}else console.log(v.red(`
136
- \u274C Invalid selection`)),process.exit(1);}function Mi(){let t=join(process.cwd(),"veestack.config.json");if(!existsSync(t))return null;try{return JSON.parse(readFileSync(t,"utf-8"))}catch{return null}}function Bi(){let t=join(process.env.HOME||process.env.USERPROFILE||"",".veestack","last-scan.json");if(existsSync(t))try{return JSON.parse(readFileSync(t,"utf-8"))}catch{return null}return null}function Fi(t){let e=new Date(t),r=Math.floor((new Date().getTime()-e.getTime())/1e3);if(r<60)return `${r} seconds ago`;let s=Math.floor(r/60);if(s<60)return `${s} minutes ago`;let o=Math.floor(s/60);return o<24?`${o} hours ago`:e.toLocaleDateString()}async function Cn(){console.log(v.bold.cyan(`
144
+ \u274C Invalid selection`)),process.exit(1);}function qi(){let t=join(process.cwd(),"veestack.config.json");if(!existsSync(t))return null;try{return JSON.parse(readFileSync(t,"utf-8"))}catch{return null}}function Yi(){let t=join(process.env.HOME||process.env.USERPROFILE||"",".veestack","last-scan.json");if(existsSync(t))try{return JSON.parse(readFileSync(t,"utf-8"))}catch{return null}return null}function Xi(t){let e=new Date(t),r=Math.floor((new Date().getTime()-e.getTime())/1e3);if(r<60)return `${r} seconds ago`;let s=Math.floor(r/60);if(s<60)return `${s} minutes ago`;let o=Math.floor(s/60);return o<24?`${o} hours ago`:e.toLocaleDateString()}async function Dn(){console.log(v.bold.cyan(`
137
145
  \u{1F4CA} VeeStack Status
138
- `)),console.log(v.gray("\u2500".repeat(40)));let t=await Se(),e=await nn(),n=await kr(),r=Mi(),s=Bi();if(console.log(v.gray(`
139
- CLI Version: ${v.white(te)}`)),console.log(v.bold(`
146
+ `)),console.log(v.gray("\u2500".repeat(40)));let t=await Te(),e=await ln(),n=await xr(),r=qi(),s=Yi();if(console.log(v.gray(`
147
+ CLI Version: ${v.white(ne)}`)),console.log(v.bold(`
140
148
  User`)),t?(console.log(v.green(" \u2714 Authenticated")),console.log(e==="pro"?v.cyan(" \u{1F48E} Pro plan"):v.blue(" \u{1F4E6} Free plan")),n||console.log(v.red(" \u26A0 Subscription expired"))):(console.log(v.yellow(`
141
149
  \u26A0\uFE0F You are not logged in`)),console.log(v.gray(`
142
150
  Login to enable:`)),console.log(v.gray(" \u2022 Cloud reports")),console.log(v.gray(" \u2022 Team dashboard")),console.log(v.gray(` \u2022 Historical scans
143
151
  `)),console.log(v.gray("Run:")),console.log(v.cyan(" veestack login"))),console.log(v.bold(`
144
152
  Project`)),r?(console.log(v.green(` \u2714 ${r.name||"Unnamed project"}`)),r.framework&&console.log(v.gray(` Framework: ${r.framework}`)),r.projectId?console.log(v.gray(" Linked: Yes")):console.log(v.gray(" Linked: No"))):(console.log(v.yellow(" \u26A0 No project initialized")),console.log(v.gray(" Run: veestack init"))),console.log(v.bold(`
145
- Scan Status`)),s){console.log(v.gray(` Last scan: ${Fi(s.timestamp)}`));let o=s.grade.startsWith("A")?v.green:s.grade==="B"?v.blue:v.yellow;console.log(v.gray(` Score: ${o.bold(s.grade)} (${s.score}/100)`)),console.log(v.gray(` Issues: ${s.issues>0?v.red(s.issues):v.green(0)}`));}else console.log(v.gray(" Last scan: Never")),console.log(v.gray(" Issues: -"));console.log(v.gray(`
146
- `+"\u2500".repeat(40)));}var Lr=process.env.VEESTACK_DASHBOARD_URL||"https://www.veestack.com/dashboard";function Zi(){let t=join(process.cwd(),"veestack.config.json");if(existsSync(t))try{return JSON.parse(readFileSync(t,"utf-8")).projectId||null}catch{return null}return null}async function Vr(){let t=Zi(),e=t?`${Lr}/projects/${t}`:Lr;console.log(v.cyan(`
147
- Opening ${e}...`));try{await Ni(e),console.log(v.green(`\u2714 Dashboard opened in your browser
153
+ Scan Status`)),s){console.log(v.gray(` Last scan: ${Xi(s.timestamp)}`));let o=s.grade.startsWith("A")?v.green:s.grade==="B"?v.blue:v.yellow;console.log(v.gray(` Score: ${o.bold(s.grade)} (${s.score}/100)`)),console.log(v.gray(` Issues: ${s.issues>0?v.red(s.issues):v.green(0)}`));}else console.log(v.gray(" Last scan: Never")),console.log(v.gray(" Issues: -"));console.log(v.gray(`
154
+ `+"\u2500".repeat(40)));}var Hr=process.env.VEESTACK_DASHBOARD_URL||"https://www.veestack.com/dashboard";function ra(){let t=join(process.cwd(),"veestack.config.json");if(existsSync(t))try{return JSON.parse(readFileSync(t,"utf-8")).projectId||null}catch{return null}return null}async function Jr(){let t=ra(),e=t?`${Hr}/projects/${t}`:Hr;console.log(v.cyan(`
155
+ Opening ${e}...`));try{await Mi(e),console.log(v.green(`\u2714 Dashboard opened in your browser
148
156
  `));}catch{console.log(v.red(`
149
157
  \u274C Could not open browser automatically.`)),console.log(v.gray(`Please visit: ${v.white(e)}
150
- `));}}var Nn=globalThis,Wi=process.env.VEESTACK_API_URL||"https://api.veestack.dev";async function qi(){let t=process.version,e=parseInt(t.slice(1).split(".")[0]);return e>=18?{name:"Node.js Version",status:"ok",message:`${t} (>= 18)`}:e>=16?{name:"Node.js Version",status:"warning",message:`${t} (>= 16, but 18+ recommended)`}:{name:"Node.js Version",status:"error",message:`${t} (>= 18 required)`,details:"Please upgrade Node.js: https://nodejs.org"}}async function Yi(){try{let t=dirname(fileURLToPath(import.meta.url)),e=join(t,"version.json");if(!existsSync(e))return null;let n=readFileSync(e,"utf-8");return JSON.parse(n)}catch{return null}}async function Xi(){let t=Nn.CLI_VERSION;try{let e=await fetch("https://registry.npmjs.org/veestack-tools/latest",{signal:AbortSignal.timeout(3e3)});if(e.ok){let r=(await e.json()).version;return t===r?{name:"CLI Version",status:"ok",message:`v${t} (latest)`}:{name:"CLI Version",status:"warning",message:`v${t} (latest: v${r})`,details:"Upgrade: npm install -g veestack-tools"}}}catch{}return {name:"CLI Version",status:"ok",message:`v${t}`}}async function Qi(){try{let t=dirname(fileURLToPath(import.meta.url)),e=join(t,"version.json");if(!existsSync(e))return {name:"CLI Build",status:"ok",message:"Metadata not found"};let n=readFileSync(e,"utf-8"),r=JSON.parse(n),s=r.commit||"unknown",o=r.buildTime||"unknown";return {name:"CLI Build",status:"ok",message:s,details:o}}catch{return {name:"CLI Build",status:"warning",message:"Unable to read metadata"}}}async function ea(){try{let t=await K();return t?{name:"Authentication",status:"ok",message:t.user?.email||"Authenticated via API Key"}:{name:"Authentication",status:"warning",message:"Not authenticated",details:"Run: veestack login"}}catch{return {name:"Authentication",status:"error",message:"Auth system error",details:"Try: veestack logout && veestack login"}}}async function ta(){if(!await Se())return {name:"API Connectivity",status:"ok",message:"Skipped (not authenticated)",details:"Login to enable API checks"};try{let e=await ge(),n=await fetch(`${Wi}/v1/health`,{method:"GET",headers:e,signal:AbortSignal.timeout(5e3)});return n.ok?{name:"API Connectivity",status:"ok",message:"Reachable"}:{name:"API Connectivity",status:"warning",message:`HTTP ${n.status}`}}catch{return {name:"API Connectivity",status:"warning",message:"Unreachable",details:`Check:
158
+ `));}}var Ln=globalThis;async function oa(){let t=process.version,e=parseInt(t.slice(1).split(".")[0]);return e>=18?{name:"Node.js Version",status:"ok",message:`${t} (>= 18)`}:e>=16?{name:"Node.js Version",status:"warning",message:`${t} (>= 16, but 18+ recommended)`}:{name:"Node.js Version",status:"error",message:`${t} (>= 18 required)`,details:"Please upgrade Node.js: https://nodejs.org"}}async function ia(){try{let t=dirname(fileURLToPath(import.meta.url)),e=join(t,"version.json");if(!existsSync(e))return null;let n=readFileSync(e,"utf-8");return JSON.parse(n)}catch{return null}}async function aa(){let t=Ln.CLI_VERSION;try{let e=await fetch("https://registry.npmjs.org/veestack-tools/latest",{signal:AbortSignal.timeout(3e3)});if(e.ok){let r=(await e.json()).version;return t===r?{name:"CLI Version",status:"ok",message:`v${t} (latest)`}:{name:"CLI Version",status:"warning",message:`v${t} (latest: v${r})`,details:"Upgrade: npm install -g veestack-tools"}}}catch{}return {name:"CLI Version",status:"ok",message:`v${t}`}}async function ca(){try{let t=dirname(fileURLToPath(import.meta.url)),e=join(t,"version.json");if(!existsSync(e))return {name:"CLI Build",status:"ok",message:"Metadata not found"};let n=readFileSync(e,"utf-8"),r=JSON.parse(n),s=r.commit||"unknown",o=r.buildTime||"unknown";return {name:"CLI Build",status:"ok",message:s,details:o}}catch{return {name:"CLI Build",status:"warning",message:"Unable to read metadata"}}}async function la(){try{let t=await W();return t?{name:"Authentication",status:"ok",message:t.user?.email||"Authenticated via API Key"}:{name:"Authentication",status:"warning",message:"Not authenticated",details:"Run: veestack login"}}catch{return {name:"Authentication",status:"error",message:"Auth system error",details:"Try: veestack logout && veestack login"}}}async function ua(){if(!await Te())return {name:"API Connectivity",status:"ok",message:"Skipped (not authenticated)",details:"Login to enable API checks"};try{let e=await he(),n=await fetch(`${Z}/v1/health`,{method:"GET",headers:e,signal:AbortSignal.timeout(5e3)});return n.ok?{name:"API Connectivity",status:"ok",message:"Reachable"}:{name:"API Connectivity",status:"warning",message:`HTTP ${n.status}`}}catch{return {name:"API Connectivity",status:"warning",message:"Unreachable",details:`Check:
151
159
  \u2022 Internet connection
152
- \u2022 API endpoint configuration`}}}async function na(){let t=process.cwd(),e=join(t,"veestack.config.json"),n=join(t,"package.json");if(existsSync(e))try{return {name:"Project Config",status:"ok",message:`Found: ${JSON.parse(readFileSync(e,"utf-8")).projectId||"Unlinked project"}`}}catch{return {name:"Project Config",status:"warning",message:"Invalid veestack.config.json",details:"Check JSON syntax"}}return existsSync(n)?{name:"Project Config",status:"warning",message:"Not initialized",details:"Run: veestack init"}:{name:"Project Config",status:"warning",message:"No project found",details:"Navigate to a project directory"}}async function ra(){let{isOfficial:t,packageName:e}=Vt();return t?{name:"Package Security",status:"ok",message:"Official package verified",details:e}:{name:"Package Security",status:"error",message:"Unofficial package detected!",details:`Expected: veestack-tools, Found: ${e}`}}async function sa(){let t=await pr();return t.keychainAvailable&&t.keychainHasTokens?{name:"Token Storage",status:"ok",message:"OS Keychain (secure)"}:t.fileExists?{name:"Token Storage",status:"warning",message:`File-based (${t.encryptionVersion>=2?"AES-256-GCM":"Encrypted"})`,details:"Install keytar for OS Keychain: npm install -g keytar"}:{name:"Token Storage",status:"ok",message:"No tokens stored"}}async function oa(){try{return {name:"Git",status:"ok",message:execSync("git --version",{encoding:"utf-8"}).trim().replace("git version ","")}}catch{return {name:"Git",status:"warning",message:"Not installed",details:"Some features may not work"}}}async function ia(){try{return {name:"Disk Space",status:"ok",message:"Sufficient"}}catch{return {name:"Disk Space",status:"warning",message:"Unable to check"}}}function $t(t){let e={ok:v.green("\u2714"),warning:v.yellow("\u26A0"),error:v.red("\u2718")},n={ok:v.green,warning:v.yellow,error:v.red};console.log(` ${e[t.status]} ${v.bold(t.name)}: ${n[t.status](t.message)}`),t.details&&console.log(` ${v.gray(t.details)}`);}async function Pn(){console.log(v.bold.cyan(`
160
+ \u2022 API endpoint configuration`}}}async function da(){let t=process.cwd(),e=join(t,"veestack.config.json"),n=join(t,"package.json");if(existsSync(e))try{return {name:"Project Config",status:"ok",message:`Found: ${JSON.parse(readFileSync(e,"utf-8")).projectId||"Unlinked project"}`}}catch{return {name:"Project Config",status:"warning",message:"Invalid veestack.config.json",details:"Check JSON syntax"}}return existsSync(n)?{name:"Project Config",status:"warning",message:"Not initialized",details:"Run: veestack init"}:{name:"Project Config",status:"warning",message:"No project found",details:"Navigate to a project directory"}}async function fa(){let{isOfficial:t,packageName:e}=Bt();return t?{name:"Package Security",status:"ok",message:"Official package verified",details:e}:{name:"Package Security",status:"error",message:"Unofficial package detected!",details:`Expected: veestack-tools, Found: ${e}`}}async function pa(){let t=await nn();return t.keychainAvailable&&t.keychainHasTokens?{name:"Token Storage",status:"ok",message:"OS Keychain (secure)"}:t.fileExists?{name:"Token Storage",status:"warning",message:`File-based (${t.encryptionVersion>=2?"AES-256-GCM":"Encrypted"})`,details:"Install keytar for OS Keychain: npm install -g keytar"}:{name:"Token Storage",status:"ok",message:"No tokens stored"}}async function ga(){try{return {name:"Git",status:"ok",message:execSync("git --version",{encoding:"utf-8"}).trim().replace("git version ","")}}catch{return {name:"Git",status:"warning",message:"Not installed",details:"Some features may not work"}}}async function ma(){try{return {name:"Disk Space",status:"ok",message:"Sufficient"}}catch{return {name:"Disk Space",status:"warning",message:"Unable to check"}}}function Ut(t){let e={ok:v.green("\u2714"),warning:v.yellow("\u26A0"),error:v.red("\u2718")},n={ok:v.green,warning:v.yellow,error:v.red};console.log(` ${e[t.status]} ${v.bold(t.name)}: ${n[t.status](t.message)}`),t.details&&console.log(` ${v.gray(t.details)}`);}async function $n(){console.log(v.bold.cyan(`
153
161
  \u{1F50D} VeeStack Doctor
154
- `));let t=await Yi(),e=t?.name||"VeeStack CLI",n=t?.version||Nn.CLI_VERSION||"unknown",r=t?.commit?t.commit.slice(0,7):void 0,s=t?.buildTime?t.buildTime.slice(0,10):void 0;console.log(v.bold(e)),console.log(`Version: ${n}`),r&&console.log(`Commit: ${r}`),s&&console.log(`Built: ${s}`),console.log(""),console.log(v.bold("Environment"));let o=await Promise.all([qi(),Xi(),Qi(),oa(),ia()]);o.forEach($t),console.log(v.bold(`
155
- Project`));let a=await Promise.all([na()]);a.forEach($t),console.log(v.bold(`
156
- Authentication`));let i=await Promise.all([ea(),sa()]);i.forEach($t),console.log(v.bold(`
157
- Connectivity`));let c=await Promise.all([ta()]);c.forEach($t),console.log(v.bold(`
158
- Security`));let l=await Promise.all([ra()]);l.forEach($t);let d=[...o,...a,...i,...c,...l];d.filter(z=>z.status==="ok").length;let $=d.filter(z=>z.status==="warning").length,I=d.filter(z=>z.status==="error").length;console.log(""),console.log(I===0&&$===0?v.green.bold("\u2728 All systems operational!"):I===0?v.yellow.bold(`\u26A0 ${$} issue(s) detected`):v.red.bold(`\u2718 ${I} error(s) found`)),console.log("");let C=0;i.find(z=>z.name==="Authentication")?.status!=="ok"&&(C++,console.log(v.bold(`${C}. Authentication`)),console.log(v.gray(" Run:")),console.log(v.cyan(` veestack login
159
- `)));let M=i.find(z=>z.name==="Token Storage");M?.status==="warning"&&M.message.includes("File-based")&&(C++,console.log(v.bold(`${C}. Secure token storage`)),console.log(v.gray(" Install OS keychain support:")),console.log(v.cyan(` npm install -g keytar
160
- `))),c.find(z=>z.name==="API Connectivity")?.status==="warning"&&await Se()&&(C++,console.log(v.bold(`${C}. API connectivity`)),console.log(v.gray(" Check your internet connection")),console.log(v.gray(` or verify API endpoint
161
- `))),a.find(z=>z.name==="Project Config")?.status==="warning"&&(C++,console.log(v.bold(`${C}. Project initialization`)),console.log(v.gray(" Run:")),console.log(v.cyan(` veestack init
162
- `))),process.exit(I>0?1:0);}var fa=globalThis;function ga(){try{let t=dirname(fileURLToPath(import.meta.url)),e=join(t,"version.json");if(!existsSync(e))return {meta:null,source:"fallback"};let n=readFileSync(e,"utf-8");return {meta:JSON.parse(n),source:"dist/version.json"}}catch{return {meta:null,source:"fallback"}}}async function Br(){let{meta:t,source:e}=ga(),n=t?.name||"VeeStack CLI",r=t?.version||fa.CLI_VERSION||"unknown",s=t?.commit?t.commit.slice(0,7):void 0,o=t?.commit,a=t?.buildTime?t.buildTime.slice(0,10):void 0,i=t?.node,c=process.argv.includes("--json"),l=process.argv.includes("--debug")||process.env.VEESTACK_DEBUG==="1";if(c){console.log(JSON.stringify({name:n,version:r,commit:o,built:a,node:i}));return}console.log(v.bold(n)),console.log(`v${r}`),s&&console.log(`commit ${s}`),a&&console.log(`built ${a}`),l&&console.log(`metadata ${e}`);}var ma=globalThis,Fr=ma.AUDIT_VERSION||"unknown",Dn=class{results=[];fullMode;configDir;constructor(e=false){this.fullMode=e,this.configDir=tt.join(pt.homedir(),".veestack");}async run(){return console.log(v.blue.bold(`
162
+ `));let t=await ia(),e=t?.name||"VeeStack CLI",n=t?.version||Ln.CLI_VERSION||"unknown",r=t?.commit?t.commit.slice(0,7):void 0,s=t?.buildTime?t.buildTime.slice(0,10):void 0;console.log(v.bold(e)),console.log(`Version: ${n}`),r&&console.log(`Commit: ${r}`),s&&console.log(`Built: ${s}`),console.log(""),console.log(v.bold("Environment"));let o=await Promise.all([oa(),aa(),ca(),ga(),ma()]);o.forEach(Ut),console.log(v.bold(`
163
+ Project`));let a=await Promise.all([da()]);a.forEach(Ut),console.log(v.bold(`
164
+ Authentication`));let i=await Promise.all([la(),pa()]);i.forEach(Ut),console.log(v.bold(`
165
+ Connectivity`));let c=await Promise.all([ua()]);c.forEach(Ut),console.log(v.bold(`
166
+ Security`));let l=await Promise.all([fa()]);l.forEach(Ut);let d=[...o,...a,...i,...c,...l];d.filter(z=>z.status==="ok").length;let L=d.filter(z=>z.status==="warning").length,N=d.filter(z=>z.status==="error").length;console.log(""),console.log(N===0&&L===0?v.green.bold("\u2728 All systems operational!"):N===0?v.yellow.bold(`\u26A0 ${L} issue(s) detected`):v.red.bold(`\u2718 ${N} error(s) found`)),console.log("");let I=0;i.find(z=>z.name==="Authentication")?.status!=="ok"&&(I++,console.log(v.bold(`${I}. Authentication`)),console.log(v.gray(" Run:")),console.log(v.cyan(` veestack login
167
+ `)));let F=i.find(z=>z.name==="Token Storage");F?.status==="warning"&&F.message.includes("File-based")&&(I++,console.log(v.bold(`${I}. Secure token storage`)),console.log(v.gray(" Install OS keychain support:")),console.log(v.cyan(` npm install -g keytar
168
+ `))),c.find(z=>z.name==="API Connectivity")?.status==="warning"&&await Te()&&(I++,console.log(v.bold(`${I}. API connectivity`)),console.log(v.gray(" Check your internet connection")),console.log(v.gray(` or verify API endpoint
169
+ `))),a.find(z=>z.name==="Project Config")?.status==="warning"&&(I++,console.log(v.bold(`${I}. Project initialization`)),console.log(v.gray(" Run:")),console.log(v.cyan(` veestack init
170
+ `))),process.exit(N>0?1:0);}var Ea=globalThis;function Sa(){try{let t=dirname(fileURLToPath(import.meta.url)),e=join(t,"version.json");if(!existsSync(e))return {meta:null,source:"fallback"};let n=readFileSync(e,"utf-8");return {meta:JSON.parse(n),source:"dist/version.json"}}catch{return {meta:null,source:"fallback"}}}async function Zr(){let{meta:t,source:e}=Sa(),n=t?.name||"VeeStack CLI",r=t?.version||Ea.CLI_VERSION||"unknown",s=t?.commit?t.commit.slice(0,7):void 0,o=t?.commit,a=t?.buildTime?t.buildTime.slice(0,10):void 0,i=t?.node,c=process.argv.includes("--json"),l=process.argv.includes("--debug")||process.env.VEESTACK_DEBUG==="1";if(c){console.log(JSON.stringify({name:n,version:r,commit:o,built:a,node:i}));return}console.log(v.bold(n)),console.log(`v${r}`),s&&console.log(`commit ${s}`),a&&console.log(`built ${a}`),l&&console.log(`metadata ${e}`);}var Ta=globalThis,Wr=Ta.AUDIT_VERSION||"unknown",Un=class{results=[];fullMode;configDir;constructor(e=false){this.fullMode=e,this.configDir=rt.join(gt.homedir(),".veestack");}async run(){return console.log(v.blue.bold(`
163
171
  \u{1F510} VeeStack Security Audit
164
- `)),console.log(v.gray("=".repeat(60))),console.log(v.gray(`Version: ${Fr} | Mode: ${this.fullMode?"Full":"Quick"}
172
+ `)),console.log(v.gray("=".repeat(60))),console.log(v.gray(`Version: ${Wr} | Mode: ${this.fullMode?"Full":"Quick"}
165
173
  `)),await this.runTokenSecurityTests(),await this.runDeviceBindingTests(),await this.runStorageTests(),await this.runFilesystemTests(),await this.runDependencyTests(),this.fullMode&&(await this.runAPITests(),await this.runNetworkTests()),this.generateReport()}addResult(e,n,r,s,o){this.results.push({test:e,category:n,status:r,message:s,details:o});let a=r==="pass"?v.green("\u2713"):r==="fail"?v.red("\u2717"):r==="warn"?v.yellow("\u26A0"):v.gray("-");console.log(` ${a} ${v.white(e)}: ${this.getStatusColor(r)(s)}`),o&&console.log(v.gray(` ${o}`));}getStatusColor(e){return e==="pass"?v.green:e==="fail"?v.red:e==="warn"?v.yellow:v.gray}async runTokenSecurityTests(){console.log(v.blue.bold(`
166
174
  \u{1F3AB} Token Security Tests
167
175
  `));try{let e=await this.checkTokenStorage();e.secure?this.addResult("Secure Token Storage","Token Security","pass",e.method):this.addResult("Secure Token Storage","Token Security","fail","Insecure storage detected",e.method);}catch{this.addResult("Secure Token Storage","Token Security","skip","Unable to check");}try{let e=await this.getConfig();if(e?.tokenExpiresAt){let n=new Date(e.tokenExpiresAt),r=new Date,s=Math.floor((n.getTime()-r.getTime())/36e5);s<0?this.addResult("Token Expiration","Token Security","warn","Token expired","Will auto-refresh"):s<24?this.addResult("Token Expiration","Token Security","warn",`Expires in ${s}h`):this.addResult("Token Expiration","Token Security","pass",`Valid for ${s}h`);}else this.addResult("Token Expiration","Token Security","skip","No expiry data");}catch{this.addResult("Token Expiration","Token Security","skip","Not authenticated");}try{(await this.getConfig())?.refreshToken?this.addResult("Refresh Token","Token Security","pass","Present (long-lived)"):this.addResult("Refresh Token","Token Security","warn","Missing refresh token");}catch{this.addResult("Refresh Token","Token Security","skip","Not authenticated");}}async runDeviceBindingTests(){console.log(v.blue.bold(`
168
176
  \u{1F4F1} Device Binding Tests
169
177
  `));try{let e=await this.getConfig();e?.device?.id?this.addResult("Device ID","Device Binding","pass",`Configured (${e.device.id.substring(0,8)}...)`):this.addResult("Device ID","Device Binding","warn","No device ID");}catch{this.addResult("Device ID","Device Binding","skip","Not authenticated");}try{let e=await this.getConfig();e?.device?.fingerprint?e.device.fingerprint.length>=16?this.addResult("Device Fingerprint","Device Binding","pass","Strong fingerprint"):this.addResult("Device Fingerprint","Device Binding","warn","Weak fingerprint","Consider regenerating"):this.addResult("Device Fingerprint","Device Binding","warn","No fingerprint");}catch{this.addResult("Device Fingerprint","Device Binding","skip","Not authenticated");}try{(await this.getConfig())?.tokenBinding?this.addResult("Token Binding","Device Binding","pass","Cryptographic binding active"):this.addResult("Token Binding","Device Binding","warn","No token binding");}catch{this.addResult("Token Binding","Device Binding","skip","Not authenticated");}}async runStorageTests(){console.log(v.blue.bold(`
170
178
  \u{1F4BE} Storage Security Tests
171
- `));try{let e=tt.join(this.configDir,"config.json");((await V.stat(e)).mode&36)!==0?this.addResult("Config Permissions","Storage","fail","World readable!","Run: chmod 600 ~/.veestack/config.json"):this.addResult("Config Permissions","Storage","pass","Restricted (0600)");}catch{this.addResult("Config Permissions","Storage","skip","No config file");}try{let e=tt.join(this.configDir,"config.json"),n=await V.readFile(e,"utf-8");!(/"token":\s*"vs_[a-f0-9]+"/i.test(n)||/"refreshToken":\s*"vs_[a-f0-9]+"/i.test(n))||n.includes("encrypted")?this.addResult("No Plaintext Tokens","Storage","pass","Tokens encrypted or not present"):this.addResult("No Plaintext Tokens","Storage","fail","Plaintext tokens found!","Use OS Keychain");}catch{this.addResult("No Plaintext Tokens","Storage","skip","No config file");}}async runFilesystemTests(){console.log(v.blue.bold(`
179
+ `));try{let e=rt.join(this.configDir,"config.json");((await V.stat(e)).mode&36)!==0?this.addResult("Config Permissions","Storage","fail","World readable!","Run: chmod 600 ~/.veestack/config.json"):this.addResult("Config Permissions","Storage","pass","Restricted (0600)");}catch{this.addResult("Config Permissions","Storage","skip","No config file");}try{let e=rt.join(this.configDir,"config.json"),n=await V.readFile(e,"utf-8");!(/"token":\s*"vs_[a-f0-9]+"/i.test(n)||/"refreshToken":\s*"vs_[a-f0-9]+"/i.test(n))||n.includes("encrypted")?this.addResult("No Plaintext Tokens","Storage","pass","Tokens encrypted or not present"):this.addResult("No Plaintext Tokens","Storage","fail","Plaintext tokens found!","Use OS Keychain");}catch{this.addResult("No Plaintext Tokens","Storage","skip","No config file");}}async runFilesystemTests(){console.log(v.blue.bold(`
172
180
  \u{1F4C1} Filesystem Safety Tests
173
181
  `)),this.addResult("Input Validation","Filesystem","pass","Server-side enforced"),this.addResult("Path Traversal","Filesystem","pass","Server-side blocked"),this.addResult("Symlink Attack","Filesystem","pass","Verified");}async runDependencyTests(){console.log(v.blue.bold(`
174
182
  \u{1F4E6} Dependency Security Tests
175
- `));try{let e=await V.readFile(tt.join(process.cwd(),"package.json"),"utf-8"),n=JSON.parse(e),r=JSON.stringify(n.dependencies||{}),o=["veestack-core","veestackcli","veestak","@veestack/core"].filter(a=>r.includes(a));o.length===0?this.addResult("Typosquatting Check","Dependencies","pass","No suspicious packages"):this.addResult("Typosquatting Check","Dependencies","fail","Suspicious packages found",o.join(", "));}catch{this.addResult("Typosquatting Check","Dependencies","skip","No package.json");}try{let e=["pnpm-lock.yaml","package-lock.json","yarn.lock"];(await Promise.all(e.map(async r=>{try{return await V.access(r),!0}catch{return !1}}))).some(r=>r)?this.addResult("Lockfile Present","Dependencies","pass","Lockfile committed"):this.addResult("Lockfile Present","Dependencies","warn","No lockfile found");}catch{this.addResult("Lockfile Present","Dependencies","skip","Unable to check");}}async runAPITests(){console.log(v.blue.bold(`
183
+ `));try{let e=await V.readFile(rt.join(process.cwd(),"package.json"),"utf-8"),n=JSON.parse(e),r=JSON.stringify(n.dependencies||{}),o=["veestack-core","veestackcli","veestak","@veestack/core"].filter(a=>r.includes(a));o.length===0?this.addResult("Typosquatting Check","Dependencies","pass","No suspicious packages"):this.addResult("Typosquatting Check","Dependencies","fail","Suspicious packages found",o.join(", "));}catch{this.addResult("Typosquatting Check","Dependencies","skip","No package.json");}try{let e=["pnpm-lock.yaml","package-lock.json","yarn.lock"];(await Promise.all(e.map(async r=>{try{return await V.access(r),!0}catch{return !1}}))).some(r=>r)?this.addResult("Lockfile Present","Dependencies","pass","Lockfile committed"):this.addResult("Lockfile Present","Dependencies","warn","No lockfile found");}catch{this.addResult("Lockfile Present","Dependencies","skip","Unable to check");}}async runAPITests(){console.log(v.blue.bold(`
176
184
  \u{1F310} API Security Tests (Full Mode)
177
185
  `)),this.addResult("Device Binding","API Security","pass","Verified (API)"),this.addResult("Token Rotation","API Security","pass","Verified (API)"),this.addResult("Replay Protection","API Security","pass","Verified (API)"),this.addResult("HMAC Signatures","API Security","pass","Verified (API)");}async runNetworkTests(){console.log(v.blue.bold(`
178
186
  \u{1F512} Network Security Tests (Full Mode)
179
- `)),this.addResult("HTTPS Only","Network","pass","TLS 1.3 enforced"),this.addResult("Certificate Valid","Network","pass","Valid certificate chain"),this.addResult("No MITM","Network","pass","No proxy detected");}async checkTokenStorage(){let e=pt.platform();if(e==="darwin")try{return execSync('security find-generic-password -s "VeeStack CLI" 2>/dev/null',{stdio:"pipe"}),{secure:!0,method:"macOS Keychain"}}catch{}else if(e==="win32")try{return execSync('cmdkey /list 2>nul | findstr "VeeStack"',{stdio:"pipe"}),{secure:!0,method:"Windows Credential Manager"}}catch{}else try{return execSync("secret-tool lookup app VeeStack-CLI 2>/dev/null",{stdio:"pipe"}),{secure:!0,method:"Linux Secret Service"}}catch{}try{let n=tt.join(this.configDir,"config.json"),r=await V.readFile(n,"utf-8");return r.includes("encrypted")||!r.includes('"token":')?{secure:!0,method:"Encrypted file (AES-256-GCM)"}:{secure:!1,method:"Plaintext file (INSECURE!)"}}catch{return {secure:true,method:"No tokens stored"}}}async getConfig(){try{let e=tt.join(this.configDir,"config.json"),n=await V.readFile(e,"utf-8");return JSON.parse(n)}catch{return null}}generateReport(){let e=this.results.filter(i=>i.status==="pass").length,n=this.results.filter(i=>i.status==="fail").length,r=this.results.filter(i=>i.status==="warn").length,s=this.results.filter(i=>i.status!=="skip").length,o=s>0?((e+r*.5)/s*10).toFixed(1):"0.0",a=[];return n>0&&a.push(`Fix ${n} failed security test(s) before production deployment`),r>0&&a.push(`Address ${r} warning(s) to improve security posture`),this.results.some(i=>i.test==="Secure Token Storage"&&i.status==="pass")||a.push("Enable OS Keychain for secure token storage"),{timestamp:new Date().toISOString(),version:Fr,summary:{total:s,passed:e,failed:n,warnings:r,score:parseFloat(o)},results:this.results,recommendations:a}}};async function zr(){let t=process.argv.slice(3),e=t.includes("--full"),n=t.includes("--json"),s=await new Dn(e).run();console.log(v.gray("=".repeat(60))),console.log(v.blue.bold(`
187
+ `)),this.addResult("HTTPS Only","Network","pass","TLS 1.3 enforced"),this.addResult("Certificate Valid","Network","pass","Valid certificate chain"),this.addResult("No MITM","Network","pass","No proxy detected");}async checkTokenStorage(){let e=gt.platform();if(e==="darwin")try{return execSync('security find-generic-password -s "VeeStack CLI" 2>/dev/null',{stdio:"pipe"}),{secure:!0,method:"macOS Keychain"}}catch{}else if(e==="win32")try{return execSync('cmdkey /list 2>nul | findstr "VeeStack"',{stdio:"pipe"}),{secure:!0,method:"Windows Credential Manager"}}catch{}else try{return execSync("secret-tool lookup app VeeStack-CLI 2>/dev/null",{stdio:"pipe"}),{secure:!0,method:"Linux Secret Service"}}catch{}try{let n=rt.join(this.configDir,"config.json"),r=await V.readFile(n,"utf-8");return r.includes("encrypted")||!r.includes('"token":')?{secure:!0,method:"Encrypted file (AES-256-GCM)"}:{secure:!1,method:"Plaintext file (INSECURE!)"}}catch{return {secure:true,method:"No tokens stored"}}}async getConfig(){try{let e=rt.join(this.configDir,"config.json"),n=await V.readFile(e,"utf-8");return JSON.parse(n)}catch{return null}}generateReport(){let e=this.results.filter(i=>i.status==="pass").length,n=this.results.filter(i=>i.status==="fail").length,r=this.results.filter(i=>i.status==="warn").length,s=this.results.filter(i=>i.status!=="skip").length,o=s>0?((e+r*.5)/s*10).toFixed(1):"0.0",a=[];return n>0&&a.push(`Fix ${n} failed security test(s) before production deployment`),r>0&&a.push(`Address ${r} warning(s) to improve security posture`),this.results.some(i=>i.test==="Secure Token Storage"&&i.status==="pass")||a.push("Enable OS Keychain for secure token storage"),{timestamp:new Date().toISOString(),version:Wr,summary:{total:s,passed:e,failed:n,warnings:r,score:parseFloat(o)},results:this.results,recommendations:a}}};async function qr(){let t=process.argv.slice(3),e=t.includes("--full"),n=t.includes("--json"),s=await new Un(e).run();console.log(v.gray("=".repeat(60))),console.log(v.blue.bold(`
180
188
  \u{1F4CA} Security Audit Report
181
189
  `));let{summary:o}=s;console.log(` Total Tests: ${o.total}`),console.log(` ${v.green("\u2713 Passed:")} ${o.passed}`),console.log(` ${v.red("\u2717 Failed:")} ${o.failed}`),console.log(` ${v.yellow("\u26A0 Warnings:")} ${o.warnings}`);let a=o.score>=8?v.green:o.score>=6?v.yellow:v.red;console.log(v.bold(`
182
190
  Security Score: ${a(o.score+"/10")}`)),o.score>=9?console.log(v.green.bold(`
@@ -184,16 +192,16 @@ Security`));let l=await Promise.all([ra()]);l.forEach($t);let d=[...o,...a,...i,
184
192
  \u26A0 Good, but improvements recommended.`)):console.log(v.red.bold(`
185
193
  \u274C Critical issues detected!`)),s.recommendations.length>0&&(console.log(v.blue.bold(`
186
194
  \u{1F4CB} Recommendations:
187
- `)),s.recommendations.forEach((i,c)=>{console.log(` ${c+1}. ${i}`);})),console.log(""),n&&console.log(JSON.stringify(s,null,2));}var ya=globalThis,ln=ya.CLI_VERSION||"unknown";async function Hr(){console.log(v.cyan(`
195
+ `)),s.recommendations.forEach((i,c)=>{console.log(` ${c+1}. ${i}`);})),console.log(""),n&&console.log(JSON.stringify(s,null,2));}var ba=globalThis,mn=ba.CLI_VERSION||"unknown";async function Yr(){console.log(v.cyan(`
188
196
  \u{1F50D} Checking for updates...
189
- `));let{packageName:t}=Vt();try{let e=va(t);if(console.log(v.gray(`Current version: ${ln}`)),console.log(v.gray(`Latest version: ${e}
190
- `)),ln===e){console.log(v.green("\u2705 You already have the latest version!"));return}if(ka(ln,e)){console.log(v.yellow("\u26A0\uFE0F You are using a development or pre-release version.")),console.log(v.gray("No upgrade needed."));return}console.log(v.cyan(`\u2B06\uFE0F Updating VeeStack CLI...
191
- `));let n=_a();console.log(v.gray(`Using package manager: ${n}
197
+ `));let{packageName:t}=Bt();try{let e=xa(t);if(console.log(v.gray(`Current version: ${mn}`)),console.log(v.gray(`Latest version: ${e}
198
+ `)),mn===e){console.log(v.green("\u2705 You already have the latest version!"));return}if(Ra(mn,e)){console.log(v.yellow("\u26A0\uFE0F You are using a development or pre-release version.")),console.log(v.gray("No upgrade needed."));return}console.log(v.cyan(`\u2B06\uFE0F Updating VeeStack CLI...
199
+ `));let n=Ca();console.log(v.gray(`Using package manager: ${n}
192
200
  `));let r=n==="pnpm"?`pnpm add -g ${t}`:n==="yarn"?`yarn global add ${t}`:`npm install -g ${t}`;execSync(r,{stdio:"inherit"}),console.log(v.green(`
193
201
  \u2705 Upgrade complete!`)),console.log(v.gray(`
194
202
  Run "veestack --version" to verify.`));}catch(e){console.log(v.red(`
195
203
  \u274C Upgrade failed.`)),e instanceof Error&&console.log(v.gray(e.message)),console.log(v.gray(`
196
- Try manually:`)),console.log(v.cyan(` npm install -g ${t}`)),console.log(v.cyan(` pnpm add -g ${t}`)),process.exit(1);}}function va(t){try{return execSync(`npm view ${t} version`,{encoding:"utf-8",stdio:["pipe","pipe","ignore"],timeout:5e3}).replace(/\s/g,"")}catch{return ln}}function ka(t,e){let n=t.split(".").map(Number),r=e.split(".").map(Number);for(let s=0;s<Math.max(n.length,r.length);s++){let o=n[s]||0,a=r[s]||0;if(o>a)return true;if(o<a)return false}return false}function _a(){try{let t=fileURLToPath(import.meta.url),e=tt.dirname(t);for(let n=0;n<10;n++){let r=e.toLowerCase();if(r.includes(".pnpm")||r.includes("pnpm"))return "pnpm";if(r.includes("yarn"))return "yarn";if(r.includes("npm")&&r.includes("node_modules"))return "npm";let s=tt.dirname(e);if(s===e)break;e=s;}}catch{}try{if(execSync("pnpm --version",{stdio:"ignore"}),process.env.PNPM_HOME||"")return "pnpm"}catch{}return "npm"}var wa=globalThis;async function Sa(){let t=fr(),e=gr(),n=await K(),r=await Se(),s=await ft();return {cli:{version:wa.CLI_VERSION||"unknown",nodeVersion:process.version,platform:pt.platform(),arch:pt.arch(),homeDir:pt.homedir()},api:{environment:t.environment,apiVersion:t.apiVersion,apiBaseUrl:t.apiBaseUrl,webBaseUrl:t.webBaseUrl,valid:e.valid,errors:e.errors},auth:{isAuthenticated:r,hasTokens:s,user:n?.user?{id:n.user.id,email:n.user.email,name:n.user.name,provider:n.user.provider}:void 0,device:n?.device?{id:n.device.id,name:n.device.name}:void 0,tokenExpiry:n?.tokenExpiresAt,subscription:n?.subscription?{tier:n.subscription.tier,expiresAt:n.subscription.expiresAt}:void 0},system:{cwd:process.cwd(),env:{NODE_ENV:process.env.NODE_ENV,VEESTACK_API_URL:process.env.VEESTACK_API_URL,VEESTACK_WEB_URL:process.env.VEESTACK_WEB_URL,SUPABASE_URL:process.env.SUPABASE_URL?"[SET]":"[NOT SET]"}}}}function Ea(t){if(console.log(v.bold.cyan(`
204
+ Try manually:`)),console.log(v.cyan(` npm install -g ${t}`)),console.log(v.cyan(` pnpm add -g ${t}`)),process.exit(1);}}function xa(t){try{return execSync(`npm view ${t} version`,{encoding:"utf-8",stdio:["pipe","pipe","ignore"],timeout:5e3}).replace(/\s/g,"")}catch{return mn}}function Ra(t,e){let n=t.split(".").map(Number),r=e.split(".").map(Number);for(let s=0;s<Math.max(n.length,r.length);s++){let o=n[s]||0,a=r[s]||0;if(o>a)return true;if(o<a)return false}return false}function Ca(){try{let t=fileURLToPath(import.meta.url),e=rt.dirname(t);for(let n=0;n<10;n++){let r=e.toLowerCase();if(r.includes(".pnpm")||r.includes("pnpm"))return "pnpm";if(r.includes("yarn"))return "yarn";if(r.includes("npm")&&r.includes("node_modules"))return "npm";let s=rt.dirname(e);if(s===e)break;e=s;}}catch{}try{if(execSync("pnpm --version",{stdio:"ignore"}),process.env.PNPM_HOME||"")return "pnpm"}catch{}return "npm"}var Ia=globalThis;async function Na(){let t=wr(),e=Er(),n=await W(),r=await Te(),s=await mt();return {cli:{version:Ia.CLI_VERSION||"unknown",nodeVersion:process.version,platform:gt.platform(),arch:gt.arch(),homeDir:gt.homedir()},api:{environment:t.environment,apiVersion:t.apiVersion,apiBaseUrl:t.apiBaseUrl,webBaseUrl:t.webBaseUrl,valid:e.valid,errors:e.errors},auth:{isAuthenticated:r,hasTokens:s,user:n?.user?{id:n.user.id,email:n.user.email,name:n.user.name,provider:n.user.provider}:void 0,device:n?.device?{id:n.device.id,name:n.device.name}:void 0,tokenExpiry:n?.tokenExpiresAt,subscription:n?.subscription?{tier:n.subscription.tier,expiresAt:n.subscription.expiresAt}:void 0},system:{cwd:process.cwd(),env:{NODE_ENV:ce.NODE_ENV,VEESTACK_API_URL:ce.VEESTACK_API_URL,VEESTACK_WEB_URL:ce.VEESTACK_WEB_URL,SUPABASE_URL:process.env.SUPABASE_URL?"[SET]":"[NOT SET]"}}}}function Oa(t){if(console.log(v.bold.cyan(`
197
205
  \u{1F50D} VeeStack Debug Information
198
206
  `)),console.log(v.gray("\u2550".repeat(60))),console.log(v.bold(`
199
207
  \u{1F4E6} CLI Information:`)),console.log(` Version: ${v.white(t.cli.version)}`),console.log(` Node.js: ${v.white(t.cli.nodeVersion)}`),console.log(` Platform: ${v.white(t.cli.platform)} ${v.gray(`(${t.cli.arch})`)}`),console.log(` Home Dir: ${v.gray(t.cli.homeDir)}`),console.log(v.bold(`
@@ -205,14 +213,14 @@ Try manually:`)),console.log(v.cyan(` npm install -g ${t}`)),console.log(v.cyan
205
213
  \u{1F4BB} System:`)),console.log(` Working Dir: ${v.gray(t.system.cwd)}`),console.log(v.gray(`
206
214
  \u2550`.repeat(60))),console.log(v.gray(`
207
215
  Use this information when reporting issues or requesting support.
208
- `));}function Ta(t){console.log(JSON.stringify(t,null,2));}async function Jr(t={}){try{let e=await Sa();t.json?Ta(e):Ea(e);}catch(e){console.error(v.red(`
209
- \u274C Error collecting debug information:`)),e instanceof Error&&console.error(v.red(e.message)),process.exit(1);}}Vn();Un();Mn();Bn();zn();var Ln=ba("veestack"),Ra=globalThis,Ca=Ra.CLI_VERSION??"unknown",B=new Command;B.configureOutput({writeErr:t=>{if(t.includes("unknown option")){let e=t.match(/'(--\w+)'/)?.[1]||"option",n=process.argv[2]||"";process.stderr.write(v.red(`
216
+ `));}function Pa(t){console.log(JSON.stringify(t,null,2));}async function Xr(t={}){try{let e=await Na();t.json?Pa(e):Oa(e);}catch(e){console.error(v.red(`
217
+ \u274C Error collecting debug information:`)),e instanceof Error&&console.error(v.red(e.message)),process.exit(1);}}var Ua=dirname(fileURLToPath(import.meta.url)),Qr=join(Ua,"..",".env");existsSync(Qr)&&config({path:Qr});zn();Hn();Jn();Kn();Zn();var Fn=Fa("veestack"),za=globalThis,Ha=za.CLI_VERSION??"unknown",M=new Command;M.configureOutput({writeErr:t=>{if(t.includes("unknown option")){let e=t.match(/'(--\w+)'/)?.[1]||"option",n=process.argv[2]||"";process.stderr.write(v.red(`
210
218
  \u274C Unknown option '${e}'${n?` for command '${n}'`:""}
211
219
  `)),process.stderr.write(v.gray(`Use 'veestack ${n} --help' to see available options.
212
- `)),process.exit(1);}process.stderr.write(t);}});B.name("veestack").description("VeeStack CLI - AI-powered security scanning for modern apps").version(Ca,"-v, --version").option("--debug","Enable debug output").helpOption("-h, --help","Show help");Ln.tree({init:[],i:[],scan:["--path","--output","--ci","--json"],s:["--path","--output","--ci","--json"],upload:["--file","--project-id"],u:["--file","--project-id"],login:["--key"],l:["--key"],logout:[],whoami:[],version:[],"switch-account":[],switch:[],status:[],st:[],report:["--format","--output","--report-id"],doctor:[],dr:[],debug:["--json"],"security-audit":["--full","--json"],audit:["--full","--json"],upgrade:[]});Ln.init();B.command("scan").alias("s").description("Scan your project (works without login)").option("-p, --path <path>","Path to project directory",".").option("-o, --output <path>","Output file path","snapshot.json").option("--ci","CI mode (no interactive prompts)").option("--json","Output results as JSON").option("--quiet","Minimize output for CI/CD environments").action(An);B.command("init").alias("i").description("Initialize VeeStack in a project").option("--ci","CI mode (no interactive prompts)").option("-i, --interactive","Interactive mode with prompts").action(ht);B.command("upload").alias("u").description("Upload scan results to dashboard").argument("[file]","Snapshot file path","snapshot.json").option("-p, --project-id <id>","Project ID").option("--ci","CI mode (non-interactive)").action((t,e)=>bn({...e,file:t}));B.command("report").description("Export security reports (SARIF/JSON)").option("-f, --format <type>","Report format (sarif, json)","sarif").option("-o, --output <path>","Output file path","veestack-results.sarif").option("-r, --report-id <id>","Specific report ID to export").action(br);B.command("login").alias("l").description("Authenticate with VeeStack").option("-k, --key <apiKey>","API key (legacy mode)").action(Ot);B.command("logout").description("Logout").action(Cr);B.command("whoami").description("Show current user").action(Ir);B.command("switch-account").alias("switch").description("Switch between accounts").action(Or);B.command("status").alias("st").description("Check CLI and account status").action(Cn);B.command("open").description("Open VeeStack dashboard").action(Vr);B.command("doctor").alias("dr").description("Diagnose environment").action(Pn);B.command("debug").description("Show debug information for troubleshooting").option("--json","Output as JSON").action(Jr);B.command("version").description("Show build/version info").option("--json","Output as JSON").action(Br);B.command("security-audit").alias("audit").description("Run full security audit").option("--full","Run full audit with API tests").option("--json","Output as JSON").action(zr);B.command("completion").description("Install autocomplete for your shell").action(()=>{Ln.setupShellInitFile();});B.command("upgrade").description("Update CLI to latest version").action(Hr);async function Ia(){if(await Tr(),process.argv.length<=2){console.log(v.bold.cyan(`
220
+ `)),process.exit(1);}process.stderr.write(t);}});M.name("veestack").description("VeeStack CLI - AI-powered security scanning for modern apps").version(Ha,"-v, --version").option("--debug","Enable debug output").helpOption("-h, --help","Show help");Fn.tree({init:[],i:[],scan:["--path","--output","--ci","--json"],s:["--path","--output","--ci","--json"],upload:["--file","--project-id"],u:["--file","--project-id"],login:["--key"],l:["--key"],logout:[],whoami:[],version:[],"switch-account":[],switch:[],status:[],st:[],report:["--format","--output","--report-id"],doctor:[],dr:[],debug:["--json"],"security-audit":["--full","--json"],audit:["--full","--json"],upgrade:[]});Fn.init();M.command("scan").alias("s").description("Scan your project (works without login)").option("-p, --path <path>","Path to project directory",".").option("-o, --output <path>","Output file path","snapshot.json").option("--ci","CI mode (no interactive prompts)").option("--json","Output results as JSON").option("--quiet","Minimize output for CI/CD environments").action(Nn);M.command("init").alias("i").description("Initialize VeeStack in a project").option("--ci","CI mode (no interactive prompts)").option("-i, --interactive","Interactive mode with prompts").action(vt);M.command("upload").alias("u").description("Upload scan results to dashboard").argument("[file]","Snapshot file path","snapshot.json").option("-p, --project-id <id>","Project ID").option("--ci","CI mode (non-interactive)").action((t,e)=>Pn({...e,file:t}));M.command("report").description("Export security reports (SARIF/JSON)").option("-f, --format <type>","Report format (sarif, json)","sarif").option("-o, --output <path>","Output file path","veestack-results.sarif").option("-r, --report-id <id>","Specific report ID to export").action(Dr);M.command("login").alias("l").description("Authenticate with VeeStack").option("-k, --key <apiKey>","API key (legacy mode)").action(Lt);M.command("logout").description("Logout").action(Lr);M.command("whoami").description("Show current user").action($r);M.command("switch-account").alias("switch").description("Switch between accounts").action(Mr);M.command("status").alias("st").description("Check CLI and account status").action(Dn);M.command("open").description("Open VeeStack dashboard").action(Jr);M.command("doctor").alias("dr").description("Diagnose environment").action($n);M.command("debug").description("Show debug information for troubleshooting").option("--json","Output as JSON").action(Xr);M.command("version").description("Show build/version info").option("--json","Output as JSON").action(Zr);M.command("security-audit").alias("audit").description("Run full security audit").option("--full","Run full audit with API tests").option("--json","Output as JSON").action(qr);M.command("completion").description("Install autocomplete for your shell").action(()=>{Fn.setupShellInitFile();});M.command("upgrade").description("Update CLI to latest version").action(Yr);async function Ja(){if(await Nr(),process.argv.length<=2){console.log(v.bold.cyan(`
213
221
  \u{1F680} VeeStack CLI
214
222
  `)),console.log(v.gray(`AI-powered security scanning for modern apps
215
223
  `)),console.log(v.bold.white(`Commands:
216
224
  `)),console.log(v.cyan(" scan ")+v.white("Scan your project (works without login)")),console.log(v.cyan(" init ")+v.white("Initialize config")),console.log(v.cyan(" upload ")+v.white("Upload results to dashboard")),console.log(v.cyan(" login ")+v.white("Authenticate with VeeStack")),console.log(v.cyan(" help ")+v.white(`Show help
217
225
  `)),console.log(v.bold.white(`Try:
218
- `)),console.log(v.cyan(" veestack scan")),console.log();let t=await wr({type:"select",name:"action",message:"What do you want to do?",choices:[{title:"Scan project",value:"scan",description:"Analyze project security (no login needed)"},{title:"Initialize project",value:"init",description:"Setup VeeStack in this folder"},{title:"Upload results",value:"upload",description:"Upload scan to dashboard"},{title:"Check status",value:"status",description:"Account and project status"},{title:"Run doctor",value:"doctor",description:"Diagnose environment issues"},{title:"Login",value:"login",description:"Authenticate with VeeStack"},{title:"Exit",value:"exit"}]});if(t.action&&t.action!=="exit")switch(t.action){case "init":await ht();break;case "scan":await An({path:".",output:"snapshot.json"});break;case "upload":await bn({file:"snapshot.json"});break;case "status":await Cn();break;case "doctor":await Pn();break;case "login":await Ot();break}}else B.parse();}Ia();
226
+ `)),console.log(v.cyan(" veestack scan")),console.log();let t=await Cr({type:"select",name:"action",message:"What do you want to do?",choices:[{title:"Scan project",value:"scan",description:"Analyze project security (no login needed)"},{title:"Initialize project",value:"init",description:"Setup VeeStack in this folder"},{title:"Upload results",value:"upload",description:"Upload scan to dashboard"},{title:"Check status",value:"status",description:"Account and project status"},{title:"Run doctor",value:"doctor",description:"Diagnose environment issues"},{title:"Login",value:"login",description:"Authenticate with VeeStack"},{title:"Exit",value:"exit"}]});if(t.action&&t.action!=="exit")switch(t.action){case "init":await vt();break;case "scan":await Nn({path:".",output:"snapshot.json"});break;case "upload":await Pn({file:"snapshot.json"});break;case "status":await Dn();break;case "doctor":await $n();break;case "login":await Lt();break}}else M.parse();}Ja();
package/dist/version.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@vee_stack/cli",
3
- "version": "6.3.18",
3
+ "version": "6.3.19",
4
4
  "commit": "eb2a9885e020e3baef623e0d681d20c0b6f271e4",
5
- "buildTime": "2026-03-14T17:29:22.175Z",
5
+ "buildTime": "2026-03-17T20:40:49.819Z",
6
6
  "node": ">=18.0.0"
7
7
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@vee_stack/cli",
3
- "version": "6.3.18",
3
+ "version": "6.3.20",
4
4
  "description": "VeeStack CLI - Technical Stack Visibility Tool",
5
5
  "main": "dist/index.js",
6
6
  "type": "module",
@@ -29,6 +29,7 @@
29
29
  "cli-progress": "^3.12.0",
30
30
  "cli-table3": "^0.6.5",
31
31
  "commander": "^11.1.0",
32
+ "dotenv": "^16.3.1",
32
33
  "glob": "^10.3.10",
33
34
  "http-shutdown": "^1.2.2",
34
35
  "inquirer": "^9.2.12",
@@ -60,6 +61,6 @@
60
61
  "postbuild": "node scripts/write-build-metadata.mjs",
61
62
  "dev": "tsup --watch",
62
63
  "clean": "rm -rf dist",
63
- "prebuild": "pnpm --filter @vee_stack/utils build && pnpm --filter @vee_stack/types build && pnpm --filter @vee_stack/engine build"
64
+ "prebuild": "pnpm --filter @vee_stack/config build && pnpm --filter @vee_stack/utils build && pnpm --filter @vee_stack/types build && pnpm --filter @vee_stack/engine build"
64
65
  }
65
66
  }