lldap-cli 1.0.3

package/dist/cli.js

@@ -0,0 +1,3626 @@
+#!/usr/bin/env bun
+// @bun
+import { createRequire } from "node:module";
+var __create = Object.create;
+var __getProtoOf = Object.getPrototypeOf;
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __toESM = (mod, isNodeMode, target) => {
+  target = mod != null ? __create(__getProtoOf(mod)) : {};
+  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
+  for (let key of __getOwnPropNames(mod))
+    if (!__hasOwnProp.call(to, key))
+      __defProp(to, key, {
+        get: () => mod[key],
+        enumerable: true
+      });
+  return to;
+};
+var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+// node_modules/commander/lib/error.js
+var require_error = __commonJS((exports) => {
+  class CommanderError extends Error {
+    constructor(exitCode, code, message) {
+      super(message);
+      Error.captureStackTrace(this, this.constructor);
+      this.name = this.constructor.name;
+      this.code = code;
+      this.exitCode = exitCode;
+      this.nestedError = undefined;
+    }
+  }
+
+  class InvalidArgumentError extends CommanderError {
+    constructor(message) {
+      super(1, "commander.invalidArgument", message);
+      Error.captureStackTrace(this, this.constructor);
+      this.name = this.constructor.name;
+    }
+  }
+  exports.CommanderError = CommanderError;
+  exports.InvalidArgumentError = InvalidArgumentError;
+});
+
+// node_modules/commander/lib/argument.js
+var require_argument = __commonJS((exports) => {
+  var { InvalidArgumentError } = require_error();
+
+  class Argument {
+    constructor(name, description) {
+      this.description = description || "";
+      this.variadic = false;
+      this.parseArg = undefined;
+      this.defaultValue = undefined;
+      this.defaultValueDescription = undefined;
+      this.argChoices = undefined;
+      switch (name[0]) {
+        case "<":
+          this.required = true;
+          this._name = name.slice(1, -1);
+          break;
+        case "[":
+          this.required = false;
+          this._name = name.slice(1, -1);
+          break;
+        default:
+          this.required = true;
+          this._name = name;
+          break;
+      }
+      if (this._name.length > 3 && this._name.slice(-3) === "...") {
+        this.variadic = true;
+        this._name = this._name.slice(0, -3);
+      }
+    }
+    name() {
+      return this._name;
+    }
+    _concatValue(value, previous) {
+      if (previous === this.defaultValue || !Array.isArray(previous)) {
+        return [value];
+      }
+      return previous.concat(value);
+    }
+    default(value, description) {
+      this.defaultValue = value;
+      this.defaultValueDescription = description;
+      return this;
+    }
+    argParser(fn) {
+      this.parseArg = fn;
+      return this;
+    }
+    choices(values) {
+      this.argChoices = values.slice();
+      this.parseArg = (arg, previous) => {
+        if (!this.argChoices.includes(arg)) {
+          throw new InvalidArgumentError(`Allowed choices are ${this.argChoices.join(", ")}.`);
+        }
+        if (this.variadic) {
+          return this._concatValue(arg, previous);
+        }
+        return arg;
+      };
+      return this;
+    }
+    argRequired() {
+      this.required = true;
+      return this;
+    }
+    argOptional() {
+      this.required = false;
+      return this;
+    }
+  }
+  function humanReadableArgName(arg) {
+    const nameOutput = arg.name() + (arg.variadic === true ? "..." : "");
+    return arg.required ? "<" + nameOutput + ">" : "[" + nameOutput + "]";
+  }
+  exports.Argument = Argument;
+  exports.humanReadableArgName = humanReadableArgName;
+});
+
+// node_modules/commander/lib/help.js
+var require_help = __commonJS((exports) => {
+  var { humanReadableArgName } = require_argument();
+
+  class Help {
+    constructor() {
+      this.helpWidth = undefined;
+      this.sortSubcommands = false;
+      this.sortOptions = false;
+      this.showGlobalOptions = false;
+    }
+    visibleCommands(cmd) {
+      const visibleCommands = cmd.commands.filter((cmd2) => !cmd2._hidden);
+      const helpCommand = cmd._getHelpCommand();
+      if (helpCommand && !helpCommand._hidden) {
+        visibleCommands.push(helpCommand);
+      }
+      if (this.sortSubcommands) {
+        visibleCommands.sort((a, b) => {
+          return a.name().localeCompare(b.name());
+        });
+      }
+      return visibleCommands;
+    }
+    compareOptions(a, b) {
+      const getSortKey = (option) => {
+        return option.short ? option.short.replace(/^-/, "") : option.long.replace(/^--/, "");
+      };
+      return getSortKey(a).localeCompare(getSortKey(b));
+    }
+    visibleOptions(cmd) {
+      const visibleOptions = cmd.options.filter((option) => !option.hidden);
+      const helpOption = cmd._getHelpOption();
+      if (helpOption && !helpOption.hidden) {
+        const removeShort = helpOption.short && cmd._findOption(helpOption.short);
+        const removeLong = helpOption.long && cmd._findOption(helpOption.long);
+        if (!removeShort && !removeLong) {
+          visibleOptions.push(helpOption);
+        } else if (helpOption.long && !removeLong) {
+          visibleOptions.push(cmd.createOption(helpOption.long, helpOption.description));
+        } else if (helpOption.short && !removeShort) {
+          visibleOptions.push(cmd.createOption(helpOption.short, helpOption.description));
+        }
+      }
+      if (this.sortOptions) {
+        visibleOptions.sort(this.compareOptions);
+      }
+      return visibleOptions;
+    }
+    visibleGlobalOptions(cmd) {
+      if (!this.showGlobalOptions)
+        return [];
+      const globalOptions = [];
+      for (let ancestorCmd = cmd.parent;ancestorCmd; ancestorCmd = ancestorCmd.parent) {
+        const visibleOptions = ancestorCmd.options.filter((option) => !option.hidden);
+        globalOptions.push(...visibleOptions);
+      }
+      if (this.sortOptions) {
+        globalOptions.sort(this.compareOptions);
+      }
+      return globalOptions;
+    }
+    visibleArguments(cmd) {
+      if (cmd._argsDescription) {
+        cmd.registeredArguments.forEach((argument) => {
+          argument.description = argument.description || cmd._argsDescription[argument.name()] || "";
+        });
+      }
+      if (cmd.registeredArguments.find((argument) => argument.description)) {
+        return cmd.registeredArguments;
+      }
+      return [];
+    }
+    subcommandTerm(cmd) {
+      const args = cmd.registeredArguments.map((arg) => humanReadableArgName(arg)).join(" ");
+      return cmd._name + (cmd._aliases[0] ? "|" + cmd._aliases[0] : "") + (cmd.options.length ? " [options]" : "") + (args ? " " + args : "");
+    }
+    optionTerm(option) {
+      return option.flags;
+    }
+    argumentTerm(argument) {
+      return argument.name();
+    }
+    longestSubcommandTermLength(cmd, helper) {
+      return helper.visibleCommands(cmd).reduce((max, command) => {
+        return Math.max(max, helper.subcommandTerm(command).length);
+      }, 0);
+    }
+    longestOptionTermLength(cmd, helper) {
+      return helper.visibleOptions(cmd).reduce((max, option) => {
+        return Math.max(max, helper.optionTerm(option).length);
+      }, 0);
+    }
+    longestGlobalOptionTermLength(cmd, helper) {
+      return helper.visibleGlobalOptions(cmd).reduce((max, option) => {
+        return Math.max(max, helper.optionTerm(option).length);
+      }, 0);
+    }
+    longestArgumentTermLength(cmd, helper) {
+      return helper.visibleArguments(cmd).reduce((max, argument) => {
+        return Math.max(max, helper.argumentTerm(argument).length);
+      }, 0);
+    }
+    commandUsage(cmd) {
+      let cmdName = cmd._name;
+      if (cmd._aliases[0]) {
+        cmdName = cmdName + "|" + cmd._aliases[0];
+      }
+      let ancestorCmdNames = "";
+      for (let ancestorCmd = cmd.parent;ancestorCmd; ancestorCmd = ancestorCmd.parent) {
+        ancestorCmdNames = ancestorCmd.name() + " " + ancestorCmdNames;
+      }
+      return ancestorCmdNames + cmdName + " " + cmd.usage();
+    }
+    commandDescription(cmd) {
+      return cmd.description();
+    }
+    subcommandDescription(cmd) {
+      return cmd.summary() || cmd.description();
+    }
+    optionDescription(option) {
+      const extraInfo = [];
+      if (option.argChoices) {
+        extraInfo.push(`choices: ${option.argChoices.map((choice) => JSON.stringify(choice)).join(", ")}`);
+      }
+      if (option.defaultValue !== undefined) {
+        const showDefault = option.required || option.optional || option.isBoolean() && typeof option.defaultValue === "boolean";
+        if (showDefault) {
+          extraInfo.push(`default: ${option.defaultValueDescription || JSON.stringify(option.defaultValue)}`);
+        }
+      }
+      if (option.presetArg !== undefined && option.optional) {
+        extraInfo.push(`preset: ${JSON.stringify(option.presetArg)}`);
+      }
+      if (option.envVar !== undefined) {
+        extraInfo.push(`env: ${option.envVar}`);
+      }
+      if (extraInfo.length > 0) {
+        return `${option.description} (${extraInfo.join(", ")})`;
+      }
+      return option.description;
+    }
+    argumentDescription(argument) {
+      const extraInfo = [];
+      if (argument.argChoices) {
+        extraInfo.push(`choices: ${argument.argChoices.map((choice) => JSON.stringify(choice)).join(", ")}`);
+      }
+      if (argument.defaultValue !== undefined) {
+        extraInfo.push(`default: ${argument.defaultValueDescription || JSON.stringify(argument.defaultValue)}`);
+      }
+      if (extraInfo.length > 0) {
+        const extraDescripton = `(${extraInfo.join(", ")})`;
+        if (argument.description) {
+          return `${argument.description} ${extraDescripton}`;
+        }
+        return extraDescripton;
+      }
+      return argument.description;
+    }
+    formatHelp(cmd, helper) {
+      const termWidth = helper.padWidth(cmd, helper);
+      const helpWidth = helper.helpWidth || 80;
+      const itemIndentWidth = 2;
+      const itemSeparatorWidth = 2;
+      function formatItem(term, description) {
+        if (description) {
+          const fullText = `${term.padEnd(termWidth + itemSeparatorWidth)}${description}`;
+          return helper.wrap(fullText, helpWidth - itemIndentWidth, termWidth + itemSeparatorWidth);
+        }
+        return term;
+      }
+      function formatList(textArray) {
+        return textArray.join(`
+`).replace(/^/gm, " ".repeat(itemIndentWidth));
+      }
+      let output = [`Usage: ${helper.commandUsage(cmd)}`, ""];
+      const commandDescription = helper.commandDescription(cmd);
+      if (commandDescription.length > 0) {
+        output = output.concat([
+          helper.wrap(commandDescription, helpWidth, 0),
+          ""
+        ]);
+      }
+      const argumentList = helper.visibleArguments(cmd).map((argument) => {
+        return formatItem(helper.argumentTerm(argument), helper.argumentDescription(argument));
+      });
+      if (argumentList.length > 0) {
+        output = output.concat(["Arguments:", formatList(argumentList), ""]);
+      }
+      const optionList = helper.visibleOptions(cmd).map((option) => {
+        return formatItem(helper.optionTerm(option), helper.optionDescription(option));
+      });
+      if (optionList.length > 0) {
+        output = output.concat(["Options:", formatList(optionList), ""]);
+      }
+      if (this.showGlobalOptions) {
+        const globalOptionList = helper.visibleGlobalOptions(cmd).map((option) => {
+          return formatItem(helper.optionTerm(option), helper.optionDescription(option));
+        });
+        if (globalOptionList.length > 0) {
+          output = output.concat([
+            "Global Options:",
+            formatList(globalOptionList),
+            ""
+          ]);
+        }
+      }
+      const commandList = helper.visibleCommands(cmd).map((cmd2) => {
+        return formatItem(helper.subcommandTerm(cmd2), helper.subcommandDescription(cmd2));
+      });
+      if (commandList.length > 0) {
+        output = output.concat(["Commands:", formatList(commandList), ""]);
+      }
+      return output.join(`
+`);
+    }
+    padWidth(cmd, helper) {
+      return Math.max(helper.longestOptionTermLength(cmd, helper), helper.longestGlobalOptionTermLength(cmd, helper), helper.longestSubcommandTermLength(cmd, helper), helper.longestArgumentTermLength(cmd, helper));
+    }
+    wrap(str, width, indent, minColumnWidth = 40) {
+      const indents = " \\f\\t\\v   -   　\uFEFF";
+      const manualIndent = new RegExp(`[\\n][${indents}]+`);
+      if (str.match(manualIndent))
+        return str;
+      const columnWidth = width - indent;
+      if (columnWidth < minColumnWidth)
+        return str;
+      const leadingStr = str.slice(0, indent);
+      const columnText = str.slice(indent).replace(`\r
+`, `
+`);
+      const indentString = " ".repeat(indent);
+      const zeroWidthSpace = "​";
+      const breaks = `\\s${zeroWidthSpace}`;
+      const regex = new RegExp(`
+|.{1,${columnWidth - 1}}([${breaks}]|$)|[^${breaks}]+?([${breaks}]|$)`, "g");
+      const lines = columnText.match(regex) || [];
+      return leadingStr + lines.map((line, i) => {
+        if (line === `
+`)
+          return "";
+        return (i > 0 ? indentString : "") + line.trimEnd();
+      }).join(`
+`);
+    }
+  }
+  exports.Help = Help;
+});
+
+// node_modules/commander/lib/option.js
+var require_option = __commonJS((exports) => {
+  var { InvalidArgumentError } = require_error();
+
+  class Option {
+    constructor(flags, description) {
+      this.flags = flags;
+      this.description = description || "";
+      this.required = flags.includes("<");
+      this.optional = flags.includes("[");
+      this.variadic = /\w\.\.\.[>\]]$/.test(flags);
+      this.mandatory = false;
+      const optionFlags = splitOptionFlags(flags);
+      this.short = optionFlags.shortFlag;
+      this.long = optionFlags.longFlag;
+      this.negate = false;
+      if (this.long) {
+        this.negate = this.long.startsWith("--no-");
+      }
+      this.defaultValue = undefined;
+      this.defaultValueDescription = undefined;
+      this.presetArg = undefined;
+      this.envVar = undefined;
+      this.parseArg = undefined;
+      this.hidden = false;
+      this.argChoices = undefined;
+      this.conflictsWith = [];
+      this.implied = undefined;
+    }
+    default(value, description) {
+      this.defaultValue = value;
+      this.defaultValueDescription = description;
+      return this;
+    }
+    preset(arg) {
+      this.presetArg = arg;
+      return this;
+    }
+    conflicts(names) {
+      this.conflictsWith = this.conflictsWith.concat(names);
+      return this;
+    }
+    implies(impliedOptionValues) {
+      let newImplied = impliedOptionValues;
+      if (typeof impliedOptionValues === "string") {
+        newImplied = { [impliedOptionValues]: true };
+      }
+      this.implied = Object.assign(this.implied || {}, newImplied);
+      return this;
+    }
+    env(name) {
+      this.envVar = name;
+      return this;
+    }
+    argParser(fn) {
+      this.parseArg = fn;
+      return this;
+    }
+    makeOptionMandatory(mandatory = true) {
+      this.mandatory = !!mandatory;
+      return this;
+    }
+    hideHelp(hide = true) {
+      this.hidden = !!hide;
+      return this;
+    }
+    _concatValue(value, previous) {
+      if (previous === this.defaultValue || !Array.isArray(previous)) {
+        return [value];
+      }
+      return previous.concat(value);
+    }
+    choices(values) {
+      this.argChoices = values.slice();
+      this.parseArg = (arg, previous) => {
+        if (!this.argChoices.includes(arg)) {
+          throw new InvalidArgumentError(`Allowed choices are ${this.argChoices.join(", ")}.`);
+        }
+        if (this.variadic) {
+          return this._concatValue(arg, previous);
+        }
+        return arg;
+      };
+      return this;
+    }
+    name() {
+      if (this.long) {
+        return this.long.replace(/^--/, "");
+      }
+      return this.short.replace(/^-/, "");
+    }
+    attributeName() {
+      return camelcase(this.name().replace(/^no-/, ""));
+    }
+    is(arg) {
+      return this.short === arg || this.long === arg;
+    }
+    isBoolean() {
+      return !this.required && !this.optional && !this.negate;
+    }
+  }
+
+  class DualOptions {
+    constructor(options) {
+      this.positiveOptions = new Map;
+      this.negativeOptions = new Map;
+      this.dualOptions = new Set;
+      options.forEach((option) => {
+        if (option.negate) {
+          this.negativeOptions.set(option.attributeName(), option);
+        } else {
+          this.positiveOptions.set(option.attributeName(), option);
+        }
+      });
+      this.negativeOptions.forEach((value, key) => {
+        if (this.positiveOptions.has(key)) {
+          this.dualOptions.add(key);
+        }
+      });
+    }
+    valueFromOption(value, option) {
+      const optionKey = option.attributeName();
+      if (!this.dualOptions.has(optionKey))
+        return true;
+      const preset = this.negativeOptions.get(optionKey).presetArg;
+      const negativeValue = preset !== undefined ? preset : false;
+      return option.negate === (negativeValue === value);
+    }
+  }
+  function camelcase(str) {
+    return str.split("-").reduce((str2, word) => {
+      return str2 + word[0].toUpperCase() + word.slice(1);
+    });
+  }
+  function splitOptionFlags(flags) {
+    let shortFlag;
+    let longFlag;
+    const flagParts = flags.split(/[ |,]+/);
+    if (flagParts.length > 1 && !/^[[<]/.test(flagParts[1]))
+      shortFlag = flagParts.shift();
+    longFlag = flagParts.shift();
+    if (!shortFlag && /^-[^-]$/.test(longFlag)) {
+      shortFlag = longFlag;
+      longFlag = undefined;
+    }
+    return { shortFlag, longFlag };
+  }
+  exports.Option = Option;
+  exports.DualOptions = DualOptions;
+});
+
+// node_modules/commander/lib/suggestSimilar.js
+var require_suggestSimilar = __commonJS((exports) => {
+  var maxDistance = 3;
+  function editDistance(a, b) {
+    if (Math.abs(a.length - b.length) > maxDistance)
+      return Math.max(a.length, b.length);
+    const d = [];
+    for (let i = 0;i <= a.length; i++) {
+      d[i] = [i];
+    }
+    for (let j = 0;j <= b.length; j++) {
+      d[0][j] = j;
+    }
+    for (let j = 1;j <= b.length; j++) {
+      for (let i = 1;i <= a.length; i++) {
+        let cost = 1;
+        if (a[i - 1] === b[j - 1]) {
+          cost = 0;
+        } else {
+          cost = 1;
+        }
+        d[i][j] = Math.min(d[i - 1][j] + 1, d[i][j - 1] + 1, d[i - 1][j - 1] + cost);
+        if (i > 1 && j > 1 && a[i - 1] === b[j - 2] && a[i - 2] === b[j - 1]) {
+          d[i][j] = Math.min(d[i][j], d[i - 2][j - 2] + 1);
+        }
+      }
+    }
+    return d[a.length][b.length];
+  }
+  function suggestSimilar(word, candidates) {
+    if (!candidates || candidates.length === 0)
+      return "";
+    candidates = Array.from(new Set(candidates));
+    const searchingOptions = word.startsWith("--");
+    if (searchingOptions) {
+      word = word.slice(2);
+      candidates = candidates.map((candidate) => candidate.slice(2));
+    }
+    let similar = [];
+    let bestDistance = maxDistance;
+    const minSimilarity = 0.4;
+    candidates.forEach((candidate) => {
+      if (candidate.length <= 1)
+        return;
+      const distance = editDistance(word, candidate);
+      const length = Math.max(word.length, candidate.length);
+      const similarity = (length - distance) / length;
+      if (similarity > minSimilarity) {
+        if (distance < bestDistance) {
+          bestDistance = distance;
+          similar = [candidate];
+        } else if (distance === bestDistance) {
+          similar.push(candidate);
+        }
+      }
+    });
+    similar.sort((a, b) => a.localeCompare(b));
+    if (searchingOptions) {
+      similar = similar.map((candidate) => `--${candidate}`);
+    }
+    if (similar.length > 1) {
+      return `
+(Did you mean one of ${similar.join(", ")}?)`;
+    }
+    if (similar.length === 1) {
+      return `
+(Did you mean ${similar[0]}?)`;
+    }
+    return "";
+  }
+  exports.suggestSimilar = suggestSimilar;
+});
+
+// node_modules/commander/lib/command.js
+var require_command = __commonJS((exports) => {
+  var EventEmitter = __require("node:events").EventEmitter;
+  var childProcess = __require("node:child_process");
+  var path = __require("node:path");
+  var fs = __require("node:fs");
+  var process2 = __require("node:process");
+  var { Argument, humanReadableArgName } = require_argument();
+  var { CommanderError } = require_error();
+  var { Help } = require_help();
+  var { Option, DualOptions } = require_option();
+  var { suggestSimilar } = require_suggestSimilar();
+
+  class Command extends EventEmitter {
+    constructor(name) {
+      super();
+      this.commands = [];
+      this.options = [];
+      this.parent = null;
+      this._allowUnknownOption = false;
+      this._allowExcessArguments = true;
+      this.registeredArguments = [];
+      this._args = this.registeredArguments;
+      this.args = [];
+      this.rawArgs = [];
+      this.processedArgs = [];
+      this._scriptPath = null;
+      this._name = name || "";
+      this._optionValues = {};
+      this._optionValueSources = {};
+      this._storeOptionsAsProperties = false;
+      this._actionHandler = null;
+      this._executableHandler = false;
+      this._executableFile = null;
+      this._executableDir = null;
+      this._defaultCommandName = null;
+      this._exitCallback = null;
+      this._aliases = [];
+      this._combineFlagAndOptionalValue = true;
+      this._description = "";
+      this._summary = "";
+      this._argsDescription = undefined;
+      this._enablePositionalOptions = false;
+      this._passThroughOptions = false;
+      this._lifeCycleHooks = {};
+      this._showHelpAfterError = false;
+      this._showSuggestionAfterError = true;
+      this._outputConfiguration = {
+        writeOut: (str) => process2.stdout.write(str),
+        writeErr: (str) => process2.stderr.write(str),
+        getOutHelpWidth: () => process2.stdout.isTTY ? process2.stdout.columns : undefined,
+        getErrHelpWidth: () => process2.stderr.isTTY ? process2.stderr.columns : undefined,
+        outputError: (str, write) => write(str)
+      };
+      this._hidden = false;
+      this._helpOption = undefined;
+      this._addImplicitHelpCommand = undefined;
+      this._helpCommand = undefined;
+      this._helpConfiguration = {};
+    }
+    copyInheritedSettings(sourceCommand) {
+      this._outputConfiguration = sourceCommand._outputConfiguration;
+      this._helpOption = sourceCommand._helpOption;
+      this._helpCommand = sourceCommand._helpCommand;
+      this._helpConfiguration = sourceCommand._helpConfiguration;
+      this._exitCallback = sourceCommand._exitCallback;
+      this._storeOptionsAsProperties = sourceCommand._storeOptionsAsProperties;
+      this._combineFlagAndOptionalValue = sourceCommand._combineFlagAndOptionalValue;
+      this._allowExcessArguments = sourceCommand._allowExcessArguments;
+      this._enablePositionalOptions = sourceCommand._enablePositionalOptions;
+      this._showHelpAfterError = sourceCommand._showHelpAfterError;
+      this._showSuggestionAfterError = sourceCommand._showSuggestionAfterError;
+      return this;
+    }
+    _getCommandAndAncestors() {
+      const result = [];
+      for (let command = this;command; command = command.parent) {
+        result.push(command);
+      }
+      return result;
+    }
+    command(nameAndArgs, actionOptsOrExecDesc, execOpts) {
+      let desc = actionOptsOrExecDesc;
+      let opts = execOpts;
+      if (typeof desc === "object" && desc !== null) {
+        opts = desc;
+        desc = null;
+      }
+      opts = opts || {};
+      const [, name, args] = nameAndArgs.match(/([^ ]+) *(.*)/);
+      const cmd = this.createCommand(name);
+      if (desc) {
+        cmd.description(desc);
+        cmd._executableHandler = true;
+      }
+      if (opts.isDefault)
+        this._defaultCommandName = cmd._name;
+      cmd._hidden = !!(opts.noHelp || opts.hidden);
+      cmd._executableFile = opts.executableFile || null;
+      if (args)
+        cmd.arguments(args);
+      this._registerCommand(cmd);
+      cmd.parent = this;
+      cmd.copyInheritedSettings(this);
+      if (desc)
+        return this;
+      return cmd;
+    }
+    createCommand(name) {
+      return new Command(name);
+    }
+    createHelp() {
+      return Object.assign(new Help, this.configureHelp());
+    }
+    configureHelp(configuration) {
+      if (configuration === undefined)
+        return this._helpConfiguration;
+      this._helpConfiguration = configuration;
+      return this;
+    }
+    configureOutput(configuration) {
+      if (configuration === undefined)
+        return this._outputConfiguration;
+      Object.assign(this._outputConfiguration, configuration);
+      return this;
+    }
+    showHelpAfterError(displayHelp = true) {
+      if (typeof displayHelp !== "string")
+        displayHelp = !!displayHelp;
+      this._showHelpAfterError = displayHelp;
+      return this;
+    }
+    showSuggestionAfterError(displaySuggestion = true) {
+      this._showSuggestionAfterError = !!displaySuggestion;
+      return this;
+    }
+    addCommand(cmd, opts) {
+      if (!cmd._name) {
+        throw new Error(`Command passed to .addCommand() must have a name
+- specify the name in Command constructor or using .name()`);
+      }
+      opts = opts || {};
+      if (opts.isDefault)
+        this._defaultCommandName = cmd._name;
+      if (opts.noHelp || opts.hidden)
+        cmd._hidden = true;
+      this._registerCommand(cmd);
+      cmd.parent = this;
+      cmd._checkForBrokenPassThrough();
+      return this;
+    }
+    createArgument(name, description) {
+      return new Argument(name, description);
+    }
+    argument(name, description, fn, defaultValue) {
+      const argument = this.createArgument(name, description);
+      if (typeof fn === "function") {
+        argument.default(defaultValue).argParser(fn);
+      } else {
+        argument.default(fn);
+      }
+      this.addArgument(argument);
+      return this;
+    }
+    arguments(names) {
+      names.trim().split(/ +/).forEach((detail) => {
+        this.argument(detail);
+      });
+      return this;
+    }
+    addArgument(argument) {
+      const previousArgument = this.registeredArguments.slice(-1)[0];
+      if (previousArgument && previousArgument.variadic) {
+        throw new Error(`only the last argument can be variadic '${previousArgument.name()}'`);
+      }
+      if (argument.required && argument.defaultValue !== undefined && argument.parseArg === undefined) {
+        throw new Error(`a default value for a required argument is never used: '${argument.name()}'`);
+      }
+      this.registeredArguments.push(argument);
+      return this;
+    }
+    helpCommand(enableOrNameAndArgs, description) {
+      if (typeof enableOrNameAndArgs === "boolean") {
+        this._addImplicitHelpCommand = enableOrNameAndArgs;
+        return this;
+      }
+      enableOrNameAndArgs = enableOrNameAndArgs ?? "help [command]";
+      const [, helpName, helpArgs] = enableOrNameAndArgs.match(/([^ ]+) *(.*)/);
+      const helpDescription = description ?? "display help for command";
+      const helpCommand = this.createCommand(helpName);
+      helpCommand.helpOption(false);
+      if (helpArgs)
+        helpCommand.arguments(helpArgs);
+      if (helpDescription)
+        helpCommand.description(helpDescription);
+      this._addImplicitHelpCommand = true;
+      this._helpCommand = helpCommand;
+      return this;
+    }
+    addHelpCommand(helpCommand, deprecatedDescription) {
+      if (typeof helpCommand !== "object") {
+        this.helpCommand(helpCommand, deprecatedDescription);
+        return this;
+      }
+      this._addImplicitHelpCommand = true;
+      this._helpCommand = helpCommand;
+      return this;
+    }
+    _getHelpCommand() {
+      const hasImplicitHelpCommand = this._addImplicitHelpCommand ?? (this.commands.length && !this._actionHandler && !this._findCommand("help"));
+      if (hasImplicitHelpCommand) {
+        if (this._helpCommand === undefined) {
+          this.helpCommand(undefined, undefined);
+        }
+        return this._helpCommand;
+      }
+      return null;
+    }
+    hook(event, listener) {
+      const allowedValues = ["preSubcommand", "preAction", "postAction"];
+      if (!allowedValues.includes(event)) {
+        throw new Error(`Unexpected value for event passed to hook : '${event}'.
+Expecting one of '${allowedValues.join("', '")}'`);
+      }
+      if (this._lifeCycleHooks[event]) {
+        this._lifeCycleHooks[event].push(listener);
+      } else {
+        this._lifeCycleHooks[event] = [listener];
+      }
+      return this;
+    }
+    exitOverride(fn) {
+      if (fn) {
+        this._exitCallback = fn;
+      } else {
+        this._exitCallback = (err) => {
+          if (err.code !== "commander.executeSubCommandAsync") {
+            throw err;
+          } else {}
+        };
+      }
+      return this;
+    }
+    _exit(exitCode, code, message) {
+      if (this._exitCallback) {
+        this._exitCallback(new CommanderError(exitCode, code, message));
+      }
+      process2.exit(exitCode);
+    }
+    action(fn) {
+      const listener = (args) => {
+        const expectedArgsCount = this.registeredArguments.length;
+        const actionArgs = args.slice(0, expectedArgsCount);
+        if (this._storeOptionsAsProperties) {
+          actionArgs[expectedArgsCount] = this;
+        } else {
+          actionArgs[expectedArgsCount] = this.opts();
+        }
+        actionArgs.push(this);
+        return fn.apply(this, actionArgs);
+      };
+      this._actionHandler = listener;
+      return this;
+    }
+    createOption(flags, description) {
+      return new Option(flags, description);
+    }
+    _callParseArg(target, value, previous, invalidArgumentMessage) {
+      try {
+        return target.parseArg(value, previous);
+      } catch (err) {
+        if (err.code === "commander.invalidArgument") {
+          const message = `${invalidArgumentMessage} ${err.message}`;
+          this.error(message, { exitCode: err.exitCode, code: err.code });
+        }
+        throw err;
+      }
+    }
+    _registerOption(option) {
+      const matchingOption = option.short && this._findOption(option.short) || option.long && this._findOption(option.long);
+      if (matchingOption) {
+        const matchingFlag = option.long && this._findOption(option.long) ? option.long : option.short;
+        throw new Error(`Cannot add option '${option.flags}'${this._name && ` to command '${this._name}'`} due to conflicting flag '${matchingFlag}'
+-  already used by option '${matchingOption.flags}'`);
+      }
+      this.options.push(option);
+    }
+    _registerCommand(command) {
+      const knownBy = (cmd) => {
+        return [cmd.name()].concat(cmd.aliases());
+      };
+      const alreadyUsed = knownBy(command).find((name) => this._findCommand(name));
+      if (alreadyUsed) {
+        const existingCmd = knownBy(this._findCommand(alreadyUsed)).join("|");
+        const newCmd = knownBy(command).join("|");
+        throw new Error(`cannot add command '${newCmd}' as already have command '${existingCmd}'`);
+      }
+      this.commands.push(command);
+    }
+    addOption(option) {
+      this._registerOption(option);
+      const oname = option.name();
+      const name = option.attributeName();
+      if (option.negate) {
+        const positiveLongFlag = option.long.replace(/^--no-/, "--");
+        if (!this._findOption(positiveLongFlag)) {
+          this.setOptionValueWithSource(name, option.defaultValue === undefined ? true : option.defaultValue, "default");
+        }
+      } else if (option.defaultValue !== undefined) {
+        this.setOptionValueWithSource(name, option.defaultValue, "default");
+      }
+      const handleOptionValue = (val, invalidValueMessage, valueSource) => {
+        if (val == null && option.presetArg !== undefined) {
+          val = option.presetArg;
+        }
+        const oldValue = this.getOptionValue(name);
+        if (val !== null && option.parseArg) {
+          val = this._callParseArg(option, val, oldValue, invalidValueMessage);
+        } else if (val !== null && option.variadic) {
+          val = option._concatValue(val, oldValue);
+        }
+        if (val == null) {
+          if (option.negate) {
+            val = false;
+          } else if (option.isBoolean() || option.optional) {
+            val = true;
+          } else {
+            val = "";
+          }
+        }
+        this.setOptionValueWithSource(name, val, valueSource);
+      };
+      this.on("option:" + oname, (val) => {
+        const invalidValueMessage = `error: option '${option.flags}' argument '${val}' is invalid.`;
+        handleOptionValue(val, invalidValueMessage, "cli");
+      });
+      if (option.envVar) {
+        this.on("optionEnv:" + oname, (val) => {
+          const invalidValueMessage = `error: option '${option.flags}' value '${val}' from env '${option.envVar}' is invalid.`;
+          handleOptionValue(val, invalidValueMessage, "env");
+        });
+      }
+      return this;
+    }
+    _optionEx(config, flags, description, fn, defaultValue) {
+      if (typeof flags === "object" && flags instanceof Option) {
+        throw new Error("To add an Option object use addOption() instead of option() or requiredOption()");
+      }
+      const option = this.createOption(flags, description);
+      option.makeOptionMandatory(!!config.mandatory);
+      if (typeof fn === "function") {
+        option.default(defaultValue).argParser(fn);
+      } else if (fn instanceof RegExp) {
+        const regex = fn;
+        fn = (val, def) => {
+          const m = regex.exec(val);
+          return m ? m[0] : def;
+        };
+        option.default(defaultValue).argParser(fn);
+      } else {
+        option.default(fn);
+      }
+      return this.addOption(option);
+    }
+    option(flags, description, parseArg, defaultValue) {
+      return this._optionEx({}, flags, description, parseArg, defaultValue);
+    }
+    requiredOption(flags, description, parseArg, defaultValue) {
+      return this._optionEx({ mandatory: true }, flags, description, parseArg, defaultValue);
+    }
+    combineFlagAndOptionalValue(combine = true) {
+      this._combineFlagAndOptionalValue = !!combine;
+      return this;
+    }
+    allowUnknownOption(allowUnknown = true) {
+      this._allowUnknownOption = !!allowUnknown;
+      return this;
+    }
+    allowExcessArguments(allowExcess = true) {
+      this._allowExcessArguments = !!allowExcess;
+      return this;
+    }
+    enablePositionalOptions(positional = true) {
+      this._enablePositionalOptions = !!positional;
+      return this;
+    }
+    passThroughOptions(passThrough = true) {
+      this._passThroughOptions = !!passThrough;
+      this._checkForBrokenPassThrough();
+      return this;
+    }
+    _checkForBrokenPassThrough() {
+      if (this.parent && this._passThroughOptions && !this.parent._enablePositionalOptions) {
+        throw new Error(`passThroughOptions cannot be used for '${this._name}' without turning on enablePositionalOptions for parent command(s)`);
+      }
+    }
+    storeOptionsAsProperties(storeAsProperties = true) {
+      if (this.options.length) {
+        throw new Error("call .storeOptionsAsProperties() before adding options");
+      }
+      if (Object.keys(this._optionValues).length) {
+        throw new Error("call .storeOptionsAsProperties() before setting option values");
+      }
+      this._storeOptionsAsProperties = !!storeAsProperties;
+      return this;
+    }
+    getOptionValue(key) {
+      if (this._storeOptionsAsProperties) {
+        return this[key];
+      }
+      return this._optionValues[key];
+    }
+    setOptionValue(key, value) {
+      return this.setOptionValueWithSource(key, value, undefined);
+    }
+    setOptionValueWithSource(key, value, source) {
+      if (this._storeOptionsAsProperties) {
+        this[key] = value;
+      } else {
+        this._optionValues[key] = value;
+      }
+      this._optionValueSources[key] = source;
+      return this;
+    }
+    getOptionValueSource(key) {
+      return this._optionValueSources[key];
+    }
+    getOptionValueSourceWithGlobals(key) {
+      let source;
+      this._getCommandAndAncestors().forEach((cmd) => {
+        if (cmd.getOptionValueSource(key) !== undefined) {
+          source = cmd.getOptionValueSource(key);
+        }
+      });
+      return source;
+    }
+    _prepareUserArgs(argv, parseOptions) {
+      if (argv !== undefined && !Array.isArray(argv)) {
+        throw new Error("first parameter to parse must be array or undefined");
+      }
+      parseOptions = parseOptions || {};
+      if (argv === undefined && parseOptions.from === undefined) {
+        if (process2.versions?.electron) {
+          parseOptions.from = "electron";
+        }
+        const execArgv = process2.execArgv ?? [];
+        if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
+          parseOptions.from = "eval";
+        }
+      }
+      if (argv === undefined) {
+        argv = process2.argv;
+      }
+      this.rawArgs = argv.slice();
+      let userArgs;
+      switch (parseOptions.from) {
+        case undefined:
+        case "node":
+          this._scriptPath = argv[1];
+          userArgs = argv.slice(2);
+          break;
+        case "electron":
+          if (process2.defaultApp) {
+            this._scriptPath = argv[1];
+            userArgs = argv.slice(2);
+          } else {
+            userArgs = argv.slice(1);
+          }
+          break;
+        case "user":
+          userArgs = argv.slice(0);
+          break;
+        case "eval":
+          userArgs = argv.slice(1);
+          break;
+        default:
+          throw new Error(`unexpected parse option { from: '${parseOptions.from}' }`);
+      }
+      if (!this._name && this._scriptPath)
+        this.nameFromFilename(this._scriptPath);
+      this._name = this._name || "program";
+      return userArgs;
+    }
+    parse(argv, parseOptions) {
+      const userArgs = this._prepareUserArgs(argv, parseOptions);
+      this._parseCommand([], userArgs);
+      return this;
+    }
+    async parseAsync(argv, parseOptions) {
+      const userArgs = this._prepareUserArgs(argv, parseOptions);
+      await this._parseCommand([], userArgs);
+      return this;
+    }
+    _executeSubCommand(subcommand, args) {
+      args = args.slice();
+      let launchWithNode = false;
+      const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
+      function findFile(baseDir, baseName) {
+        const localBin = path.resolve(baseDir, baseName);
+        if (fs.existsSync(localBin))
+          return localBin;
+        if (sourceExt.includes(path.extname(baseName)))
+          return;
+        const foundExt = sourceExt.find((ext) => fs.existsSync(`${localBin}${ext}`));
+        if (foundExt)
+          return `${localBin}${foundExt}`;
+        return;
+      }
+      this._checkForMissingMandatoryOptions();
+      this._checkForConflictingOptions();
+      let executableFile = subcommand._executableFile || `${this._name}-${subcommand._name}`;
+      let executableDir = this._executableDir || "";
+      if (this._scriptPath) {
+        let resolvedScriptPath;
+        try {
+          resolvedScriptPath = fs.realpathSync(this._scriptPath);
+        } catch (err) {
+          resolvedScriptPath = this._scriptPath;
+        }
+        executableDir = path.resolve(path.dirname(resolvedScriptPath), executableDir);
+      }
+      if (executableDir) {
+        let localFile = findFile(executableDir, executableFile);
+        if (!localFile && !subcommand._executableFile && this._scriptPath) {
+          const legacyName = path.basename(this._scriptPath, path.extname(this._scriptPath));
+          if (legacyName !== this._name) {
+            localFile = findFile(executableDir, `${legacyName}-${subcommand._name}`);
+          }
+        }
+        executableFile = localFile || executableFile;
+      }
+      launchWithNode = sourceExt.includes(path.extname(executableFile));
+      let proc;
+      if (process2.platform !== "win32") {
+        if (launchWithNode) {
+          args.unshift(executableFile);
+          args = incrementNodeInspectorPort(process2.execArgv).concat(args);
+          proc = childProcess.spawn(process2.argv[0], args, { stdio: "inherit" });
+        } else {
+          proc = childProcess.spawn(executableFile, args, { stdio: "inherit" });
+        }
+      } else {
+        args.unshift(executableFile);
+        args = incrementNodeInspectorPort(process2.execArgv).concat(args);
+        proc = childProcess.spawn(process2.execPath, args, { stdio: "inherit" });
+      }
+      if (!proc.killed) {
+        const signals = ["SIGUSR1", "SIGUSR2", "SIGTERM", "SIGINT", "SIGHUP"];
+        signals.forEach((signal) => {
+          process2.on(signal, () => {
+            if (proc.killed === false && proc.exitCode === null) {
+              proc.kill(signal);
+            }
+          });
+        });
+      }
+      const exitCallback = this._exitCallback;
+      proc.on("close", (code) => {
+        code = code ?? 1;
+        if (!exitCallback) {
+          process2.exit(code);
+        } else {
+          exitCallback(new CommanderError(code, "commander.executeSubCommandAsync", "(close)"));
+        }
+      });
+      proc.on("error", (err) => {
+        if (err.code === "ENOENT") {
+          const executableDirMessage = executableDir ? `searched for local subcommand relative to directory '${executableDir}'` : "no directory for search for local subcommand, use .executableDir() to supply a custom directory";
+          const executableMissing = `'${executableFile}' does not exist
+ - if '${subcommand._name}' is not meant to be an executable command, remove description parameter from '.command()' and use '.description()' instead
+ - if the default executable name is not suitable, use the executableFile option to supply a custom name or path
+ - ${executableDirMessage}`;
+          throw new Error(executableMissing);
+        } else if (err.code === "EACCES") {
+          throw new Error(`'${executableFile}' not executable`);
+        }
+        if (!exitCallback) {
+          process2.exit(1);
+        } else {
+          const wrappedError = new CommanderError(1, "commander.executeSubCommandAsync", "(error)");
+          wrappedError.nestedError = err;
+          exitCallback(wrappedError);
+        }
+      });
+      this.runningCommand = proc;
+    }
+    _dispatchSubcommand(commandName, operands, unknown) {
+      const subCommand = this._findCommand(commandName);
+      if (!subCommand)
+        this.help({ error: true });
+      let promiseChain;
+      promiseChain = this._chainOrCallSubCommandHook(promiseChain, subCommand, "preSubcommand");
+      promiseChain = this._chainOrCall(promiseChain, () => {
+        if (subCommand._executableHandler) {
+          this._executeSubCommand(subCommand, operands.concat(unknown));
+        } else {
+          return subCommand._parseCommand(operands, unknown);
+        }
+      });
+      return promiseChain;
+    }
+    _dispatchHelpCommand(subcommandName) {
+      if (!subcommandName) {
+        this.help();
+      }
+      const subCommand = this._findCommand(subcommandName);
+      if (subCommand && !subCommand._executableHandler) {
+        subCommand.help();
+      }
+      return this._dispatchSubcommand(subcommandName, [], [this._getHelpOption()?.long ?? this._getHelpOption()?.short ?? "--help"]);
+    }
+    _checkNumberOfArguments() {
+      this.registeredArguments.forEach((arg, i) => {
+        if (arg.required && this.args[i] == null) {
+          this.missingArgument(arg.name());
+        }
+      });
+      if (this.registeredArguments.length > 0 && this.registeredArguments[this.registeredArguments.length - 1].variadic) {
+        return;
+      }
+      if (this.args.length > this.registeredArguments.length) {
+        this._excessArguments(this.args);
+      }
+    }
+    _processArguments() {
+      const myParseArg = (argument, value, previous) => {
+        let parsedValue = value;
+        if (value !== null && argument.parseArg) {
+          const invalidValueMessage = `error: command-argument value '${value}' is invalid for argument '${argument.name()}'.`;
+          parsedValue = this._callParseArg(argument, value, previous, invalidValueMessage);
+        }
+        return parsedValue;
+      };
+      this._checkNumberOfArguments();
+      const processedArgs = [];
+      this.registeredArguments.forEach((declaredArg, index) => {
+        let value = declaredArg.defaultValue;
+        if (declaredArg.variadic) {
+          if (index < this.args.length) {
+            value = this.args.slice(index);
+            if (declaredArg.parseArg) {
+              value = value.reduce((processed, v) => {
+                return myParseArg(declaredArg, v, processed);
+              }, declaredArg.defaultValue);
+            }
+          } else if (value === undefined) {
+            value = [];
+          }
+        } else if (index < this.args.length) {
+          value = this.args[index];
+          if (declaredArg.parseArg) {
+            value = myParseArg(declaredArg, value, declaredArg.defaultValue);
+          }
+        }
+        processedArgs[index] = value;
+      });
+      this.processedArgs = processedArgs;
+    }
+    _chainOrCall(promise, fn) {
+      if (promise && promise.then && typeof promise.then === "function") {
+        return promise.then(() => fn());
+      }
+      return fn();
+    }
+    _chainOrCallHooks(promise, event) {
+      let result = promise;
+      const hooks = [];
+      this._getCommandAndAncestors().reverse().filter((cmd) => cmd._lifeCycleHooks[event] !== undefined).forEach((hookedCommand) => {
+        hookedCommand._lifeCycleHooks[event].forEach((callback) => {
+          hooks.push({ hookedCommand, callback });
+        });
+      });
+      if (event === "postAction") {
+        hooks.reverse();
+      }
+      hooks.forEach((hookDetail) => {
+        result = this._chainOrCall(result, () => {
+          return hookDetail.callback(hookDetail.hookedCommand, this);
+        });
+      });
+      return result;
+    }
+    _chainOrCallSubCommandHook(promise, subCommand, event) {
+      let result = promise;
+      if (this._lifeCycleHooks[event] !== undefined) {
+        this._lifeCycleHooks[event].forEach((hook) => {
+          result = this._chainOrCall(result, () => {
+            return hook(this, subCommand);
+          });
+        });
+      }
+      return result;
+    }
+    _parseCommand(operands, unknown) {
+      const parsed = this.parseOptions(unknown);
+      this._parseOptionsEnv();
+      this._parseOptionsImplied();
+      operands = operands.concat(parsed.operands);
+      unknown = parsed.unknown;
+      this.args = operands.concat(unknown);
+      if (operands && this._findCommand(operands[0])) {
+        return this._dispatchSubcommand(operands[0], operands.slice(1), unknown);
+      }
+      if (this._getHelpCommand() && operands[0] === this._getHelpCommand().name()) {
+        return this._dispatchHelpCommand(operands[1]);
+      }
+      if (this._defaultCommandName) {
+        this._outputHelpIfRequested(unknown);
+        return this._dispatchSubcommand(this._defaultCommandName, operands, unknown);
+      }
+      if (this.commands.length && this.args.length === 0 && !this._actionHandler && !this._defaultCommandName) {
+        this.help({ error: true });
+      }
+      this._outputHelpIfRequested(parsed.unknown);
+      this._checkForMissingMandatoryOptions();
+      this._checkForConflictingOptions();
+      const checkForUnknownOptions = () => {
+        if (parsed.unknown.length > 0) {
+          this.unknownOption(parsed.unknown[0]);
+        }
+      };
+      const commandEvent = `command:${this.name()}`;
+      if (this._actionHandler) {
+        checkForUnknownOptions();
+        this._processArguments();
+        let promiseChain;
+        promiseChain = this._chainOrCallHooks(promiseChain, "preAction");
+        promiseChain = this._chainOrCall(promiseChain, () => this._actionHandler(this.processedArgs));
+        if (this.parent) {
+          promiseChain = this._chainOrCall(promiseChain, () => {
+            this.parent.emit(commandEvent, operands, unknown);
+          });
+        }
+        promiseChain = this._chainOrCallHooks(promiseChain, "postAction");
+        return promiseChain;
+      }
+      if (this.parent && this.parent.listenerCount(commandEvent)) {
+        checkForUnknownOptions();
+        this._processArguments();
+        this.parent.emit(commandEvent, operands, unknown);
+      } else if (operands.length) {
+        if (this._findCommand("*")) {
+          return this._dispatchSubcommand("*", operands, unknown);
+        }
+        if (this.listenerCount("command:*")) {
+          this.emit("command:*", operands, unknown);
+        } else if (this.commands.length) {
+          this.unknownCommand();
+        } else {
+          checkForUnknownOptions();
+          this._processArguments();
+        }
+      } else if (this.commands.length) {
+        checkForUnknownOptions();
+        this.help({ error: true });
+      } else {
+        checkForUnknownOptions();
+        this._processArguments();
+      }
+    }
+    _findCommand(name) {
+      if (!name)
+        return;
+      return this.commands.find((cmd) => cmd._name === name || cmd._aliases.includes(name));
+    }
+    _findOption(arg) {
+      return this.options.find((option) => option.is(arg));
+    }
+    _checkForMissingMandatoryOptions() {
+      this._getCommandAndAncestors().forEach((cmd) => {
+        cmd.options.forEach((anOption) => {
+          if (anOption.mandatory && cmd.getOptionValue(anOption.attributeName()) === undefined) {
+            cmd.missingMandatoryOptionValue(anOption);
+          }
+        });
+      });
+    }
+    _checkForConflictingLocalOptions() {
+      const definedNonDefaultOptions = this.options.filter((option) => {
+        const optionKey = option.attributeName();
+        if (this.getOptionValue(optionKey) === undefined) {
+          return false;
+        }
+        return this.getOptionValueSource(optionKey) !== "default";
+      });
+      const optionsWithConflicting = definedNonDefaultOptions.filter((option) => option.conflictsWith.length > 0);
+      optionsWithConflicting.forEach((option) => {
+        const conflictingAndDefined = definedNonDefaultOptions.find((defined) => option.conflictsWith.includes(defined.attributeName()));
+        if (conflictingAndDefined) {
+          this._conflictingOption(option, conflictingAndDefined);
+        }
+      });
+    }
+    _checkForConflictingOptions() {
+      this._getCommandAndAncestors().forEach((cmd) => {
+        cmd._checkForConflictingLocalOptions();
+      });
+    }
+    parseOptions(argv) {
+      const operands = [];
+      const unknown = [];
+      let dest = operands;
+      const args = argv.slice();
+      function maybeOption(arg) {
+        return arg.length > 1 && arg[0] === "-";
+      }
+      let activeVariadicOption = null;
+      while (args.length) {
+        const arg = args.shift();
+        if (arg === "--") {
+          if (dest === unknown)
+            dest.push(arg);
+          dest.push(...args);
+          break;
+        }
+        if (activeVariadicOption && !maybeOption(arg)) {
+          this.emit(`option:${activeVariadicOption.name()}`, arg);
+          continue;
+        }
+        activeVariadicOption = null;
+        if (maybeOption(arg)) {
+          const option = this._findOption(arg);
+          if (option) {
+            if (option.required) {
+              const value = args.shift();
+              if (value === undefined)
+                this.optionMissingArgument(option);
+              this.emit(`option:${option.name()}`, value);
+            } else if (option.optional) {
+              let value = null;
+              if (args.length > 0 && !maybeOption(args[0])) {
+                value = args.shift();
+              }
+              this.emit(`option:${option.name()}`, value);
+            } else {
+              this.emit(`option:${option.name()}`);
+            }
+            activeVariadicOption = option.variadic ? option : null;
+            continue;
+          }
+        }
+        if (arg.length > 2 && arg[0] === "-" && arg[1] !== "-") {
+          const option = this._findOption(`-${arg[1]}`);
+          if (option) {
+            if (option.required || option.optional && this._combineFlagAndOptionalValue) {
+              this.emit(`option:${option.name()}`, arg.slice(2));
+            } else {
+              this.emit(`option:${option.name()}`);
+              args.unshift(`-${arg.slice(2)}`);
+            }
+            continue;
+          }
+        }
+        if (/^--[^=]+=/.test(arg)) {
+          const index = arg.indexOf("=");
+          const option = this._findOption(arg.slice(0, index));
+          if (option && (option.required || option.optional)) {
+            this.emit(`option:${option.name()}`, arg.slice(index + 1));
+            continue;
+          }
+        }
+        if (maybeOption(arg)) {
+          dest = unknown;
+        }
+        if ((this._enablePositionalOptions || this._passThroughOptions) && operands.length === 0 && unknown.length === 0) {
+          if (this._findCommand(arg)) {
+            operands.push(arg);
+            if (args.length > 0)
+              unknown.push(...args);
+            break;
+          } else if (this._getHelpCommand() && arg === this._getHelpCommand().name()) {
+            operands.push(arg);
+            if (args.length > 0)
+              operands.push(...args);
+            break;
+          } else if (this._defaultCommandName) {
+            unknown.push(arg);
+            if (args.length > 0)
+              unknown.push(...args);
+            break;
+          }
+        }
+        if (this._passThroughOptions) {
+          dest.push(arg);
+          if (args.length > 0)
+            dest.push(...args);
+          break;
+        }
+        dest.push(arg);
+      }
+      return { operands, unknown };
+    }
+    opts() {
+      if (this._storeOptionsAsProperties) {
+        const result = {};
+        const len = this.options.length;
+        for (let i = 0;i < len; i++) {
+          const key = this.options[i].attributeName();
+          result[key] = key === this._versionOptionName ? this._version : this[key];
+        }
+        return result;
+      }
+      return this._optionValues;
+    }
+    optsWithGlobals() {
+      return this._getCommandAndAncestors().reduce((combinedOptions, cmd) => Object.assign(combinedOptions, cmd.opts()), {});
+    }
+    error(message, errorOptions) {
+      this._outputConfiguration.outputError(`${message}
+`, this._outputConfiguration.writeErr);
+      if (typeof this._showHelpAfterError === "string") {
+        this._outputConfiguration.writeErr(`${this._showHelpAfterError}
+`);
+      } else if (this._showHelpAfterError) {
+        this._outputConfiguration.writeErr(`
+`);
+        this.outputHelp({ error: true });
+      }
+      const config = errorOptions || {};
+      const exitCode = config.exitCode || 1;
+      const code = config.code || "commander.error";
+      this._exit(exitCode, code, message);
+    }
+    _parseOptionsEnv() {
+      this.options.forEach((option) => {
+        if (option.envVar && option.envVar in process2.env) {
+          const optionKey = option.attributeName();
+          if (this.getOptionValue(optionKey) === undefined || ["default", "config", "env"].includes(this.getOptionValueSource(optionKey))) {
+            if (option.required || option.optional) {
+              this.emit(`optionEnv:${option.name()}`, process2.env[option.envVar]);
+            } else {
+              this.emit(`optionEnv:${option.name()}`);
+            }
+          }
+        }
+      });
+    }
+    _parseOptionsImplied() {
+      const dualHelper = new DualOptions(this.options);
+      const hasCustomOptionValue = (optionKey) => {
+        return this.getOptionValue(optionKey) !== undefined && !["default", "implied"].includes(this.getOptionValueSource(optionKey));
+      };
+      this.options.filter((option) => option.implied !== undefined && hasCustomOptionValue(option.attributeName()) && dualHelper.valueFromOption(this.getOptionValue(option.attributeName()), option)).forEach((option) => {
+        Object.keys(option.implied).filter((impliedKey) => !hasCustomOptionValue(impliedKey)).forEach((impliedKey) => {
+          this.setOptionValueWithSource(impliedKey, option.implied[impliedKey], "implied");
+        });
+      });
+    }
+    missingArgument(name) {
+      const message = `error: missing required argument '${name}'`;
+      this.error(message, { code: "commander.missingArgument" });
+    }
+    optionMissingArgument(option) {
+      const message = `error: option '${option.flags}' argument missing`;
+      this.error(message, { code: "commander.optionMissingArgument" });
+    }
+    missingMandatoryOptionValue(option) {
+      const message = `error: required option '${option.flags}' not specified`;
+      this.error(message, { code: "commander.missingMandatoryOptionValue" });
+    }
+    _conflictingOption(option, conflictingOption) {
+      const findBestOptionFromValue = (option2) => {
+        const optionKey = option2.attributeName();
+        const optionValue = this.getOptionValue(optionKey);
+        const negativeOption = this.options.find((target) => target.negate && optionKey === target.attributeName());
+        const positiveOption = this.options.find((target) => !target.negate && optionKey === target.attributeName());
+        if (negativeOption && (negativeOption.presetArg === undefined && optionValue === false || negativeOption.presetArg !== undefined && optionValue === negativeOption.presetArg)) {
+          return negativeOption;
+        }
+        return positiveOption || option2;
+      };
+      const getErrorMessage = (option2) => {
+        const bestOption = findBestOptionFromValue(option2);
+        const optionKey = bestOption.attributeName();
+        const source = this.getOptionValueSource(optionKey);
+        if (source === "env") {
+          return `environment variable '${bestOption.envVar}'`;
+        }
+        return `option '${bestOption.flags}'`;
+      };
+      const message = `error: ${getErrorMessage(option)} cannot be used with ${getErrorMessage(conflictingOption)}`;
+      this.error(message, { code: "commander.conflictingOption" });
+    }
+    unknownOption(flag) {
+      if (this._allowUnknownOption)
+        return;
+      let suggestion = "";
+      if (flag.startsWith("--") && this._showSuggestionAfterError) {
+        let candidateFlags = [];
+        let command = this;
+        do {
+          const moreFlags = command.createHelp().visibleOptions(command).filter((option) => option.long).map((option) => option.long);
+          candidateFlags = candidateFlags.concat(moreFlags);
+          command = command.parent;
+        } while (command && !command._enablePositionalOptions);
+        suggestion = suggestSimilar(flag, candidateFlags);
+      }
+      const message = `error: unknown option '${flag}'${suggestion}`;
+      this.error(message, { code: "commander.unknownOption" });
+    }
+    _excessArguments(receivedArgs) {
+      if (this._allowExcessArguments)
+        return;
+      const expected = this.registeredArguments.length;
+      const s = expected === 1 ? "" : "s";
+      const forSubcommand = this.parent ? ` for '${this.name()}'` : "";
+      const message = `error: too many arguments${forSubcommand}. Expected ${expected} argument${s} but got ${receivedArgs.length}.`;
+      this.error(message, { code: "commander.excessArguments" });
+    }
+    unknownCommand() {
+      const unknownName = this.args[0];
+      let suggestion = "";
+      if (this._showSuggestionAfterError) {
+        const candidateNames = [];
+        this.createHelp().visibleCommands(this).forEach((command) => {
+          candidateNames.push(command.name());
+          if (command.alias())
+            candidateNames.push(command.alias());
+        });
+        suggestion = suggestSimilar(unknownName, candidateNames);
+      }
+      const message = `error: unknown command '${unknownName}'${suggestion}`;
+      this.error(message, { code: "commander.unknownCommand" });
+    }
+    version(str, flags, description) {
+      if (str === undefined)
+        return this._version;
+      this._version = str;
+      flags = flags || "-V, --version";
+      description = description || "output the version number";
+      const versionOption = this.createOption(flags, description);
+      this._versionOptionName = versionOption.attributeName();
+      this._registerOption(versionOption);
+      this.on("option:" + versionOption.name(), () => {
+        this._outputConfiguration.writeOut(`${str}
+`);
+        this._exit(0, "commander.version", str);
+      });
+      return this;
+    }
+    description(str, argsDescription) {
+      if (str === undefined && argsDescription === undefined)
+        return this._description;
+      this._description = str;
+      if (argsDescription) {
+        this._argsDescription = argsDescription;
+      }
+      return this;
+    }
+    summary(str) {
+      if (str === undefined)
+        return this._summary;
+      this._summary = str;
+      return this;
+    }
+    alias(alias) {
+      if (alias === undefined)
+        return this._aliases[0];
+      let command = this;
+      if (this.commands.length !== 0 && this.commands[this.commands.length - 1]._executableHandler) {
+        command = this.commands[this.commands.length - 1];
+      }
+      if (alias === command._name)
+        throw new Error("Command alias can't be the same as its name");
+      const matchingCommand = this.parent?._findCommand(alias);
+      if (matchingCommand) {
+        const existingCmd = [matchingCommand.name()].concat(matchingCommand.aliases()).join("|");
+        throw new Error(`cannot add alias '${alias}' to command '${this.name()}' as already have command '${existingCmd}'`);
+      }
+      command._aliases.push(alias);
+      return this;
+    }
+    aliases(aliases) {
+      if (aliases === undefined)
+        return this._aliases;
+      aliases.forEach((alias) => this.alias(alias));
+      return this;
+    }
+    usage(str) {
+      if (str === undefined) {
+        if (this._usage)
+          return this._usage;
+        const args = this.registeredArguments.map((arg) => {
+          return humanReadableArgName(arg);
+        });
+        return [].concat(this.options.length || this._helpOption !== null ? "[options]" : [], this.commands.length ? "[command]" : [], this.registeredArguments.length ? args : []).join(" ");
+      }
+      this._usage = str;
+      return this;
+    }
+    name(str) {
+      if (str === undefined)
+        return this._name;
+      this._name = str;
+      return this;
+    }
+    nameFromFilename(filename) {
+      this._name = path.basename(filename, path.extname(filename));
+      return this;
+    }
+    executableDir(path2) {
+      if (path2 === undefined)
+        return this._executableDir;
+      this._executableDir = path2;
+      return this;
+    }
+    helpInformation(contextOptions) {
+      const helper = this.createHelp();
+      if (helper.helpWidth === undefined) {
+        helper.helpWidth = contextOptions && contextOptions.error ? this._outputConfiguration.getErrHelpWidth() : this._outputConfiguration.getOutHelpWidth();
+      }
+      return helper.formatHelp(this, helper);
+    }
+    _getHelpContext(contextOptions) {
+      contextOptions = contextOptions || {};
+      const context = { error: !!contextOptions.error };
+      let write;
+      if (context.error) {
+        write = (arg) => this._outputConfiguration.writeErr(arg);
+      } else {
+        write = (arg) => this._outputConfiguration.writeOut(arg);
+      }
+      context.write = contextOptions.write || write;
+      context.command = this;
+      return context;
+    }
+    outputHelp(contextOptions) {
+      let deprecatedCallback;
+      if (typeof contextOptions === "function") {
+        deprecatedCallback = contextOptions;
+        contextOptions = undefined;
+      }
+      const context = this._getHelpContext(contextOptions);
+      this._getCommandAndAncestors().reverse().forEach((command) => command.emit("beforeAllHelp", context));
+      this.emit("beforeHelp", context);
+      let helpInformation = this.helpInformation(context);
+      if (deprecatedCallback) {
+        helpInformation = deprecatedCallback(helpInformation);
+        if (typeof helpInformation !== "string" && !Buffer.isBuffer(helpInformation)) {
+          throw new Error("outputHelp callback must return a string or a Buffer");
+        }
+      }
+      context.write(helpInformation);
+      if (this._getHelpOption()?.long) {
+        this.emit(this._getHelpOption().long);
+      }
+      this.emit("afterHelp", context);
+      this._getCommandAndAncestors().forEach((command) => command.emit("afterAllHelp", context));
+    }
+    helpOption(flags, description) {
+      if (typeof flags === "boolean") {
+        if (flags) {
+          this._helpOption = this._helpOption ?? undefined;
+        } else {
+          this._helpOption = null;
+        }
+        return this;
+      }
+      flags = flags ?? "-h, --help";
+      description = description ?? "display help for command";
+      this._helpOption = this.createOption(flags, description);
+      return this;
+    }
+    _getHelpOption() {
+      if (this._helpOption === undefined) {
+        this.helpOption(undefined, undefined);
+      }
+      return this._helpOption;
+    }
+    addHelpOption(option) {
+      this._helpOption = option;
+      return this;
+    }
+    help(contextOptions) {
+      this.outputHelp(contextOptions);
+      let exitCode = process2.exitCode || 0;
+      if (exitCode === 0 && contextOptions && typeof contextOptions !== "function" && contextOptions.error) {
+        exitCode = 1;
+      }
+      this._exit(exitCode, "commander.help", "(outputHelp)");
+    }
+    addHelpText(position, text) {
+      const allowedValues = ["beforeAll", "before", "after", "afterAll"];
+      if (!allowedValues.includes(position)) {
+        throw new Error(`Unexpected value for position to addHelpText.
+Expecting one of '${allowedValues.join("', '")}'`);
+      }
+      const helpEvent = `${position}Help`;
+      this.on(helpEvent, (context) => {
+        let helpStr;
+        if (typeof text === "function") {
+          helpStr = text({ error: context.error, command: context.command });
+        } else {
+          helpStr = text;
+        }
+        if (helpStr) {
+          context.write(`${helpStr}
+`);
+        }
+      });
+      return this;
+    }
+    _outputHelpIfRequested(args) {
+      const helpOption = this._getHelpOption();
+      const helpRequested = helpOption && args.find((arg) => helpOption.is(arg));
+      if (helpRequested) {
+        this.outputHelp();
+        this._exit(0, "commander.helpDisplayed", "(outputHelp)");
+      }
+    }
+  }
+  function incrementNodeInspectorPort(args) {
+    return args.map((arg) => {
+      if (!arg.startsWith("--inspect")) {
+        return arg;
+      }
+      let debugOption;
+      let debugHost = "127.0.0.1";
+      let debugPort = "9229";
+      let match;
+      if ((match = arg.match(/^(--inspect(-brk)?)$/)) !== null) {
+        debugOption = match[1];
+      } else if ((match = arg.match(/^(--inspect(-brk|-port)?)=([^:]+)$/)) !== null) {
+        debugOption = match[1];
+        if (/^\d+$/.test(match[3])) {
+          debugPort = match[3];
+        } else {
+          debugHost = match[3];
+        }
+      } else if ((match = arg.match(/^(--inspect(-brk|-port)?)=([^:]+):(\d+)$/)) !== null) {
+        debugOption = match[1];
+        debugHost = match[3];
+        debugPort = match[4];
+      }
+      if (debugOption && debugPort !== "0") {
+        return `${debugOption}=${debugHost}:${parseInt(debugPort) + 1}`;
+      }
+      return arg;
+    });
+  }
+  exports.Command = Command;
+});
+
+// node_modules/commander/index.js
+var require_commander = __commonJS((exports) => {
+  var { Argument } = require_argument();
+  var { Command } = require_command();
+  var { CommanderError, InvalidArgumentError } = require_error();
+  var { Help } = require_help();
+  var { Option } = require_option();
+  exports.program = new Command;
+  exports.createCommand = (name) => new Command(name);
+  exports.createOption = (flags, description) => new Option(flags, description);
+  exports.createArgument = (name, description) => new Argument(name, description);
+  exports.Command = Command;
+  exports.Option = Option;
+  exports.Argument = Argument;
+  exports.Help = Help;
+  exports.CommanderError = CommanderError;
+  exports.InvalidArgumentError = InvalidArgumentError;
+  exports.InvalidOptionArgumentError = InvalidArgumentError;
+});
+
+// src/cli.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+
+// node_modules/commander/esm.mjs
+var import__ = __toESM(require_commander(), 1);
+var {
+  program,
+  createCommand,
+  createArgument,
+  createOption,
+  CommanderError,
+  InvalidArgumentError,
+  InvalidOptionArgumentError,
+  Command,
+  Argument,
+  Option,
+  Help
+} = import__.default;
+
+// src/config.ts
+import { readFileSync, existsSync } from "fs";
+
+// src/exitCodes.ts
+var ExitCode = {
+  SUCCESS: 0,
+  ERROR: 1,
+  USAGE: 64,
+  DATAERR: 65,
+  NOINPUT: 66,
+  NOUSER: 67,
+  NOHOST: 68,
+  UNAVAILABLE: 69,
+  SOFTWARE: 70,
+  OSERR: 71,
+  OSFILE: 72,
+  CANTCREAT: 73,
+  IOERR: 74,
+  TEMPFAIL: 75,
+  PROTOCOL: 76,
+  NOPERM: 77,
+  CONFIG: 78
+};
+
+// src/errors.ts
+class CliError extends Error {
+  exitCode;
+  constructor(message, exitCode = ExitCode.ERROR) {
+    super(message);
+    this.name = "CliError";
+    this.exitCode = exitCode;
+  }
+}
+
+class AuthError extends CliError {
+  constructor(message) {
+    super(message, ExitCode.NOPERM);
+    this.name = "AuthError";
+  }
+}
+
+class ConfigError extends CliError {
+  constructor(message) {
+    super(message, ExitCode.CONFIG);
+    this.name = "ConfigError";
+  }
+}
+
+class UsageError extends CliError {
+  constructor(message) {
+    super(message, ExitCode.USAGE);
+    this.name = "UsageError";
+  }
+}
+class ServiceError extends CliError {
+  constructor(message) {
+    super(message, ExitCode.UNAVAILABLE);
+    this.name = "ServiceError";
+  }
+}
+class IOError extends CliError {
+  constructor(message) {
+    super(message, ExitCode.IOERR);
+    this.name = "IOError";
+  }
+}
+
+class TempError extends CliError {
+  constructor(message) {
+    super(message, ExitCode.TEMPFAIL);
+    this.name = "TempError";
+  }
+}
+
+// src/config.ts
+var DEFAULT_CONFIG = {
+  httpUrl: "http://localhost:17170",
+  username: "",
+  endpoints: {
+    auth: "/auth/simple/login",
+    graphql: "/api/graphql",
+    logout: "/auth/logout",
+    refresh: "/auth/refresh"
+  }
+};
+function parseConfigFile(filePath) {
+  if (!existsSync(filePath)) {
+    return {};
+  }
+  try {
+    const content = readFileSync(filePath, "utf-8");
+    const result = {};
+    let currentSection = "general";
+    for (const line of content.split(`
+`)) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#"))
+        continue;
+      const sectionMatch = trimmed.match(/^\[(\w+)\]$/);
+      if (sectionMatch) {
+        currentSection = sectionMatch[1];
+        continue;
+      }
+      const kvMatch = trimmed.match(/^(\w+)\s*=\s*(.+)$/);
+      if (kvMatch) {
+        const [, key, rawValue] = kvMatch;
+        const value = rawValue.replace(/^["']|["']$/g, "").trim();
+        if (currentSection === "general") {
+          if (key === "http_host") {
+            const port = result.httpUrl?.match(/:(\d+)$/)?.[1] || "17170";
+            result.httpUrl = `http://${value}:${port}`;
+          } else if (key === "http_port") {
+            const host = result.httpUrl?.replace(/^http:\/\//, "").replace(/:\d+$/, "") || "localhost";
+            result.httpUrl = `http://${host}:${value}`;
+          }
+        } else if (currentSection === "ldap") {
+          if (key === "ldap_user_dn") {
+            result.username = value;
+          } else if (key === "ldap_user_pass") {
+            result.password = value;
+          }
+        }
+      }
+    }
+    return result;
+  } catch {
+    return {};
+  }
+}
+function buildConfig(cliOptions = {}) {
+  const configFile = cliOptions.configFile || process.env.LLDAP_CONFIG || "/etc/lldap.toml";
+  const fileConfig = parseConfigFile(configFile);
+  const filteredCliOptions = Object.fromEntries(Object.entries(cliOptions).filter(([, v]) => v !== undefined));
+  const config = {
+    ...DEFAULT_CONFIG,
+    ...fileConfig,
+    ...filteredCliOptions,
+    endpoints: {
+      auth: process.env.LLDAP_HTTPENDPOINT_AUTH || DEFAULT_CONFIG.endpoints.auth,
+      graphql: process.env.LLDAP_HTTPENDPOINT_GRAPH || DEFAULT_CONFIG.endpoints.graphql,
+      logout: process.env.LLDAP_HTTPENDPOINT_LOGOUT || DEFAULT_CONFIG.endpoints.logout,
+      refresh: process.env.LLDAP_HTTPENDPOINT_REFRESH || DEFAULT_CONFIG.endpoints.refresh
+    }
+  };
+  if (process.env.LLDAP_HTTP_URL || process.env.LLDAP_HTTPURL) {
+    config.httpUrl = process.env.LLDAP_HTTP_URL || process.env.LLDAP_HTTPURL || config.httpUrl;
+  }
+  if (process.env.LLDAP_USERNAME)
+    config.username = process.env.LLDAP_USERNAME;
+  if (process.env.LLDAP_PASSWORD)
+    config.password = process.env.LLDAP_PASSWORD;
+  if (process.env.LLDAP_TOKEN)
+    config.token = process.env.LLDAP_TOKEN;
+  if (process.env.LLDAP_REFRESH_TOKEN || process.env.LLDAP_REFRESHTOKEN) {
+    config.refreshToken = process.env.LLDAP_REFRESH_TOKEN || process.env.LLDAP_REFRESHTOKEN;
+  }
+  if (cliOptions.httpUrl)
+    config.httpUrl = cliOptions.httpUrl;
+  if (cliOptions.username)
+    config.username = cliOptions.username;
+  if (cliOptions.password)
+    config.password = cliOptions.password;
+  if (cliOptions.token)
+    config.token = cliOptions.token;
+  if (cliOptions.refreshToken)
+    config.refreshToken = cliOptions.refreshToken;
+  if (!config.token && !config.refreshToken) {
+    if (!config.username) {
+      throw new ConfigError("Username is required. Set via -D option, LLDAP_USERNAME env var, or config file.");
+    }
+  }
+  if (config.httpUrl.startsWith("http://") && !config.httpUrl.includes("localhost") && !config.httpUrl.includes("127.0.0.1")) {
+    console.error("WARNING: Using insecure HTTP connection to non-localhost server.");
+    console.error("Consider using HTTPS for production environments.");
+  }
+  return config;
+}
+
+// src/client.ts
+import { readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
+import { resolve, normalize } from "path";
+class LldapClient {
+  config;
+  token;
+  refreshToken;
+  shouldLogout = false;
+  rateLimitRetryCount = 0;
+  lastActivityTime;
+  static MAX_RATE_LIMIT_RETRIES = 3;
+  static RATE_LIMIT_BACKOFF_MS = 1000;
+  static SESSION_TIMEOUT_MS = 30 * 60 * 1000;
+  static MAX_INPUT_LENGTH = 1000;
+  static MAX_EMAIL_LENGTH = 254;
+  static MAX_USERNAME_LENGTH = 64;
+  static debugEnabled = false;
+  constructor(config) {
+    this.config = config;
+    this.token = config.token;
+    this.refreshToken = config.refreshToken;
+    this.lastActivityTime = Date.now();
+  }
+  static setDebugEnabled(enabled) {
+    LldapClient.debugEnabled = enabled;
+  }
+  debug(message) {
+    if (LldapClient.debugEnabled) {
+      const sanitized = message.replace(/token[=:]\S+/gi, "token=[REDACTED]").replace(/password[=:]\S+/gi, "password=[REDACTED]").replace(/Bearer \S+/gi, "Bearer [REDACTED]");
+      console.error(`[DEBUG] ${new Date().toISOString()} ${sanitized}`);
+    }
+  }
+  audit(level, action, details) {
+    const entry = {
+      timestamp: new Date().toISOString(),
+      level,
+      action,
+      ...details
+    };
+    console.error(`[AUDIT:${level.toUpperCase()}] ${JSON.stringify(entry)}`);
+  }
+  checkSessionTimeout() {
+    const now = Date.now();
+    const elapsed = now - this.lastActivityTime;
+    if (elapsed > LldapClient.SESSION_TIMEOUT_MS) {
+      this.audit("security", "session_timeout", { elapsed_ms: elapsed });
+      this.token = undefined;
+      this.refreshToken = undefined;
+      throw new AuthError("Session timed out due to inactivity. Please re-authenticate.");
+    }
+    this.lastActivityTime = now;
+  }
+  validateInputLength(value, fieldName, maxLength = LldapClient.MAX_INPUT_LENGTH) {
+    if (value.length > maxLength) {
+      this.audit("warn", "input_length_exceeded", { field: fieldName, length: value.length, max: maxLength });
+      throw new UsageError(`${fieldName} exceeds maximum length of ${maxLength} characters`);
+    }
+  }
+  validateUsername(username) {
+    this.validateInputLength(username, "username", LldapClient.MAX_USERNAME_LENGTH);
+    if (!/^[a-zA-Z0-9_.-]+$/.test(username)) {
+      throw new UsageError("Username contains invalid characters. Only alphanumeric, underscore, dot, and hyphen allowed.");
+    }
+  }
+  validateEmail(email) {
+    this.validateInputLength(email, "email", LldapClient.MAX_EMAIL_LENGTH);
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+      throw new UsageError("Invalid email format");
+    }
+  }
+  validateStringInput(value, fieldName) {
+    this.validateInputLength(value, fieldName);
+  }
+  isTokenExpired(token, bufferSeconds = 60) {
+    try {
+      const parts = token.split(".");
+      if (parts.length !== 3) {
+        return true;
+      }
+      const payload = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+      const decoded = JSON.parse(atob(payload));
+      if (!decoded.exp) {
+        return false;
+      }
+      const expirationTime = decoded.exp * 1000;
+      const now = Date.now();
+      const bufferMs = bufferSeconds * 1000;
+      return now >= expirationTime - bufferMs;
+    } catch {
+      return true;
+    }
+  }
+  validateFilePath(filePath, allowedDir) {
+    const resolved = resolve(filePath);
+    const normalized = normalize(resolved);
+    if (normalized.includes("..")) {
+      throw new UsageError("Invalid file path: path traversal detected");
+    }
+    if (allowedDir) {
+      const allowedResolved = resolve(allowedDir);
+      if (!normalized.startsWith(allowedResolved)) {
+        throw new UsageError(`Invalid file path: must be within ${allowedDir}`);
+      }
+    }
+    return normalized;
+  }
+  async handleRateLimit(operation) {
+    while (this.rateLimitRetryCount < LldapClient.MAX_RATE_LIMIT_RETRIES) {
+      try {
+        const result = await operation();
+        this.rateLimitRetryCount = 0;
+        return result;
+      } catch (error) {
+        if (error instanceof Error && error.message.includes("429")) {
+          this.rateLimitRetryCount++;
+          if (this.rateLimitRetryCount >= LldapClient.MAX_RATE_LIMIT_RETRIES) {
+            throw new TempError("Rate limit exceeded. Please try again later.");
+          }
+          const backoff = LldapClient.RATE_LIMIT_BACKOFF_MS * Math.pow(2, this.rateLimitRetryCount - 1);
+          console.error(`Rate limited. Retrying in ${backoff}ms... (attempt ${this.rateLimitRetryCount}/${LldapClient.MAX_RATE_LIMIT_RETRIES})`);
+          await new Promise((resolve2) => setTimeout(resolve2, backoff));
+        } else {
+          throw error;
+        }
+      }
+    }
+    throw new TempError("Rate limit exceeded. Please try again later.");
+  }
+  async login(username, password) {
+    return this.handleRateLimit(async () => {
+      const url = `${this.config.httpUrl}${this.config.endpoints.auth}`;
+      const user = username || this.config.username;
+      const pass = password || this.config.password;
+      if (!user || !pass) {
+        throw new ConfigError("Username and password are required for login");
+      }
+      this.validateUsername(user);
+      this.debug(`Attempting login for user: ${user}`);
+      this.audit("info", "login_attempt", { username: user });
+      const response = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ username: user, password: pass })
+      });
+      if (response.status === 429) {
+        this.audit("warn", "login_rate_limited", { username: user });
+        throw new TempError("429 Rate limit exceeded");
+      }
+      if (!response.ok) {
+        const text = await response.text();
+        this.audit("security", "login_failed", { username: user, status: response.status });
+        const sanitizedText = text.replace(/password[=:]\S+/gi, "password=[REDACTED]");
+        throw new AuthError(`Login failed: ${sanitizedText}`);
+      }
+      const data = await response.json();
+      this.token = data.token;
+      this.refreshToken = data.refreshToken;
+      this.lastActivityTime = Date.now();
+      this.audit("info", "login_success", { username: user });
+      this.debug("Login successful");
+      return { token: data.token, refreshToken: data.refreshToken };
+    });
+  }
+  async refresh() {
+    if (!this.refreshToken) {
+      throw new AuthError("Refresh token is required");
+    }
+    const url = `${this.config.httpUrl}${this.config.endpoints.refresh}`;
+    const response = await fetch(url, {
+      headers: { Cookie: `refresh_token=${this.refreshToken}` }
+    });
+    if (!response.ok) {
+      const text = await response.text();
+      throw new AuthError(`Token refresh failed: ${text}`);
+    }
+    const data = await response.json();
+    this.token = data.token;
+    return data.token;
+  }
+  async logout() {
+    if (!this.refreshToken) {
+      throw new AuthError("Refresh token is required for logout");
+    }
+    const url = `${this.config.httpUrl}${this.config.endpoints.logout}`;
+    await fetch(url, {
+      headers: { Cookie: `refresh_token=${this.refreshToken}` }
+    });
+  }
+  async ensureAuthenticated() {
+    this.checkSessionTimeout();
+    if (this.token && !this.isTokenExpired(this.token)) {
+      this.debug("Using existing valid token");
+      return;
+    }
+    if (this.refreshToken) {
+      if (this.isTokenExpired(this.refreshToken, 300)) {
+        this.audit("warn", "refresh_token_expiring");
+        console.error("WARNING: Refresh token is expired or about to expire. Re-authentication may be required.");
+      }
+      this.debug("Refreshing token");
+      await this.refresh();
+      return;
+    }
+    this.debug("No valid token, initiating login");
+    await this.login();
+    this.shouldLogout = true;
+  }
+  async cleanup() {
+    if (this.shouldLogout && this.refreshToken) {
+      await this.logout();
+    }
+  }
+  async query(query, variables, file) {
+    return this.handleRateLimit(async () => {
+      await this.ensureAuthenticated();
+      const url = `${this.config.httpUrl}${this.config.endpoints.graphql}`;
+      let body;
+      if (file) {
+        const validatedPath = this.validateFilePath(file);
+        if (!existsSync2(validatedPath)) {
+          throw new IOError(`File not found: ${file}`);
+        }
+        const fileContent = readFileSync2(validatedPath);
+        const base64 = fileContent.toString("base64");
+        const varsWithFile = { ...variables };
+        body = JSON.stringify({
+          query,
+          variables: varsWithFile
+        });
+        if (body.includes('""')) {
+          body = body.replace('""', `"${base64}"`);
+        }
+      } else {
+        body = JSON.stringify({
+          query,
+          variables: variables || {}
+        });
+      }
+      const response = await fetch(url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${this.token}`
+        },
+        body
+      });
+      if (response.status === 401) {
+        throw new AuthError("Authentication failed. Token may be expired. Try logging in again.");
+      }
+      if (response.status === 429) {
+        throw new TempError("429 Rate limit exceeded");
+      }
+      if (!response.ok) {
+        const text = await response.text();
+        const sanitizedText = text.replace(/token[=:]\S+/gi, "token=[REDACTED]");
+        throw new ServiceError(`GraphQL request failed (${response.status}): ${sanitizedText}`);
+      }
+      const result = await response.json();
+      if (result.errors?.length) {
+        const sanitizedErrors = result.errors.map((e) => e.message.replace(/token[=:]\S+/gi, "token=[REDACTED]"));
+        throw new ServiceError(`GraphQL error: ${sanitizedErrors.join(", ")}`);
+      }
+      if (!result.data) {
+        throw new ServiceError("No data returned from GraphQL query");
+      }
+      return result.data;
+    });
+  }
+  getToken() {
+    return this.token;
+  }
+  getRefreshToken() {
+    return this.refreshToken;
+  }
+}
+
+// src/users.ts
+class UserService {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  async getUsers() {
+    const query = "{users{id creationDate uuid email displayName firstName lastName}}";
+    const data = await this.client.query(query);
+    return data.users;
+  }
+  async listUserIds() {
+    const users = await this.getUsers();
+    return users.map((u) => u.id);
+  }
+  async listUserEmails() {
+    const users = await this.getUsers();
+    return users.map((u) => u.email).sort();
+  }
+  async searchUsers(pattern) {
+    const users = await this.getUsers();
+    const regex = this.globToRegex(pattern);
+    return users.filter((u) => regex.test(u.id) || regex.test(u.email) || regex.test(u.displayName || ""));
+  }
+  async getUsersByGroup(groupName) {
+    const query = "{users{id creationDate uuid email displayName firstName lastName groups{displayName}}}";
+    const data = await this.client.query(query);
+    return data.users.filter((u) => u.groups.some((g) => g.displayName.toLowerCase() === groupName.toLowerCase())).map(({ groups, ...user }) => user);
+  }
+  globToRegex(pattern) {
+    const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
+    return new RegExp(`^${escaped}$`, "i");
+  }
+  async getUserIdByEmail(email) {
+    const users = await this.getUsers();
+    const user = users.find((u) => u.email === email);
+    return user?.id || null;
+  }
+  async resolveUserId(identifier) {
+    const emailRegex = /^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}$/i;
+    if (emailRegex.test(identifier)) {
+      const userId = await this.getUserIdByEmail(identifier);
+      if (!userId) {
+        throw new Error(`No user found with email: ${identifier}`);
+      }
+      return userId;
+    }
+    return identifier;
+  }
+  async getUserGroups(userId) {
+    const query = "query getUserGroups($id:String!){user(userId:$id){groups{displayName}}}";
+    const data = await this.client.query(query, { id: userId });
+    return data.user.groups.map((g) => g.displayName);
+  }
+  async listUserAttributes(userId) {
+    const query = "query getUserInfo($id:String!){user(userId:$id){attributes{name}}}";
+    const data = await this.client.query(query, { id: userId });
+    return data.user.attributes.map((a) => a.name).sort();
+  }
+  async getUserAttributeValues(userId, attribute) {
+    const query = "query getUserInfo($id:String!){user(userId:$id){attributes{name,value}}}";
+    const data = await this.client.query(query, { id: userId });
+    const attr = data.user.attributes.find((a) => a.name === attribute);
+    return attr?.value || [];
+  }
+  async createUser(id, email, options = {}) {
+    this.client.validateUsername(id);
+    this.client.validateEmail(email);
+    if (options.displayName)
+      this.client.validateStringInput(options.displayName, "displayName");
+    if (options.firstName)
+      this.client.validateStringInput(options.firstName, "firstName");
+    if (options.lastName)
+      this.client.validateStringInput(options.lastName, "lastName");
+    const query = `mutation createUser($user:CreateUserInput!){
+      createUser(user:$user){id email displayName firstName lastName avatar}
+    }`;
+    const variables = {
+      user: {
+        id,
+        email,
+        displayName: options.displayName || "",
+        firstName: options.firstName || "",
+        lastName: options.lastName || "",
+        avatar: options.avatar || ""
+      }
+    };
+    await this.client.query(query, variables, options.avatar);
+    console.log(`Created user: ${id}`);
+  }
+  async deleteUser(userId) {
+    const query = "mutation deleteUser($userId:String!){deleteUser(userId:$userId){ok}}";
+    const data = await this.client.query(query, { userId });
+    if (data.deleteUser.ok) {
+      console.log(`Deleted user: ${userId}`);
+    } else {
+      throw new Error(`Failed to delete user: ${userId}`);
+    }
+  }
+  async getSchemaAttribute(attribute) {
+    const query = "{schema{userSchema{attributes{name,attributeType,isList,isVisible,isEditable}}}}";
+    const data = await this.client.query(query);
+    return data.schema.userSchema.attributes.find((a) => a.name === attribute) || null;
+  }
+  async updateUserAttribute(mutation, userId, attribute, value) {
+    const schemaAttr = await this.getSchemaAttribute(attribute);
+    if (!schemaAttr) {
+      throw new Error(`Attribute ${attribute} is not part of user schema.`);
+    }
+    const isList = schemaAttr.isList;
+    if (mutation === "set" && isList) {
+      throw new Error(`Attribute ${attribute} is a list and cannot be modified using the ${mutation} mutation.`);
+    }
+    if ((mutation === "add" || mutation === "del") && !isList) {
+      throw new Error(`Attribute ${attribute} is not a list and cannot be modified using the ${mutation} mutation.`);
+    }
+    const query = "mutation updateUser($user:UpdateUserInput!){updateUser(user:$user){ok}}";
+    let variables;
+    let resultLine;
+    switch (mutation) {
+      case "set":
+        variables = {
+          user: {
+            id: userId,
+            insertAttributes: { name: attribute, value: value || "" }
+          }
+        };
+        resultLine = `Attribute set for user: ${userId}, attribute: ${attribute}`;
+        if (value && schemaAttr.attributeType !== "JPEG_PHOTO") {
+          resultLine += `, value: ${value}`;
+        }
+        break;
+      case "clear": {
+        const currentValues = await this.getUserAttributeValues(userId, attribute);
+        if (currentValues.length === 0) {
+          throw new Error(`Attribute ${attribute} has no value set for user ${userId}, so nothing to clear.`);
+        }
+        variables = {
+          user: {
+            id: userId,
+            removeAttributes: attribute
+          }
+        };
+        resultLine = `Attribute cleared for user: ${userId}, attribute: ${attribute}`;
+        break;
+      }
+      case "add": {
+        if (!value) {
+          throw new Error("Value is required for add mutation");
+        }
+        const currentValues = await this.getUserAttributeValues(userId, attribute);
+        const newValues = [...currentValues, value];
+        variables = {
+          user: {
+            id: userId,
+            insertAttributes: { name: attribute, value: newValues }
+          }
+        };
+        resultLine = `Attribute list value added for user: ${userId}, attribute: ${attribute}, value: ${value}`;
+        break;
+      }
+      case "del": {
+        if (!value) {
+          throw new Error("Value is required for del mutation");
+        }
+        const currentValues = await this.getUserAttributeValues(userId, attribute);
+        if (!currentValues.includes(value)) {
+          throw new Error(`Attribute ${attribute} has no listed value ${value} for user ${userId}, so no value to delete.`);
+        }
+        const newValues = currentValues.filter((v) => v !== value);
+        if (newValues.length === 0) {
+          return this.updateUserAttribute("clear", userId, attribute);
+        }
+        variables = {
+          user: {
+            id: userId,
+            insertAttributes: { name: attribute, value: newValues }
+          }
+        };
+        resultLine = `Attribute list value deleted for user: ${userId}, attribute: ${attribute}, value: ${value}`;
+        break;
+      }
+      default:
+        throw new Error(`Unknown mutation type: ${mutation}`);
+    }
+    await this.client.query(query, variables);
+    console.log(resultLine);
+  }
+  validateInput(value, fieldName) {
+    const dangerousChars = /[;&|`$()<>\\"\n\r\t\0]/;
+    if (dangerousChars.test(value)) {
+      throw new Error(`Invalid ${fieldName}: contains potentially dangerous characters`);
+    }
+    if (!value || value.trim().length === 0) {
+      throw new Error(`Invalid ${fieldName}: cannot be empty`);
+    }
+  }
+  validatePassword(password) {
+    if (password.length < 8) {
+      throw new Error("New password is too short, expected at least 8 characters");
+    }
+    if (password.length > 128) {
+      throw new Error("New password is too long, maximum 128 characters");
+    }
+    const hasLetter = /[a-zA-Z]/.test(password);
+    const hasNumber = /[0-9]/.test(password);
+    if (!hasLetter || !hasNumber) {
+      throw new Error("Password must contain at least one letter and one number");
+    }
+  }
+  async setPassword(userId, password, httpUrl, token) {
+    this.validateInput(userId, "userId");
+    this.validatePassword(password);
+    this.validateInput(httpUrl, "httpUrl");
+    this.validateInput(token, "token");
+    const proc = Bun.spawn(["lldap_set_password", "-b", httpUrl, `--token=${token}`, "-u", userId], {
+      stdin: "pipe",
+      stdout: "pipe",
+      stderr: "pipe"
+    });
+    const stdin = proc.stdin;
+    stdin.write(new TextEncoder().encode(password + `
+`));
+    stdin.end();
+    const exitCode = await proc.exited;
+    if (exitCode !== 0) {
+      const stderr = await new Response(proc.stderr).text();
+      const sanitizedError = stderr.replace(/token[=:]\S+/gi, "token=[REDACTED]");
+      throw new Error(`Failed to set password: ${sanitizedError}`);
+    }
+  }
+  async addToGroup(userId, groupId) {
+    const query = "mutation addUserToGroup($userId:String!,$groupId:Int!){addUserToGroup(userId:$userId,groupId:$groupId){ok}}";
+    await this.client.query(query, { userId, groupId });
+  }
+  async removeFromGroup(userId, groupId) {
+    const query = "mutation removeUserFromGroup($userId:String!,$groupId:Int!){removeUserFromGroup(userId:$userId,groupId:$groupId){ok}}";
+    await this.client.query(query, { userId, groupId });
+  }
+}
+
+// src/groups.ts
+class GroupService {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  async getGroups() {
+    const query = "{groups{id creationDate uuid displayName}}";
+    const data = await this.client.query(query);
+    return data.groups;
+  }
+  async getGroupId(name) {
+    const groups = await this.getGroups();
+    const group = groups.find((g) => g.displayName === name);
+    if (!group) {
+      throw new Error(`Failed to retrieve group ID for group: ${name}`);
+    }
+    return group.id;
+  }
+  async searchGroups(pattern) {
+    const groups = await this.getGroups();
+    const regex = this.globToRegex(pattern);
+    return groups.filter((g) => regex.test(g.displayName));
+  }
+  globToRegex(pattern) {
+    const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
+    return new RegExp(`^${escaped}$`, "i");
+  }
+  async listUserIdsByGroupName(groupName) {
+    const groupId = await this.getGroupId(groupName);
+    const query = "query listUsersByGroupName($id:Int!){group:group(groupId:$id){users{id}}}";
+    const data = await this.client.query(query, { id: groupId });
+    return data.group.users.map((u) => u.id);
+  }
+  async listUserEmailsByGroupName(groupName) {
+    const groupId = await this.getGroupId(groupName);
+    const query = "query listUsersByGroupName($id:Int!){group:group(groupId:$id){users{email}}}";
+    const data = await this.client.query(query, { id: groupId });
+    return data.group.users.map((u) => u.email);
+  }
+  async listGroupAttributes(groupId) {
+    const query = "query getGroupInfo($id:Int!){group(groupId:$id){attributes{name}}}";
+    const data = await this.client.query(query, { id: groupId });
+    return data.group.attributes.map((a) => a.name).sort();
+  }
+  async getGroupAttributeValues(groupId, attribute) {
+    const query = "query getGroupInfo($id:Int!){group(groupId:$id){attributes{name,value}}}";
+    const data = await this.client.query(query, { id: groupId });
+    const attr = data.group.attributes.find((a) => a.name === attribute);
+    return attr?.value || [];
+  }
+  async createGroup(name) {
+    const query = "mutation createGroup($group:String!){createGroup(name:$group){id}}";
+    await this.client.query(query, { group: name });
+    console.log(`Created group: ${name}`);
+  }
+  async deleteGroup(name) {
+    const groupId = await this.getGroupId(name);
+    const query = "mutation deleteGroup($id:Int!){deleteGroup(groupId:$id){ok}}";
+    const data = await this.client.query(query, { id: groupId });
+    if (data.deleteGroup.ok) {
+      console.log(`Deleted group: ${name}`);
+    } else {
+      throw new Error(`Failed to delete group: ${name}`);
+    }
+  }
+  async getSchemaAttribute(attribute) {
+    const query = "{schema{groupSchema{attributes{name,attributeType,isList,isVisible,isEditable}}}}";
+    const data = await this.client.query(query);
+    return data.schema.groupSchema.attributes.find((a) => a.name === attribute) || null;
+  }
+  async updateGroupAttribute(mutation, groupName, attribute, value) {
+    const groupId = await this.getGroupId(groupName);
+    const schemaAttr = await this.getSchemaAttribute(attribute);
+    if (!schemaAttr) {
+      throw new Error(`Attribute ${attribute} is not part of group schema.`);
+    }
+    const isList = schemaAttr.isList;
+    if (mutation === "set" && isList) {
+      throw new Error(`Attribute ${attribute} is a list and cannot be modified using the ${mutation} mutation.`);
+    }
+    if ((mutation === "add" || mutation === "del") && !isList) {
+      throw new Error(`Attribute ${attribute} is not a list and cannot be modified using the ${mutation} mutation.`);
+    }
+    const query = "mutation updateGroup($group:UpdateGroupInput!){updateGroup(group:$group){ok}}";
+    let variables;
+    let resultLine;
+    switch (mutation) {
+      case "set":
+        variables = {
+          group: {
+            id: groupId,
+            insertAttributes: { name: attribute, value: value || "" }
+          }
+        };
+        resultLine = `Attribute set for group: ${groupName}, attribute: ${attribute}`;
+        if (value && schemaAttr.attributeType !== "JPEG_PHOTO") {
+          resultLine += `, value: ${value}`;
+        }
+        break;
+      case "clear": {
+        const currentValues = await this.getGroupAttributeValues(groupId, attribute);
+        if (currentValues.length === 0) {
+          throw new Error(`Attribute ${attribute} has no value set for group ${groupName}, so nothing to clear.`);
+        }
+        variables = {
+          group: {
+            id: groupId,
+            removeAttributes: attribute
+          }
+        };
+        resultLine = `Attribute cleared for group: ${groupName}, attribute: ${attribute}`;
+        break;
+      }
+      case "add": {
+        if (!value) {
+          throw new Error("Value is required for add mutation");
+        }
+        const currentValues = await this.getGroupAttributeValues(groupId, attribute);
+        const newValues = [...currentValues, value];
+        variables = {
+          group: {
+            id: groupId,
+            insertAttributes: { name: attribute, value: newValues }
+          }
+        };
+        resultLine = `Attribute list value added for group: ${groupName}, attribute: ${attribute}, value: ${value}`;
+        break;
+      }
+      case "del": {
+        if (!value) {
+          throw new Error("Value is required for del mutation");
+        }
+        const currentValues = await this.getGroupAttributeValues(groupId, attribute);
+        if (!currentValues.includes(value)) {
+          throw new Error(`Attribute ${attribute} has no listed value ${value} for group ${groupName}, so no value to delete.`);
+        }
+        const newValues = currentValues.filter((v) => v !== value);
+        if (newValues.length === 0) {
+          return this.updateGroupAttribute("clear", groupName, attribute);
+        }
+        variables = {
+          group: {
+            id: groupId,
+            insertAttributes: { name: attribute, value: newValues }
+          }
+        };
+        resultLine = `Attribute list value deleted for group: ${groupName}, attribute: ${attribute}, value: ${value}`;
+        break;
+      }
+      default:
+        throw new Error(`Unknown mutation type: ${mutation}`);
+    }
+    await this.client.query(query, variables);
+    console.log(resultLine);
+  }
+}
+
+// src/schema.ts
+class SchemaService {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  async getUserAttributes() {
+    const query = "{schema{userSchema{attributes{name,attributeType,isList,isVisible,isEditable}}}}";
+    const data = await this.client.query(query);
+    return data.schema.userSchema.attributes;
+  }
+  async getUserAttributeType(name) {
+    const attributes = await this.getUserAttributes();
+    const attr = attributes.find((a) => a.name === name);
+    if (!attr) {
+      throw new Error(`Attribute ${name} is not part of user schema.`);
+    }
+    return attr.attributeType;
+  }
+  async isUserAttributeList(name) {
+    const attributes = await this.getUserAttributes();
+    const attr = attributes.find((a) => a.name === name);
+    if (!attr) {
+      throw new Error(`Attribute ${name} is not part of user schema.`);
+    }
+    return attr.isList;
+  }
+  async addUserAttribute(name, type, options = {}) {
+    const query = `mutation addUserAttribute($name:String!,$type:AttributeType!,$isList:Boolean!,$isVisible:Boolean!,$isEditable:Boolean!){
+      addUserAttribute(name:$name,attributeType:$type,isList:$isList,isVisible:$isVisible,isEditable:$isEditable){ok}
+    }`;
+    const variables = {
+      name,
+      type,
+      isList: options.isList ?? false,
+      isVisible: options.isVisible ?? false,
+      isEditable: options.isEditable ?? false
+    };
+    const data = await this.client.query(query, variables);
+    if (data.addUserAttribute.ok) {
+      console.log(`Added in schema new user attribute: ${name}`);
+    }
+  }
+  async deleteUserAttribute(name) {
+    const query = "mutation deleteUserAttribute($name:String!){deleteUserAttribute(name:$name){ok}}";
+    const data = await this.client.query(query, { name });
+    if (data.deleteUserAttribute.ok) {
+      console.log(`Deleted from schema user attribute: ${name}`);
+    }
+  }
+  async getGroupAttributes() {
+    const query = "{schema{groupSchema{attributes{name,attributeType,isList,isVisible,isEditable}}}}";
+    const data = await this.client.query(query);
+    return data.schema.groupSchema.attributes;
+  }
+  async getGroupAttributeType(name) {
+    const attributes = await this.getGroupAttributes();
+    const attr = attributes.find((a) => a.name === name);
+    if (!attr) {
+      throw new Error(`Attribute ${name} is not part of group schema.`);
+    }
+    return attr.attributeType;
+  }
+  async isGroupAttributeList(name) {
+    const attributes = await this.getGroupAttributes();
+    const attr = attributes.find((a) => a.name === name);
+    if (!attr) {
+      throw new Error(`Attribute ${name} is not part of group schema.`);
+    }
+    return attr.isList;
+  }
+  async addGroupAttribute(name, type, options = {}) {
+    const query = `mutation addGroupAttribute($name:String!,$type:AttributeType!,$isList:Boolean!,$isVisible:Boolean!,$isEditable:Boolean!){
+      addGroupAttribute(name:$name,attributeType:$type,isList:$isList,isVisible:$isVisible,isEditable:$isEditable){ok}
+    }`;
+    const variables = {
+      name,
+      type,
+      isList: options.isList ?? false,
+      isVisible: options.isVisible ?? false,
+      isEditable: options.isEditable ?? false
+    };
+    const data = await this.client.query(query, variables);
+    if (data.addGroupAttribute.ok) {
+      console.log(`Added in schema new group attribute: ${name}`);
+    }
+  }
+  async deleteGroupAttribute(name) {
+    const query = "mutation deleteGroupAttribute($name:String!){deleteGroupAttribute(name:$name){ok}}";
+    const data = await this.client.query(query, { name });
+    if (data.deleteGroupAttribute.ok) {
+      console.log(`Deleted from schema group attribute: ${name}`);
+    }
+  }
+  async listUserObjectClasses() {
+    const query = "{schema{userSchema{extraLdapObjectClasses}}}";
+    const data = await this.client.query(query);
+    return data.schema.userSchema.extraLdapObjectClasses;
+  }
+  async addUserObjectClass(name) {
+    const query = "mutation addUserObjectClass($name:String!){addUserObjectClass(name:$name){ok}}";
+    const data = await this.client.query(query, { name });
+    if (data.addUserObjectClass.ok) {
+      console.log(`Defined in schema new LDAP extra user object class: ${name}`);
+    }
+  }
+  async deleteUserObjectClass(name) {
+    const query = "mutation deleteUserObjectClass($name:String!){deleteUserObjectClass(name:$name){ok}}";
+    const data = await this.client.query(query, { name });
+    if (data.deleteUserObjectClass.ok) {
+      console.log(`Deleted from schema LDAP extra user object class: ${name}`);
+    }
+  }
+  async listGroupObjectClasses() {
+    const query = "{schema{groupSchema{extraLdapObjectClasses}}}";
+    const data = await this.client.query(query);
+    return data.schema.groupSchema.extraLdapObjectClasses;
+  }
+  async addGroupObjectClass(name) {
+    const query = "mutation addGroupObjectClass($name:String!){addGroupObjectClass(name:$name){ok}}";
+    const data = await this.client.query(query, { name });
+    if (data.addGroupObjectClass.ok) {
+      console.log(`Defined in schema new LDAP extra group object class: ${name}`);
+    }
+  }
+  async deleteGroupObjectClass(name) {
+    const query = "mutation deleteGroupObjectClass($name:String!){deleteGroupObjectClass(name:$name){ok}}";
+    const data = await this.client.query(query, { name });
+    if (data.deleteGroupObjectClass.ok) {
+      console.log(`Deleted from schema LDAP extra group object class: ${name}`);
+    }
+  }
+}
+
+// src/formatters.ts
+function formatUsersTable(users) {
+  const headers = ["User ID (user_id)", "Email (mail)", "Display Name (display_name)"];
+  const rows = users.map((u) => [u.id, u.email, u.displayName]);
+  return formatTable(headers, rows);
+}
+function formatGroupsTable(groups) {
+  const headers = ["Group ID", "Creation date", "UUID", "Display Name"];
+  const rows = groups.map((g) => [String(g.id), g.creationDate, g.uuid, g.displayName]);
+  return formatTable(headers, rows);
+}
+function formatSchemaAttributesTable(attributes) {
+  const headers = ["Name", "Type", "Is list", "Is visible", "Is editable"];
+  const rows = attributes.map((a) => [
+    a.name,
+    a.attributeType,
+    String(a.isList),
+    String(a.isVisible),
+    String(a.isEditable)
+  ]);
+  return formatTable(headers, rows);
+}
+function formatTable(headers, rows) {
+  const allRows = [headers, ...rows];
+  const widths = headers.map((_, i) => Math.max(...allRows.map((row) => (row[i] || "").length)));
+  const headerLine = headers.map((h, i) => h.padEnd(widths[i])).join("  ");
+  const separatorLine = widths.map((w) => "-".repeat(w)).join("  ");
+  const dataLines = rows.map((row) => row.map((cell, i) => (cell || "").padEnd(widths[i])).join("  "));
+  return [headerLine, separatorLine, ...dataLines].join(`
+`);
+}
+function formatList(items) {
+  return items.join(`
+`);
+}
+
+// src/errors.ts
+class CliError2 extends Error {
+  exitCode;
+  constructor(message, exitCode = ExitCode.ERROR) {
+    super(message);
+    this.name = "CliError";
+    this.exitCode = exitCode;
+  }
+}
+
+// src/exitCodes.ts
+var ExitCode2 = {
+  SUCCESS: 0,
+  ERROR: 1,
+  USAGE: 64,
+  DATAERR: 65,
+  NOINPUT: 66,
+  NOUSER: 67,
+  NOHOST: 68,
+  UNAVAILABLE: 69,
+  SOFTWARE: 70,
+  OSERR: 71,
+  OSFILE: 72,
+  CANTCREAT: 73,
+  IOERR: 74,
+  TEMPFAIL: 75,
+  PROTOCOL: 76,
+  NOPERM: 77,
+  CONFIG: 78
+};
+// package.json
+var package_default = {
+  name: "lldap-cli",
+  version: "1.0.3",
+  description: "CLI tool for managing LLDAP (Lightweight LDAP) users, groups, and schema",
+  type: "module",
+  bin: {
+    "lldap-cli": "./dist/cli.js"
+  },
+  files: [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  scripts: {
+    build: "bun build ./src/cli.ts --outdir ./dist --target node",
+    dev: "bun run ./src/cli.ts",
+    lint: "eslint src tests",
+    "lint:fix": "eslint src tests --fix",
+    test: "bun test",
+    "test:watch": "bun test --watch",
+    typecheck: "tsc --noEmit",
+    prepublishOnly: "bun run build"
+  },
+  dependencies: {
+    commander: "^12.1.0"
+  },
+  devDependencies: {
+    "@eslint/js": "^9.0.0",
+    "@types/bun": "^1.1.14",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
+    "@typescript-eslint/parser": "^8.0.0",
+    eslint: "^9.0.0",
+    typescript: "^5.7.2",
+    "typescript-eslint": "^8.0.0"
+  },
+  keywords: [
+    "lldap",
+    "ldap",
+    "cli",
+    "user-management",
+    "graphql",
+    "bun",
+    "typescript"
+  ],
+  author: "Stephen Eaton",
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/madeinoz67/lldap-cli.git"
+  },
+  homepage: "https://github.com/madeinoz67/lldap-cli#readme",
+  bugs: {
+    url: "https://github.com/madeinoz67/lldap-cli/issues"
+  },
+  engines: {
+    node: ">=18.0.0"
+  }
+};
+
+// src/cli.ts
+function loadEnvFile() {
+  const envPath = ".env";
+  if (existsSync3(envPath)) {
+    const content = readFileSync3(envPath, "utf-8");
+    for (const line of content.split(`
+`)) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#"))
+        continue;
+      const match = trimmed.match(/^([^=]+)=(.*)$/);
+      if (match) {
+        const [, key, value] = match;
+        if (!process.env[key.trim()]) {
+          const cleanValue = value.trim().replace(/^["']|["']$/g, "");
+          process.env[key.trim()] = cleanValue;
+        }
+      }
+    }
+  }
+}
+loadEnvFile();
+var program2 = new Command;
+var APP_NAME = package_default.name;
+var APP_VERSION = package_default.version;
+var APP_AUTHOR = package_default.author;
+var globalOptions = {};
+var quietMode = false;
+function printHeader() {
+  if (!quietMode) {
+    console.error(`${APP_NAME} v${APP_VERSION} - ${APP_AUTHOR}`);
+    console.error("");
+  }
+}
+program2.name(APP_NAME).description("CLI tool for managing LLDAP (Lightweight LDAP) users, groups, and schema").version(APP_VERSION, "-V, --version", "Output the version number").addHelpText("beforeAll", `${APP_NAME} v${APP_VERSION} - ${APP_AUTHOR}
+`).option("-H, --http-url <url>", "HTTP base URL of the LLDAP management interface").option("-u, --username <username>", "Username of the admin account").option("-t, --token <token>", "Authentication token (prefer LLDAP_TOKEN env var)").option("-r, --refresh-token <token>", "Refresh token (prefer LLDAP_REFRESHTOKEN env var)").option("-q, --quiet", "Suppress header and non-essential output").option("--debug", "Enable debug output (WARNING: may expose sensitive info in logs)").hook("preAction", async (thisCommand) => {
+  const opts = thisCommand.opts();
+  quietMode = opts.quiet || false;
+  printHeader();
+  globalOptions = {
+    httpUrl: opts.httpUrl,
+    username: opts.username,
+    token: opts.token,
+    refreshToken: opts.refreshToken
+  };
+  if (opts.debug) {
+    console.error("WARNING: Debug mode enabled. Output may contain sensitive information.");
+    console.error("Do not use in production or share debug output publicly.");
+    LldapClient.setDebugEnabled(true);
+  }
+});
+program2.command("login").description("Authenticate and print tokens for subsequent commands").option("-p, --prompt-password", "Prompt for password (recommended)").option("-w, --password <password>", "Password (less secure than -p)").option("-o, --output <file>", "Write tokens to file instead of stdout (more secure)").option("-q, --quiet", "Suppress security warnings").action(async (opts) => {
+  try {
+    if (opts.promptPassword) {
+      process.stderr.write("Login password: ");
+      const pwd = await readPassword();
+      if (!pwd) {
+        console.error("ERROR: No password provided");
+        process.exit(ExitCode2.USAGE);
+      }
+      globalOptions.password = pwd;
+    } else if (opts.password) {
+      globalOptions.password = opts.password;
+    }
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    let token;
+    let refreshToken;
+    if (config.refreshToken && !config.password) {
+      token = await client.refresh();
+      refreshToken = config.refreshToken;
+    } else {
+      const tokens = await client.login();
+      token = tokens.token;
+      refreshToken = tokens.refreshToken;
+    }
+    const output = `export LLDAP_TOKEN=${token}
+export LLDAP_REFRESHTOKEN=${refreshToken}
+`;
+    if (opts.output) {
+      const fs = await import("fs");
+      fs.writeFileSync(opts.output, output, { mode: 384 });
+      console.error(`Tokens written to ${opts.output} (mode 600)`);
+      console.error(`Source with: source ${opts.output}`);
+    } else {
+      if (!opts.quiet) {
+        console.error("WARNING: Tokens will be displayed. Consider using -o <file> for better security.");
+        console.error("Suppress this warning with -q or --quiet");
+      }
+      console.log(output.trim());
+    }
+  } catch (error) {
+    handleError(error);
+  }
+});
+program2.command("logout").description("Invalidate refresh token and associated tokens").action(async () => {
+  try {
+    const config = buildConfig(globalOptions);
+    if (!config.refreshToken) {
+      console.error("ERROR: A refresh token is not available for logout.");
+      process.exit(ExitCode2.CONFIG);
+    }
+    const client = new LldapClient(config);
+    await client.logout();
+    console.log("unset LLDAP_TOKEN");
+    console.log("unset LLDAP_REFRESHTOKEN");
+    console.error("Refresh token and any associated tokens are invalidated.");
+  } catch (error) {
+    handleError(error);
+  }
+});
+var userCommand = program2.command("user").description("User management commands");
+userCommand.command("list [field]").description("List users (field: uid, email, or all)").option("-g, --group <name>", "Filter by group membership").action(async (field = "uid", opts) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    let users = opts.group ? await userService.getUsersByGroup(opts.group) : await userService.getUsers();
+    let output;
+    if (field === "uid") {
+      output = formatList(users.map((u) => u.id));
+    } else if (field === "email") {
+      output = formatList(users.map((u) => u.email).sort());
+    } else if (field === "all") {
+      output = formatUsersTable(users);
+    } else {
+      console.error(`ERROR: Unknown field '${field}'. Use: uid, email, or all`);
+      process.exit(ExitCode2.USAGE);
+    }
+    console.log(output);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+userCommand.command("search <pattern>").description("Search users by pattern (uid, email, or display name). Supports * and ? wildcards").action(async (pattern) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    const users = await userService.searchUsers(pattern);
+    if (users.length === 0) {
+      console.error(`No users found matching: ${pattern}`);
+      process.exit(ExitCode2.SUCCESS);
+    }
+    console.log(formatUsersTable(users));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+userCommand.command("add <uid> <email>").description("Create a new user").option("-P, --prompt-password", "Prompt for user password (recommended)").option("-d, --display-name <name>", "Display name").option("-f, --first-name <name>", "First name").option("-l, --last-name <name>", "Last name").option("-a, --avatar <file>", "Avatar image file").action(async (uid, email, opts) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    let userPassword;
+    if (opts.promptPassword) {
+      process.stdout.write("New user password: ");
+      userPassword = await readPassword();
+    }
+    await userService.createUser(uid, email, {
+      displayName: opts.displayName,
+      firstName: opts.firstName,
+      lastName: opts.lastName,
+      avatar: opts.avatar
+    });
+    if (userPassword) {
+      const token = client.getToken();
+      if (token) {
+        await userService.setPassword(uid, userPassword, config.httpUrl, token);
+      }
+    }
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+userCommand.command("del <uid>").description("Delete a user").action(async (uid) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    const resolvedUid = await userService.resolveUserId(uid);
+    await userService.deleteUser(resolvedUid);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+userCommand.command("update <mutation> <uid> <attribute> [value]").description("Update a user attribute (mutation: set, clear, add, del)").action(async (mutation, uid, attribute, value) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    const resolvedUid = await userService.resolveUserId(uid);
+    if (attribute === "password") {
+      if (mutation !== "set") {
+        console.error(`ERROR: Mutation ${mutation} not supported for attribute password. Use set instead.`);
+        process.exit(ExitCode2.USAGE);
+      }
+      let password = value;
+      if (!password) {
+        process.stdout.write("New user password: ");
+        password = await readPassword();
+      }
+      const token = client.getToken();
+      if (token) {
+        await userService.setPassword(resolvedUid, password, config.httpUrl, token);
+      }
+    } else {
+      await userService.updateUserAttribute(mutation, resolvedUid, attribute, value);
+    }
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+userCommand.command("info [uid]").description("Show user information").action(async (uid) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    const users = await userService.getUsers();
+    if (uid) {
+      const resolvedUid = await userService.resolveUserId(uid);
+      const filteredUsers = users.filter((u) => u.id === resolvedUid);
+      console.log(formatUsersTable(filteredUsers));
+    } else {
+      console.log(formatUsersTable(users));
+    }
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+var userAttributeCommand = userCommand.command("attribute").description("User attribute commands");
+userAttributeCommand.command("list <uid>").description("List attributes for a user").action(async (uid) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    const resolvedUid = await userService.resolveUserId(uid);
+    const attributes = await userService.listUserAttributes(resolvedUid);
+    console.log(formatList(attributes));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+userAttributeCommand.command("values <uid> <attribute>").description("Get values for a user attribute").action(async (uid, attribute) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    const resolvedUid = await userService.resolveUserId(uid);
+    const values = await userService.getUserAttributeValues(resolvedUid, attribute);
+    console.log(formatList(values));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+var userGroupCommand = userCommand.command("group").description("User group membership commands");
+userGroupCommand.command("add <uid> <groupName>").description("Add user to a group").action(async (uid, groupName) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    const groupService = new GroupService(client);
+    const resolvedUid = await userService.resolveUserId(uid);
+    const groupId = await groupService.getGroupId(groupName);
+    await userService.addToGroup(resolvedUid, groupId);
+    console.log(`Added user ${resolvedUid} to group ${groupName}`);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+userGroupCommand.command("del <uid> <groupName>").description("Remove user from a group").action(async (uid, groupName) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    const groupService = new GroupService(client);
+    const resolvedUid = await userService.resolveUserId(uid);
+    const groupId = await groupService.getGroupId(groupName);
+    await userService.removeFromGroup(resolvedUid, groupId);
+    console.log(`Removed user ${resolvedUid} from group ${groupName}`);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+userGroupCommand.command("list <uid>").description("List groups for a user").action(async (uid) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const userService = new UserService(client);
+    const resolvedUid = await userService.resolveUserId(uid);
+    const groups = await userService.getUserGroups(resolvedUid);
+    console.log(formatList(groups));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+var groupCommand = program2.command("group").description("Group management commands");
+groupCommand.command("list").description("List all groups").action(async () => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const groupService = new GroupService(client);
+    const groups = await groupService.getGroups();
+    console.log(formatGroupsTable(groups));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+groupCommand.command("search <pattern>").description("Search groups by pattern. Supports * and ? wildcards").action(async (pattern) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const groupService = new GroupService(client);
+    const groups = await groupService.searchGroups(pattern);
+    if (groups.length === 0) {
+      console.error(`No groups found matching: ${pattern}`);
+      process.exit(ExitCode2.SUCCESS);
+    }
+    console.log(formatGroupsTable(groups));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+groupCommand.command("add <name>").description("Create a new group").action(async (name) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const groupService = new GroupService(client);
+    await groupService.createGroup(name);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+groupCommand.command("del <name>").description("Delete a group").action(async (name) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const groupService = new GroupService(client);
+    await groupService.deleteGroup(name);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+groupCommand.command("update <mutation> <name> <attribute> [value]").description("Update a group attribute (mutation: set, clear, add, del)").action(async (mutation, name, attribute, value) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const groupService = new GroupService(client);
+    await groupService.updateGroupAttribute(mutation, name, attribute, value);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+groupCommand.command("info <name>").description("List users in a group").action(async (name) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const groupService = new GroupService(client);
+    const userIds = await groupService.listUserIdsByGroupName(name);
+    console.log(formatList(userIds));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+var groupAttributeCommand = groupCommand.command("attribute").description("Group attribute commands");
+groupAttributeCommand.command("list <name>").description("List attributes for a group").action(async (name) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const groupService = new GroupService(client);
+    const groupId = await groupService.getGroupId(name);
+    const attributes = await groupService.listGroupAttributes(groupId);
+    console.log(formatList(attributes));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+groupAttributeCommand.command("values <name> <attribute>").description("Get values for a group attribute").action(async (name, attribute) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const groupService = new GroupService(client);
+    const groupId = await groupService.getGroupId(name);
+    const values = await groupService.getGroupAttributeValues(groupId, attribute);
+    console.log(formatList(values));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+var schemaCommand = program2.command("schema").description("Schema management commands");
+var schemaAttributeCommand = schemaCommand.command("attribute").description("Schema attribute commands");
+var schemaUserCommand = schemaAttributeCommand.command("user").description("User schema attribute commands");
+schemaUserCommand.command("list").description("List user schema attributes").action(async () => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    const attributes = await schemaService.getUserAttributes();
+    console.log(formatSchemaAttributesTable(attributes));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+schemaUserCommand.command("add <name> <type>").description("Add a user schema attribute (type: string, integer, date_time, jpeg_photo)").option("-l, --list", "Attribute is a list").option("-v, --visible", "Attribute is visible").option("-e, --editable", "Attribute is editable").action(async (name, type, opts) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    await schemaService.addUserAttribute(name, type.toUpperCase(), {
+      isList: opts.list,
+      isVisible: opts.visible,
+      isEditable: opts.editable
+    });
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+schemaUserCommand.command("del <name>").description("Delete a user schema attribute").action(async (name) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    await schemaService.deleteUserAttribute(name);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+var schemaGroupCommand = schemaAttributeCommand.command("group").description("Group schema attribute commands");
+schemaGroupCommand.command("list").description("List group schema attributes").action(async () => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    const attributes = await schemaService.getGroupAttributes();
+    console.log(formatSchemaAttributesTable(attributes));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+schemaGroupCommand.command("add <name> <type>").description("Add a group schema attribute (type: string, integer, date_time, jpeg_photo)").option("-l, --list", "Attribute is a list").option("-v, --visible", "Attribute is visible").option("-e, --editable", "Attribute is editable").action(async (name, type, opts) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    await schemaService.addGroupAttribute(name, type.toUpperCase(), {
+      isList: opts.list,
+      isVisible: opts.visible,
+      isEditable: opts.editable
+    });
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+schemaGroupCommand.command("del <name>").description("Delete a group schema attribute").action(async (name) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    await schemaService.deleteGroupAttribute(name);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+var schemaObjectClassCommand = schemaCommand.command("objectclass").description("Schema object class commands");
+var objectClassUserCommand = schemaObjectClassCommand.command("user").description("User object class commands");
+objectClassUserCommand.command("list").description("List user object classes").action(async () => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    const classes = await schemaService.listUserObjectClasses();
+    console.log(formatList(classes));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+objectClassUserCommand.command("add <name>").description("Add a user object class").action(async (name) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    await schemaService.addUserObjectClass(name);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+objectClassUserCommand.command("del <name>").description("Delete a user object class").action(async (name) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    await schemaService.deleteUserObjectClass(name);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+var objectClassGroupCommand = schemaObjectClassCommand.command("group").description("Group object class commands");
+objectClassGroupCommand.command("list").description("List group object classes").action(async () => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    const classes = await schemaService.listGroupObjectClasses();
+    console.log(formatList(classes));
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+objectClassGroupCommand.command("add <name>").description("Add a group object class").action(async (name) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    await schemaService.addGroupObjectClass(name);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+objectClassGroupCommand.command("del <name>").description("Delete a group object class").action(async (name) => {
+  try {
+    const config = buildConfig(globalOptions);
+    const client = new LldapClient(config);
+    const schemaService = new SchemaService(client);
+    await schemaService.deleteGroupObjectClass(name);
+    await client.cleanup();
+  } catch (error) {
+    handleError(error);
+  }
+});
+async function readPassword() {
+  const { execSync } = await import("child_process");
+  const fs = await import("fs");
+  try {
+    if (fs.existsSync("/dev/tty")) {
+      const ttyFd = fs.openSync("/dev/tty", "r");
+      const ttyStream = fs.createReadStream("", { fd: ttyFd, autoClose: true });
+      execSync("stty -echo < /dev/tty", { stdio: "pipe" });
+      const readline = await import("readline");
+      const rl = readline.createInterface({
+        input: ttyStream,
+        output: process.stderr,
+        terminal: false
+      });
+      const password = await new Promise((resolve2) => {
+        rl.once("line", (line) => {
+          rl.close();
+          resolve2(line);
+        });
+      });
+      execSync("stty echo < /dev/tty", { stdio: "pipe" });
+      process.stderr.write(`
+`);
+      ttyStream.destroy();
+      return password.trim();
+    }
+  } catch {
+    try {
+      execSync("stty echo < /dev/tty", { stdio: "pipe" });
+    } catch {}
+  }
+  if (process.stdin.isTTY) {
+    try {
+      execSync("stty -echo", { stdio: "inherit" });
+      const readline = await import("readline");
+      const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        terminal: false
+      });
+      const password = await new Promise((resolve2) => {
+        rl.once("line", (line) => {
+          rl.close();
+          resolve2(line);
+        });
+      });
+      execSync("stty echo", { stdio: "inherit" });
+      process.stdout.write(`
+`);
+      return password.trim();
+    } catch {
+      try {
+        execSync("stty echo", { stdio: "inherit" });
+      } catch {}
+      throw new Error("Failed to read password securely");
+    }
+  }
+  const text = await Bun.stdin.text();
+  const firstLine = text.split(`
+`)[0] || "";
+  return firstLine.trim();
+}
+function handleError(error) {
+  if (error instanceof CliError2) {
+    console.error(`ERROR: ${error.message}`);
+    process.exit(error.exitCode);
+  } else if (error instanceof Error) {
+    console.error(`ERROR: ${error.message}`);
+  } else {
+    console.error("ERROR: An unknown error occurred");
+  }
+  process.exit(ExitCode2.ERROR);
+}
+program2.parse();