@vention/vention-cli 0.36.4 → 0.37.0

package/main.esm.js

@@ -3591,34 +3591,246 @@ for (var COLLECTION_NAME in DOMIterables) {
 
 handlePrototype(DOMTokenListPrototype, 'DOMTokenList');
 
-var $$B = _export;
+var defineProperty = objectDefineProperty.f;
+
+var proxyAccessor$2 = function (Target, Source, key) {
+  key in Target || defineProperty(Target, key, {
+    configurable: true,
+    get: function () { return Source[key]; },
+    set: function (it) { Source[key] = it; }
+  });
+};
+
+var isCallable$6 = isCallable$t;
+var isObject$9 = isObject$m;
+var setPrototypeOf$4 = objectSetPrototypeOf;
+
+// makes subclassing work correct for wrapped built-ins
+var inheritIfRequired$4 = function ($this, dummy, Wrapper) {
+  var NewTarget, NewTargetPrototype;
+  if (
+    // it can work only with native `setPrototypeOf`
+    setPrototypeOf$4 &&
+    // we haven't completely correct pre-ES6 way for getting `new.target`, so use this
+    isCallable$6(NewTarget = dummy.constructor) &&
+    NewTarget !== Wrapper &&
+    isObject$9(NewTargetPrototype = NewTarget.prototype) &&
+    NewTargetPrototype !== Wrapper.prototype
+  ) setPrototypeOf$4($this, NewTargetPrototype);
+  return $this;
+};
+
+var toString$f = toString$j;
+
+var normalizeStringArgument$1 = function (argument, $default) {
+  return argument === undefined ? arguments.length < 2 ? '' : $default : toString$f(argument);
+};
+
+var isObject$8 = isObject$m;
+var createNonEnumerableProperty$7 = createNonEnumerableProperty$d;
+
+// `InstallErrorCause` abstract operation
+// https://tc39.es/ecma262/#sec-installerrorcause
+var installErrorCause$1 = function (O, options) {
+  if (isObject$8(options) && 'cause' in options) {
+    createNonEnumerableProperty$7(O, 'cause', options.cause);
+  }
+};
+
+var uncurryThis$v = functionUncurryThis;
+
+var $Error = Error;
+var replace$7 = uncurryThis$v(''.replace);
+
+var TEST = (function (arg) { return String(new $Error(arg).stack); })('zxcasd');
+// eslint-disable-next-line redos/no-vulnerable, sonarjs/slow-regex -- safe
+var V8_OR_CHAKRA_STACK_ENTRY = /\n\s*at [^:]*:[^\n]*/;
+var IS_V8_OR_CHAKRA_STACK = V8_OR_CHAKRA_STACK_ENTRY.test(TEST);
+
+var errorStackClear = function (stack, dropEntries) {
+  if (IS_V8_OR_CHAKRA_STACK && typeof stack == 'string' && !$Error.prepareStackTrace) {
+    while (dropEntries--) stack = replace$7(stack, V8_OR_CHAKRA_STACK_ENTRY, '');
+  } return stack;
+};
+
+var fails$m = fails$F;
+var createPropertyDescriptor$2 = createPropertyDescriptor$7;
+
+var errorStackInstallable = !fails$m(function () {
+  var error = new Error('a');
+  if (!('stack' in error)) return true;
+  // eslint-disable-next-line es/no-object-defineproperty -- safe
+  Object.defineProperty(error, 'stack', createPropertyDescriptor$2(1, 7));
+  return error.stack !== 7;
+});
+
+var createNonEnumerableProperty$6 = createNonEnumerableProperty$d;
+var clearErrorStack = errorStackClear;
+var ERROR_STACK_INSTALLABLE = errorStackInstallable;
+
+// non-standard V8
+// eslint-disable-next-line es/no-nonstandard-error-properties -- safe
+var captureStackTrace = Error.captureStackTrace;
+
+var errorStackInstall = function (error, C, stack, dropEntries) {
+  if (ERROR_STACK_INSTALLABLE) {
+    if (captureStackTrace) captureStackTrace(error, C);
+    else createNonEnumerableProperty$6(error, 'stack', clearErrorStack(stack, dropEntries));
+  }
+};
+
+var getBuiltIn$3 = getBuiltIn$c;
+var hasOwn$8 = hasOwnProperty_1;
+var createNonEnumerableProperty$5 = createNonEnumerableProperty$d;
+var isPrototypeOf$4 = objectIsPrototypeOf;
+var setPrototypeOf$3 = objectSetPrototypeOf;
+var copyConstructorProperties$1 = copyConstructorProperties$4;
+var proxyAccessor$1 = proxyAccessor$2;
+var inheritIfRequired$3 = inheritIfRequired$4;
+var normalizeStringArgument = normalizeStringArgument$1;
+var installErrorCause = installErrorCause$1;
+var installErrorStack = errorStackInstall;
 var DESCRIPTORS$c = descriptors;
+
+var wrapErrorConstructorWithCause$1 = function (FULL_NAME, wrapper, FORCED, IS_AGGREGATE_ERROR) {
+  var STACK_TRACE_LIMIT = 'stackTraceLimit';
+  var OPTIONS_POSITION = IS_AGGREGATE_ERROR ? 2 : 1;
+  var path = FULL_NAME.split('.');
+  var ERROR_NAME = path[path.length - 1];
+  var OriginalError = getBuiltIn$3.apply(null, path);
+
+  if (!OriginalError) return;
+
+  var OriginalErrorPrototype = OriginalError.prototype;
+
+  // V8 9.3- bug https://bugs.chromium.org/p/v8/issues/detail?id=12006
+  if (hasOwn$8(OriginalErrorPrototype, 'cause')) delete OriginalErrorPrototype.cause;
+
+  if (!FORCED) return OriginalError;
+
+  var BaseError = getBuiltIn$3('Error');
+
+  var WrappedError = wrapper(function (a, b) {
+    var message = normalizeStringArgument(IS_AGGREGATE_ERROR ? b : a, undefined);
+    var result = IS_AGGREGATE_ERROR ? new OriginalError(a) : new OriginalError();
+    if (message !== undefined) createNonEnumerableProperty$5(result, 'message', message);
+    installErrorStack(result, WrappedError, result.stack, 2);
+    if (this && isPrototypeOf$4(OriginalErrorPrototype, this)) inheritIfRequired$3(result, this, WrappedError);
+    if (arguments.length > OPTIONS_POSITION) installErrorCause(result, arguments[OPTIONS_POSITION]);
+    return result;
+  });
+
+  WrappedError.prototype = OriginalErrorPrototype;
+
+  if (ERROR_NAME !== 'Error') {
+    if (setPrototypeOf$3) setPrototypeOf$3(WrappedError, BaseError);
+    else copyConstructorProperties$1(WrappedError, BaseError, { name: true });
+  } else if (DESCRIPTORS$c && STACK_TRACE_LIMIT in OriginalError) {
+    proxyAccessor$1(WrappedError, OriginalError, STACK_TRACE_LIMIT);
+    proxyAccessor$1(WrappedError, OriginalError, 'prepareStackTrace');
+  }
+
+  copyConstructorProperties$1(WrappedError, OriginalError);
+
+  try {
+    // Safari 13- bug: WebAssembly errors does not have a proper `.name`
+    if (OriginalErrorPrototype.name !== ERROR_NAME) {
+      createNonEnumerableProperty$5(OriginalErrorPrototype, 'name', ERROR_NAME);
+    }
+    OriginalErrorPrototype.constructor = WrappedError;
+  } catch (error) { /* empty */ }
+
+  return WrappedError;
+};
+
+/* eslint-disable no-unused-vars -- required for functions `.length` */
+var $$B = _export;
 var globalThis$t = globalThis_1;
-var getBuiltIn$3 = getBuiltIn$c;
-var uncurryThis$v = functionUncurryThis;
+var apply$2 = functionApply;
+var wrapErrorConstructorWithCause = wrapErrorConstructorWithCause$1;
+
+var WEB_ASSEMBLY = 'WebAssembly';
+var WebAssembly = globalThis$t[WEB_ASSEMBLY];
+
+// eslint-disable-next-line es/no-error-cause -- feature detection
+var FORCED$7 = new Error('e', { cause: 7 }).cause !== 7;
+
+var exportGlobalErrorCauseWrapper = function (ERROR_NAME, wrapper) {
+  var O = {};
+  // eslint-disable-next-line unicorn/no-immediate-mutation -- ES3 syntax limitation
+  O[ERROR_NAME] = wrapErrorConstructorWithCause(ERROR_NAME, wrapper, FORCED$7);
+  $$B({ global: true, constructor: true, arity: 1, forced: FORCED$7 }, O);
+};
+
+var exportWebAssemblyErrorCauseWrapper = function (ERROR_NAME, wrapper) {
+  if (WebAssembly && WebAssembly[ERROR_NAME]) {
+    var O = {};
+    // eslint-disable-next-line unicorn/no-immediate-mutation -- ES3 syntax limitation
+    O[ERROR_NAME] = wrapErrorConstructorWithCause(WEB_ASSEMBLY + '.' + ERROR_NAME, wrapper, FORCED$7);
+    $$B({ target: WEB_ASSEMBLY, stat: true, constructor: true, arity: 1, forced: FORCED$7 }, O);
+  }
+};
+
+// https://tc39.es/ecma262/#sec-nativeerror
+exportGlobalErrorCauseWrapper('Error', function (init) {
+  return function Error(message) { return apply$2(init, this, arguments); };
+});
+exportGlobalErrorCauseWrapper('EvalError', function (init) {
+  return function EvalError(message) { return apply$2(init, this, arguments); };
+});
+exportGlobalErrorCauseWrapper('RangeError', function (init) {
+  return function RangeError(message) { return apply$2(init, this, arguments); };
+});
+exportGlobalErrorCauseWrapper('ReferenceError', function (init) {
+  return function ReferenceError(message) { return apply$2(init, this, arguments); };
+});
+exportGlobalErrorCauseWrapper('SyntaxError', function (init) {
+  return function SyntaxError(message) { return apply$2(init, this, arguments); };
+});
+exportGlobalErrorCauseWrapper('TypeError', function (init) {
+  return function TypeError(message) { return apply$2(init, this, arguments); };
+});
+exportGlobalErrorCauseWrapper('URIError', function (init) {
+  return function URIError(message) { return apply$2(init, this, arguments); };
+});
+exportWebAssemblyErrorCauseWrapper('CompileError', function (init) {
+  return function CompileError(message) { return apply$2(init, this, arguments); };
+});
+exportWebAssemblyErrorCauseWrapper('LinkError', function (init) {
+  return function LinkError(message) { return apply$2(init, this, arguments); };
+});
+exportWebAssemblyErrorCauseWrapper('RuntimeError', function (init) {
+  return function RuntimeError(message) { return apply$2(init, this, arguments); };
+});
+
+var $$A = _export;
+var DESCRIPTORS$b = descriptors;
+var globalThis$s = globalThis_1;
+var getBuiltIn$2 = getBuiltIn$c;
+var uncurryThis$u = functionUncurryThis;
 var call$l = functionCall;
-var isCallable$6 = isCallable$t;
-var isObject$9 = isObject$m;
+var isCallable$5 = isCallable$t;
+var isObject$7 = isObject$m;
 var isArray$3 = isArray$5;
-var hasOwn$8 = hasOwnProperty_1;
-var toString$f = toString$j;
+var hasOwn$7 = hasOwnProperty_1;
+var toString$e = toString$j;
 var lengthOfArrayLike$d = lengthOfArrayLike$g;
 var createProperty$3 = createProperty$6;
-var fails$m = fails$F;
+var fails$l = fails$F;
 var parseJSONString = parseJsonString;
 var NATIVE_SYMBOL = symbolConstructorDetection;
 
-var JSON$1 = globalThis$t.JSON;
-var Number$1 = globalThis$t.Number;
-var SyntaxError$4 = globalThis$t.SyntaxError;
+var JSON$1 = globalThis$s.JSON;
+var Number$1 = globalThis$s.Number;
+var SyntaxError$4 = globalThis$s.SyntaxError;
 var nativeParse = JSON$1 && JSON$1.parse;
-var enumerableOwnProperties = getBuiltIn$3('Object', 'keys');
+var enumerableOwnProperties = getBuiltIn$2('Object', 'keys');
 // eslint-disable-next-line es/no-object-getownpropertydescriptor -- safe
 var getOwnPropertyDescriptor$3 = Object.getOwnPropertyDescriptor;
-var at$1 = uncurryThis$v(''.charAt);
-var slice$3 = uncurryThis$v(''.slice);
-var exec$5 = uncurryThis$v(/./.exec);
-var push$6 = uncurryThis$v([].push);
+var at$1 = uncurryThis$u(''.charAt);
+var slice$3 = uncurryThis$u(''.slice);
+var exec$5 = uncurryThis$u(/./.exec);
+var push$6 = uncurryThis$u([].push);
 
 var IS_DIGIT = /^\d$/;
 var IS_NON_ZERO_DIGIT = /^[1-9]$/;
@@ -3629,7 +3841,7 @@ var PRIMITIVE = 0;
 var OBJECT = 1;
 
 var $parse = function (source, reviver) {
-  source = toString$f(source);
+  source = toString$e(source);
   var context = new Context(source, 0);
   var root = context.parse();
   var value = root.value;
@@ -3637,7 +3849,7 @@ var $parse = function (source, reviver) {
   if (endIndex < source.length) {
     throw new SyntaxError$4('Unexpected extra character: "' + at$1(source, endIndex) + '" after the parsed data at: ' + endIndex);
   }
-  return isCallable$6(reviver) ? internalize({ '': value }, '', reviver, root) : value;
+  return isCallable$5(reviver) ? internalize({ '': value }, '', reviver, root) : value;
 };
 
 var internalize = function (holder, name, reviver, node) {
@@ -3645,7 +3857,7 @@ var internalize = function (holder, name, reviver, node) {
   var unmodified = node && val === node.value;
   var context = unmodified && typeof node.source == 'string' ? { source: node.source } : {};
   var elementRecordsLen, keys, len, i, P;
-  if (isObject$9(val)) {
+  if (isObject$7(val)) {
     var nodeIsArray = isArray$3(val);
     var nodes = unmodified ? node.nodes : nodeIsArray ? [] : {};
     if (nodeIsArray) {
@@ -3659,7 +3871,7 @@ var internalize = function (holder, name, reviver, node) {
       len = lengthOfArrayLike$d(keys);
       for (i = 0; i < len; i++) {
         P = keys[i];
-        internalizeProperty(val, P, internalize(val, P, reviver, hasOwn$8(nodes, P) ? nodes[P] : undefined));
+        internalizeProperty(val, P, internalize(val, P, reviver, hasOwn$7(nodes, P) ? nodes[P] : undefined));
       }
     }
   }
@@ -3667,7 +3879,7 @@ var internalize = function (holder, name, reviver, node) {
 };
 
 var internalizeProperty = function (object, key, value) {
-  if (DESCRIPTORS$c) {
+  if (DESCRIPTORS$b) {
     var descriptor = getOwnPropertyDescriptor$3(object, key);
     if (descriptor && !descriptor.configurable) return;
   }
@@ -3831,7 +4043,7 @@ Context.prototype = {
   }
 };
 
-var NO_SOURCE_SUPPORT = fails$m(function () {
+var NO_SOURCE_SUPPORT = fails$l(function () {
   var unsafeInt = '9007199254740993';
   var source;
   nativeParse(unsafeInt, function (key, value, context) {
@@ -3840,7 +4052,7 @@ var NO_SOURCE_SUPPORT = fails$m(function () {
   return source !== unsafeInt;
 });
 
-var PROPER_BASE_PARSE = NATIVE_SYMBOL && !fails$m(function () {
+var PROPER_BASE_PARSE = NATIVE_SYMBOL && !fails$l(function () {
   // Safari 9 bug
   return 1 / nativeParse('-0 \t') !== -Infinity;
 });
@@ -3848,9 +4060,42 @@ var PROPER_BASE_PARSE = NATIVE_SYMBOL && !fails$m(function () {
 // `JSON.parse` method
 // https://tc39.es/ecma262/#sec-json.parse
 // https://github.com/tc39/proposal-json-parse-with-source
-$$B({ target: 'JSON', stat: true, forced: NO_SOURCE_SUPPORT }, {
+$$A({ target: 'JSON', stat: true, forced: NO_SOURCE_SUPPORT }, {
   parse: function parse(text, reviver) {
-    return PROPER_BASE_PARSE && !isCallable$6(reviver) ? nativeParse(text) : $parse(text, reviver);
+    return PROPER_BASE_PARSE && !isCallable$5(reviver) ? nativeParse(text) : $parse(text, reviver);
+  }
+});
+
+var $$z = _export;
+var uncurryThis$t = functionUncurryThisClause;
+var getOwnPropertyDescriptor$2 = objectGetOwnPropertyDescriptor.f;
+var toLength$5 = toLength$7;
+var toString$d = toString$j;
+var notARegExp$1 = notARegexp;
+var requireObjectCoercible$6 = requireObjectCoercible$b;
+var correctIsRegExpLogic$1 = correctIsRegexpLogic;
+
+var slice$2 = uncurryThis$t(''.slice);
+var min$4 = Math.min;
+
+var CORRECT_IS_REGEXP_LOGIC$1 = correctIsRegExpLogic$1('endsWith');
+// https://github.com/zloirock/core-js/pull/702
+var MDN_POLYFILL_BUG$1 = !CORRECT_IS_REGEXP_LOGIC$1 && !!function () {
+  var descriptor = getOwnPropertyDescriptor$2(String.prototype, 'endsWith');
+  return descriptor && !descriptor.writable;
+}();
+
+// `String.prototype.endsWith` method
+// https://tc39.es/ecma262/#sec-string.prototype.endswith
+$$z({ target: 'String', proto: true, forced: !MDN_POLYFILL_BUG$1 && !CORRECT_IS_REGEXP_LOGIC$1 }, {
+  endsWith: function endsWith(searchString /* , endPosition = @length */) {
+    var that = toString$d(requireObjectCoercible$6(this));
+    notARegExp$1(searchString);
+    var search = toString$d(searchString);
+    var endPosition = arguments.length > 1 ? arguments[1] : undefined;
+    var len = that.length;
+    var end = endPosition === undefined ? len : min$4(toLength$5(endPosition), len);
+    return slice$2(that, end - search.length, end) === search;
   }
 });
 
@@ -3882,233 +4127,34 @@ const loadSession = async ({
     return null;
   }
 };
+const originSchema = z.url({
+  protocol: /^https$/
+}).refine(url => !url.endsWith("/"));
+const getOriginOverride = variableName => {
+  const override = process.env[variableName];
+  if (!override) {
+    return undefined;
+  }
+  if (!originSchema.safeParse(override).success) {
+    throw new Error(`${variableName} must be an https URL without a trailing slash`);
+  }
+  return override;
+};
+
+var $$y = _export;
+var globalThis$r = globalThis_1;
 
-var $$A = _export;
-var globalThis$s = globalThis_1;
-
 // `globalThis` object
 // https://tc39.es/ecma262/#sec-globalthis
-$$A({ global: true, forced: globalThis$s.globalThis !== globalThis$s }, {
-  globalThis: globalThis$s
+$$y({ global: true, forced: globalThis$r.globalThis !== globalThis$r }, {
+  globalThis: globalThis$r
 });
 
-var version = "0.36.4";
+var version = "0.37.0";
 var packageJson$1 = {
 	version: version};
 
-var defineProperty = objectDefineProperty.f;
-
-var proxyAccessor$2 = function (Target, Source, key) {
-  key in Target || defineProperty(Target, key, {
-    configurable: true,
-    get: function () { return Source[key]; },
-    set: function (it) { Source[key] = it; }
-  });
-};
-
-var isCallable$5 = isCallable$t;
-var isObject$8 = isObject$m;
-var setPrototypeOf$4 = objectSetPrototypeOf;
-
-// makes subclassing work correct for wrapped built-ins
-var inheritIfRequired$4 = function ($this, dummy, Wrapper) {
-  var NewTarget, NewTargetPrototype;
-  if (
-    // it can work only with native `setPrototypeOf`
-    setPrototypeOf$4 &&
-    // we haven't completely correct pre-ES6 way for getting `new.target`, so use this
-    isCallable$5(NewTarget = dummy.constructor) &&
-    NewTarget !== Wrapper &&
-    isObject$8(NewTargetPrototype = NewTarget.prototype) &&
-    NewTargetPrototype !== Wrapper.prototype
-  ) setPrototypeOf$4($this, NewTargetPrototype);
-  return $this;
-};
-
-var toString$e = toString$j;
-
-var normalizeStringArgument$1 = function (argument, $default) {
-  return argument === undefined ? arguments.length < 2 ? '' : $default : toString$e(argument);
-};
-
-var isObject$7 = isObject$m;
-var createNonEnumerableProperty$7 = createNonEnumerableProperty$d;
-
-// `InstallErrorCause` abstract operation
-// https://tc39.es/ecma262/#sec-installerrorcause
-var installErrorCause$1 = function (O, options) {
-  if (isObject$7(options) && 'cause' in options) {
-    createNonEnumerableProperty$7(O, 'cause', options.cause);
-  }
-};
-
-var uncurryThis$u = functionUncurryThis;
-
-var $Error = Error;
-var replace$7 = uncurryThis$u(''.replace);
-
-var TEST = (function (arg) { return String(new $Error(arg).stack); })('zxcasd');
-// eslint-disable-next-line redos/no-vulnerable, sonarjs/slow-regex -- safe
-var V8_OR_CHAKRA_STACK_ENTRY = /\n\s*at [^:]*:[^\n]*/;
-var IS_V8_OR_CHAKRA_STACK = V8_OR_CHAKRA_STACK_ENTRY.test(TEST);
-
-var errorStackClear = function (stack, dropEntries) {
-  if (IS_V8_OR_CHAKRA_STACK && typeof stack == 'string' && !$Error.prepareStackTrace) {
-    while (dropEntries--) stack = replace$7(stack, V8_OR_CHAKRA_STACK_ENTRY, '');
-  } return stack;
-};
-
-var fails$l = fails$F;
-var createPropertyDescriptor$2 = createPropertyDescriptor$7;
-
-var errorStackInstallable = !fails$l(function () {
-  var error = new Error('a');
-  if (!('stack' in error)) return true;
-  // eslint-disable-next-line es/no-object-defineproperty -- safe
-  Object.defineProperty(error, 'stack', createPropertyDescriptor$2(1, 7));
-  return error.stack !== 7;
-});
-
-var createNonEnumerableProperty$6 = createNonEnumerableProperty$d;
-var clearErrorStack = errorStackClear;
-var ERROR_STACK_INSTALLABLE = errorStackInstallable;
-
-// non-standard V8
-// eslint-disable-next-line es/no-nonstandard-error-properties -- safe
-var captureStackTrace = Error.captureStackTrace;
-
-var errorStackInstall = function (error, C, stack, dropEntries) {
-  if (ERROR_STACK_INSTALLABLE) {
-    if (captureStackTrace) captureStackTrace(error, C);
-    else createNonEnumerableProperty$6(error, 'stack', clearErrorStack(stack, dropEntries));
-  }
-};
-
-var getBuiltIn$2 = getBuiltIn$c;
-var hasOwn$7 = hasOwnProperty_1;
-var createNonEnumerableProperty$5 = createNonEnumerableProperty$d;
-var isPrototypeOf$4 = objectIsPrototypeOf;
-var setPrototypeOf$3 = objectSetPrototypeOf;
-var copyConstructorProperties$1 = copyConstructorProperties$4;
-var proxyAccessor$1 = proxyAccessor$2;
-var inheritIfRequired$3 = inheritIfRequired$4;
-var normalizeStringArgument = normalizeStringArgument$1;
-var installErrorCause = installErrorCause$1;
-var installErrorStack = errorStackInstall;
-var DESCRIPTORS$b = descriptors;
-
-var wrapErrorConstructorWithCause$1 = function (FULL_NAME, wrapper, FORCED, IS_AGGREGATE_ERROR) {
-  var STACK_TRACE_LIMIT = 'stackTraceLimit';
-  var OPTIONS_POSITION = IS_AGGREGATE_ERROR ? 2 : 1;
-  var path = FULL_NAME.split('.');
-  var ERROR_NAME = path[path.length - 1];
-  var OriginalError = getBuiltIn$2.apply(null, path);
-
-  if (!OriginalError) return;
-
-  var OriginalErrorPrototype = OriginalError.prototype;
-
-  // V8 9.3- bug https://bugs.chromium.org/p/v8/issues/detail?id=12006
-  if (hasOwn$7(OriginalErrorPrototype, 'cause')) delete OriginalErrorPrototype.cause;
-
-  if (!FORCED) return OriginalError;
-
-  var BaseError = getBuiltIn$2('Error');
-
-  var WrappedError = wrapper(function (a, b) {
-    var message = normalizeStringArgument(IS_AGGREGATE_ERROR ? b : a, undefined);
-    var result = IS_AGGREGATE_ERROR ? new OriginalError(a) : new OriginalError();
-    if (message !== undefined) createNonEnumerableProperty$5(result, 'message', message);
-    installErrorStack(result, WrappedError, result.stack, 2);
-    if (this && isPrototypeOf$4(OriginalErrorPrototype, this)) inheritIfRequired$3(result, this, WrappedError);
-    if (arguments.length > OPTIONS_POSITION) installErrorCause(result, arguments[OPTIONS_POSITION]);
-    return result;
-  });
-
-  WrappedError.prototype = OriginalErrorPrototype;
-
-  if (ERROR_NAME !== 'Error') {
-    if (setPrototypeOf$3) setPrototypeOf$3(WrappedError, BaseError);
-    else copyConstructorProperties$1(WrappedError, BaseError, { name: true });
-  } else if (DESCRIPTORS$b && STACK_TRACE_LIMIT in OriginalError) {
-    proxyAccessor$1(WrappedError, OriginalError, STACK_TRACE_LIMIT);
-    proxyAccessor$1(WrappedError, OriginalError, 'prepareStackTrace');
-  }
-
-  copyConstructorProperties$1(WrappedError, OriginalError);
-
-  try {
-    // Safari 13- bug: WebAssembly errors does not have a proper `.name`
-    if (OriginalErrorPrototype.name !== ERROR_NAME) {
-      createNonEnumerableProperty$5(OriginalErrorPrototype, 'name', ERROR_NAME);
-    }
-    OriginalErrorPrototype.constructor = WrappedError;
-  } catch (error) { /* empty */ }
-
-  return WrappedError;
-};
-
-/* eslint-disable no-unused-vars -- required for functions `.length` */
-var $$z = _export;
-var globalThis$r = globalThis_1;
-var apply$2 = functionApply;
-var wrapErrorConstructorWithCause = wrapErrorConstructorWithCause$1;
-
-var WEB_ASSEMBLY = 'WebAssembly';
-var WebAssembly = globalThis$r[WEB_ASSEMBLY];
-
-// eslint-disable-next-line es/no-error-cause -- feature detection
-var FORCED$7 = new Error('e', { cause: 7 }).cause !== 7;
-
-var exportGlobalErrorCauseWrapper = function (ERROR_NAME, wrapper) {
-  var O = {};
-  // eslint-disable-next-line unicorn/no-immediate-mutation -- ES3 syntax limitation
-  O[ERROR_NAME] = wrapErrorConstructorWithCause(ERROR_NAME, wrapper, FORCED$7);
-  $$z({ global: true, constructor: true, arity: 1, forced: FORCED$7 }, O);
-};
-
-var exportWebAssemblyErrorCauseWrapper = function (ERROR_NAME, wrapper) {
-  if (WebAssembly && WebAssembly[ERROR_NAME]) {
-    var O = {};
-    // eslint-disable-next-line unicorn/no-immediate-mutation -- ES3 syntax limitation
-    O[ERROR_NAME] = wrapErrorConstructorWithCause(WEB_ASSEMBLY + '.' + ERROR_NAME, wrapper, FORCED$7);
-    $$z({ target: WEB_ASSEMBLY, stat: true, constructor: true, arity: 1, forced: FORCED$7 }, O);
-  }
-};
-
-// https://tc39.es/ecma262/#sec-nativeerror
-exportGlobalErrorCauseWrapper('Error', function (init) {
-  return function Error(message) { return apply$2(init, this, arguments); };
-});
-exportGlobalErrorCauseWrapper('EvalError', function (init) {
-  return function EvalError(message) { return apply$2(init, this, arguments); };
-});
-exportGlobalErrorCauseWrapper('RangeError', function (init) {
-  return function RangeError(message) { return apply$2(init, this, arguments); };
-});
-exportGlobalErrorCauseWrapper('ReferenceError', function (init) {
-  return function ReferenceError(message) { return apply$2(init, this, arguments); };
-});
-exportGlobalErrorCauseWrapper('SyntaxError', function (init) {
-  return function SyntaxError(message) { return apply$2(init, this, arguments); };
-});
-exportGlobalErrorCauseWrapper('TypeError', function (init) {
-  return function TypeError(message) { return apply$2(init, this, arguments); };
-});
-exportGlobalErrorCauseWrapper('URIError', function (init) {
-  return function URIError(message) { return apply$2(init, this, arguments); };
-});
-exportWebAssemblyErrorCauseWrapper('CompileError', function (init) {
-  return function CompileError(message) { return apply$2(init, this, arguments); };
-});
-exportWebAssemblyErrorCauseWrapper('LinkError', function (init) {
-  return function LinkError(message) { return apply$2(init, this, arguments); };
-});
-exportWebAssemblyErrorCauseWrapper('RuntimeError', function (init) {
-  return function RuntimeError(message) { return apply$2(init, this, arguments); };
-});
-
-var $$y = _export;
+var $$x = _export;
 var call$k = functionCall;
 var iterate$4 = iterate$8;
 var aCallable$b = aCallable$l;
@@ -4121,7 +4167,7 @@ var forEachWithoutClosingOnEarlyError = iteratorHelperWithoutClosingOnEarlyError
 
 // `Iterator.prototype.forEach` method
 // https://tc39.es/ecma262/#sec-iterator.prototype.foreach
-$$y({ target: 'Iterator', proto: true, real: true, forced: forEachWithoutClosingOnEarlyError }, {
+$$x({ target: 'Iterator', proto: true, real: true, forced: forEachWithoutClosingOnEarlyError }, {
   forEach: function forEach(fn) {
     anObject$c(this);
     try {
@@ -4140,46 +4186,304 @@ $$y({ target: 'Iterator', proto: true, real: true, forced: forEachWithoutClosing
   }
 });
 
-class ApiError extends Error {
-  constructor(message, status, statusText, responseBody, url) {
-    super(message);
-    this.status = status;
-    this.statusText = statusText;
-    this.responseBody = responseBody;
-    this.url = url;
-    this.name = "ApiError";
-  }
+//#region src/bearer-strategy.ts
+var BearerStrategy = class {
+	lastSent;
+	lastRecoveryAt;
+	now;
+	cooldownMs;
+	exchange;
+	constructor(options) {
+		this.now = options.now ?? Date.now;
+		this.cooldownMs = options.cooldownMs ?? 5e3;
+		this.exchange = options.exchange;
+	}
+	/** @inheritDoc */
+	async attach(request) {
+		const token = await this.exchange();
+		this.lastSent = token;
+		const headers = new Headers(request.headers);
+		headers.set("Authorization", `Bearer ${token}`);
+		return new Request(request, { headers });
+	}
+	/** @inheritDoc */
+	async ensure() {
+		await this.exchange();
+	}
+	/** @inheritDoc */
+	async onUnauthorized(_response) {
+		if (this.recoveredRecently()) return false;
+		await this.exchange({ refused: this.lastSent });
+		this.lastRecoveryAt = this.now();
+		return true;
+	}
+	recoveredRecently() {
+		return this.lastRecoveryAt !== void 0 && this.now() - this.lastRecoveryAt < this.cooldownMs;
+	}
+};
+
+//#region src/single-flight.ts
+/**
+* Shares one in-flight call. While a call is running, further callers get its promise instead
+* of starting their own; once it settles, the next caller starts a new one.
+*/
+function singleFlight(fn) {
+	let inFlight;
+	return (...args) => {
+		if (inFlight) return inFlight;
+		inFlight = fn(...args).finally(() => {
+			inFlight = void 0;
+		});
+		return inFlight;
+	};
 }
-async function assertApiResponseOk(res, url) {
-  if (!res.ok) {
-    let responseBody;
-    let text = "";
-    try {
-      text = await res.text();
-      responseBody = text ? JSON.parse(text) : null;
-    } catch (_a) {
-      responseBody = text || null;
-    }
-    throw new ApiError(`Request failed: ${res.status} ${res.statusText}`, res.status, res.statusText, responseBody, url);
-  }
+
+//#region src/tracked.ts
+/** Wraps an async function, counting settled calls and remembering how the last one settled. */
+function tracked(fn) {
+	let completed = 0;
+	let last;
+	async function call(...args) {
+		try {
+			const value = await fn(...args);
+			last = {
+				settled: "fulfilled",
+				value
+			};
+			return value;
+		} catch (reason) {
+			last = {
+				settled: "rejected",
+				reason
+			};
+			throw reason;
+		} finally {
+			completed += 1;
+		}
+	}
+	return {
+		call,
+		getCompleted: () => completed,
+		getLast: () => last
+	};
 }
-const ERROR_SUGGESTIONS = {
-  400: {
-    default: ["The request was invalid. Check the server response above for details."],
-    byEndpoint: {
-      library: ["The application data may be invalid or corrupted.", "Try running 'vention unlink' and then 'vention link' to re-link the application."]
-    }
-  },
-  401: {
-    default: ["Authentication error. Try running 'vention login' to re-authenticate."]
-  },
-  403: {
-    default: ["Authentication error. Try running 'vention login' to re-authenticate."]
-  },
-  404: {
-    default: ["The requested resource was not found."],
-    byEndpoint: {
-      allocations: ["No active session found for this design.", "Make sure the design is open in your browser with a live session."],
+
+//#region src/with-auth-strategy.ts
+/** Sends a clone of the request through the strategy's `attach`, leaving the original replayable. */
+async function fetchWithAuth(authStrategy, fetch, request) {
+	const clonedRequest = request.clone();
+	return fetch(await authStrategy.attach(clonedRequest));
+}
+/** A 401 that lands after a recovery finished takes that recovery's decision: its error, or its verdict. */
+function inheritRecovery(outcome) {
+	if (outcome?.settled === "rejected") throw outcome.reason;
+	return outcome?.value ?? true;
+}
+/** A fetch that attaches through the strategy, and on a 401 recovers once and retries once. */
+function withAuthStrategy(authStrategy, fetch = globalThis.fetch) {
+	const { call: recover, getCompleted: getRecoveryCount, getLast: getLastRecovery } = tracked((response) => authStrategy.onUnauthorized(response));
+	const tryRecover = singleFlight(recover);
+	return async (input, init) => {
+		const request = new Request(input, init);
+		const startRecoveryCount = getRecoveryCount();
+		const response = await fetchWithAuth(authStrategy, fetch, request);
+		if (response.status !== 401) return response;
+		if (getRecoveryCount() > startRecoveryCount ? inheritRecovery(getLastRecovery()) : await tryRecover(response)) return fetchWithAuth(authStrategy, fetch, request);
+		return response;
+	};
+}
+
+//#region src/errors/authorization-server-unavailable.ts
+var AuthorizationServerUnavailable = class extends Error {
+	name = "AuthorizationServerUnavailable";
+};
+
+//#region src/discovery.ts
+const REQUEST_TIMEOUT_MS$2 = 1e4;
+async function discoverAuthorizationServer(issuer, fetch = globalThis.fetch) {
+	const metadata = await readMetadata(`${issuer}/.well-known/oauth-authorization-server`, fetch);
+	return {
+		tokenEndpoint: metadata.token_endpoint,
+		identityProviderIssuer: metadata.vention_identity_provider_issuer,
+		clients: metadata.vention_clients
+	};
+}
+async function discoverOpenIdProvider(issuer, fetch = globalThis.fetch) {
+	const url = `${issuer}/.well-known/openid-configuration`;
+	const metadata = await readMetadata(url, fetch);
+	if (metadata.issuer !== issuer) throw new AuthorizationServerUnavailable(`${url} names the issuer ${metadata.issuer}, not ${issuer}`);
+	return {
+		authorizationEndpoint: metadata.authorization_endpoint,
+		tokenEndpoint: metadata.token_endpoint
+	};
+}
+async function readMetadata(url, fetch) {
+	const response = await fetch(url, {
+		headers: { Accept: "application/json" },
+		redirect: "error",
+		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS$2)
+	}).catch((error) => {
+		throw new AuthorizationServerUnavailable(`Could not reach ${url}`, { cause: error });
+	});
+	if (!response.ok) throw new AuthorizationServerUnavailable(`${url} answered ${response.status}`);
+	return response.json().catch((error) => {
+		throw new AuthorizationServerUnavailable(`${url} did not answer with JSON`, { cause: error });
+	});
+}
+
+//#region src/errors/exchange-rejected.ts
+var ExchangeRejected = class extends Error {
+	code;
+	name = "ExchangeRejected";
+	constructor(code) {
+		super(`The authorization server refused the token exchange (${code})`);
+		this.code = code;
+	}
+};
+
+//#region src/errors/login-required.ts
+var LoginRequired = class extends Error {
+	name = "LoginRequired";
+};
+
+//#region src/errors/login-timed-out.ts
+var LoginTimedOut = class extends Error {
+	name = "LoginTimedOut";
+	constructor() {
+		super("Login timed out");
+	}
+};
+
+//#region src/oauth2-token-request.ts
+const REQUEST_TIMEOUT_MS$1 = 1e4;
+function exchangeForGatewayToken(tokenEndpoint, subjectToken, fetch, now) {
+	return requestToken(tokenEndpoint, subjectToken, "urn:ietf:params:oauth:token-type:access_token", fetch, now);
+}
+function renewGatewayToken(tokenEndpoint, gatewayToken, fetch, now) {
+	return requestToken(tokenEndpoint, gatewayToken, "urn:ietf:params:oauth:token-type:jwt", fetch, now);
+}
+async function requestToken(tokenEndpoint, subjectToken, subjectTokenType, fetch, now) {
+	const response = await fetch(tokenEndpoint, {
+		method: "POST",
+		headers: {
+			"Content-Type": "application/x-www-form-urlencoded",
+			Accept: "application/json"
+		},
+		body: new URLSearchParams({
+			grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
+			subject_token: subjectToken,
+			subject_token_type: subjectTokenType
+		}),
+		redirect: "error",
+		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS$1)
+	}).catch((error) => {
+		throw new AuthorizationServerUnavailable("The authorization server could not be reached", { cause: error });
+	});
+	if (response.status >= 500 || response.status === 408 || response.status === 429) throw new AuthorizationServerUnavailable(`The authorization server answered ${response.status}`);
+	if (!response.ok) {
+		const refusal = await response.json().catch(() => void 0);
+		throw new ExchangeRejected(refusal?.error ?? `http_${response.status}`);
+	}
+	return response.json().then((body) => toStoredGatewayToken(body, now())).catch(() => {
+		throw new AuthorizationServerUnavailable("The authorization server returned an unusable token response");
+	});
+}
+function toStoredGatewayToken({ access_token: token, expires_in: expiresIn }, receivedAt) {
+	const payload = (token.split(".")[1] ?? "").replace(/-/g, "+").replace(/_/g, "/");
+	const claims = JSON.parse(atob(payload));
+	return {
+		token,
+		receivedAt,
+		expiresAt: receivedAt + expiresIn * 1e3,
+		capExpiresAt: receivedAt + (claims.cap_exp - claims.exp + expiresIn) * 1e3
+	};
+}
+
+//#region src/oauth2-token-exchange.ts
+function loginRequired() {
+	return new LoginRequired("Session expired. Run 'vention login'.");
+}
+function outlivesMargin(expiresAt, now) {
+	return expiresAt - now > 6e4;
+}
+function isFresh(token, now) {
+	const halfLife = (token.expiresAt - token.receivedAt) / 2;
+	return now - token.receivedAt < halfLife && outlivesMargin(token.expiresAt, now);
+}
+function oauth2TokenExchange({ issuer, store, now = Date.now, fetch = globalThis.fetch }) {
+	const storedToken = async () => {
+		const latest = await store.read();
+		if (latest === void 0) throw loginRequired();
+		return latest.token;
+	};
+	const renew = singleFlight(async (current) => {
+		const beforeRenewal = await storedToken();
+		if (beforeRenewal !== current.token) return beforeRenewal;
+		const { tokenEndpoint } = await discoverAuthorizationServer(issuer, fetch);
+		const renewed = await renewGatewayToken(tokenEndpoint, current.token, fetch, now).catch((error) => {
+			throw error instanceof ExchangeRejected ? loginRequired() : error;
+		});
+		if (!outlivesMargin(renewed.expiresAt, now())) throw loginRequired();
+		const beforeWrite = await storedToken();
+		if (beforeWrite !== current.token) return beforeWrite;
+		await store.write(renewed);
+		return renewed.token;
+	});
+	return async (request) => {
+		const current = await store.read();
+		if (current === void 0 || now() >= current.capExpiresAt) throw loginRequired();
+		const currentRefused = request?.refused === current.token;
+		if (!currentRefused && isFresh(current, now())) return current.token;
+		const token = await renew(current).catch((error) => {
+			if (error instanceof AuthorizationServerUnavailable && !currentRefused && outlivesMargin(current.expiresAt, now())) return current.token;
+			throw error;
+		});
+		if (token === request?.refused) throw loginRequired();
+		return token;
+	};
+}
+
+class ApiError extends Error {
+  constructor(message, status, statusText, responseBody, url) {
+    super(message);
+    this.status = status;
+    this.statusText = statusText;
+    this.responseBody = responseBody;
+    this.url = url;
+    this.name = "ApiError";
+  }
+}
+const buildApiError = (response, responseBody, url) => new ApiError(`Request failed: ${response.status} ${response.statusText}`, response.status, response.statusText, responseBody, url);
+async function assertApiResponseOk(res, url) {
+  if (!res.ok) {
+    let responseBody;
+    let text = "";
+    try {
+      text = await res.text();
+      responseBody = text ? JSON.parse(text) : null;
+    } catch (_a) {
+      responseBody = text || null;
+    }
+    throw buildApiError(res, responseBody, url);
+  }
+}
+const ERROR_SUGGESTIONS = {
+  400: {
+    default: ["The request was invalid. Check the server response above for details."],
+    byEndpoint: {
+      library: ["The application data may be invalid or corrupted.", "Try running 'vention unlink' and then 'vention link' to re-link the application."]
+    }
+  },
+  401: {
+    default: ["Authentication error. Try running 'vention login' to re-authenticate."]
+  },
+  403: {
+    default: ["Authentication error. Try running 'vention login' to re-authenticate."]
+  },
+  404: {
+    default: ["The requested resource was not found."],
+    byEndpoint: {
+      allocations: ["No active session found for this design.", "Make sure the design is open in your browser with a live session."],
       library: ["The application was not found on the digital twin.", "The application may have been deleted or the session may have expired.", "Try refreshing the design in your browser and running 'vention link' again."]
     }
   },
@@ -4221,6 +4525,8 @@ const handleCommandError = (error, context) => {
       console.error();
       suggestions.forEach(msg => console.error(chalk.yellow(msg)));
     }
+  } else if (error instanceof LoginRequired) {
+    console.error(chalk.red(error.message));
   } else {
     console.error(chalk.red(`Error: ${error instanceof Error ? error.message : String(error)}`));
   }
@@ -4237,10 +4543,11 @@ const fetchJson = async (url, options = {}) => {
   const {
     method = "GET",
     headers = {},
-    body
+    body,
+    fetchImpl = fetchWithUserAgent
   } = options;
   verboseLog(`${method} ${url}`);
-  const res = await fetchWithUserAgent(url, {
+  const res = await fetchImpl(url, {
     method,
     headers,
     body: body !== undefined ? JSON.stringify(body) : undefined
@@ -4255,7 +4562,7 @@ const POSTHOG_PROJECT_TOKENS = {
 };
 const POSTHOG_FLAGS_URL = "https://us.i.posthog.com/flags?v=2";
 const CACHE_TTL_MS = 15 * 60 * 1000;
-const REQUEST_TIMEOUT_MS$2 = 2000;
+const REQUEST_TIMEOUT_MS = 2000;
 const FlagsResponseSchema = z.object({
   flags: z.record(z.string(), z.object({
     enabled: z.boolean()
@@ -4317,7 +4624,7 @@ const fetchFlags = async (projectToken, distinctId) => {
         api_key: projectToken,
         distinct_id: distinctId
       }),
-      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS$2)
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
     });
     if (!response.ok) {
       return undefined;
@@ -4375,18 +4682,18 @@ if (NOT_GENERIC || INCORRECT_NAME) {
   }, { unsafe: true });
 }
 
-var uncurryThis$t = functionUncurryThis;
+var uncurryThis$s = functionUncurryThis;
 var toIntegerOrInfinity$8 = toIntegerOrInfinity$b;
-var toString$d = toString$j;
-var requireObjectCoercible$6 = requireObjectCoercible$b;
+var toString$c = toString$j;
+var requireObjectCoercible$5 = requireObjectCoercible$b;
 
-var charAt$8 = uncurryThis$t(''.charAt);
-var charCodeAt$1 = uncurryThis$t(''.charCodeAt);
-var stringSlice$8 = uncurryThis$t(''.slice);
+var charAt$8 = uncurryThis$s(''.charAt);
+var charCodeAt$1 = uncurryThis$s(''.charCodeAt);
+var stringSlice$8 = uncurryThis$s(''.slice);
 
 var createMethod$4 = function (CONVERT_TO_STRING) {
   return function ($this, pos) {
-    var S = toString$d(requireObjectCoercible$6($this));
+    var S = toString$c(requireObjectCoercible$5($this));
     var position = toIntegerOrInfinity$8(pos);
     var size = S.length;
     var first, second;
@@ -4413,7 +4720,7 @@ var stringMultibyte = {
 };
 
 var charAt$7 = stringMultibyte.charAt;
-var toString$c = toString$j;
+var toString$b = toString$j;
 var InternalStateModule$5 = internalState;
 var defineIterator = iteratorDefine;
 var createIterResultObject$1 = createIterResultObject$4;
@@ -4427,7 +4734,7 @@ var getInternalState$4 = InternalStateModule$5.getterFor(STRING_ITERATOR);
 defineIterator(String, 'String', function (iterated) {
   setInternalState$4(this, {
     type: STRING_ITERATOR,
-    string: toString$c(iterated),
+    string: toString$b(iterated),
     index: 0
   });
 // `%StringIteratorPrototype%.next` method
@@ -4490,7 +4797,7 @@ var isArray$2 = isArray$5;
 
 var $TypeError$b = TypeError;
 // eslint-disable-next-line es/no-object-getownpropertydescriptor -- safe
-var getOwnPropertyDescriptor$2 = Object.getOwnPropertyDescriptor;
+var getOwnPropertyDescriptor$1 = Object.getOwnPropertyDescriptor;
 
 // Safari < 13 does not throw an error in this case
 var SILENT_ON_NON_WRITABLE_LENGTH_SET = DESCRIPTORS$9 && !function () {
@@ -4505,7 +4812,7 @@ var SILENT_ON_NON_WRITABLE_LENGTH_SET = DESCRIPTORS$9 && !function () {
 }();
 
 var arraySetLength = SILENT_ON_NON_WRITABLE_LENGTH_SET ? function (O, length) {
-  if (isArray$2(O) && !getOwnPropertyDescriptor$2(O, 'length').writable) {
+  if (isArray$2(O) && !getOwnPropertyDescriptor$1(O, 'length').writable) {
     throw new $TypeError$b('Cannot set read only .length');
   } return O.length = length;
 } : function (O, length) {
@@ -4565,7 +4872,7 @@ var arrayFrom$1 = function from(arrayLike /* , mapfn = undefined, thisArg = unde
 };
 
 // based on https://github.com/bestiejs/punycode.js/blob/master/punycode.js
-var uncurryThis$s = functionUncurryThis;
+var uncurryThis$r = functionUncurryThis;
 
 var maxInt = 2147483647; // aka. 0x7FFFFFFF or 2^31-1
 var base = 36;
@@ -4582,15 +4889,15 @@ var OVERFLOW_ERROR = 'Overflow: input needs wider integers to process';
 var baseMinusTMin = base - tMin;
 
 var $RangeError$7 = RangeError;
-var exec$4 = uncurryThis$s(regexSeparators.exec);
+var exec$4 = uncurryThis$r(regexSeparators.exec);
 var floor$7 = Math.floor;
 var fromCharCode$2 = String.fromCharCode;
-var charCodeAt = uncurryThis$s(''.charCodeAt);
-var join$4 = uncurryThis$s([].join);
-var push$5 = uncurryThis$s([].push);
-var replace$6 = uncurryThis$s(''.replace);
-var split$2 = uncurryThis$s(''.split);
-var toLowerCase$1 = uncurryThis$s(''.toLowerCase);
+var charCodeAt = uncurryThis$r(''.charCodeAt);
+var join$4 = uncurryThis$r([].join);
+var push$5 = uncurryThis$r([].push);
+var replace$6 = uncurryThis$r(''.replace);
+var split$2 = uncurryThis$r(''.split);
+var toLowerCase$1 = uncurryThis$r(''.toLowerCase);
 
 /**
  * Creates an array containing the numeric code points of each Unicode
@@ -4745,22 +5052,22 @@ var stringPunycodeToAscii = function (input) {
   return join$4(encoded, '.');
 };
 
-var $$x = _export;
-var uncurryThis$r = functionUncurryThis;
+var $$w = _export;
+var uncurryThis$q = functionUncurryThis;
 var toAbsoluteIndex$2 = toAbsoluteIndex$4;
 
 var $RangeError$6 = RangeError;
 var fromCharCode$1 = String.fromCharCode;
 // eslint-disable-next-line es/no-string-fromcodepoint -- required for testing
 var $fromCodePoint = String.fromCodePoint;
-var join$3 = uncurryThis$r([].join);
+var join$3 = uncurryThis$q([].join);
 
 // length should be 1, old FF problem
 var INCORRECT_LENGTH = !!$fromCodePoint && $fromCodePoint.length !== 1;
 
 // `String.fromCodePoint` method
 // https://tc39.es/ecma262/#sec-string.fromcodepoint
-$$x({ target: 'String', stat: true, arity: 1, forced: INCORRECT_LENGTH }, {
+$$w({ target: 'String', stat: true, arity: 1, forced: INCORRECT_LENGTH }, {
   // eslint-disable-next-line no-unused-vars -- required for `.length`
   fromCodePoint: function fromCodePoint(x) {
     var elements = [];
@@ -4822,12 +5129,12 @@ var arraySort$1 = sort$1;
 // TODO: in core-js@4, move /modules/ dependencies to public entries for better optimization by tools like `preset-env`
 
 
-var $$w = _export;
+var $$v = _export;
 var globalThis$q = globalThis_1;
 var safeGetBuiltIn = safeGetBuiltIn$2;
 var getBuiltIn$1 = getBuiltIn$c;
 var call$h = functionCall;
-var uncurryThis$q = functionUncurryThis;
+var uncurryThis$p = functionUncurryThis;
 var DESCRIPTORS$8 = descriptors;
 var USE_NATIVE_URL$1 = urlConstructorDetection;
 var defineBuiltIn$6 = defineBuiltIn$e;
@@ -4862,23 +5169,23 @@ var getInternalIteratorState = InternalStateModule$4.getterFor(URL_SEARCH_PARAMS
 
 var nativeFetch = safeGetBuiltIn('fetch');
 var NativeRequest = safeGetBuiltIn('Request');
-var Headers = safeGetBuiltIn('Headers');
+var Headers$1 = safeGetBuiltIn('Headers');
 var RequestPrototype = NativeRequest && NativeRequest.prototype;
-var HeadersPrototype = Headers && Headers.prototype;
+var HeadersPrototype = Headers$1 && Headers$1.prototype;
 var TypeError$5 = globalThis$q.TypeError;
-var encodeURIComponent$1 = globalThis$q.encodeURIComponent;
+var encodeURIComponent$2 = globalThis$q.encodeURIComponent;
 var fromCharCode = String.fromCharCode;
 var fromCodePoint = getBuiltIn$1('String', 'fromCodePoint');
 var $parseInt = parseInt;
-var charAt$6 = uncurryThis$q(''.charAt);
-var join$2 = uncurryThis$q([].join);
-var push$4 = uncurryThis$q([].push);
-var replace$5 = uncurryThis$q(''.replace);
-var shift$1 = uncurryThis$q([].shift);
-var splice = uncurryThis$q([].splice);
-var split$1 = uncurryThis$q(''.split);
-var stringSlice$7 = uncurryThis$q(''.slice);
-var exec$3 = uncurryThis$q(/./.exec);
+var charAt$6 = uncurryThis$p(''.charAt);
+var join$2 = uncurryThis$p([].join);
+var push$4 = uncurryThis$p([].push);
+var replace$5 = uncurryThis$p(''.replace);
+var shift$1 = uncurryThis$p([].shift);
+var splice = uncurryThis$p([].splice);
+var split$1 = uncurryThis$p(''.split);
+var stringSlice$7 = uncurryThis$p(''.slice);
+var exec$3 = uncurryThis$p(/./.exec);
 
 var plus = /\+/g;
 var FALLBACK_REPLACER = '\uFFFD';
@@ -5031,7 +5338,7 @@ var replacer = function (match) {
 };
 
 var serialize = function (it) {
-  return replace$5(encodeURIComponent$1(it), find, replacer);
+  return replace$5(encodeURIComponent$2(it), find, replacer);
 };
 
 var URLSearchParamsIterator = createIteratorConstructor(function Iterator(params, kind) {
@@ -5291,21 +5598,21 @@ if (DESCRIPTORS$8) defineBuiltInAccessor$7(URLSearchParamsPrototype$3, 'size', {
 
 setToStringTag$2(URLSearchParamsConstructor, URL_SEARCH_PARAMS);
 
-$$w({ global: true, constructor: true, forced: !USE_NATIVE_URL$1 }, {
+$$v({ global: true, constructor: true, forced: !USE_NATIVE_URL$1 }, {
   URLSearchParams: URLSearchParamsConstructor
 });
 
 // Wrap `fetch` and `Request` for correct work with polyfilled `URLSearchParams`
-if (!USE_NATIVE_URL$1 && isCallable$4(Headers)) {
-  var headersHas = uncurryThis$q(HeadersPrototype.has);
-  var headersSet = uncurryThis$q(HeadersPrototype.set);
+if (!USE_NATIVE_URL$1 && isCallable$4(Headers$1)) {
+  var headersHas = uncurryThis$p(HeadersPrototype.has);
+  var headersSet = uncurryThis$p(HeadersPrototype.set);
 
   var wrapRequestOptions = function (init) {
     if (isObject$6(init)) {
       var body = init.body;
       var headers;
       if (classof$8(body) === URL_SEARCH_PARAMS) {
-        headers = init.headers ? new Headers(init.headers) : new Headers();
+        headers = init.headers ? new Headers$1(init.headers) : new Headers$1();
         if (!headersHas(headers, 'content-type')) {
           headersSet(headers, 'content-type', 'application/x-www-form-urlencoded;charset=UTF-8');
         }
@@ -5318,7 +5625,7 @@ if (!USE_NATIVE_URL$1 && isCallable$4(Headers)) {
   };
 
   if (isCallable$4(nativeFetch)) {
-    $$w({ global: true, enumerable: true, dontCallGetSet: true, forced: true }, {
+    $$v({ global: true, enumerable: true, dontCallGetSet: true, forced: true }, {
       fetch: function fetch(input /* , init */) {
         return nativeFetch(input, arguments.length > 1 ? wrapRequestOptions(arguments[1]) : {});
       }
@@ -5334,7 +5641,7 @@ if (!USE_NATIVE_URL$1 && isCallable$4(Headers)) {
     RequestPrototype.constructor = RequestConstructor;
     RequestConstructor.prototype = RequestPrototype;
 
-    $$w({ global: true, constructor: true, dontCallGetSet: true, forced: true }, {
+    $$v({ global: true, constructor: true, dontCallGetSet: true, forced: true }, {
       Request: RequestConstructor
     });
   }
@@ -5347,12 +5654,12 @@ var web_urlSearchParams_constructor = {
 
 // TODO: in core-js@4, move /modules/ dependencies to public entries for better optimization by tools like `preset-env`
 
-var $$v = _export;
+var $$u = _export;
 var DESCRIPTORS$7 = descriptors;
 var USE_NATIVE_URL = urlConstructorDetection;
 var globalThis$p = globalThis_1;
 var bind$4 = functionBindContext;
-var uncurryThis$p = functionUncurryThis;
+var uncurryThis$o = functionUncurryThis;
 var defineBuiltIn$5 = defineBuiltIn$e;
 var defineBuiltInAccessor$6 = defineBuiltInAccessor$c;
 var anInstance$2 = anInstance$6;
@@ -5375,22 +5682,22 @@ var getInternalSearchParamsState = URLSearchParamsModule.getState;
 
 var NativeURL = globalThis$p.URL;
 var TypeError$4 = globalThis$p.TypeError;
-var encodeURIComponent = globalThis$p.encodeURIComponent;
+var encodeURIComponent$1 = globalThis$p.encodeURIComponent;
 var parseInt$1 = globalThis$p.parseInt;
 var floor$5 = Math.floor;
 var pow$1 = Math.pow;
-var charAt$5 = uncurryThis$p(''.charAt);
-var exec$2 = uncurryThis$p(/./.exec);
-var join$1 = uncurryThis$p([].join);
-var numberToString$1 = uncurryThis$p(1.1.toString);
-var pop = uncurryThis$p([].pop);
-var push$3 = uncurryThis$p([].push);
-var replace$4 = uncurryThis$p(''.replace);
-var shift = uncurryThis$p([].shift);
-var split = uncurryThis$p(''.split);
-var stringSlice$6 = uncurryThis$p(''.slice);
-var toLowerCase = uncurryThis$p(''.toLowerCase);
-var unshift = uncurryThis$p([].unshift);
+var charAt$5 = uncurryThis$o(''.charAt);
+var exec$2 = uncurryThis$o(/./.exec);
+var join$1 = uncurryThis$o([].join);
+var numberToString$1 = uncurryThis$o(1.1.toString);
+var pop = uncurryThis$o([].pop);
+var push$3 = uncurryThis$o([].push);
+var replace$4 = uncurryThis$o(''.replace);
+var shift = uncurryThis$o([].shift);
+var split = uncurryThis$o(''.split);
+var stringSlice$6 = uncurryThis$o(''.slice);
+var toLowerCase = uncurryThis$o(''.toLowerCase);
+var unshift = uncurryThis$o([].unshift);
 
 var INVALID_AUTHORITY = 'Invalid authority';
 var INVALID_SCHEME = 'Invalid scheme';
@@ -5625,7 +5932,7 @@ var userinfoPercentEncodeSet = assign({}, pathPercentEncodeSet, {
 var percentEncode = function (chr, set) {
   var code = codeAt(chr, 0);
   // encodeURIComponent does not encode ', which is in the special-query percent-encode set
-  return code >= 0x20 && code < 0x7F && !hasOwn$4(set, chr) ? chr : chr === "'" && hasOwn$4(set, chr) ? '%27' : encodeURIComponent(chr);
+  return code >= 0x20 && code < 0x7F && !hasOwn$4(set, chr) ? chr : chr === "'" && hasOwn$4(set, chr) ? '%27' : encodeURIComponent$1(chr);
 };
 
 // https://url.spec.whatwg.org/#special-scheme
@@ -6421,32 +6728,32 @@ if (NativeURL) {
 
 setToStringTag$1(URLConstructor, 'URL');
 
-$$v({ global: true, constructor: true, forced: !USE_NATIVE_URL, sham: !DESCRIPTORS$7 }, {
+$$u({ global: true, constructor: true, forced: !USE_NATIVE_URL, sham: !DESCRIPTORS$7 }, {
   URL: URLConstructor
 });
 
-var $$u = _export;
+var $$t = _export;
 var call$g = functionCall;
 
 // `URL.prototype.toJSON` method
 // https://url.spec.whatwg.org/#dom-url-tojson
-$$u({ target: 'URL', proto: true, enumerable: true }, {
+$$t({ target: 'URL', proto: true, enumerable: true }, {
   toJSON: function toJSON() {
     return call$g(URL.prototype.toString, this);
   }
 });
 
 var defineBuiltIn$4 = defineBuiltIn$e;
-var uncurryThis$o = functionUncurryThis;
-var toString$b = toString$j;
+var uncurryThis$n = functionUncurryThis;
+var toString$a = toString$j;
 var validateArgumentsLength$1 = validateArgumentsLength$5;
 
 var $URLSearchParams$1 = URLSearchParams;
 var URLSearchParamsPrototype$2 = $URLSearchParams$1.prototype;
-var append = uncurryThis$o(URLSearchParamsPrototype$2.append);
-var $delete = uncurryThis$o(URLSearchParamsPrototype$2['delete']);
-var forEach$3 = uncurryThis$o(URLSearchParamsPrototype$2.forEach);
-var push$2 = uncurryThis$o([].push);
+var append = uncurryThis$n(URLSearchParamsPrototype$2.append);
+var $delete = uncurryThis$n(URLSearchParamsPrototype$2['delete']);
+var forEach$3 = uncurryThis$n(URLSearchParamsPrototype$2.forEach);
+var push$2 = uncurryThis$n([].push);
 var params$1 = new $URLSearchParams$1('a=1&a=2&b=3');
 
 params$1['delete']('a', 1);
@@ -6464,8 +6771,8 @@ if (params$1 + '' !== 'a=2') {
       push$2(entries, { key: k, value: v });
     });
     validateArgumentsLength$1(length, 1);
-    var key = toString$b(name);
-    var value = toString$b($value);
+    var key = toString$a(name);
+    var value = toString$a($value);
     var index = 0;
     var entriesLength = entries.length;
     var entry;
@@ -6483,14 +6790,14 @@ if (params$1 + '' !== 'a=2') {
 }
 
 var defineBuiltIn$3 = defineBuiltIn$e;
-var uncurryThis$n = functionUncurryThis;
-var toString$a = toString$j;
+var uncurryThis$m = functionUncurryThis;
+var toString$9 = toString$j;
 var validateArgumentsLength = validateArgumentsLength$5;
 
 var $URLSearchParams = URLSearchParams;
 var URLSearchParamsPrototype$1 = $URLSearchParams.prototype;
-var getAll = uncurryThis$n(URLSearchParamsPrototype$1.getAll);
-var $has = uncurryThis$n(URLSearchParamsPrototype$1.has);
+var getAll = uncurryThis$m(URLSearchParamsPrototype$1.getAll);
+var $has = uncurryThis$m(URLSearchParamsPrototype$1.has);
 var params = new $URLSearchParams('a=1');
 
 // `undefined` case is a Chromium 117 bug
@@ -6502,7 +6809,7 @@ if (params.has('a', 2) || !params.has('a', undefined)) {
     if (length && $value === undefined) return $has(this, name);
     var values = getAll(this, name); // also validates `this`
     validateArgumentsLength(length, 1);
-    var value = toString$a($value);
+    var value = toString$9($value);
     var index = 0;
     while (index < values.length) {
       if (values[index++] === value) return true;
@@ -6511,11 +6818,11 @@ if (params.has('a', 2) || !params.has('a', undefined)) {
 }
 
 var DESCRIPTORS$6 = descriptors;
-var uncurryThis$m = functionUncurryThis;
+var uncurryThis$l = functionUncurryThis;
 var defineBuiltInAccessor$5 = defineBuiltInAccessor$c;
 
 var URLSearchParamsPrototype = URLSearchParams.prototype;
-var forEach$2 = uncurryThis$m(URLSearchParamsPrototype.forEach);
+var forEach$2 = uncurryThis$l(URLSearchParamsPrototype.forEach);
 
 // `URLSearchParams.prototype.size` getter
 // https://github.com/whatwg/url/pull/734
@@ -6769,39 +7076,6 @@ const loginWithSso = async environment => {
 };
 const getSsoEnvironmentConfig = getSsoConfig;
 
-var $$t = _export;
-var uncurryThis$l = functionUncurryThisClause;
-var getOwnPropertyDescriptor$1 = objectGetOwnPropertyDescriptor.f;
-var toLength$5 = toLength$7;
-var toString$9 = toString$j;
-var notARegExp$1 = notARegexp;
-var requireObjectCoercible$5 = requireObjectCoercible$b;
-var correctIsRegExpLogic$1 = correctIsRegexpLogic;
-
-var slice$2 = uncurryThis$l(''.slice);
-var min$4 = Math.min;
-
-var CORRECT_IS_REGEXP_LOGIC$1 = correctIsRegExpLogic$1('endsWith');
-// https://github.com/zloirock/core-js/pull/702
-var MDN_POLYFILL_BUG$1 = !CORRECT_IS_REGEXP_LOGIC$1 && !!function () {
-  var descriptor = getOwnPropertyDescriptor$1(String.prototype, 'endsWith');
-  return descriptor && !descriptor.writable;
-}();
-
-// `String.prototype.endsWith` method
-// https://tc39.es/ecma262/#sec-string.prototype.endswith
-$$t({ target: 'String', proto: true, forced: !MDN_POLYFILL_BUG$1 && !CORRECT_IS_REGEXP_LOGIC$1 }, {
-  endsWith: function endsWith(searchString /* , endPosition = @length */) {
-    var that = toString$9(requireObjectCoercible$5(this));
-    notARegExp$1(searchString);
-    var search = toString$9(searchString);
-    var endPosition = arguments.length > 1 ? arguments[1] : undefined;
-    var len = that.length;
-    var end = endPosition === undefined ? len : min$4(toLength$5(endPosition), len);
-    return slice$2(that, end - search.length, end) === search;
-  }
-});
-
 /******************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -6836,123 +7110,25 @@ typeof SuppressedError === "function" ? SuppressedError : function (error, suppr
     return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
 };
 
-//#region src/errors/authorization-server-unavailable.ts
-var AuthorizationServerUnavailable = class extends Error {
-	name = "AuthorizationServerUnavailable";
+//#region src/id-token.ts
+const decodeClaims = (idToken = "") => {
+	const segments = idToken.split(".");
+	if (segments.length !== 3 || segments.some((segment) => segment === "")) return {};
+	try {
+		return JSON.parse(Buffer.from(segments[1] ?? "", "base64url").toString()) ?? {};
+	} catch {
+		return {};
+	}
 };
-
-//#region src/discovery.ts
-const REQUEST_TIMEOUT_MS$1 = 1e4;
-async function discoverAuthorizationServer(issuer, fetch = globalThis.fetch) {
-	const metadata = await readMetadata(`${issuer}/.well-known/oauth-authorization-server`, fetch);
-	return {
-		tokenEndpoint: metadata.token_endpoint,
-		identityProviderIssuer: metadata.vention_identity_provider_issuer,
-		clients: metadata.vention_clients
-	};
-}
-async function discoverOpenIdProvider(issuer, fetch = globalThis.fetch) {
-	const url = `${issuer}/.well-known/openid-configuration`;
-	const metadata = await readMetadata(url, fetch);
-	if (metadata.issuer !== issuer) throw new AuthorizationServerUnavailable(`${url} names the issuer ${metadata.issuer}, not ${issuer}`);
+const isValidFor = (claims, { issuer, clientId, now }) => claims.iss === issuer && (Array.isArray(claims.aud) ? claims.aud.includes(clientId) : claims.aud === clientId) && typeof claims.exp === "number" && claims.exp * 1e3 > now();
+const toOptionalString = (value) => typeof value === "string" ? value : void 0;
+const readSignedInUser = (idToken, validation) => {
+	const claims = decodeClaims(idToken);
+	if (typeof claims.sub !== "string" || claims.sub === "" || !isValidFor(claims, validation)) throw new Error("The identity provider returned no usable ID token for this client");
 	return {
-		authorizationEndpoint: metadata.authorization_endpoint,
-		tokenEndpoint: metadata.token_endpoint
-	};
-}
-async function readMetadata(url, fetch) {
-	const response = await fetch(url, {
-		headers: { Accept: "application/json" },
-		redirect: "error",
-		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS$1)
-	}).catch((error) => {
-		throw new AuthorizationServerUnavailable(`Could not reach ${url}`, { cause: error });
-	});
-	if (!response.ok) throw new AuthorizationServerUnavailable(`${url} answered ${response.status}`);
-	return response.json().catch((error) => {
-		throw new AuthorizationServerUnavailable(`${url} did not answer with JSON`, { cause: error });
-	});
-}
-
-//#region src/errors/exchange-rejected.ts
-var ExchangeRejected = class extends Error {
-	code;
-	name = "ExchangeRejected";
-	constructor(code) {
-		super(`The authorization server refused the token exchange (${code})`);
-		this.code = code;
-	}
-};
-
-//#region src/errors/login-timed-out.ts
-var LoginTimedOut = class extends Error {
-	name = "LoginTimedOut";
-	constructor() {
-		super("Login timed out");
-	}
-};
-
-//#region src/oauth2-token-request.ts
-const REQUEST_TIMEOUT_MS = 1e4;
-function exchangeForGatewayToken(tokenEndpoint, subjectToken, fetch, now) {
-	return requestToken(tokenEndpoint, subjectToken, "urn:ietf:params:oauth:token-type:access_token", fetch, now);
-}
-async function requestToken(tokenEndpoint, subjectToken, subjectTokenType, fetch, now) {
-	const response = await fetch(tokenEndpoint, {
-		method: "POST",
-		headers: {
-			"Content-Type": "application/x-www-form-urlencoded",
-			Accept: "application/json"
-		},
-		body: new URLSearchParams({
-			grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
-			subject_token: subjectToken,
-			subject_token_type: subjectTokenType
-		}),
-		redirect: "error",
-		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
-	}).catch((error) => {
-		throw new AuthorizationServerUnavailable("The authorization server could not be reached", { cause: error });
-	});
-	if (response.status >= 500 || response.status === 408 || response.status === 429) throw new AuthorizationServerUnavailable(`The authorization server answered ${response.status}`);
-	if (!response.ok) {
-		const refusal = await response.json().catch(() => void 0);
-		throw new ExchangeRejected(refusal?.error ?? `http_${response.status}`);
-	}
-	return response.json().then((body) => toStoredGatewayToken(body, now())).catch(() => {
-		throw new AuthorizationServerUnavailable("The authorization server returned an unusable token response");
-	});
-}
-function toStoredGatewayToken({ access_token: token, expires_in: expiresIn }, receivedAt) {
-	const payload = (token.split(".")[1] ?? "").replace(/-/g, "+").replace(/_/g, "/");
-	const claims = JSON.parse(atob(payload));
-	return {
-		token,
-		receivedAt,
-		expiresAt: receivedAt + expiresIn * 1e3,
-		capExpiresAt: receivedAt + (claims.cap_exp - claims.exp + expiresIn) * 1e3
-	};
-}
-
-//#region src/id-token.ts
-const decodeClaims = (idToken = "") => {
-	const segments = idToken.split(".");
-	if (segments.length !== 3 || segments.some((segment) => segment === "")) return {};
-	try {
-		return JSON.parse(Buffer.from(segments[1] ?? "", "base64url").toString()) ?? {};
-	} catch {
-		return {};
-	}
-};
-const isValidFor = (claims, { issuer, clientId, now }) => claims.iss === issuer && (Array.isArray(claims.aud) ? claims.aud.includes(clientId) : claims.aud === clientId) && typeof claims.exp === "number" && claims.exp * 1e3 > now();
-const toOptionalString = (value) => typeof value === "string" ? value : void 0;
-const readSignedInUser = (idToken, validation) => {
-	const claims = decodeClaims(idToken);
-	if (typeof claims.sub !== "string" || claims.sub === "" || !isValidFor(claims, validation)) throw new Error("The identity provider returned no usable ID token for this client");
-	return {
-		memberId: claims.sub,
-		email: toOptionalString(claims.email),
-		displayName: toOptionalString(claims.name)
+		memberId: claims.sub,
+		email: toOptionalString(claims.email),
+		displayName: toOptionalString(claims.name)
 	};
 };
 
@@ -7028,6 +7204,7 @@ const startCallbackServer = async (expectedState, timeoutMs) => {
 	const close = () => {
 		clearTimeout(timer);
 		callbackServer.close();
+		callbackServer.closeAllConnections();
 	};
 	const authorizationCodeReceived = new Promise((resolve, reject) => {
 		timer = setTimeout(() => {
@@ -7037,7 +7214,7 @@ const startCallbackServer = async (expectedState, timeoutMs) => {
 		callbackServer.on("request", (req, res) => {
 			const outcome = readCallback(req, res, expectedState);
 			if (outcome === void 0) return;
-			close();
+			res.once("close", close);
 			if ("error" in outcome) reject(outcome.error);
 			else resolve(outcome.authorizationCode);
 		});
@@ -7068,7 +7245,7 @@ const redeemAuthorizationCode = async (options, authorizationCode, codeVerifier,
 		headers: { "Content-Type": "application/x-www-form-urlencoded" },
 		body,
 		redirect: "error",
-		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS$1)
 	}).catch((error) => {
 		throw new Error("Could not reach the identity provider", { cause: error });
 	});
@@ -7135,22 +7312,9 @@ const PLATFORM_AUTH_ORIGINS = {
   demo: "https://platform-auth.vention.foo",
   prod: "https://platform-auth.vention.com"
 };
-const originSchema = z.url({
-  protocol: /^https$/
-}).refine(url => !url.endsWith("/"));
-const originOverride = variableName => {
-  const override = process.env[variableName];
-  if (!override) {
-    return undefined;
-  }
-  if (!originSchema.safeParse(override).success) {
-    throw new Error(`${variableName} must be an https URL without a trailing slash`);
-  }
-  return override;
-};
 const getPlatformAuthOrigin = environment => {
   var _a;
-  return (_a = originOverride("VENTION_CLI_PLATFORM_AUTH_ORIGIN")) !== null && _a !== void 0 ? _a : PLATFORM_AUTH_ORIGINS[environment];
+  return (_a = getOriginOverride("VENTION_CLI_PLATFORM_AUTH_ORIGIN")) !== null && _a !== void 0 ? _a : PLATFORM_AUTH_ORIGINS[environment];
 };
 const gatewayTokenStore = session => ({
   read: async () => {
@@ -7382,44 +7546,23 @@ $$r({ target: 'Iterator', proto: true, real: true, forced: findWithoutClosingOnE
   }
 });
 
-const getDigitalTwinUrl = (environment, sessionId) => {
-  switch (environment) {
-    case "local":
-      return `http://localhost:3101`;
-    case "demo":
-      return `https://digital-twin.vention.foo/digital-twin/machine-motion/passthrough/${sessionId}/80`;
-    case "prod":
-      return `https://digital-twin.vention.com/digital-twin/machine-motion/passthrough/${sessionId}/80`;
-    default:
-      throw new Error("Invalid environment");
-  }
-};
-const getAllApplicationsWithSourceCode = async (environment, designId, sessionId) => {
-  if (!sessionId) {
-    throw new Error("Linked session token is not set");
-  }
-  const digitalTwinUrl = getDigitalTwinUrl(environment, sessionId);
-  const url = `${digitalTwinUrl}/v2/library?shouldIncludeSourceCode=true`;
-  const response = await fetchJson(url, {
-    headers: {
-      Accept: "application/json",
-      Cookie: `digital-twin-session-${designId}=s%3A${sessionId}.s`
-    }
+const getAllApplicationsWithSourceCode = async connection => {
+  const response = await fetchJson(`${connection.baseUrl}/v2/library?shouldIncludeSourceCode=true`, {
+    headers: Object.assign({
+      Accept: "application/json"
+    }, connection.headers),
+    fetchImpl: connection.fetch
   });
   return response.applications || [];
 };
-const getLibraryAssets = async (environment, designId, sessionId) => {
-  if (!sessionId) {
-    throw new Error("Linked session token is not set");
-  }
-  const digitalTwinUrl = getDigitalTwinUrl(environment, sessionId);
-  const url = `${digitalTwinUrl}/v2/library/assets`;
+const getLibraryAssets = async connection => {
+  const url = `${connection.baseUrl}/v2/library/assets`;
   try {
     const response = await fetchJson(url, {
-      headers: {
-        Accept: "application/json",
-        Cookie: `digital-twin-session-${designId}=s%3A${sessionId}.s`
-      }
+      headers: Object.assign({
+        Accept: "application/json"
+      }, connection.headers),
+      fetchImpl: connection.fetch
     });
     return response.assets;
   } catch (error) {
@@ -7429,47 +7572,33 @@ const getLibraryAssets = async (environment, designId, sessionId) => {
     throw error;
   }
 };
-const getMmConfiguration = async (environment, designId, sessionId) => {
-  if (!sessionId) {
-    throw new Error("Linked session token is not set");
-  }
-  const digitalTwinUrl = getDigitalTwinUrl(environment, sessionId);
-  const url = `${digitalTwinUrl}/v2/mm-configuration`;
+const getMmConfiguration = async connection => {
+  const url = `${connection.baseUrl}/v2/mm-configuration`;
   const response = await fetchJson(url, {
-    headers: {
-      Accept: "application/json",
-      Cookie: `digital-twin-session-${designId}=s%3A${sessionId}.s`
-    }
+    headers: Object.assign({
+      Accept: "application/json"
+    }, connection.headers),
+    fetchImpl: connection.fetch
   });
   return response.mmConfiguration;
 };
-const pushApplicationToDigitalTwin = async (environment, designId, sessionId, application) => {
-  if (!sessionId) {
-    throw new Error("Linked session token is not set");
-  }
-  const digitalTwinUrl = getDigitalTwinUrl(environment, sessionId);
-  const url = `${digitalTwinUrl}/v1/library`;
+const pushApplicationToDigitalTwin = async (connection, application) => {
+  const url = `${connection.baseUrl}/v1/library`;
   return await fetchJson(url, {
     method: "PUT",
-    headers: {
+    headers: Object.assign({
       "Content-Type": "application/json",
-      Accept: "application/json",
-      Cookie: `digital-twin-session-${designId}=s%3A${sessionId}.s`
-    },
-    body: application
+      Accept: "application/json"
+    }, connection.headers),
+    body: application,
+    fetchImpl: connection.fetch
   });
 };
-const getApplicationLogs = async (environment, designId, sessionId, applicationId) => {
-  if (!sessionId) {
-    throw new Error("Linked session token is not set");
-  }
-  const digitalTwinUrl = getDigitalTwinUrl(environment, sessionId);
-  const url = `${digitalTwinUrl}/v1/application/${applicationId}/logs`;
-  const response = await fetchWithUserAgent(url, {
+const getApplicationLogs = async (connection, applicationId) => {
+  const url = `${connection.baseUrl}/v1/application/${applicationId}/logs`;
+  const response = await connection.fetch(url, {
     method: "GET",
-    headers: {
-      Cookie: `digital-twin-session-${designId}=s%3A${sessionId}.s`
-    }
+    headers: connection.headers
   });
   if (!response.ok) {
     throw new Error("Could not find logs for application");
@@ -7477,60 +7606,6 @@ const getApplicationLogs = async (environment, designId, sessionId, applicationI
   return await response.text();
 };
 
-const getBaseRailsUrl = environment => {
-  switch (environment) {
-    case "local":
-      return "http://localhost:3000";
-    case "demo":
-      return "https://vention.foo";
-    case "prod":
-      return "https://vention.com";
-    default:
-      throw new Error("Invalid environment");
-  }
-};
-const getUserAllocations = async session => {
-  const baseUrl = getBaseRailsUrl(session.environment);
-  const headers = await getAuthHeaders(session);
-  const url = `${baseUrl}/api/v3/digital_twin_infrastructure/allocations`;
-  return await fetchJson(url, {
-    headers
-  });
-};
-const getAuthHeaders = async session => {
-  var _a;
-  const baseUrl = getBaseRailsUrl(session.environment);
-  const baseHeaders = {
-    Accept: "application/json",
-    Origin: baseUrl,
-    Referer: `${baseUrl}/`
-  };
-  if (session.environment === "local") {
-    if (!session.ventionSession) {
-      throw new Error("Local environment requires vention_session. Please run 'vention login' and provide the cookie value.");
-    }
-    return Object.assign(Object.assign({}, baseHeaders), {
-      Cookie: `vention_session=${session.ventionSession}`
-    });
-  }
-  if (!((_a = session.oauth) === null || _a === void 0 ? void 0 : _a.accessToken)) {
-    throw new Error("Not authenticated. Please run 'vention login' to authenticate via SSO.");
-  }
-  const bufferMs = 5 * 60 * 1000;
-  const shouldRefreshToken = session.oauth.expiresAt && Date.now() >= session.oauth.expiresAt - bufferMs;
-  if (shouldRefreshToken && session.oauth.refreshToken !== undefined) {
-    const ssoConfig = getSsoEnvironmentConfig(session.environment);
-    const refreshed = await refreshAccessToken(ssoConfig, session.oauth.refreshToken);
-    session.oauth.accessToken = refreshed.accessToken;
-    session.oauth.refreshToken = refreshed.refreshToken;
-    session.oauth.expiresAt = refreshed.expiresInSeconds ? Date.now() + refreshed.expiresInSeconds * 1000 : session.oauth.expiresAt;
-    await saveSession(session);
-  }
-  return Object.assign(Object.assign({}, baseHeaders), {
-    Authorization: `Bearer ${session.oauth.accessToken}`
-  });
-};
-
 // eslint-disable-next-line es/no-typed-arrays -- safe
 var arrayBufferBasicDetection = typeof ArrayBuffer != 'undefined' && typeof DataView != 'undefined';
 
@@ -10970,285 +11045,98 @@ const readMachineCodeAppDirectoryInfo = async projectPath => {
   }
 };
 
-const checkIfDesignHasLiveAllocation = async (session, designId) => {
-  const allocations = await getUserAllocations(session);
-  const linkedAllocation = allocations.find(a => a.designId === designId);
-  return linkedAllocation;
-};
-const getAppFromDigitalTwin = async (environment, machineCodeAppDirectoryInfo, sessionId) => {
-  console.log(chalk.blue("Fetching all applications with source code from digital twin..."));
-  const allApplications = await getAllApplicationsWithSourceCode(environment, machineCodeAppDirectoryInfo.designId, sessionId);
-  const targetApp = allApplications.find(app => app.id === machineCodeAppDirectoryInfo.applicationId);
-  if (!targetApp) {
-    console.log();
-    console.error(chalk.red(`Application "${machineCodeAppDirectoryInfo.appName}" (ID: ${machineCodeAppDirectoryInfo.applicationId}) not found in the digital twin.`));
-    process.exit(1);
+const getBaseRailsUrl = environment => {
+  switch (environment) {
+    case "local":
+      return "http://localhost:3000";
+    case "demo":
+      return "https://vention.foo";
+    case "prod":
+      return "https://vention.com";
+    default:
+      throw new Error("Invalid environment");
   }
-  return targetApp;
 };
-const getAvailableAppsFromDigitalTwin = async (environment, designId, sessionId) => {
-  const allApplications = await getAllApplicationsWithSourceCode(environment, designId, sessionId);
-  return allApplications.filter(app => app.type === "machine_code");
+const getUserAllocations = async session => {
+  const baseUrl = getBaseRailsUrl(session.environment);
+  const headers = await getAuthHeaders(session);
+  const url = `${baseUrl}/api/v3/digital_twin_infrastructure/allocations`;
+  return await fetchJson(url, {
+    headers
+  });
 };
-const createNewAppDirectory = async (session, currentDir) => {
-  const {
-    selectedDesign,
-    selectedApp
-  } = await selectDesignAndApp(session);
-  if (!selectedApp.sourceCode) {
-    console.log();
-    console.log(chalk.yellow("No source code found for this application."));
-    process.exit(1);
-  }
-  const appDirectoryExists = await checkIfAppDirectoryExists(selectedApp.name, currentDir);
-  const safeFileName = sanitizeFileName(selectedApp.name);
-  if (appDirectoryExists) {
-    console.log();
-    console.error(chalk.red(`You already have a directory with name "${safeFileName}" here.`));
-    console.error(chalk.red("If that is the machine code app you are trying to pull, please navigate to the root folder of the app and run the 'vention pull' command from there."));
-    console.error(chalk.red("If not, please rename that directory and try again."));
-    process.exit(1);
+const getAuthHeaders = async session => {
+  var _a;
+  const baseUrl = getBaseRailsUrl(session.environment);
+  const baseHeaders = {
+    Accept: "application/json",
+    Origin: baseUrl,
+    Referer: `${baseUrl}/`
+  };
+  if (session.environment === "local") {
+    if (!session.ventionSession) {
+      throw new Error("Local environment requires vention_session. Please run 'vention login' and provide the cookie value.");
+    }
+    return Object.assign(Object.assign({}, baseHeaders), {
+      Cookie: `vention_session=${session.ventionSession}`
+    });
   }
-  const appDirectoryPath = await writeApplicationToDisk(selectedApp.name, selectedApp.sourceCode, currentDir);
-  const [assets, mmConfiguration] = await Promise.all([getLibraryAssets(session.environment, selectedDesign.id, selectedDesign.sessionId), getMmConfiguration(session.environment, selectedDesign.id, selectedDesign.sessionId)]);
-  if (assets !== undefined) {
-    await writeReadonlyJsonFile(appDirectoryPath, ".vention-design-scene-assets.json", assets);
+  if (!((_a = session.oauth) === null || _a === void 0 ? void 0 : _a.accessToken)) {
+    throw new Error("Not authenticated. Please run 'vention login' to authenticate via SSO.");
   }
-  await writeReadonlyJsonFile(appDirectoryPath, ".vention-design-configuration.json", mmConfiguration);
-  await writeMachineCodeAppDirectoryInfo(appDirectoryPath, {
-    appName: selectedApp.name,
-    designId: selectedDesign.id,
-    applicationId: selectedApp.id,
-    lastPulledAt: new Date().toISOString(),
-    environment: session.environment,
-    uuid: selectedApp.uuid
+  const bufferMs = 5 * 60 * 1000;
+  const shouldRefreshToken = session.oauth.expiresAt && Date.now() >= session.oauth.expiresAt - bufferMs;
+  if (shouldRefreshToken && session.oauth.refreshToken !== undefined) {
+    const ssoConfig = getSsoEnvironmentConfig(session.environment);
+    const refreshed = await refreshAccessToken(ssoConfig, session.oauth.refreshToken);
+    session.oauth.accessToken = refreshed.accessToken;
+    session.oauth.refreshToken = refreshed.refreshToken;
+    session.oauth.expiresAt = refreshed.expiresInSeconds ? Date.now() + refreshed.expiresInSeconds * 1000 : session.oauth.expiresAt;
+    await saveSession(session);
+  }
+  return Object.assign(Object.assign({}, baseHeaders), {
+    Authorization: `Bearer ${session.oauth.accessToken}`
   });
-  console.log();
-  console.log(chalk.green(`✅ Successfully pulled "${selectedApp.name}" to: ${appDirectoryPath}`));
-  console.log(chalk.blue(`📁 To navigate to your project, run:`));
-  console.log(chalk.cyan(`cd "${safeFileName}"`));
-  console.log(chalk.blue("💡 You can now start working on your application!"));
 };
-const updateExistingAppDirectory = async (session, machineCodeAppDirectoryInfo, currentDir) => {
-  console.log(chalk.blue(`Found existing project: ${machineCodeAppDirectoryInfo.appName}`));
-  console.log(chalk.blue(`Design ID: ${machineCodeAppDirectoryInfo.designId}, App ID: ${machineCodeAppDirectoryInfo.applicationId}`));
-  const linkedAllocation = await checkIfDesignHasLiveAllocation(session, machineCodeAppDirectoryInfo.designId);
-  if (!linkedAllocation) {
-    console.log();
-    console.error(chalk.red("Sorry, it seems you do not have that design open with the MachineLogic tab selected."));
-    console.error(chalk.red("Please go to your browser, open your design, and navigate to the MachineLogic page."));
-    process.exit(1);
-  }
-  const appWithSourceCode = await getAppFromDigitalTwin(session.environment, machineCodeAppDirectoryInfo, linkedAllocation.sessionId);
-  await writeApplicationToDisk(appWithSourceCode.name, appWithSourceCode.sourceCode, currentDir, true);
-  const [assets, mmConfiguration] = await Promise.all([getLibraryAssets(session.environment, machineCodeAppDirectoryInfo.designId, linkedAllocation.sessionId), getMmConfiguration(session.environment, machineCodeAppDirectoryInfo.designId, linkedAllocation.sessionId)]);
-  if (assets !== undefined) {
-    await writeReadonlyJsonFile(currentDir, ".vention-design-scene-assets.json", assets);
+
+const getDigitalTwinUrl = (environment, sessionId) => {
+  switch (environment) {
+    case "local":
+      return `http://localhost:3101`;
+    case "demo":
+      return `https://digital-twin.vention.foo/digital-twin/machine-motion/passthrough/${sessionId}/80`;
+    case "prod":
+      return `https://digital-twin.vention.com/digital-twin/machine-motion/passthrough/${sessionId}/80`;
+    default:
+      throw new Error("Invalid environment");
   }
-  await writeReadonlyJsonFile(currentDir, ".vention-design-configuration.json", mmConfiguration);
-  await writeMachineCodeAppDirectoryInfo(currentDir, Object.assign(Object.assign({}, machineCodeAppDirectoryInfo), {
-    lastPulledAt: new Date().toISOString()
-  }));
-  console.log();
-  console.log(chalk.green(`✅ Successfully pulled "${appWithSourceCode.name}" to: ${currentDir}`));
-  console.log(chalk.blue("💡 Your project has been updated with the latest changes!"));
 };
-const linkDirectory = async (session, currentDir) => {
-  const {
-    selectedDesign,
-    selectedApp
-  } = await selectDesignAndApp(session);
-  await writeMachineCodeAppDirectoryInfo(currentDir, {
-    appName: selectedApp.name,
-    designId: selectedDesign.id,
-    applicationId: selectedApp.id,
-    lastPulledAt: new Date().toISOString(),
-    environment: session.environment,
-    uuid: selectedApp.uuid
-  });
-  console.log(chalk.green(`Successfully linked current directory to design "${selectedDesign.name}" (ID: ${selectedDesign.id})`));
-  console.log(chalk.green(`Application: "${selectedApp.name}" (ID: ${selectedApp.id})`));
-  return {
-    selectedDesign,
-    selectedApp
-  };
+const rejectMissingSession = async () => {
+  throw new Error("Linked session token is not set");
 };
-const selectDesignAndApp = async session => {
+const buildConnection$1 = (environment, designId, sessionId) => ({
+  baseUrl: getDigitalTwinUrl(environment, sessionId),
+  headers: {
+    Cookie: `digital-twin-session-${designId}=s%3A${sessionId}.s`
+  },
+  fetch: sessionId ? fetchWithUserAgent : rejectMissingSession
+});
+const resolveConnection$1 = async (session, designId) => {
   const allocations = await getUserAllocations(session);
-  if (allocations.length === 0) {
-    console.log();
-    console.log(chalk.yellow("No active allocations found. Please open a design and navigate to the machine logic tab to activate a digital twin."));
-    process.exit(1);
-  }
-  const selectedDesign = await select({
-    message: "Select a design:",
-    choices: allocations.map(allocation => ({
-      name: `${allocation.designName} (ID: ${allocation.designId})`,
-      value: {
-        id: allocation.designId,
-        name: allocation.designName,
-        sessionId: allocation.sessionId
-      }
-    }))
-  });
-  const availableApps = await getAvailableAppsFromDigitalTwin(session.environment, selectedDesign.id, selectedDesign.sessionId);
-  if (availableApps.length === 0) {
-    console.log();
-    console.log(chalk.yellow("No machine code applications found in the digital twin"));
-    process.exit(1);
+  const allocation = allocations.find(candidate => candidate.designId === designId);
+  if (!allocation) {
+    return undefined;
   }
-  const selectedApp = await select({
-    message: "Select an application:",
-    choices: availableApps.map(app => ({
-      name: app.name,
-      value: app
-    }))
-  });
-  return {
-    selectedDesign,
-    selectedApp
-  };
+  return buildConnection$1(session.environment, designId, allocation.sessionId);
+};
+const listDesigns$2 = async session => {
+  const allocations = await getUserAllocations(session);
+  return allocations.map(allocation => ({
+    id: allocation.designId,
+    name: allocation.designName,
+    connection: buildConnection$1(session.environment, allocation.designId, allocation.sessionId)
+  }));
 };
-
-function createLinkCommand() {
-  return new Command("link").description("Link current directory to a Vention design application").action(async () => {
-    try {
-      const session = await loadSession();
-      if (!session) {
-        console.error(chalk.red("Not logged in. Please run 'vention login' first."));
-        process.exit(1);
-      }
-      const currentDir = process.cwd();
-      console.log();
-      await linkDirectory(session, currentDir);
-      console.log(chalk.blue("You can now use 'vention pull' to download app content or 'vention push' to upload local changes."));
-    } catch (error) {
-      handleCommandError(error, "Failed to link directory");
-    }
-  });
-}
-
-function createPushCommand() {
-  return new Command("push").description("Push local changes from this directory to the linked digital twin").action(async () => {
-    try {
-      const session = await loadSession();
-      if (!session) {
-        console.error(chalk.red("Not logged in. Please run 'vention login' first."));
-        process.exit(1);
-      }
-      const currentDir = process.cwd();
-      const machineCodeAppDirectoryInfo = await readMachineCodeAppDirectoryInfo(currentDir);
-      if (!machineCodeAppDirectoryInfo) {
-        console.log();
-        console.log(chalk.yellow("This directory is not linked to a Vention application."));
-        const shouldLink = await select({
-          message: "Would you like to link this directory to an application?",
-          choices: [{
-            name: "Yes, link this directory",
-            value: true
-          }, {
-            name: "No, cancel push operation",
-            value: false
-          }]
-        });
-        if (!shouldLink) {
-          console.log(chalk.blue("Push operation cancelled. Run 'vention link' when you're ready to link this directory."));
-          process.exit(0);
-        }
-        await linkDirectory(session, currentDir);
-        console.log(chalk.blue("Continuing with push operation..."));
-      }
-      const updatedMachineCodeAppDirectoryInfo = await readMachineCodeAppDirectoryInfo(currentDir);
-      if (!updatedMachineCodeAppDirectoryInfo) {
-        console.log(chalk.red("Error reading directory metadata after linking."));
-        process.exit(1);
-      }
-      console.log();
-      console.log(chalk.blue(`Pushing changes for project: ${updatedMachineCodeAppDirectoryInfo.appName}`));
-      console.log(chalk.blue(`Design ID: ${updatedMachineCodeAppDirectoryInfo.designId}, App ID: ${updatedMachineCodeAppDirectoryInfo.applicationId}`));
-      const linkedAllocation = await checkIfDesignHasLiveAllocation(session, updatedMachineCodeAppDirectoryInfo.designId);
-      if (!linkedAllocation) {
-        console.log();
-        console.error(chalk.red("Sorry, it seems you do not have that design open with the MachineLogic tab selected."));
-        console.error(chalk.red("Please go to your browser, open your design, and navigate to the MachineLogic page."));
-        process.exit(1);
-      }
-      console.log();
-      console.log(chalk.blue("Serializing local files..."));
-      const ignorePatterns = getDefaultIgnorePatterns();
-      const serializedSourceCode = serializeFileSystem(currentDir, ignorePatterns, true);
-      const applicationToPush = {
-        name: updatedMachineCodeAppDirectoryInfo.appName,
-        id: updatedMachineCodeAppDirectoryInfo.applicationId,
-        type: "machine_code",
-        sourceCode: serializedSourceCode,
-        uuid: updatedMachineCodeAppDirectoryInfo.uuid
-      };
-      console.log(chalk.blue("Pushing to digital twin..."));
-      await pushApplicationToDigitalTwin(session.environment, updatedMachineCodeAppDirectoryInfo.designId, linkedAllocation.sessionId, applicationToPush);
-      await writeMachineCodeAppDirectoryInfo(currentDir, Object.assign(Object.assign({}, updatedMachineCodeAppDirectoryInfo), {
-        lastPushedAt: new Date().toISOString()
-      }));
-      console.log();
-      console.log(chalk.green(`✅ Successfully pushed to digital twin`));
-      console.log(chalk.blue("💡 Your changes have been uploaded!"));
-    } catch (error) {
-      handleCommandError(error, "Failed to push application");
-    }
-  });
-}
-
-function createPullCommand() {
-  return new Command("pull").description("Pull an application from a design to this directory").action(async () => {
-    try {
-      const session = await loadSession();
-      if (!session) {
-        console.error(chalk.red("Not logged in. Please run 'vention login' first."));
-        process.exit(1);
-      }
-      const currentDir = process.cwd();
-      const machineCodeAppDirectoryInfo = await readMachineCodeAppDirectoryInfo(currentDir);
-      if (machineCodeAppDirectoryInfo) {
-        console.log(chalk.blue(`This directory is linked to app: ${machineCodeAppDirectoryInfo.appName}`));
-        console.log(chalk.blue(`Pulling latest content from design ID: ${machineCodeAppDirectoryInfo.designId}`));
-        await updateExistingAppDirectory(session, machineCodeAppDirectoryInfo, currentDir);
-      } else {
-        await createNewAppDirectory(session, currentDir);
-      }
-    } catch (error) {
-      handleCommandError(error, "Failed to pull application");
-    }
-  });
-}
-
-function createLogsCommand() {
-  return new Command("logs").description("Fetch application logs from the linked digital twin").action(async () => {
-    try {
-      const session = await loadSession();
-      if (!session) {
-        console.error(chalk.red("Not logged in. Please run 'vention login' first."));
-        process.exit(1);
-      }
-      const currentDir = process.cwd();
-      const machineCodeAppDirectoryInfo = await readMachineCodeAppDirectoryInfo(currentDir);
-      if (!machineCodeAppDirectoryInfo) {
-        console.error(chalk.red("This directory is not linked to a Vention application."));
-        console.error(chalk.red("Please run 'vention pull' or 'vention link' first."));
-        process.exit(1);
-      }
-      const linkedAllocation = await checkIfDesignHasLiveAllocation(session, machineCodeAppDirectoryInfo.designId);
-      if (!linkedAllocation) {
-        console.error(chalk.red("Sorry, it seems you do not have that design open with the MachineLogic tab selected."));
-        console.error(chalk.red("Please go to your browser, open your design, and navigate to the MachineLogic page."));
-        process.exit(1);
-      }
-      const logs = await getApplicationLogs(session.environment, linkedAllocation.designId, linkedAllocation.sessionId, machineCodeAppDirectoryInfo.applicationId);
-      console.log(logs);
-    } catch (error) {
-      handleCommandError(error, "Failed to fetch application logs");
-    }
-  });
-}
 
 var $TypeError$1 = TypeError;
 var MAX_SAFE_INTEGER = 0x1FFFFFFFFFFFFF; // 2 ** 53 - 1 == 9007199254740991
@@ -11531,6 +11419,1172 @@ $$6({ target: 'Iterator', proto: true, real: true, forced: FORCED }, {
   }
 });
 
+//#region src/generated/core/bodySerializer.gen.ts
+const jsonBodySerializer = { bodySerializer: (body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value) };
+
+//#region src/generated/core/pathSerializer.gen.ts
+const separatorArrayExplode = (style) => {
+	switch (style) {
+		case "label": return ".";
+		case "matrix": return ";";
+		case "simple": return ",";
+		default: return "&";
+	}
+};
+const separatorArrayNoExplode = (style) => {
+	switch (style) {
+		case "form": return ",";
+		case "pipeDelimited": return "|";
+		case "spaceDelimited": return "%20";
+		default: return ",";
+	}
+};
+const separatorObjectExplode = (style) => {
+	switch (style) {
+		case "label": return ".";
+		case "matrix": return ";";
+		case "simple": return ",";
+		default: return "&";
+	}
+};
+const serializeArrayParam = ({ allowReserved, explode, name, style, value }) => {
+	if (!explode) {
+		const joinedValues = (allowReserved ? value : value.map((v) => encodeURIComponent(v))).join(separatorArrayNoExplode(style));
+		switch (style) {
+			case "label": return `.${joinedValues}`;
+			case "matrix": return `;${name}=${joinedValues}`;
+			case "simple": return joinedValues;
+			default: return `${name}=${joinedValues}`;
+		}
+	}
+	const separator = separatorArrayExplode(style);
+	const joinedValues = value.map((v) => {
+		if (style === "label" || style === "simple") return allowReserved ? v : encodeURIComponent(v);
+		return serializePrimitiveParam({
+			allowReserved,
+			name,
+			value: v
+		});
+	}).join(separator);
+	return style === "label" || style === "matrix" ? separator + joinedValues : joinedValues;
+};
+const serializePrimitiveParam = ({ allowReserved, name, value }) => {
+	if (value === void 0 || value === null) return "";
+	if (typeof value === "object") throw new Error("Deeply-nested arrays/objects aren’t supported. Provide your own `querySerializer()` to handle these.");
+	return `${name}=${allowReserved ? value : encodeURIComponent(value)}`;
+};
+const serializeObjectParam = ({ allowReserved, explode, name, style, value, valueOnly }) => {
+	if (value instanceof Date) return valueOnly ? value.toISOString() : `${name}=${value.toISOString()}`;
+	if (style !== "deepObject" && !explode) {
+		let values = [];
+		Object.entries(value).forEach(([key, v]) => {
+			values = [
+				...values,
+				key,
+				allowReserved ? v : encodeURIComponent(v)
+			];
+		});
+		const joinedValues = values.join(",");
+		switch (style) {
+			case "form": return `${name}=${joinedValues}`;
+			case "label": return `.${joinedValues}`;
+			case "matrix": return `;${name}=${joinedValues}`;
+			default: return joinedValues;
+		}
+	}
+	const separator = separatorObjectExplode(style);
+	const joinedValues = Object.entries(value).map(([key, v]) => serializePrimitiveParam({
+		allowReserved,
+		name: style === "deepObject" ? `${name}[${key}]` : key,
+		value: v
+	})).join(separator);
+	return style === "label" || style === "matrix" ? separator + joinedValues : joinedValues;
+};
+
+//#region src/generated/core/utils.gen.ts
+const PATH_PARAM_RE = /\{[^{}]+\}/g;
+const defaultPathSerializer = ({ path, url: _url }) => {
+	let url = _url;
+	const matches = _url.match(PATH_PARAM_RE);
+	if (matches) for (const match of matches) {
+		let explode = false;
+		let name = match.substring(1, match.length - 1);
+		let style = "simple";
+		if (name.endsWith("*")) {
+			explode = true;
+			name = name.substring(0, name.length - 1);
+		}
+		if (name.startsWith(".")) {
+			name = name.substring(1);
+			style = "label";
+		} else if (name.startsWith(";")) {
+			name = name.substring(1);
+			style = "matrix";
+		}
+		const value = path[name];
+		if (value === void 0 || value === null) continue;
+		if (Array.isArray(value)) {
+			url = url.replace(match, serializeArrayParam({
+				explode,
+				name,
+				style,
+				value
+			}));
+			continue;
+		}
+		if (typeof value === "object") {
+			url = url.replace(match, serializeObjectParam({
+				explode,
+				name,
+				style,
+				value,
+				valueOnly: true
+			}));
+			continue;
+		}
+		if (style === "matrix") {
+			url = url.replace(match, `;${serializePrimitiveParam({
+				name,
+				value
+			})}`);
+			continue;
+		}
+		const replaceValue = encodeURIComponent(style === "label" ? `.${value}` : value);
+		url = url.replace(match, replaceValue);
+	}
+	return url;
+};
+const getUrl = ({ baseUrl, path, query, querySerializer, url: _url }) => {
+	const pathUrl = _url.startsWith("/") ? _url : `/${_url}`;
+	let url = (baseUrl ?? "") + pathUrl;
+	if (path) url = defaultPathSerializer({
+		path,
+		url
+	});
+	let search = query ? querySerializer(query) : "";
+	if (search.startsWith("?")) search = search.substring(1);
+	if (search) url += `?${search}`;
+	return url;
+};
+function getValidRequestBody(options) {
+	const hasBody = options.body !== void 0;
+	if (hasBody && options.bodySerializer) {
+		if ("serializedBody" in options) return options.serializedBody !== void 0 && options.serializedBody !== "" ? options.serializedBody : null;
+		return options.body !== "" ? options.body : null;
+	}
+	if (hasBody) return options.body;
+}
+
+//#region src/generated/core/auth.gen.ts
+const getAuthToken = async (auth, callback) => {
+	const token = typeof callback === "function" ? await callback(auth) : callback;
+	if (!token) return;
+	if (auth.scheme === "bearer") return `Bearer ${token}`;
+	if (auth.scheme === "basic") return `Basic ${btoa(token)}`;
+	return token;
+};
+
+//#region src/generated/client/utils.gen.ts
+const createQuerySerializer = ({ parameters = {}, ...args } = {}) => {
+	const querySerializer = (queryParams) => {
+		const search = [];
+		if (queryParams && typeof queryParams === "object") for (const name in queryParams) {
+			const value = queryParams[name];
+			if (value === void 0 || value === null) continue;
+			const options = parameters[name] || args;
+			if (Array.isArray(value)) {
+				const serializedArray = serializeArrayParam({
+					allowReserved: options.allowReserved,
+					explode: true,
+					name,
+					style: "form",
+					value,
+					...options.array
+				});
+				if (serializedArray) search.push(serializedArray);
+			} else if (typeof value === "object") {
+				const serializedObject = serializeObjectParam({
+					allowReserved: options.allowReserved,
+					explode: true,
+					name,
+					style: "deepObject",
+					value,
+					...options.object
+				});
+				if (serializedObject) search.push(serializedObject);
+			} else {
+				const serializedPrimitive = serializePrimitiveParam({
+					allowReserved: options.allowReserved,
+					name,
+					value
+				});
+				if (serializedPrimitive) search.push(serializedPrimitive);
+			}
+		}
+		return search.join("&");
+	};
+	return querySerializer;
+};
+/**
+* Infers parseAs value from provided Content-Type header.
+*/
+const getParseAs = (contentType) => {
+	if (!contentType) return "stream";
+	const cleanContent = contentType.split(";")[0]?.trim();
+	if (!cleanContent) return;
+	if (cleanContent.startsWith("application/json") || cleanContent.endsWith("+json")) return "json";
+	if (cleanContent === "multipart/form-data") return "formData";
+	if ([
+		"application/",
+		"audio/",
+		"image/",
+		"video/"
+	].some((type) => cleanContent.startsWith(type))) return "blob";
+	if (cleanContent.startsWith("text/")) return "text";
+};
+const checkForExistence = (options, name) => {
+	if (!name) return false;
+	if (options.headers.has(name) || options.query?.[name] || options.headers.get("Cookie")?.includes(`${name}=`)) return true;
+	return false;
+};
+async function setAuthParams(options) {
+	for (const auth of options.security ?? []) {
+		if (checkForExistence(options, auth.name)) continue;
+		const token = await getAuthToken(auth, options.auth);
+		if (!token) continue;
+		const name = auth.name ?? "Authorization";
+		switch (auth.in) {
+			case "query":
+				if (!options.query) options.query = {};
+				options.query[name] = token;
+				break;
+			case "cookie":
+				options.headers.append("Cookie", `${name}=${token}`);
+				break;
+			default: options.headers.set(name, token);
+		}
+	}
+}
+const buildUrl = (options) => getUrl({
+	baseUrl: options.baseUrl,
+	path: options.path,
+	query: options.query,
+	querySerializer: typeof options.querySerializer === "function" ? options.querySerializer : createQuerySerializer(options.querySerializer),
+	url: options.url
+});
+const mergeConfigs = (a, b) => {
+	const config = {
+		...a,
+		...b
+	};
+	if (config.baseUrl?.endsWith("/")) config.baseUrl = config.baseUrl.substring(0, config.baseUrl.length - 1);
+	config.headers = mergeHeaders(a.headers, b.headers);
+	return config;
+};
+const headersEntries = (headers) => {
+	const entries = [];
+	headers.forEach((value, key) => {
+		entries.push([key, value]);
+	});
+	return entries;
+};
+const mergeHeaders = (...headers) => {
+	const mergedHeaders = new Headers();
+	for (const header of headers) {
+		if (!header) continue;
+		const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);
+		for (const [key, value] of iterator) if (value === null) mergedHeaders.delete(key);
+		else if (Array.isArray(value)) for (const v of value) mergedHeaders.append(key, v);
+		else if (value !== void 0) mergedHeaders.set(key, typeof value === "object" ? JSON.stringify(value) : value);
+	}
+	return mergedHeaders;
+};
+var Interceptors = class {
+	fns = [];
+	clear() {
+		this.fns = [];
+	}
+	eject(id) {
+		const index = this.getInterceptorIndex(id);
+		if (this.fns[index]) this.fns[index] = null;
+	}
+	exists(id) {
+		const index = this.getInterceptorIndex(id);
+		return Boolean(this.fns[index]);
+	}
+	getInterceptorIndex(id) {
+		if (typeof id === "number") return this.fns[id] ? id : -1;
+		return this.fns.indexOf(id);
+	}
+	update(id, fn) {
+		const index = this.getInterceptorIndex(id);
+		if (this.fns[index]) {
+			this.fns[index] = fn;
+			return id;
+		}
+		return false;
+	}
+	use(fn) {
+		this.fns.push(fn);
+		return this.fns.length - 1;
+	}
+};
+const createInterceptors = () => ({
+	error: new Interceptors(),
+	request: new Interceptors(),
+	response: new Interceptors()
+});
+const defaultQuerySerializer = createQuerySerializer({
+	allowReserved: false,
+	array: {
+		explode: true,
+		style: "form"
+	},
+	object: {
+		explode: true,
+		style: "deepObject"
+	}
+});
+const defaultHeaders = { "Content-Type": "application/json" };
+const createConfig = (override = {}) => ({
+	...jsonBodySerializer,
+	headers: defaultHeaders,
+	parseAs: "auto",
+	querySerializer: defaultQuerySerializer,
+	...override
+});
+
+//#region src/generated/core/serverSentEvents.gen.ts
+function createSseClient({ onRequest, onSseError, onSseEvent, responseTransformer, responseValidator, sseDefaultRetryDelay, sseMaxRetryAttempts, sseMaxRetryDelay, sseSleepFn, url, ...options }) {
+	let lastEventId;
+	const sleep = sseSleepFn ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+	const createStream = async function* () {
+		let retryDelay = sseDefaultRetryDelay ?? 3e3;
+		let attempt = 0;
+		const signal = options.signal ?? new AbortController().signal;
+		while (true) {
+			if (signal.aborted) break;
+			attempt++;
+			const headers = options.headers instanceof Headers ? options.headers : new Headers(options.headers);
+			if (lastEventId !== void 0) headers.set("Last-Event-ID", lastEventId);
+			try {
+				const requestInit = {
+					redirect: "follow",
+					...options,
+					body: options.serializedBody,
+					headers,
+					signal
+				};
+				let request = new Request(url, requestInit);
+				if (onRequest) request = await onRequest(url, requestInit);
+				const response = await (options.fetch ?? globalThis.fetch)(request);
+				if (!response.ok) throw new Error(`SSE failed: ${response.status} ${response.statusText}`);
+				if (!response.body) throw new Error("No body in SSE response");
+				const reader = response.body.pipeThrough(new TextDecoderStream()).getReader();
+				let buffer = "";
+				const abortHandler = () => {
+					try {
+						reader.cancel();
+					} catch {}
+				};
+				signal.addEventListener("abort", abortHandler);
+				try {
+					while (true) {
+						const { done, value } = await reader.read();
+						if (done) break;
+						buffer += value;
+						buffer = buffer.replace(/\r\n?/g, "\n");
+						const chunks = buffer.split("\n\n");
+						buffer = chunks.pop() ?? "";
+						for (const chunk of chunks) {
+							const lines = chunk.split("\n");
+							const dataLines = [];
+							let eventName;
+							for (const line of lines) if (line.startsWith("data:")) dataLines.push(line.replace(/^data:\s*/, ""));
+							else if (line.startsWith("event:")) eventName = line.replace(/^event:\s*/, "");
+							else if (line.startsWith("id:")) lastEventId = line.replace(/^id:\s*/, "");
+							else if (line.startsWith("retry:")) {
+								const parsed = Number.parseInt(line.replace(/^retry:\s*/, ""), 10);
+								if (!Number.isNaN(parsed)) retryDelay = parsed;
+							}
+							let data;
+							let parsedJson = false;
+							if (dataLines.length) {
+								const rawData = dataLines.join("\n");
+								try {
+									data = JSON.parse(rawData);
+									parsedJson = true;
+								} catch {
+									data = rawData;
+								}
+							}
+							if (parsedJson) {
+								if (responseValidator) await responseValidator(data);
+								if (responseTransformer) data = await responseTransformer(data);
+							}
+							onSseEvent?.({
+								data,
+								event: eventName,
+								id: lastEventId,
+								retry: retryDelay
+							});
+							if (dataLines.length) yield data;
+						}
+					}
+				} finally {
+					signal.removeEventListener("abort", abortHandler);
+					reader.releaseLock();
+				}
+				break;
+			} catch (error) {
+				onSseError?.(error);
+				if (sseMaxRetryAttempts !== void 0 && attempt >= sseMaxRetryAttempts) break;
+				const backoff = Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 3e4);
+				await sleep(backoff);
+			}
+		}
+	};
+	return { stream: createStream() };
+}
+
+//#region src/generated/client/client.gen.ts
+const createClient$1 = (config = {}) => {
+	let _config = mergeConfigs(createConfig(), config);
+	const getConfig = () => ({ ..._config });
+	const setConfig = (config) => {
+		_config = mergeConfigs(_config, config);
+		return getConfig();
+	};
+	const interceptors = createInterceptors();
+	const beforeRequest = async (options) => {
+		const opts = {
+			..._config,
+			...options,
+			fetch: options.fetch ?? _config.fetch ?? globalThis.fetch,
+			headers: mergeHeaders(_config.headers, options.headers),
+			serializedBody: void 0
+		};
+		if (opts.security) await setAuthParams(opts);
+		if (opts.requestValidator) await opts.requestValidator(opts);
+		if (opts.body !== void 0 && opts.bodySerializer) opts.serializedBody = opts.bodySerializer(opts.body);
+		if (opts.body === void 0 || opts.serializedBody === "") opts.headers.delete("Content-Type");
+		const resolvedOpts = opts;
+		return {
+			opts: resolvedOpts,
+			url: buildUrl(resolvedOpts)
+		};
+	};
+	const request = async (options) => {
+		const throwOnError = options.throwOnError ?? _config.throwOnError;
+		const responseStyle = options.responseStyle ?? _config.responseStyle;
+		let request;
+		let response;
+		try {
+			const { opts, url } = await beforeRequest(options);
+			const requestInit = {
+				redirect: "follow",
+				...opts,
+				body: getValidRequestBody(opts)
+			};
+			request = new Request(url, requestInit);
+			for (const fn of interceptors.request.fns) if (fn) request = await fn(request, opts);
+			const _fetch = opts.fetch;
+			response = await _fetch(request);
+			for (const fn of interceptors.response.fns) if (fn) response = await fn(response, request, opts);
+			const result = {
+				request,
+				response
+			};
+			if (response.ok) {
+				const parseAs = (opts.parseAs === "auto" ? getParseAs(response.headers.get("Content-Type")) : opts.parseAs) ?? "json";
+				if (response.status === 204 || response.headers.get("Content-Length") === "0") {
+					let emptyData;
+					switch (parseAs) {
+						case "arrayBuffer":
+						case "blob":
+						case "text":
+							emptyData = await response[parseAs]();
+							break;
+						case "formData":
+							emptyData = new FormData();
+							break;
+						case "stream":
+							emptyData = response.body;
+							break;
+						default: emptyData = {};
+					}
+					return opts.responseStyle === "data" ? emptyData : {
+						data: emptyData,
+						...result
+					};
+				}
+				let data;
+				switch (parseAs) {
+					case "arrayBuffer":
+					case "blob":
+					case "formData":
+					case "text":
+						data = await response[parseAs]();
+						break;
+					case "json": {
+						const text = await response.text();
+						data = text ? JSON.parse(text) : {};
+						break;
+					}
+					case "stream": return opts.responseStyle === "data" ? response.body : {
+						data: response.body,
+						...result
+					};
+				}
+				if (parseAs === "json") {
+					if (opts.responseValidator) await opts.responseValidator(data);
+					if (opts.responseTransformer) data = await opts.responseTransformer(data);
+				}
+				return opts.responseStyle === "data" ? data : {
+					data,
+					...result
+				};
+			}
+			const textError = await response.text();
+			let jsonError;
+			try {
+				jsonError = JSON.parse(textError);
+			} catch {}
+			throw jsonError ?? textError;
+		} catch (error) {
+			let finalError = error;
+			for (const fn of interceptors.error.fns) if (fn) finalError = await fn(finalError, response, request, options);
+			finalError = finalError || {};
+			if (throwOnError) throw finalError;
+			return responseStyle === "data" ? void 0 : {
+				error: finalError,
+				request,
+				response
+			};
+		}
+	};
+	const makeMethodFn = (method) => (options) => request({
+		...options,
+		method
+	});
+	const makeSseFn = (method) => async (options) => {
+		const { opts, url } = await beforeRequest(options);
+		return createSseClient({
+			...opts,
+			body: opts.body,
+			method,
+			onRequest: async (url, init) => {
+				let request = new Request(url, init);
+				for (const fn of interceptors.request.fns) if (fn) request = await fn(request, opts);
+				return request;
+			},
+			serializedBody: getValidRequestBody(opts),
+			url
+		});
+	};
+	const _buildUrl = (options) => buildUrl({
+		..._config,
+		...options
+	});
+	return {
+		buildUrl: _buildUrl,
+		connect: makeMethodFn("CONNECT"),
+		delete: makeMethodFn("DELETE"),
+		get: makeMethodFn("GET"),
+		getConfig,
+		head: makeMethodFn("HEAD"),
+		interceptors,
+		options: makeMethodFn("OPTIONS"),
+		patch: makeMethodFn("PATCH"),
+		post: makeMethodFn("POST"),
+		put: makeMethodFn("PUT"),
+		request,
+		setConfig,
+		sse: {
+			connect: makeSseFn("CONNECT"),
+			delete: makeSseFn("DELETE"),
+			get: makeSseFn("GET"),
+			head: makeSseFn("HEAD"),
+			options: makeSseFn("OPTIONS"),
+			patch: makeSseFn("PATCH"),
+			post: makeSseFn("POST"),
+			put: makeSseFn("PUT"),
+			trace: makeSseFn("TRACE")
+		},
+		trace: makeMethodFn("TRACE")
+	};
+};
+
+//#region src/generated/sdk.gen.ts
+var HeyApiClient = class {
+	client;
+	constructor(args) {
+		this.client = args.client;
+	}
+};
+var HeyApiRegistry = class {
+	defaultKey = "default";
+	instances = /* @__PURE__ */ new Map();
+	get(key) {
+		const instance = this.instances.get(key ?? this.defaultKey);
+		if (!instance) throw new Error(`No SDK client found. Create one with "new DigitalTwinApi()" to fix this error.`);
+		return instance;
+	}
+	set(value, key) {
+		this.instances.set(key ?? this.defaultKey, value);
+	}
+};
+var DigitalTwinApi = class DigitalTwinApi extends HeyApiClient {
+	static __registry = new HeyApiRegistry();
+	constructor(args) {
+		super(args);
+		DigitalTwinApi.__registry.set(this, args.key);
+	}
+	/**
+	* List the caller's digital twin instances
+	*/
+	listInstances(options) {
+		return (options?.client ?? this.client).get({
+			security: [{
+				in: "cookie",
+				name: "__Host-vention_auth",
+				type: "apiKey"
+			}, {
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/instances",
+			...options
+		});
+	}
+	/**
+	* Allocate a digital twin instance
+	*/
+	allocate(options) {
+		return (options.client ?? this.client).post({
+			security: [{
+				in: "cookie",
+				name: "__Host-vention_auth",
+				type: "apiKey"
+			}, {
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/instances",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+	/**
+	* Deallocate a digital twin instance
+	*/
+	deallocate(options) {
+		return (options.client ?? this.client).delete({
+			security: [{
+				in: "cookie",
+				name: "__Host-vention_auth",
+				type: "apiKey"
+			}, {
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/instances/{instanceId}",
+			...options
+		});
+	}
+	/**
+	* Get a single digital twin instance
+	*/
+	getInstance(options) {
+		return (options.client ?? this.client).get({
+			security: [{
+				in: "cookie",
+				name: "__Host-vention_auth",
+				type: "apiKey"
+			}, {
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/instances/{instanceId}",
+			...options
+		});
+	}
+	/**
+	* List the releases available to instantiate
+	*/
+	listReleases(options) {
+		return (options?.client ?? this.client).get({
+			security: [{
+				in: "cookie",
+				name: "__Host-vention_auth",
+				type: "apiKey"
+			}, {
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/releases",
+			...options
+		});
+	}
+	/**
+	* Get a release and the container images it ships
+	*/
+	getRelease(options) {
+		return (options.client ?? this.client).get({
+			security: [{
+				in: "cookie",
+				name: "__Host-vention_auth",
+				type: "apiKey"
+			}, {
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/releases/{release}",
+			...options
+		});
+	}
+	/**
+	* List the release channels available to instantiate from
+	*/
+	listChannels(options) {
+		return (options?.client ?? this.client).get({
+			security: [{
+				in: "cookie",
+				name: "__Host-vention_auth",
+				type: "apiKey"
+			}, {
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/channels",
+			...options
+		});
+	}
+};
+
+//#region src/errors.ts
+/**
+* The wait ended without a ready instance. Carries the identifiers a caller needs to log the
+* failure or deallocate the twin, so none of it has to be dug back out of the response —
+* `response.statusText` is empty over HTTP/2 and tells a caller nothing.
+*/
+/** The instance is ready but does not expose the service the caller asked for. */
+var EndpointNotFoundError = class extends Error {
+	instanceId;
+	endpoint;
+	available;
+	constructor(instanceId, endpoint, available) {
+		super(`Instance ${instanceId} exposed no endpoint named "${endpoint}" — it exposes ${available.length > 0 ? available.join(", ") : "none"}`);
+		this.instanceId = instanceId;
+		this.endpoint = endpoint;
+		this.available = available;
+		this.name = "EndpointNotFoundError";
+	}
+};
+
+//#region src/find-endpoint.ts
+/**
+* Reads the URL of one of an instance's exposed services.
+*
+* @param instance A ready instance. Endpoints are absent until it is.
+* @param name The service to reach, as the release names it.
+* @returns The absolute URL serving that service, or an {@link EndpointNotFoundError} naming the services the instance
+* does expose.
+*/
+function findEndpoint(instance, name) {
+	const endpoint = instance.endpoints?.find((candidate) => candidate.name === name);
+	if (!endpoint) return {
+		success: false,
+		error: new EndpointNotFoundError(instance.id, name, instance.endpoints?.map((each) => each.name) ?? [])
+	};
+	return {
+		success: true,
+		url: endpoint.url
+	};
+}
+
+//#region src/index.ts
+/**
+* Auth runs in the wrapped fetch, below the generated code. hey-api's own `auth` option stays
+* unset: it would turn the cookie scheme into a `Cookie` header browsers drop.
+*/
+function createDigitalTwinApi({ baseUrl, authStrategy, fetch = globalThis.fetch }) {
+	const client = createClient$1(createConfig({
+		baseUrl,
+		fetch: authStrategy ? withAuthStrategy(authStrategy, fetch) : fetch
+	}));
+	return new DigitalTwinApi({ client });
+}
+
+const DIGITAL_TWIN_API_ORIGINS = {
+  demo: "https://twins.vention.foo",
+  prod: "https://twins.vention.com"
+};
+const getOrigin = environment => {
+  var _a;
+  return (_a = getOriginOverride("VENTION_CLI_DIGITAL_TWIN_API_ORIGIN")) !== null && _a !== void 0 ? _a : DIGITAL_TWIN_API_ORIGINS[environment];
+};
+const createClient = (session, origins) => {
+  const strategy = new BearerStrategy({
+    exchange: oauth2TokenExchange({
+      issuer: origins.auth,
+      store: gatewayTokenStore(session),
+      fetch: fetchWithUserAgent
+    })
+  });
+  return {
+    api: createDigitalTwinApi({
+      baseUrl: origins.api,
+      authStrategy: strategy,
+      fetch: fetchWithUserAgent
+    }),
+    fetch: withAuthStrategy(strategy, fetchWithUserAgent)
+  };
+};
+const compareNewestFirst = (left, right) => Date.parse(right.createdAt) - Date.parse(left.createdAt);
+const listReadyInstances = async api => {
+  const {
+    data,
+    error,
+    response
+  } = await api.listInstances();
+  if (data !== undefined) {
+    return data.filter(instance => instance.state === "ready").sort(compareNewestFirst);
+  }
+  if ((response === null || response === void 0 ? void 0 : response.ok) === false) {
+    throw buildApiError(response, typeof error === "object" && error !== null && Object.keys(error).length === 0 ? null : error, response.url);
+  }
+  throw error;
+};
+const buildConnection = (engineUrl, fetch) => ({
+  baseUrl: engineUrl,
+  headers: {},
+  fetch
+});
+const listDesigns$1 = async (session, origins) => {
+  const {
+    api,
+    fetch
+  } = createClient(session, origins);
+  const instances = await listReadyInstances(api);
+  const newestInstancePerDesign = instances.filter((instance, index) => instances.findIndex(other => other.designId === instance.designId) === index);
+  return newestInstancePerDesign.flatMap(instance => {
+    const engineLookup = findEndpoint(instance, "execution-engine");
+    return engineLookup.success ? [{
+      id: instance.designId,
+      name: instance.designName,
+      connection: buildConnection(engineLookup.url, fetch)
+    }] : [];
+  });
+};
+const resolveConnection = async (session, origins, designId) => {
+  var _a;
+  const designs = await listDesigns$1(session, origins);
+  return (_a = designs.find(design => design.id === designId)) === null || _a === void 0 ? void 0 : _a.connection;
+};
+
+const findDigitalTwinApiOrigins = session => {
+  if (!isDigitalTwinV3Enabled(session)) {
+    return undefined;
+  }
+  const auth = getPlatformAuthOrigin(session.environment);
+  const api = getOrigin(session.environment);
+  if (!auth || !api) {
+    verboseLog(`${DIGITAL_TWIN_V3.key} is on but ${session.environment} has no digital twin API configured, using the Rails API path`);
+    return undefined;
+  }
+  return {
+    auth,
+    api
+  };
+};
+const resolveDigitalTwinConnection = async (session, designId) => {
+  const origins = findDigitalTwinApiOrigins(session);
+  return origins ? resolveConnection(session, origins, designId) : resolveConnection$1(session, designId);
+};
+const listDesigns = async session => {
+  const origins = findDigitalTwinApiOrigins(session);
+  return origins ? listDesigns$1(session, origins) : listDesigns$2(session);
+};
+
+const getAppFromDigitalTwin = async (connection, machineCodeAppDirectoryInfo) => {
+  console.log(chalk.blue("Fetching all applications with source code from digital twin..."));
+  const allApplications = await getAllApplicationsWithSourceCode(connection);
+  const targetApp = allApplications.find(app => app.id === machineCodeAppDirectoryInfo.applicationId);
+  if (!targetApp) {
+    console.log();
+    console.error(chalk.red(`Application "${machineCodeAppDirectoryInfo.appName}" (ID: ${machineCodeAppDirectoryInfo.applicationId}) not found in the digital twin.`));
+    process.exit(1);
+  }
+  return targetApp;
+};
+const getAvailableAppsFromDigitalTwin = async connection => {
+  const allApplications = await getAllApplicationsWithSourceCode(connection);
+  return allApplications.filter(app => app.type === "machine_code");
+};
+const createNewAppDirectory = async (session, currentDir) => {
+  const {
+    selectedDesign,
+    selectedApp
+  } = await selectDesignAndApp(session);
+  if (!selectedApp.sourceCode) {
+    console.log();
+    console.log(chalk.yellow("No source code found for this application."));
+    process.exit(1);
+  }
+  const appDirectoryExists = await checkIfAppDirectoryExists(selectedApp.name, currentDir);
+  const safeFileName = sanitizeFileName(selectedApp.name);
+  if (appDirectoryExists) {
+    console.log();
+    console.error(chalk.red(`You already have a directory with name "${safeFileName}" here.`));
+    console.error(chalk.red("If that is the machine code app you are trying to pull, please navigate to the root folder of the app and run the 'vention pull' command from there."));
+    console.error(chalk.red("If not, please rename that directory and try again."));
+    process.exit(1);
+  }
+  const appDirectoryPath = await writeApplicationToDisk(selectedApp.name, selectedApp.sourceCode, currentDir);
+  const [assets, mmConfiguration] = await Promise.all([getLibraryAssets(selectedDesign.connection), getMmConfiguration(selectedDesign.connection)]);
+  if (assets !== undefined) {
+    await writeReadonlyJsonFile(appDirectoryPath, ".vention-design-scene-assets.json", assets);
+  }
+  await writeReadonlyJsonFile(appDirectoryPath, ".vention-design-configuration.json", mmConfiguration);
+  await writeMachineCodeAppDirectoryInfo(appDirectoryPath, {
+    appName: selectedApp.name,
+    designId: selectedDesign.id,
+    applicationId: selectedApp.id,
+    lastPulledAt: new Date().toISOString(),
+    environment: session.environment,
+    uuid: selectedApp.uuid
+  });
+  console.log();
+  console.log(chalk.green(`✅ Successfully pulled "${selectedApp.name}" to: ${appDirectoryPath}`));
+  console.log(chalk.blue(`📁 To navigate to your project, run:`));
+  console.log(chalk.cyan(`cd "${safeFileName}"`));
+  console.log(chalk.blue("💡 You can now start working on your application!"));
+};
+const updateExistingAppDirectory = async (session, machineCodeAppDirectoryInfo, currentDir) => {
+  console.log(chalk.blue(`Found existing project: ${machineCodeAppDirectoryInfo.appName}`));
+  console.log(chalk.blue(`Design ID: ${machineCodeAppDirectoryInfo.designId}, App ID: ${machineCodeAppDirectoryInfo.applicationId}`));
+  const connection = await resolveDigitalTwinConnection(session, machineCodeAppDirectoryInfo.designId);
+  if (!connection) {
+    console.log();
+    console.error(chalk.red("Sorry, it seems you do not have that design open with the MachineLogic tab selected."));
+    console.error(chalk.red("Please go to your browser, open your design, and navigate to the MachineLogic page."));
+    process.exit(1);
+  }
+  const appWithSourceCode = await getAppFromDigitalTwin(connection, machineCodeAppDirectoryInfo);
+  await writeApplicationToDisk(appWithSourceCode.name, appWithSourceCode.sourceCode, currentDir, true);
+  const [assets, mmConfiguration] = await Promise.all([getLibraryAssets(connection), getMmConfiguration(connection)]);
+  if (assets !== undefined) {
+    await writeReadonlyJsonFile(currentDir, ".vention-design-scene-assets.json", assets);
+  }
+  await writeReadonlyJsonFile(currentDir, ".vention-design-configuration.json", mmConfiguration);
+  await writeMachineCodeAppDirectoryInfo(currentDir, Object.assign(Object.assign({}, machineCodeAppDirectoryInfo), {
+    lastPulledAt: new Date().toISOString()
+  }));
+  console.log();
+  console.log(chalk.green(`✅ Successfully pulled "${appWithSourceCode.name}" to: ${currentDir}`));
+  console.log(chalk.blue("💡 Your project has been updated with the latest changes!"));
+};
+const linkDirectory = async (session, currentDir) => {
+  const {
+    selectedDesign,
+    selectedApp
+  } = await selectDesignAndApp(session);
+  await writeMachineCodeAppDirectoryInfo(currentDir, {
+    appName: selectedApp.name,
+    designId: selectedDesign.id,
+    applicationId: selectedApp.id,
+    lastPulledAt: new Date().toISOString(),
+    environment: session.environment,
+    uuid: selectedApp.uuid
+  });
+  console.log(chalk.green(`Successfully linked current directory to design "${selectedDesign.name}" (ID: ${selectedDesign.id})`));
+  console.log(chalk.green(`Application: "${selectedApp.name}" (ID: ${selectedApp.id})`));
+  return {
+    selectedDesign,
+    selectedApp
+  };
+};
+const selectDesignAndApp = async session => {
+  const designs = await listDesigns(session);
+  if (designs.length === 0) {
+    console.log();
+    console.log(chalk.yellow("No active allocations found. Please open a design and navigate to the machine logic tab to activate a digital twin."));
+    process.exit(1);
+  }
+  const selectedDesign = await select({
+    message: "Select a design:",
+    choices: designs.map(design => ({
+      name: `${design.name} (ID: ${design.id})`,
+      value: design
+    }))
+  });
+  const availableApps = await getAvailableAppsFromDigitalTwin(selectedDesign.connection);
+  if (availableApps.length === 0) {
+    console.log();
+    console.log(chalk.yellow("No machine code applications found in the digital twin"));
+    process.exit(1);
+  }
+  const selectedApp = await select({
+    message: "Select an application:",
+    choices: availableApps.map(app => ({
+      name: app.name,
+      value: app
+    }))
+  });
+  return {
+    selectedDesign,
+    selectedApp
+  };
+};
+
+function createLinkCommand() {
+  return new Command("link").description("Link current directory to a Vention design application").action(async () => {
+    try {
+      const session = await loadSession();
+      if (!session) {
+        console.error(chalk.red("Not logged in. Please run 'vention login' first."));
+        process.exit(1);
+      }
+      const currentDir = process.cwd();
+      console.log();
+      await linkDirectory(session, currentDir);
+      console.log(chalk.blue("You can now use 'vention pull' to download app content or 'vention push' to upload local changes."));
+    } catch (error) {
+      handleCommandError(error, "Failed to link directory");
+    }
+  });
+}
+
+function createPushCommand() {
+  return new Command("push").description("Push local changes from this directory to the linked digital twin").action(async () => {
+    try {
+      const session = await loadSession();
+      if (!session) {
+        console.error(chalk.red("Not logged in. Please run 'vention login' first."));
+        process.exit(1);
+      }
+      const currentDir = process.cwd();
+      const machineCodeAppDirectoryInfo = await readMachineCodeAppDirectoryInfo(currentDir);
+      let linkedConnection;
+      if (!machineCodeAppDirectoryInfo) {
+        console.log();
+        console.log(chalk.yellow("This directory is not linked to a Vention application."));
+        const shouldLink = await select({
+          message: "Would you like to link this directory to an application?",
+          choices: [{
+            name: "Yes, link this directory",
+            value: true
+          }, {
+            name: "No, cancel push operation",
+            value: false
+          }]
+        });
+        if (!shouldLink) {
+          console.log(chalk.blue("Push operation cancelled. Run 'vention link' when you're ready to link this directory."));
+          process.exit(0);
+        }
+        const {
+          selectedDesign
+        } = await linkDirectory(session, currentDir);
+        linkedConnection = selectedDesign.connection;
+        console.log(chalk.blue("Continuing with push operation..."));
+      }
+      const updatedMachineCodeAppDirectoryInfo = await readMachineCodeAppDirectoryInfo(currentDir);
+      if (!updatedMachineCodeAppDirectoryInfo) {
+        console.log(chalk.red("Error reading directory metadata after linking."));
+        process.exit(1);
+      }
+      console.log();
+      console.log(chalk.blue(`Pushing changes for project: ${updatedMachineCodeAppDirectoryInfo.appName}`));
+      console.log(chalk.blue(`Design ID: ${updatedMachineCodeAppDirectoryInfo.designId}, App ID: ${updatedMachineCodeAppDirectoryInfo.applicationId}`));
+      const connection = linkedConnection !== null && linkedConnection !== void 0 ? linkedConnection : await resolveDigitalTwinConnection(session, updatedMachineCodeAppDirectoryInfo.designId);
+      if (!connection) {
+        console.log();
+        console.error(chalk.red("Sorry, it seems you do not have that design open with the MachineLogic tab selected."));
+        console.error(chalk.red("Please go to your browser, open your design, and navigate to the MachineLogic page."));
+        process.exit(1);
+      }
+      console.log();
+      console.log(chalk.blue("Serializing local files..."));
+      const ignorePatterns = getDefaultIgnorePatterns();
+      const serializedSourceCode = serializeFileSystem(currentDir, ignorePatterns, true);
+      const applicationToPush = {
+        name: updatedMachineCodeAppDirectoryInfo.appName,
+        id: updatedMachineCodeAppDirectoryInfo.applicationId,
+        type: "machine_code",
+        sourceCode: serializedSourceCode,
+        uuid: updatedMachineCodeAppDirectoryInfo.uuid
+      };
+      console.log(chalk.blue("Pushing to digital twin..."));
+      await pushApplicationToDigitalTwin(connection, applicationToPush);
+      await writeMachineCodeAppDirectoryInfo(currentDir, Object.assign(Object.assign({}, updatedMachineCodeAppDirectoryInfo), {
+        lastPushedAt: new Date().toISOString()
+      }));
+      console.log();
+      console.log(chalk.green(`✅ Successfully pushed to digital twin`));
+      console.log(chalk.blue("💡 Your changes have been uploaded!"));
+    } catch (error) {
+      handleCommandError(error, "Failed to push application");
+    }
+  });
+}
+
+function createPullCommand() {
+  return new Command("pull").description("Pull an application from a design to this directory").action(async () => {
+    try {
+      const session = await loadSession();
+      if (!session) {
+        console.error(chalk.red("Not logged in. Please run 'vention login' first."));
+        process.exit(1);
+      }
+      const currentDir = process.cwd();
+      const machineCodeAppDirectoryInfo = await readMachineCodeAppDirectoryInfo(currentDir);
+      if (machineCodeAppDirectoryInfo) {
+        console.log(chalk.blue(`This directory is linked to app: ${machineCodeAppDirectoryInfo.appName}`));
+        console.log(chalk.blue(`Pulling latest content from design ID: ${machineCodeAppDirectoryInfo.designId}`));
+        await updateExistingAppDirectory(session, machineCodeAppDirectoryInfo, currentDir);
+      } else {
+        await createNewAppDirectory(session, currentDir);
+      }
+    } catch (error) {
+      handleCommandError(error, "Failed to pull application");
+    }
+  });
+}
+
+function createLogsCommand() {
+  return new Command("logs").description("Fetch application logs from the linked digital twin").action(async () => {
+    try {
+      const session = await loadSession();
+      if (!session) {
+        console.error(chalk.red("Not logged in. Please run 'vention login' first."));
+        process.exit(1);
+      }
+      const currentDir = process.cwd();
+      const machineCodeAppDirectoryInfo = await readMachineCodeAppDirectoryInfo(currentDir);
+      if (!machineCodeAppDirectoryInfo) {
+        console.error(chalk.red("This directory is not linked to a Vention application."));
+        console.error(chalk.red("Please run 'vention pull' or 'vention link' first."));
+        process.exit(1);
+      }
+      const connection = await resolveDigitalTwinConnection(session, machineCodeAppDirectoryInfo.designId);
+      if (!connection) {
+        console.error(chalk.red("Sorry, it seems you do not have that design open with the MachineLogic tab selected."));
+        console.error(chalk.red("Please go to your browser, open your design, and navigate to the MachineLogic page."));
+        process.exit(1);
+      }
+      const logs = await getApplicationLogs(connection, machineCodeAppDirectoryInfo.applicationId);
+      console.log(logs);
+    } catch (error) {
+      handleCommandError(error, "Failed to fetch application logs");
+    }
+  });
+}
+
 var $$5 = _export;
 var call = functionCall;
 var iterate = iterate$8;