@vigilbase/cli 0.1.2 → 0.1.3

package/dist/lib/format.js

@@ -1,15 +1,23 @@
+import { stripVTControlCharacters } from 'node:util';
+/** Untrusted API data must never become terminal control sequences or bidi overrides. */
+export function sanitizeTerminal(value) {
+    return stripVTControlCharacters(value).replace(/[\u0000-\u0008\u000b-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/g, '');
+}
 export function createWriter(stdout = process.stdout, stderr = process.stderr) {
     return {
         stdout: (line = '') => {
+            line = sanitizeTerminal(line);
             stdout.write(line.endsWith('\n') ? line : `${line}\n`);
         },
         stderr: (line = '') => {
+            line = sanitizeTerminal(line);
             stderr.write(line.endsWith('\n') ? line : `${line}\n`);
         },
     };
 }
 export function printJson(writer, value) {
-    writer.stdout(JSON.stringify(value, null, 2));
+    // Keep JSON lossless while preventing literal terminal/bidi controls in rendered output.
+    writer.stdout(JSON.stringify(value, null, 2).replace(/[\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/g, (char) => `\\u${char.charCodeAt(0).toString(16).padStart(4, '0')}`));
 }
 function asRecord(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value))
@@ -257,26 +265,33 @@ export function formatExecuteResult(result, mode, writer) {
     }
 }
 export function formatError(error, mode, writer) {
-    const message = error instanceof Error ? error.message : String(error);
+    let message = error instanceof Error ? error.message : String(error);
+    // Server bodies can contain credentials, customer data, or arbitrary error text.
+    if (error && typeof error === 'object' && 'body' in error && error.body != null && 'status' in error && typeof error.status === 'number') {
+        message = 'code' in error && error.code === 'FLAREHAWK_VIEW_AS_REQUIRED'
+            ? 'Select a customer with --customer-id <customer UUID> for security commands.'
+            : `Request failed (HTTP ${error.status}).`;
+    }
     const payload = {
         success: false,
         error: message,
     };
     if (error && typeof error === 'object') {
-        if ('status' in error && typeof error.status === 'number') {
+        if ('status' in error && typeof error.status === 'number' &&
+            Number.isInteger(error.status) && error.status >= 0 && error.status <= 599) {
             payload.status = error.status;
         }
         if ('code' in error &&
-            typeof error.code === 'string') {
+            typeof error.code === 'string' &&
+            /^[A-Za-z][A-Za-z0-9_]{0,79}$/.test(error.code)) {
             payload.code = error.code;
         }
         if ('retryAfterSec' in error &&
-            typeof error.retryAfterSec === 'number') {
+            typeof error.retryAfterSec === 'number' &&
+            Number.isSafeInteger(error.retryAfterSec) &&
+            error.retryAfterSec >= 0) {
             payload.retryAfterSec = error.retryAfterSec;
         }
-        if ('body' in error && error.body != null) {
-            payload.body = error.body;
-        }
     }
     if (mode === 'json') {
         printJson(writer, payload);

package/dist/lib/format.js.map

@@ -1 +1 @@
-{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/lib/format.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,YAAY,CAC1B,SAAgC,OAAO,CAAC,MAAM,EAC9C,SAAgC,OAAO,CAAC,MAAM;IAE9C,OAAO;QACL,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE;YACpB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE;YACpB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;QACxD,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,KAAc;IACtD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;AAC/C,CAAC;AAQD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5E,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAEtB,MAAM,KAAK,GACT,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC;QAC9C,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;QAC5C,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;QAChD,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;QACpD,IAAI,CAAA;IACN,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,cAAc,GAClB,CAAC,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC;QAChE,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC;QACxD,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;YACpC,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,QAAQ;YACzC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,IAAI,CAAC;QACT,SAAS,CAAA;IAEX,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACvE,cAAc,EAAE,cAAc,IAAI,SAAS;KAC5C,CAAA;AACH,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AAEnF,SAAS,iBAAiB,CAAC,OAAkB,EAAE,MAAiB;IAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACzE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAQ;QAE9C,MAAM,KAAK,GACT,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;YAC5C,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC;YAC9C,IAAI,CAAA;QACN,IAAI,CAAC,KAAK;YAAE,SAAQ;QAEpB,MAAM,cAAc,GAClB,CAAC,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC;YAChE,CAAC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC;YAC1D,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC;YAClD,SAAS,CAAA;QAEX,OAAO,CAAC,IAAI,CAAC;YACX,KAAK;YACL,QAAQ,EACN,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;gBACpD,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc;SACf,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAA+B;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxC,MAAM,OAAO,GACX,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC1E,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,QAAgB,EAAE,MAAM,GAAG,GAAG,QAAQ,GAAG,EAAE,EAAE,CACrE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IAEvC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,MAA+B;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxC,MAAM,OAAO,GAAc,EAAE,CAAA;IAE7B,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,iBAAiB,CAAU,EAAE,CAAC;QACrE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAI,MAAM,CAAC,GAAG,CAAe,CAAC,CAAA;QAC3E,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,GAAI,OAAO,CAAC,GAAG,CAAe,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAmB,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAmB,CAAC,CAAA;IACzD,CAAC;IAED,mFAAmF;IACnF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC1D,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAC9B,IAAI,CAAC,MAAM;oBAAE,SAAQ;gBACrB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;gBACrE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC5E,SAAQ;gBACV,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE;oBAClF,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;oBAClD,cAAc,EACZ,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC;wBACpE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;iBACzE,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC1D,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAC9B,IAAI,CAAC,MAAM;oBAAE,SAAQ;gBACrB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;gBACrE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;oBACnF,SAAQ;gBACV,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI;qBAChB,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC;qBAC1B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;qBACjB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;gBACxC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;oBAChD,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;oBACnF,CAAC,CAAC,EAAE,CAAA;gBACN,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EACH,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;wBACxD,GAAG,MAAM,IAAI,MAAM,IAAI,SAAS,EAAE;oBACpC,QAAQ,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;oBAC3E,cAAc,EACZ,IAAI,CAAC,CAAC,CAAC;wBACP,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;iBAClF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAA;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO;YAAE,SAAQ;QACtB,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAA;QAC5F,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B,kFAAkF;AAClF,SAAS,sBAAsB,CAC7B,MAAkD;IAElD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IAEtB,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1E,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEhC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAE9B,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1D,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;QACrE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,GAAG,iBAAiB,oBAAoB,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAkC,EAClC,IAAmB,EACnB,MAAc,EACd,OAKC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC1B,OAAM;IACR,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzE,MAAM,CAAC,MAAM,CAAC,cAAc,WAAW,IAAI,QAAQ,EAAE,CAAC,CAAA;IACtD,MAAM,YAAY,GAChB,OAAO,EAAE,iBAAiB,IAAI,OAAO,EAAE,cAAc,IAAI,EAAE,CAAA;IAC7D,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,cAAc,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,OAAO,OAAO,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAA;IAC3F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,IAAyB,EACzB,IAAmB,EACnB,MAAc,EACd,aAAsB;IAEtB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,aAAa,IAAI,IAAI,EAAE,CAAC,CAAA;QACpE,OAAM;IACR,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,KAAK,GACT,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG;QAC3B,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG;QAC/C,CAAC,CAAC,IAAI,CAAC,WAAW,CAAA;IACtB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpB,MAAM,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,QAAQ,WAAW,CAAC,CAAA;IAExD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,MAAM,EAAE,CAAA;QACf,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAgC,EAChC,IAAmB,EACnB,MAAc;IAEd,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACzB,OAAM;IACR,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAA;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAA;IAClC,MAAM,KAAK,GACT,MAAM,CAAC,KAAK,IAAI,IAAI;QAClB,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9E,CAAC,CAAC,KAAK,CAAA;IAEX,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO;QACzB,CAAC,CAAC,KAAK,IAAI,MAAM,MAAM,MAAM,KAAK,EAAE;QACpC,CAAC,CAAC,KAAK,IAAI,MAAM,MAAM,MAAM,KAAK,EAAE,CAAA;IAEtC,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAExB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IAC5B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,IAAmB,EACnB,MAAc;IAEd,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,MAAM,OAAO,GAA4B;QACvC,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,OAAO;KACf,CAAA;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAQ,KAA6B,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnF,OAAO,CAAC,MAAM,GAAI,KAA4B,CAAC,MAAM,CAAA;QACvD,CAAC;QACD,IACE,MAAM,IAAI,KAAK;YACf,OAAQ,KAA2B,CAAC,IAAI,KAAK,QAAQ,EACrD,CAAC;YACD,OAAO,CAAC,IAAI,GAAI,KAA0B,CAAC,IAAI,CAAA;QACjD,CAAC;QACD,IACE,eAAe,IAAI,KAAK;YACxB,OAAQ,KAAoC,CAAC,aAAa,KAAK,QAAQ,EACvE,CAAC;YACD,OAAO,CAAC,aAAa,GAAI,KAAmC,CAAC,aAAa,CAAA;QAC5E,CAAC;QACD,IAAI,MAAM,IAAI,KAAK,IAAK,KAA2B,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACjE,OAAO,CAAC,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAA;QAClD,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC1B,OAAM;IACR,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,UAAU,OAAO,EAAE,CAAC,CAAA;IAClC,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,eAAe,OAAO,CAAC,aAAa,GAAG,CAAC,CAAA;IACxD,CAAC;AACH,CAAC"}
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/lib/format.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAA;AAapD,yFAAyF;AACzF,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,wFAAwF,EAAE,EAAE,CAAC,CAAA;AAC9I,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,SAAgC,OAAO,CAAC,MAAM,EAC9C,SAAgC,OAAO,CAAC,MAAM;IAE9C,OAAO;QACL,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE;YACpB,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;YAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE;YACpB,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;YAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;QACxD,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,KAAc;IACtD,yFAAyF;IACzF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,8DAA8D,EACjH,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AACxE,CAAC;AAQD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5E,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAEtB,MAAM,KAAK,GACT,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC;QAC9C,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;QAC5C,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC;QAChD,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;QACpD,IAAI,CAAA;IACN,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,cAAc,GAClB,CAAC,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC;QAChE,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC;QACxD,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;YACpC,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,QAAQ;YACzC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,IAAI,CAAC;QACT,SAAS,CAAA;IAEX,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACvE,cAAc,EAAE,cAAc,IAAI,SAAS;KAC5C,CAAA;AACH,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AAEnF,SAAS,iBAAiB,CAAC,OAAkB,EAAE,MAAiB;IAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACzE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAQ;QAE9C,MAAM,KAAK,GACT,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;YAC5C,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC;YAC9C,IAAI,CAAA;QACN,IAAI,CAAC,KAAK;YAAE,SAAQ;QAEpB,MAAM,cAAc,GAClB,CAAC,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC;YAChE,CAAC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC;YAC1D,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC;YAClD,SAAS,CAAA;QAEX,OAAO,CAAC,IAAI,CAAC;YACX,KAAK;YACL,QAAQ,EACN,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;gBACpD,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc;SACf,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAA+B;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxC,MAAM,OAAO,GACX,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC1E,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,QAAgB,EAAE,MAAM,GAAG,GAAG,QAAQ,GAAG,EAAE,EAAE,CACrE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IAEvC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,MAA+B;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxC,MAAM,OAAO,GAAc,EAAE,CAAA;IAE7B,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,iBAAiB,CAAU,EAAE,CAAC;QACrE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAI,MAAM,CAAC,GAAG,CAAe,CAAC,CAAA;QAC3E,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,GAAI,OAAO,CAAC,GAAG,CAAe,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAmB,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAmB,CAAC,CAAA;IACzD,CAAC;IAED,mFAAmF;IACnF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC1D,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAC9B,IAAI,CAAC,MAAM;oBAAE,SAAQ;gBACrB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;gBACrE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC5E,SAAQ;gBACV,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE;oBAClF,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;oBAClD,cAAc,EACZ,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC;wBACpE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;iBACzE,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC1D,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;gBAC9B,IAAI,CAAC,MAAM;oBAAE,SAAQ;gBACrB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;gBACrE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;oBACnF,SAAQ;gBACV,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI;qBAChB,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC;qBAC1B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;qBACjB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;gBACxC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;oBAChD,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;oBACnF,CAAC,CAAC,EAAE,CAAA;gBACN,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EACH,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;wBACxD,GAAG,MAAM,IAAI,MAAM,IAAI,SAAS,EAAE;oBACpC,QAAQ,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;oBAC3E,cAAc,EACZ,IAAI,CAAC,CAAC,CAAC;wBACP,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;iBAClF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAA;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO;YAAE,SAAQ;QACtB,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAA;QAC5F,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B,kFAAkF;AAClF,SAAS,sBAAsB,CAC7B,MAAkD;IAElD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IAEtB,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1E,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEhC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAE9B,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1D,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;QACrE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,GAAG,iBAAiB,oBAAoB,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAkC,EAClC,IAAmB,EACnB,MAAc,EACd,OAKC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC1B,OAAM;IACR,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzE,MAAM,CAAC,MAAM,CAAC,cAAc,WAAW,IAAI,QAAQ,EAAE,CAAC,CAAA;IACtD,MAAM,YAAY,GAChB,OAAO,EAAE,iBAAiB,IAAI,OAAO,EAAE,cAAc,IAAI,EAAE,CAAA;IAC7D,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,cAAc,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,OAAO,OAAO,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAA;IAC3F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,IAAyB,EACzB,IAAmB,EACnB,MAAc,EACd,aAAsB;IAEtB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,aAAa,IAAI,IAAI,EAAE,CAAC,CAAA;QACpE,OAAM;IACR,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,KAAK,GACT,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG;QAC3B,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG;QAC/C,CAAC,CAAC,IAAI,CAAC,WAAW,CAAA;IACtB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpB,MAAM,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,QAAQ,WAAW,CAAC,CAAA;IAExD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,MAAM,EAAE,CAAA;QACf,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAgC,EAChC,IAAmB,EACnB,MAAc;IAEd,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACzB,OAAM;IACR,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAA;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAA;IAClC,MAAM,KAAK,GACT,MAAM,CAAC,KAAK,IAAI,IAAI;QAClB,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9E,CAAC,CAAC,KAAK,CAAA;IAEX,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO;QACzB,CAAC,CAAC,KAAK,IAAI,MAAM,MAAM,MAAM,KAAK,EAAE;QACpC,CAAC,CAAC,KAAK,IAAI,MAAM,MAAM,MAAM,KAAK,EAAE,CAAA;IAEtC,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAExB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IAC5B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,IAAmB,EACnB,MAAc;IAEd,IAAI,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpE,iFAAiF;IACjF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzI,OAAO,GAAG,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B;YACtE,CAAC,CAAC,6EAA6E;YAC/E,CAAC,CAAC,wBAAwB,KAAK,CAAC,MAAM,IAAI,CAAA;IAC9C,CAAC;IACD,MAAM,OAAO,GAA4B;QACvC,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,OAAO;KACf,CAAA;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YACvD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC7E,OAAO,CAAC,MAAM,GAAI,KAA4B,CAAC,MAAM,CAAA;QACvD,CAAC;QACD,IACE,MAAM,IAAI,KAAK;YACf,OAAQ,KAA2B,CAAC,IAAI,KAAK,QAAQ;YACrD,8BAA8B,CAAC,IAAI,CAAE,KAA0B,CAAC,IAAI,CAAC,EACrE,CAAC;YACD,OAAO,CAAC,IAAI,GAAI,KAA0B,CAAC,IAAI,CAAA;QACjD,CAAC;QACD,IACE,eAAe,IAAI,KAAK;YACxB,OAAQ,KAAoC,CAAC,aAAa,KAAK,QAAQ;YACvE,MAAM,CAAC,aAAa,CAAE,KAAmC,CAAC,aAAa,CAAC;YACvE,KAAmC,CAAC,aAAa,IAAI,CAAC,EACvD,CAAC;YACD,OAAO,CAAC,aAAa,GAAI,KAAmC,CAAC,aAAa,CAAA;QAC5E,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC1B,OAAM;IACR,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,UAAU,OAAO,EAAE,CAAC,CAAA;IAClC,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,eAAe,OAAO,CAAC,aAAa,GAAG,CAAC,CAAA;IACxD,CAAC;AACH,CAAC"}

package/dist/lib/help.d.ts

@@ -1,4 +1,4 @@
-export declare const HELP_TAGLINE = "one \u00B7 tools";
-export declare const HELP_TEXT = "Usage: vigilbase <command>\n\nPublic tools (no login)\n  list                         List available tools\n  run <tool> <target>          Run a scan\n  headers <url>                Check security headers\n  email <domain>               Check email security\n  describe <tool> \u00B7 skill      Tool details / skill markdown\n  badge <domain> \u00B7 doctor      Badge URL \u00B7 connectivity\n\nAuth-required tools (after login)\n  website-security \u00B7 react2shell \u00B7 fortibleed-check\n\nAccount (login required)\n  login \u00B7 logout \u00B7 whoami      Session\n  account [services|org|\u2026]     Account overview\n  account endpoints            Endpoint inventory\n  account sessions             Active sessions\n  account invites [list|create]\n  billing [summary|portal]     Billing summary / Stripe portal\n  runs [list|get <id>]         Tool run history\n  cf [zones|checkup]           Cloudflare zones / checkup\n  watchdog [list|scans]        Watchdog targets / scans\n\nOptions\n  -j, --json                   JSON output\n  -h, --help \u00B7 -V, --version\n\nExamples\n  vigilbase headers https://vigilbase.com\n  vigilbase email vigilbase.com --json\n  vigilbase login\n  vigilbase account --json\n  vigilbase runs list --json\n  vigilbase cf zones\n";
+export declare const HELP_TAGLINE = "one \u00B7 security \u00B7 tools";
+export declare const HELP_TEXT = "Usage: vigilbase <command>\n\nPublic tools (no login)\n  list                         List available tools\n  run <tool> <target>          Run a scan\n  headers <url>                Check security headers\n  email <domain>               Check email security\n  describe <tool> \u00B7 skill      Tool details / skill markdown\n  badge <domain> \u00B7 doctor      Badge URL \u00B7 connectivity\n\nAuth-required tools (after login)\n  website-security \u00B7 react2shell \u00B7 fortibleed-check\n\nAccount (login required)\n  login \u00B7 logout \u00B7 whoami      Session\n  account [services|org|\u2026]     Account overview\n  account endpoints            Endpoint inventory\n  account sessions             Active sessions\n  account invites [list|create]\n  billing [summary|portal]     Billing summary / Stripe portal\n  runs [list|get <id>]         Tool run history\n  cf <command>                Cloudflare accounts, zones, DNS, WAF, analytics\n  security <command>          Incidents, logs, assets, detections, intel, reports\n  watchdog [list|scans]        Watchdog targets / scans\n  customers <command>         Customer records, billing, reports, investigations\n  orgs <command>              Organizations, members, permission roles\n  monitoring <command>        Health, probes, metrics, customer targets\n  support tickets             Support ticket history\n\nOptions\n  -j, --json                   JSON output\n  -h, --help                   Help for the current command\n  -V, --version                Installed version\n  --timeout <milliseconds>     Request timeout (default: 60000)\n  --base-url <origin>           Public API origin\n  --one-url <origin>            Vigilbase One origin\n  --client-id <id>              Device authorization client ID\n\nUse vigilbase <command> --help for command options.\n\nExamples\n  vigilbase headers https://vigilbase.com\n  vigilbase email vigilbase.com --json\n  vigilbase login\n  vigilbase account --json\n  vigilbase runs list --json\n  vigilbase cf zones\n  vigilbase security incidents --severity high\n";
 export declare function helpForCommand(command: string): string | null;
 //# sourceMappingURL=help.d.ts.map

package/dist/lib/help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../src/lib/help.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,qBAAgB,CAAA;AAEzC,eAAO,MAAM,SAAS,2vCAmCrB,CAAA;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA4C7D"}
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../src/lib/help.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,YAAY,qCAA2B,CAAA;AAEpD,eAAO,MAAM,SAAS,whEAgDrB,CAAA;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA6D7D"}

package/dist/lib/help.js

@@ -1,4 +1,7 @@
-export const HELP_TAGLINE = 'one · tools';
+import { CLOUDFLARE_HELP } from '../commands/cloudflare.js';
+import { ONE_HELP } from '../commands/one.js';
+import { SECURITY_HELP } from '../commands/security.js';
+export const HELP_TAGLINE = 'one · security · tools';
 export const HELP_TEXT = `Usage: vigilbase <command>
 
 Public tools (no login)
@@ -20,12 +23,24 @@ Account (login required)
   account invites [list|create]
   billing [summary|portal]     Billing summary / Stripe portal
   runs [list|get <id>]         Tool run history
-  cf [zones|checkup]           Cloudflare zones / checkup
+  cf <command>                Cloudflare accounts, zones, DNS, WAF, analytics
+  security <command>          Incidents, logs, assets, detections, intel, reports
   watchdog [list|scans]        Watchdog targets / scans
+  customers <command>         Customer records, billing, reports, investigations
+  orgs <command>              Organizations, members, permission roles
+  monitoring <command>        Health, probes, metrics, customer targets
+  support tickets             Support ticket history
 
 Options
   -j, --json                   JSON output
-  -h, --help · -V, --version
+  -h, --help                   Help for the current command
+  -V, --version                Installed version
+  --timeout <milliseconds>     Request timeout (default: 60000)
+  --base-url <origin>           Public API origin
+  --one-url <origin>            Vigilbase One origin
+  --client-id <id>              Device authorization client ID
+
+Use vigilbase <command> --help for command options.
 
 Examples
   vigilbase headers https://vigilbase.com
@@ -34,13 +49,15 @@ Examples
   vigilbase account --json
   vigilbase runs list --json
   vigilbase cf zones
+  vigilbase security incidents --severity high
 `;
 export function helpForCommand(command) {
     switch (command) {
+        case 'tools':
         case 'list':
             return `Usage: vigilbase list [--json]`;
         case 'run':
-            return `Usage: vigilbase run <tool> <target> [--json]
+            return `Usage: vigilbase run <tool> <target> [--json] [--via public|one] [--public]
 
 Public: security-headers, email-security
 Login:  website-security, react2shell, fortibleed-check`;
@@ -51,31 +68,47 @@ Login:  website-security, react2shell, fortibleed-check`;
         case 'badge':
             return `Usage: vigilbase badge <domain> [--style default|compact|mini] [--json]`;
         case 'doctor':
-            return `Usage: vigilbase doctor [--json]`;
+            return `Usage: vigilbase doctor [--json]
+
+Checks the public tools API and Vigilbase One session endpoint independently.
+Login is optional. Exits with status 1 if either check fails.
+Use --base-url, --one-url, and --timeout to check alternate environments.`;
         case 'account':
             return `Usage: vigilbase account [services|org|endpoints|sessions|invites|billing] [--json]
 
 Requires \`vigilbase login\`.
   account invites create --email user@example.com [--role member] --confirm`;
+        case 'runhistory':
         case 'runs':
-            return `Usage: vigilbase runs [list|get <id>] [--tool <name>] [--limit <n>] [--json]`;
+            return `Usage: vigilbase runs [list|get <UUID>] [--json]
+List only: --tool <name>, --limit <1..200> (default 50).`;
         case 'cf':
         case 'cloudflare':
-            return `Usage: vigilbase cf [zones|checkup status|checkup start] [--account-id <id>] [--json]`;
+            return CLOUDFLARE_HELP;
+        case 'security':
+            return SECURITY_HELP;
+        case 'customers':
+        case 'orgs':
+        case 'monitoring':
+        case 'support':
+            return ONE_HELP[command];
         case 'watchdog':
-            return `Usage: vigilbase watchdog [list|scans] [--target-id <id>] [--limit <n>] [--json]`;
+            return `Usage: vigilbase watchdog [list|scans] [--json]
+Scans only: --target-id <UUID>, --limit <1..100> (default 20).`;
         case 'billing':
-            return `Usage: vigilbase billing [summary|portal] [--json] [--no-open]`;
+            return `Usage: vigilbase billing [summary|portal] [--json]
+Portal only: --no-open. URLs must use HTTPS on billing.stripe.com.`;
         case 'login':
-            return `Usage: vigilbase login [--json] [--no-open] [--token <bearer>]`;
+            return `Usage: vigilbase login [--json] [--no-open] [--token-stdin | --token <bearer>]
+Prefer --token-stdin with piped input to keep tokens out of command arguments.`;
         case 'logout':
             return `Usage: vigilbase logout [--json]`;
         case 'whoami':
             return `Usage: vigilbase whoami [--json]`;
         case 'headers':
-            return `Usage: vigilbase headers <url> [--json]`;
+            return `Usage: vigilbase headers <url> [--json] [--via public|one] [--public]`;
         case 'email':
-            return `Usage: vigilbase email <domain> [--json]`;
+            return `Usage: vigilbase email <domain> [--json] [--via public|one] [--public]`;
         default:
             return null;
     }

package/dist/lib/help.js.map

@@ -1 +1 @@
-{"version":3,"file":"help.js","sourceRoot":"","sources":["../../src/lib/help.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,CAAA;AAEzC,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCxB,CAAA;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,gCAAgC,CAAA;QACzC,KAAK,KAAK;YACR,OAAO;;;wDAG2C,CAAA;QACpD,KAAK,UAAU;YACb,OAAO,wDAAwD,CAAA;QACjE,KAAK,OAAO;YACV,OAAO,wCAAwC,CAAA;QACjD,KAAK,OAAO;YACV,OAAO,yEAAyE,CAAA;QAClF,KAAK,QAAQ;YACX,OAAO,kCAAkC,CAAA;QAC3C,KAAK,SAAS;YACZ,OAAO;;;4EAG+D,CAAA;QACxE,KAAK,MAAM;YACT,OAAO,8EAA8E,CAAA;QACvF,KAAK,IAAI,CAAC;QACV,KAAK,YAAY;YACf,OAAO,uFAAuF,CAAA;QAChG,KAAK,UAAU;YACb,OAAO,kFAAkF,CAAA;QAC3F,KAAK,SAAS;YACZ,OAAO,gEAAgE,CAAA;QACzE,KAAK,OAAO;YACV,OAAO,gEAAgE,CAAA;QACzE,KAAK,QAAQ;YACX,OAAO,kCAAkC,CAAA;QAC3C,KAAK,QAAQ;YACX,OAAO,kCAAkC,CAAA;QAC3C,KAAK,SAAS;YACZ,OAAO,yCAAyC,CAAA;QAClD,KAAK,OAAO;YACV,OAAO,0CAA0C,CAAA;QACnD;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../../src/lib/help.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEvD,MAAM,CAAC,MAAM,YAAY,GAAG,wBAAwB,CAAA;AAEpD,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDxB,CAAA;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO,CAAC;QACb,KAAK,MAAM;YACT,OAAO,gCAAgC,CAAA;QACzC,KAAK,KAAK;YACR,OAAO;;;wDAG2C,CAAA;QACpD,KAAK,UAAU;YACb,OAAO,wDAAwD,CAAA;QACjE,KAAK,OAAO;YACV,OAAO,wCAAwC,CAAA;QACjD,KAAK,OAAO;YACV,OAAO,yEAAyE,CAAA;QAClF,KAAK,QAAQ;YACX,OAAO;;;;0EAI6D,CAAA;QACtE,KAAK,SAAS;YACZ,OAAO;;;4EAG+D,CAAA;QACxE,KAAK,YAAY,CAAC;QAClB,KAAK,MAAM;YACT,OAAO;yDAC4C,CAAA;QACrD,KAAK,IAAI,CAAC;QACV,KAAK,YAAY;YACf,OAAO,eAAe,CAAA;QACxB,KAAK,UAAU;YACb,OAAO,aAAa,CAAA;QACtB,KAAK,WAAW,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC1B,KAAK,UAAU;YACb,OAAO;+DACkD,CAAA;QAC3D,KAAK,SAAS;YACZ,OAAO;mEACsD,CAAA;QAC/D,KAAK,OAAO;YACV,OAAO;+EACkE,CAAA;QAC3E,KAAK,QAAQ;YACX,OAAO,kCAAkC,CAAA;QAC3C,KAAK,QAAQ;YACX,OAAO,kCAAkC,CAAA;QAC3C,KAAK,SAAS;YACZ,OAAO,uEAAuE,CAAA;QAChF,KAAK,OAAO;YACV,OAAO,wEAAwE,CAAA;QACjF;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC"}

package/dist/lib/network.d.ts

@@ -0,0 +1,17 @@
+import type { CliConfig } from './config.js';
+export declare class NetworkError extends Error {
+    readonly code: string;
+    readonly status = 0;
+    constructor(message: string, code: string, cause?: unknown);
+}
+export declare function networkError(error: unknown, url: string, timeoutMs: number, timedOut: boolean): NetworkError;
+export declare const MAX_RESPONSE_BYTES: number;
+/** Bound decoded bytes even when Content-Length is absent, compressed, or dishonest. */
+export declare function readBoundedBody(response: Response, signal: AbortSignal, maxBytes?: number): Promise<string>;
+/** Keep the timeout active until the complete response body has been read. */
+export declare function requestText(config: CliConfig, url: string, init?: RequestInit): Promise<{
+    response: Response;
+    text: string;
+}>;
+export declare function parseJsonResponse(response: Response, text: string): unknown;
+//# sourceMappingURL=network.d.ts.map

package/dist/lib/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/lib/network.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE5C,qBAAa,YAAa,SAAQ,KAAK;IAGR,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFlD,QAAQ,CAAC,MAAM,KAAI;gBAEP,OAAO,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAIpE;AAaD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,YAAY,CAe5G;AAED,eAAO,MAAM,kBAAkB,QAAkB,CAAA;AAEjD,wFAAwF;AACxF,wBAAsB,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,SAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CA4B7H;AAED,8EAA8E;AAC9E,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAmB/C;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ3E"}

package/dist/lib/network.js

@@ -0,0 +1,108 @@
+export class NetworkError extends Error {
+    code;
+    status = 0;
+    constructor(message, code, cause) {
+        super(message, { cause });
+        this.code = code;
+        this.name = 'NetworkError';
+    }
+}
+function errorCodes(error, seen = new Set()) {
+    if (!error || typeof error !== 'object' || seen.has(error))
+        return [];
+    seen.add(error);
+    const item = error;
+    return [
+        ...(typeof item.code === 'string' ? [item.code] : []),
+        ...errorCodes(item.cause, seen),
+        ...(Array.isArray(item.errors) ? item.errors.flatMap((e) => errorCodes(e, seen)) : []),
+    ];
+}
+export function networkError(error, url, timeoutMs, timedOut) {
+    // Never echo query strings, URL credentials, request bodies, or raw causes.
+    const endpoint = new URL(url).origin;
+    const codes = errorCodes(error);
+    const code = codes[0] ?? 'NETWORK_ERROR';
+    if (timedOut || codes.some((c) => /TIMEOUT|ETIMEDOUT/.test(c))) {
+        return new NetworkError(`Request to ${endpoint} timed out after ${timeoutMs}ms. Check your connection or increase --timeout.`, 'TIMEOUT', error);
+    }
+    if (codes.some((c) => /CERT|SELF_SIGNED|UNABLE_TO_VERIFY|UNABLE_TO_GET_ISSUER/.test(c))) {
+        return new NetworkError(`TLS certificate verification failed for ${endpoint} (${code}). Use Node 22.19+ or Node 24.5+ for automatic system certificate trust. If your organization uses a private CA, configure NODE_EXTRA_CA_CERTS with its trusted PEM certificate.`, code, error);
+    }
+    if (codes.some((c) => c === 'ENOTFOUND' || c === 'EAI_AGAIN')) {
+        return new NetworkError(`Cannot resolve ${endpoint} (${code}). Check DNS, your VPN, and the configured API URL.`, code, error);
+    }
+    return new NetworkError(`Cannot connect to ${endpoint} (${code}). Check your connection, VPN, proxy settings, and API URL. Run \`vigilbase doctor\` for connectivity checks.`, code, error);
+}
+export const MAX_RESPONSE_BYTES = 8 * 1024 * 1024;
+/** Bound decoded bytes even when Content-Length is absent, compressed, or dishonest. */
+export async function readBoundedBody(response, signal, maxBytes = MAX_RESPONSE_BYTES) {
+    if (Number(response.headers.get('content-length')) > maxBytes) {
+        await response.body?.cancel();
+        throw new NetworkError('Response body exceeds the size limit.', 'RESPONSE_TOO_LARGE');
+    }
+    if (!response.body)
+        return '';
+    const reader = response.body.getReader();
+    const abort = () => { void reader.cancel().catch(() => undefined); };
+    signal.addEventListener('abort', abort, { once: true });
+    let size = 0;
+    const chunks = [];
+    try {
+        while (true) {
+            if (signal.aborted)
+                throw new Error('Aborted');
+            const { done, value } = await reader.read();
+            if (signal.aborted)
+                throw new Error('Aborted');
+            if (done)
+                return Buffer.concat(chunks).toString('utf8');
+            size += value.byteLength;
+            if (size > maxBytes) {
+                await reader.cancel();
+                throw new NetworkError('Response body exceeds the size limit.', 'RESPONSE_TOO_LARGE');
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        signal.removeEventListener('abort', abort);
+        reader.releaseLock();
+    }
+}
+/** Keep the timeout active until the complete response body has been read. */
+export async function requestText(config, url, init = {}) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), config.timeoutMs);
+    const signal = init.signal
+        ? AbortSignal.any([init.signal, controller.signal])
+        : controller.signal;
+    try {
+        // Never forward token-bearing POST bodies (or credentials) through redirects.
+        const response = await fetch(url, { ...init, signal, redirect: 'error' });
+        return { response, text: await readBoundedBody(response, signal) };
+    }
+    catch (error) {
+        if (error instanceof NetworkError)
+            throw error;
+        if (init.signal?.aborted) {
+            throw new NetworkError('Request cancelled.', 'CANCELLED', error);
+        }
+        throw networkError(error, url, config.timeoutMs, controller.signal.aborted);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+export function parseJsonResponse(response, text) {
+    try {
+        // Empty successful responses are valid for some mutation endpoints.
+        return text ? JSON.parse(text) : null;
+    }
+    catch {
+        if (!response.ok)
+            return null;
+        throw new NetworkError(`Expected JSON but received a non-JSON response (HTTP ${response.status}). Check the configured API URL and any proxy or sign-in page.`, 'INVALID_RESPONSE');
+    }
+}
+//# sourceMappingURL=network.js.map

package/dist/lib/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/lib/network.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAGC;IAF7B,MAAM,GAAG,CAAC,CAAA;IAEnB,YAAY,OAAe,EAAW,IAAY,EAAE,KAAe;QACjE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QADW,SAAI,GAAJ,IAAI,CAAQ;QAEhD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,OAAO,IAAI,GAAG,EAAW;IAC3D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACrE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACf,MAAM,IAAI,GAAG,KAA8D,CAAA;IAC3E,OAAO;QACL,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;QAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACvF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,GAAW,EAAE,SAAiB,EAAE,QAAiB;IAC5F,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,eAAe,CAAA;IACxC,IAAI,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,YAAY,CAAC,cAAc,QAAQ,oBAAoB,SAAS,kDAAkD,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IAClJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wDAAwD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,YAAY,CAAC,2CAA2C,QAAQ,KAAK,IAAI,kLAAkL,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IACtR,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,WAAW,CAAC,EAAE,CAAC;QAC9D,OAAO,IAAI,YAAY,CAAC,kBAAkB,QAAQ,KAAK,IAAI,qDAAqD,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAChI,CAAC;IACD,OAAO,IAAI,YAAY,CAAC,qBAAqB,QAAQ,KAAK,IAAI,+GAA+G,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;AAC7L,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAEjD,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAkB,EAAE,MAAmB,EAAE,QAAQ,GAAG,kBAAkB;IAC1G,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC;QAC9D,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;QAC7B,MAAM,IAAI,YAAY,CAAC,uCAAuC,EAAE,oBAAoB,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAA;IACnE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACvD,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA;YAC9C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAC3C,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA;YAC9C,IAAI,IAAI;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACvD,IAAI,IAAI,KAAK,CAAC,UAAU,CAAA;YACxB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;gBACrB,MAAM,IAAI,YAAY,CAAC,uCAAuC,EAAE,oBAAoB,CAAC,CAAA;YACvF,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC1C,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAiB,EACjB,GAAW,EACX,OAAoB,EAAE;IAEtB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;QACxB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC,CAAC,UAAU,CAAC,MAAM,CAAA;IACrB,IAAI,CAAC;QACH,8EAA8E;QAC9E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QACzE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAA;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAA;QAC9C,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,WAAW,EAAE,KAAK,CAAC,CAAA;QAClE,CAAC;QACD,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7E,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAkB,EAAE,IAAY;IAChE,IAAI,CAAC;QACH,oEAAoE;QACpE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC,CAAC,IAAI,CAAA;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QAC7B,MAAM,IAAI,YAAY,CAAC,wDAAwD,QAAQ,CAAC,MAAM,gEAAgE,EAAE,kBAAkB,CAAC,CAAA;IACrL,CAAC;AACH,CAAC"}

package/dist/lib/one-client.d.ts

@@ -23,6 +23,11 @@ export type OneSessionResponse = {
         name?: string | null;
     } | null;
 };
+type ApiErrorBody = {
+    error?: string;
+    message?: string;
+    success?: boolean;
+};
 /**
  * Tools that require Vigilbase One authentication (auth-required scanners).
  * Keep preference order aligned with `@vigilbase/tools` catalog
@@ -43,7 +48,10 @@ export declare class VigilbaseOneClient {
     private readonly accessToken;
     constructor(config: CliConfig, accessToken: string);
     private request;
-    private requestJson;
+    /** Authenticated JSON transport shared by the One command clients. */
+    requestJson<T extends ApiErrorBody = Record<string, unknown>>(path: string, init?: RequestInit, options?: {
+        allowStatuses?: number[];
+    }): Promise<T>;
     getSession(): Promise<OneSessionResponse>;
     getAccount(): Promise<Record<string, unknown>>;
     getAccountServices(): Promise<Record<string, unknown>>;
@@ -79,4 +87,5 @@ export declare class VigilbaseOneClient {
     getToolRun(id: string): Promise<Record<string, unknown>>;
     executeTool(toolName: string, target: string): Promise<OneToolExecuteResponse>;
 }
+export {};
 //# sourceMappingURL=one-client.d.ts.map

package/dist/lib/one-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"one-client.d.ts","sourceRoot":"","sources":["../../src/lib/one-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAG5C,MAAM,MAAM,sBAAsB,GAAG;IAEnC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;KACxC,CAAA;CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACxC,IAAI,CAAC,EAAE;QACL,EAAE,CAAC,EAAE,MAAM,CAAA;QACX,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KACrB,GAAG,IAAI,CAAA;CACT,CAAA;AAQD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,kEAI1B,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1E,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,IAAI,mBAAmB,CAEvF;AAED,2FAA2F;AAC3F,eAAO,MAAM,kCAAkC,EAAE,MAAM,CACrD,mBAAmB,EACnB,mBAAmB,CAgCpB,CAAA;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,mBAAmB,EAAE,EAClC,UAAU,EAAE,MAAM,GACjB,mBAAmB,GAAG,IAAI,CAe5B;AAED,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,wGAMvB,CAAA;AAEV,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM;YAGxB,OAAO;YAyCP,WAAW;IAiCnB,UAAU,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAWzC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAI9C,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItD,sBAAsB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAI1D,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIvD,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItD,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIzD,uBAAuB,CAAC,KAAK,EAAE;QACnC,KAAK,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;KACd,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAQ9B,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIrD,mBAAmB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAclE,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItD,gBAAgB,CAAC,OAAO,CAAC,EAAE;QAC/B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAU9B,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItD,qBAAqB,CAAC,OAAO,CAAC,EAAE;QACpC,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAS9B,sBAAsB,CAAC,OAAO,CAAC,EAAE;QACrC,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAU9B,YAAY,CAAC,OAAO,CAAC,EAAE;QAC3B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAQ9B,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIxD,WAAW,CACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC;CAWnC"}
+{"version":3,"file":"one-client.d.ts","sourceRoot":"","sources":["../../src/lib/one-client.ts"],"names":[],"mappings":"AAKA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAG5C,MAAM,MAAM,sBAAsB,GAAG;IAEnC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;KACxC,CAAA;CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACxC,IAAI,CAAC,EAAE;QACL,EAAE,CAAC,EAAE,MAAM,CAAA;QACX,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KACrB,GAAG,IAAI,CAAA;CACT,CAAA;AAED,KAAK,YAAY,GAAG;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,kEAI1B,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1E,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,IAAI,mBAAmB,CAEvF;AAED,2FAA2F;AAC3F,eAAO,MAAM,kCAAkC,EAAE,MAAM,CACrD,mBAAmB,EACnB,mBAAmB,CAgCpB,CAAA;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,mBAAmB,EAAE,EAClC,UAAU,EAAE,MAAM,GACjB,mBAAmB,GAAG,IAAI,CAe5B;AAED,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,wGAMvB,CAAA;AAEV,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM;YAGxB,OAAO;IAiBrB,sEAAsE;IAChE,WAAW,CAAC,CAAC,SAAS,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChE,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACrC,OAAO,CAAC,CAAC,CAAC;IA2CP,UAAU,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAqBzC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAI9C,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItD,sBAAsB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAI1D,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIvD,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItD,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIzD,uBAAuB,CAAC,KAAK,EAAE;QACnC,KAAK,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;KACd,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAQ9B,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIrD,mBAAmB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAclE,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItD,gBAAgB,CAAC,OAAO,CAAC,EAAE;QAC/B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAU9B,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItD,qBAAqB,CAAC,OAAO,CAAC,EAAE;QACpC,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAS9B,sBAAsB,CAAC,OAAO,CAAC,EAAE;QACrC,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAU9B,YAAY,CAAC,OAAO,CAAC,EAAE;QAC3B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAQ9B,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIxD,WAAW,CACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC;CAWnC"}

package/dist/lib/one-client.js

@@ -1,8 +1,9 @@
-/**
- * Vigilbase One authenticated API client.
- * Public (unauthenticated) tools stay on VigilbaseClient / vigilbase.com.
- */
-import { VigilbaseApiError } from './client.js';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { validateOneOrigin } from './config.js';
+import { validateStripePortalUrl } from './open-url.js';
+import { parseJsonResponse, requestText } from './network.js';
+import { retryAfterSeconds, VigilbaseApiError } from './client.js';
 /**
  * Tools that require Vigilbase One authentication (auth-required scanners).
  * Keep preference order aligned with `@vigilbase/tools` catalog
@@ -84,61 +85,52 @@ export class VigilbaseOneClient {
         this.accessToken = accessToken;
     }
     async request(path, init) {
-        const url = `${this.config.oneBaseUrl}${path.startsWith('/') ? path : `/${path}`}`;
-        const controller = new AbortController();
-        const timer = setTimeout(() => controller.abort(), this.config.timeoutMs);
-        try {
-            const response = await fetch(url, {
-                ...init,
-                signal: controller.signal,
-                headers: {
-                    Accept: 'application/json',
-                    Authorization: `Bearer ${this.accessToken}`,
-                    'User-Agent': this.config.userAgent,
-                    ...(init?.headers ?? {}),
-                },
-            });
-            const text = await response.text();
-            let body = null;
-            if (text) {
-                try {
-                    body = JSON.parse(text);
-                }
-                catch {
-                    body = { raw: text };
-                }
-            }
-            return { response, body };
-        }
-        catch (error) {
-            if (error instanceof Error && error.name === 'AbortError') {
-                throw new VigilbaseApiError(`Request timed out after ${this.config.timeoutMs}ms: ${url}`, { status: 0 });
-            }
-            throw error;
-        }
-        finally {
-            clearTimeout(timer);
-        }
+        const url = `${validateOneOrigin(this.config.oneBaseUrl)}${path.startsWith('/') ? path : `/${path}`}`;
+        const { response, text } = await requestText(this.config, url, {
+            ...init,
+            headers: {
+                Accept: 'application/json',
+                ...(this.accessToken ? { Authorization: `Bearer ${this.accessToken}` } : {}),
+                'User-Agent': this.config.userAgent,
+                ...(init?.headers ?? {}),
+            },
+        });
+        return { response, body: parseJsonResponse(response, text) };
     }
+    /** Authenticated JSON transport shared by the One command clients. */
     async requestJson(path, init, options) {
         const { response, body } = await this.request(path, init);
         const parsed = (body ?? {});
+        const errorBody = z.object({
+            error: z.string().optional(), message: z.string().optional(), code: z.string().optional(),
+        }).passthrough().safeParse(body);
+        const errorDetails = errorBody.success ? errorBody.data : {};
+        let message;
+        if (errorDetails.code === 'FLAREHAWK_VIEW_AS_REQUIRED') {
+            message = 'Select a customer with --customer-id <customer UUID> for security commands.';
+        }
         if (response.status === 401 || response.status === 403) {
-            throw new VigilbaseApiError(parsed.message ||
-                parsed.error ||
-                'Authentication required. Run `vigilbase login`.', { status: response.status, body: parsed });
+            throw new VigilbaseApiError(message ||
+                'Authentication required. Run `vigilbase login`.', { status: response.status, body: parsed, code: errorDetails.code });
         }
         if (response.status === 429) {
-            throw new VigilbaseApiError(parsed.message || parsed.error || 'Rate limit exceeded.', {
+            throw new VigilbaseApiError(message || 'Rate limit exceeded.', {
                 status: 429,
                 body: parsed,
+                retryAfterSec: retryAfterSeconds(response, body),
+                code: errorDetails.code,
             });
         }
         const allowed = options?.allowStatuses ?? [];
         if (!response.ok && !allowed.includes(response.status)) {
-            throw new VigilbaseApiError(parsed.message ||
-                parsed.error ||
-                `Request failed (HTTP ${response.status})`, { status: response.status, body: parsed });
+            throw new VigilbaseApiError(message ||
+                `Request failed (HTTP ${response.status})`, { status: response.status, body: parsed, code: errorDetails.code });
+        }
+        if (!z.record(z.string(), z.unknown()).safeParse(body).success) {
+            throw new VigilbaseApiError('Invalid One API response. Expected a JSON object.', { status: response.status });
+        }
+        if (parsed.success === false || ('ok' in parsed && parsed.ok === false)) {
+            throw new VigilbaseApiError('One API reported an unsuccessful operation.', { status: response.status, body: parsed, code: errorDetails.code });
         }
         return parsed;
     }
@@ -147,7 +139,17 @@ export class VigilbaseOneClient {
         if (!response.ok) {
             throw new VigilbaseApiError(`Failed to load One session (HTTP ${response.status})`, { status: response.status, body });
         }
-        return (body ?? {});
+        const schema = z.object({
+            session: z.record(z.string(), z.unknown()).nullable().optional(),
+            user: z.object({
+                id: z.string().optional(), email: z.string().nullable().optional(), name: z.string().nullable().optional(),
+            }).passthrough().nullable().optional(),
+        }).refine((value) => 'session' in value || 'user' in value).nullable();
+        const result = schema.safeParse(body);
+        if (!result.success) {
+            throw new VigilbaseApiError('Invalid One session response. Check the One API URL.', { status: response.status });
+        }
+        return result.data ?? {};
     }
     async getAccount() {
         return this.requestJson('/api/account');
@@ -171,7 +173,7 @@ export class VigilbaseOneClient {
         return this.requestJson('/api/auth/orgs/invite', {
             method: 'POST',
             headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify(input),
+            body: JSON.stringify({ ...input, operationId: randomUUID() }),
         });
     }
     async getAccountBilling() {
@@ -183,7 +185,7 @@ export class VigilbaseOneClient {
         });
         return {
             success: Boolean(payload.success),
-            url: payload.data?.url ?? payload.url,
+            url: validateStripePortalUrl(payload.data?.url ?? payload.url),
         };
     }
     async getWatchdogTargets() {