securewithtrace 0.18.0 → 0.18.2

package/dist/index.js

@@ -1160,7 +1160,7 @@ var require_command = __commonJS({
     var childProcess = __require("child_process");
     var path = __require("path");
     var fs = __require("fs");
-    var process3 = __require("process");
+    var process4 = __require("process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
     var { CommanderError: CommanderError2 } = require_error();
     var { Help: Help2, stripColor } = require_help();
@@ -1207,13 +1207,13 @@ var require_command = __commonJS({
         this._showSuggestionAfterError = true;
         this._savedState = null;
         this._outputConfiguration = {
-          writeOut: (str) => process3.stdout.write(str),
-          writeErr: (str) => process3.stderr.write(str),
+          writeOut: (str) => process4.stdout.write(str),
+          writeErr: (str) => process4.stderr.write(str),
           outputError: (str, write) => write(str),
-          getOutHelpWidth: () => process3.stdout.isTTY ? process3.stdout.columns : void 0,
-          getErrHelpWidth: () => process3.stderr.isTTY ? process3.stderr.columns : void 0,
-          getOutHasColors: () => useColor() ?? (process3.stdout.isTTY && process3.stdout.hasColors?.()),
-          getErrHasColors: () => useColor() ?? (process3.stderr.isTTY && process3.stderr.hasColors?.()),
+          getOutHelpWidth: () => process4.stdout.isTTY ? process4.stdout.columns : void 0,
+          getErrHelpWidth: () => process4.stderr.isTTY ? process4.stderr.columns : void 0,
+          getOutHasColors: () => useColor() ?? (process4.stdout.isTTY && process4.stdout.hasColors?.()),
+          getErrHasColors: () => useColor() ?? (process4.stderr.isTTY && process4.stderr.hasColors?.()),
           stripColor: (str) => stripColor(str)
         };
         this._hidden = false;
@@ -1596,7 +1596,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (this._exitCallback) {
           this._exitCallback(new CommanderError2(exitCode, code, message));
         }
-        process3.exit(exitCode);
+        process4.exit(exitCode);
       }
       /**
        * Register callback `fn` for the command.
@@ -1994,16 +1994,16 @@ Expecting one of '${allowedValues.join("', '")}'`);
         }
         parseOptions = parseOptions || {};
         if (argv === void 0 && parseOptions.from === void 0) {
-          if (process3.versions?.electron) {
+          if (process4.versions?.electron) {
             parseOptions.from = "electron";
           }
-          const execArgv = process3.execArgv ?? [];
+          const execArgv = process4.execArgv ?? [];
           if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
             parseOptions.from = "eval";
           }
         }
         if (argv === void 0) {
-          argv = process3.argv;
+          argv = process4.argv;
         }
         this.rawArgs = argv.slice();
         let userArgs;
@@ -2014,7 +2014,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
             userArgs = argv.slice(2);
             break;
           case "electron":
-            if (process3.defaultApp) {
+            if (process4.defaultApp) {
               this._scriptPath = argv[1];
               userArgs = argv.slice(2);
             } else {
@@ -2201,11 +2201,11 @@ Expecting one of '${allowedValues.join("', '")}'`);
         }
         launchWithNode = sourceExt.includes(path.extname(executableFile));
         let proc;
-        if (process3.platform !== "win32") {
+        if (process4.platform !== "win32") {
           if (launchWithNode) {
             args.unshift(executableFile);
-            args = incrementNodeInspectorPort(process3.execArgv).concat(args);
-            proc = childProcess.spawn(process3.argv[0], args, { stdio: "inherit" });
+            args = incrementNodeInspectorPort(process4.execArgv).concat(args);
+            proc = childProcess.spawn(process4.argv[0], args, { stdio: "inherit" });
           } else {
             proc = childProcess.spawn(executableFile, args, { stdio: "inherit" });
           }
@@ -2216,13 +2216,13 @@ Expecting one of '${allowedValues.join("', '")}'`);
             subcommand._name
           );
           args.unshift(executableFile);
-          args = incrementNodeInspectorPort(process3.execArgv).concat(args);
-          proc = childProcess.spawn(process3.execPath, args, { stdio: "inherit" });
+          args = incrementNodeInspectorPort(process4.execArgv).concat(args);
+          proc = childProcess.spawn(process4.execPath, args, { stdio: "inherit" });
         }
         if (!proc.killed) {
           const signals = ["SIGUSR1", "SIGUSR2", "SIGTERM", "SIGINT", "SIGHUP"];
           signals.forEach((signal) => {
-            process3.on(signal, () => {
+            process4.on(signal, () => {
               if (proc.killed === false && proc.exitCode === null) {
                 proc.kill(signal);
               }
@@ -2233,7 +2233,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
         proc.on("close", (code) => {
           code = code ?? 1;
           if (!exitCallback) {
-            process3.exit(code);
+            process4.exit(code);
           } else {
             exitCallback(
               new CommanderError2(
@@ -2255,7 +2255,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
             throw new Error(`'${executableFile}' not executable`);
           }
           if (!exitCallback) {
-            process3.exit(1);
+            process4.exit(1);
           } else {
             const wrappedError = new CommanderError2(
               1,
@@ -2750,13 +2750,13 @@ Expecting one of '${allowedValues.join("', '")}'`);
        */
       _parseOptionsEnv() {
         this.options.forEach((option) => {
-          if (option.envVar && option.envVar in process3.env) {
+          if (option.envVar && option.envVar in process4.env) {
             const optionKey = option.attributeName();
             if (this.getOptionValue(optionKey) === void 0 || ["default", "config", "env"].includes(
               this.getOptionValueSource(optionKey)
             )) {
               if (option.required || option.optional) {
-                this.emit(`optionEnv:${option.name()}`, process3.env[option.envVar]);
+                this.emit(`optionEnv:${option.name()}`, process4.env[option.envVar]);
               } else {
                 this.emit(`optionEnv:${option.name()}`);
               }
@@ -3211,7 +3211,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        */
       help(contextOptions) {
         this.outputHelp(contextOptions);
-        let exitCode = Number(process3.exitCode ?? 0);
+        let exitCode = Number(process4.exitCode ?? 0);
         if (exitCode === 0 && contextOptions && typeof contextOptions !== "function" && contextOptions.error) {
           exitCode = 1;
         }
@@ -3301,9 +3301,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
       });
     }
     function useColor() {
-      if (process3.env.NO_COLOR || process3.env.FORCE_COLOR === "0" || process3.env.FORCE_COLOR === "false")
+      if (process4.env.NO_COLOR || process4.env.FORCE_COLOR === "0" || process4.env.FORCE_COLOR === "false")
         return false;
-      if (process3.env.FORCE_COLOR || process3.env.CLICOLOR_FORCE !== void 0)
+      if (process4.env.FORCE_COLOR || process4.env.CLICOLOR_FORCE !== void 0)
         return true;
       return void 0;
     }
@@ -8071,12 +8071,12 @@ function $constructor(name, initializer3, params) {
     }
     inst._zod.traits.add(name);
     initializer3(inst, def);
-    const proto = _.prototype;
-    const keys = Object.keys(proto);
+    const proto2 = _.prototype;
+    const keys = Object.keys(proto2);
     for (let i = 0; i < keys.length; i++) {
       const k = keys[i];
       if (!(k in inst)) {
-        inst[k] = proto[k].bind(inst);
+        inst[k] = proto2[k].bind(inst);
       }
     }
   }
@@ -25108,6 +25108,540 @@ function tsvSafe(value) {
   return (value ?? "").replace(/[\t\r\n]/g, " ");
 }
 
+// ../../node_modules/.bun/chalk@5.6.2/node_modules/chalk/source/vendor/ansi-styles/index.js
+var ANSI_BACKGROUND_OFFSET = 10;
+var wrapAnsi16 = (offset = 0) => (code) => `\x1B[${code + offset}m`;
+var wrapAnsi256 = (offset = 0) => (code) => `\x1B[${38 + offset};5;${code}m`;
+var wrapAnsi16m = (offset = 0) => (red, green, blue) => `\x1B[${38 + offset};2;${red};${green};${blue}m`;
+var styles = {
+  modifier: {
+    reset: [0, 0],
+    // 21 isn't widely supported and 22 does the same thing
+    bold: [1, 22],
+    dim: [2, 22],
+    italic: [3, 23],
+    underline: [4, 24],
+    overline: [53, 55],
+    inverse: [7, 27],
+    hidden: [8, 28],
+    strikethrough: [9, 29]
+  },
+  color: {
+    black: [30, 39],
+    red: [31, 39],
+    green: [32, 39],
+    yellow: [33, 39],
+    blue: [34, 39],
+    magenta: [35, 39],
+    cyan: [36, 39],
+    white: [37, 39],
+    // Bright color
+    blackBright: [90, 39],
+    gray: [90, 39],
+    // Alias of `blackBright`
+    grey: [90, 39],
+    // Alias of `blackBright`
+    redBright: [91, 39],
+    greenBright: [92, 39],
+    yellowBright: [93, 39],
+    blueBright: [94, 39],
+    magentaBright: [95, 39],
+    cyanBright: [96, 39],
+    whiteBright: [97, 39]
+  },
+  bgColor: {
+    bgBlack: [40, 49],
+    bgRed: [41, 49],
+    bgGreen: [42, 49],
+    bgYellow: [43, 49],
+    bgBlue: [44, 49],
+    bgMagenta: [45, 49],
+    bgCyan: [46, 49],
+    bgWhite: [47, 49],
+    // Bright color
+    bgBlackBright: [100, 49],
+    bgGray: [100, 49],
+    // Alias of `bgBlackBright`
+    bgGrey: [100, 49],
+    // Alias of `bgBlackBright`
+    bgRedBright: [101, 49],
+    bgGreenBright: [102, 49],
+    bgYellowBright: [103, 49],
+    bgBlueBright: [104, 49],
+    bgMagentaBright: [105, 49],
+    bgCyanBright: [106, 49],
+    bgWhiteBright: [107, 49]
+  }
+};
+var modifierNames = Object.keys(styles.modifier);
+var foregroundColorNames = Object.keys(styles.color);
+var backgroundColorNames = Object.keys(styles.bgColor);
+var colorNames = [...foregroundColorNames, ...backgroundColorNames];
+function assembleStyles() {
+  const codes = /* @__PURE__ */ new Map();
+  for (const [groupName, group] of Object.entries(styles)) {
+    for (const [styleName, style] of Object.entries(group)) {
+      styles[styleName] = {
+        open: `\x1B[${style[0]}m`,
+        close: `\x1B[${style[1]}m`
+      };
+      group[styleName] = styles[styleName];
+      codes.set(style[0], style[1]);
+    }
+    Object.defineProperty(styles, groupName, {
+      value: group,
+      enumerable: false
+    });
+  }
+  Object.defineProperty(styles, "codes", {
+    value: codes,
+    enumerable: false
+  });
+  styles.color.close = "\x1B[39m";
+  styles.bgColor.close = "\x1B[49m";
+  styles.color.ansi = wrapAnsi16();
+  styles.color.ansi256 = wrapAnsi256();
+  styles.color.ansi16m = wrapAnsi16m();
+  styles.bgColor.ansi = wrapAnsi16(ANSI_BACKGROUND_OFFSET);
+  styles.bgColor.ansi256 = wrapAnsi256(ANSI_BACKGROUND_OFFSET);
+  styles.bgColor.ansi16m = wrapAnsi16m(ANSI_BACKGROUND_OFFSET);
+  Object.defineProperties(styles, {
+    rgbToAnsi256: {
+      value(red, green, blue) {
+        if (red === green && green === blue) {
+          if (red < 8) {
+            return 16;
+          }
+          if (red > 248) {
+            return 231;
+          }
+          return Math.round((red - 8) / 247 * 24) + 232;
+        }
+        return 16 + 36 * Math.round(red / 255 * 5) + 6 * Math.round(green / 255 * 5) + Math.round(blue / 255 * 5);
+      },
+      enumerable: false
+    },
+    hexToRgb: {
+      value(hex3) {
+        const matches = /[a-f\d]{6}|[a-f\d]{3}/i.exec(hex3.toString(16));
+        if (!matches) {
+          return [0, 0, 0];
+        }
+        let [colorString] = matches;
+        if (colorString.length === 3) {
+          colorString = [...colorString].map((character) => character + character).join("");
+        }
+        const integer2 = Number.parseInt(colorString, 16);
+        return [
+          /* eslint-disable no-bitwise */
+          integer2 >> 16 & 255,
+          integer2 >> 8 & 255,
+          integer2 & 255
+          /* eslint-enable no-bitwise */
+        ];
+      },
+      enumerable: false
+    },
+    hexToAnsi256: {
+      value: (hex3) => styles.rgbToAnsi256(...styles.hexToRgb(hex3)),
+      enumerable: false
+    },
+    ansi256ToAnsi: {
+      value(code) {
+        if (code < 8) {
+          return 30 + code;
+        }
+        if (code < 16) {
+          return 90 + (code - 8);
+        }
+        let red;
+        let green;
+        let blue;
+        if (code >= 232) {
+          red = ((code - 232) * 10 + 8) / 255;
+          green = red;
+          blue = red;
+        } else {
+          code -= 16;
+          const remainder = code % 36;
+          red = Math.floor(code / 36) / 5;
+          green = Math.floor(remainder / 6) / 5;
+          blue = remainder % 6 / 5;
+        }
+        const value = Math.max(red, green, blue) * 2;
+        if (value === 0) {
+          return 30;
+        }
+        let result = 30 + (Math.round(blue) << 2 | Math.round(green) << 1 | Math.round(red));
+        if (value === 2) {
+          result += 60;
+        }
+        return result;
+      },
+      enumerable: false
+    },
+    rgbToAnsi: {
+      value: (red, green, blue) => styles.ansi256ToAnsi(styles.rgbToAnsi256(red, green, blue)),
+      enumerable: false
+    },
+    hexToAnsi: {
+      value: (hex3) => styles.ansi256ToAnsi(styles.hexToAnsi256(hex3)),
+      enumerable: false
+    }
+  });
+  return styles;
+}
+var ansiStyles = assembleStyles();
+var ansi_styles_default = ansiStyles;
+
+// ../../node_modules/.bun/chalk@5.6.2/node_modules/chalk/source/vendor/supports-color/index.js
+import process3 from "process";
+import os from "os";
+import tty from "tty";
+function hasFlag(flag, argv = globalThis.Deno ? globalThis.Deno.args : process3.argv) {
+  const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
+  const position = argv.indexOf(prefix + flag);
+  const terminatorPosition = argv.indexOf("--");
+  return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
+}
+var { env } = process3;
+var flagForceColor;
+if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
+  flagForceColor = 0;
+} else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
+  flagForceColor = 1;
+}
+function envForceColor() {
+  if ("FORCE_COLOR" in env) {
+    if (env.FORCE_COLOR === "true") {
+      return 1;
+    }
+    if (env.FORCE_COLOR === "false") {
+      return 0;
+    }
+    return env.FORCE_COLOR.length === 0 ? 1 : Math.min(Number.parseInt(env.FORCE_COLOR, 10), 3);
+  }
+}
+function translateLevel(level) {
+  if (level === 0) {
+    return false;
+  }
+  return {
+    level,
+    hasBasic: true,
+    has256: level >= 2,
+    has16m: level >= 3
+  };
+}
+function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
+  const noFlagForceColor = envForceColor();
+  if (noFlagForceColor !== void 0) {
+    flagForceColor = noFlagForceColor;
+  }
+  const forceColor = sniffFlags ? flagForceColor : noFlagForceColor;
+  if (forceColor === 0) {
+    return 0;
+  }
+  if (sniffFlags) {
+    if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
+      return 3;
+    }
+    if (hasFlag("color=256")) {
+      return 2;
+    }
+  }
+  if ("TF_BUILD" in env && "AGENT_NAME" in env) {
+    return 1;
+  }
+  if (haveStream && !streamIsTTY && forceColor === void 0) {
+    return 0;
+  }
+  const min = forceColor || 0;
+  if (env.TERM === "dumb") {
+    return min;
+  }
+  if (process3.platform === "win32") {
+    const osRelease = os.release().split(".");
+    if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
+      return Number(osRelease[2]) >= 14931 ? 3 : 2;
+    }
+    return 1;
+  }
+  if ("CI" in env) {
+    if (["GITHUB_ACTIONS", "GITEA_ACTIONS", "CIRCLECI"].some((key) => key in env)) {
+      return 3;
+    }
+    if (["TRAVIS", "APPVEYOR", "GITLAB_CI", "BUILDKITE", "DRONE"].some((sign) => sign in env) || env.CI_NAME === "codeship") {
+      return 1;
+    }
+    return min;
+  }
+  if ("TEAMCITY_VERSION" in env) {
+    return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
+  }
+  if (env.COLORTERM === "truecolor") {
+    return 3;
+  }
+  if (env.TERM === "xterm-kitty") {
+    return 3;
+  }
+  if (env.TERM === "xterm-ghostty") {
+    return 3;
+  }
+  if (env.TERM === "wezterm") {
+    return 3;
+  }
+  if ("TERM_PROGRAM" in env) {
+    const version2 = Number.parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
+    switch (env.TERM_PROGRAM) {
+      case "iTerm.app": {
+        return version2 >= 3 ? 3 : 2;
+      }
+      case "Apple_Terminal": {
+        return 2;
+      }
+    }
+  }
+  if (/-256(color)?$/i.test(env.TERM)) {
+    return 2;
+  }
+  if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
+    return 1;
+  }
+  if ("COLORTERM" in env) {
+    return 1;
+  }
+  return min;
+}
+function createSupportsColor(stream, options = {}) {
+  const level = _supportsColor(stream, {
+    streamIsTTY: stream && stream.isTTY,
+    ...options
+  });
+  return translateLevel(level);
+}
+var supportsColor = {
+  stdout: createSupportsColor({ isTTY: tty.isatty(1) }),
+  stderr: createSupportsColor({ isTTY: tty.isatty(2) })
+};
+var supports_color_default = supportsColor;
+
+// ../../node_modules/.bun/chalk@5.6.2/node_modules/chalk/source/utilities.js
+function stringReplaceAll(string4, substring, replacer) {
+  let index = string4.indexOf(substring);
+  if (index === -1) {
+    return string4;
+  }
+  const substringLength = substring.length;
+  let endIndex = 0;
+  let returnValue = "";
+  do {
+    returnValue += string4.slice(endIndex, index) + substring + replacer;
+    endIndex = index + substringLength;
+    index = string4.indexOf(substring, endIndex);
+  } while (index !== -1);
+  returnValue += string4.slice(endIndex);
+  return returnValue;
+}
+function stringEncaseCRLFWithFirstIndex(string4, prefix, postfix, index) {
+  let endIndex = 0;
+  let returnValue = "";
+  do {
+    const gotCR = string4[index - 1] === "\r";
+    returnValue += string4.slice(endIndex, gotCR ? index - 1 : index) + prefix + (gotCR ? "\r\n" : "\n") + postfix;
+    endIndex = index + 1;
+    index = string4.indexOf("\n", endIndex);
+  } while (index !== -1);
+  returnValue += string4.slice(endIndex);
+  return returnValue;
+}
+
+// ../../node_modules/.bun/chalk@5.6.2/node_modules/chalk/source/index.js
+var { stdout: stdoutColor, stderr: stderrColor } = supports_color_default;
+var GENERATOR = /* @__PURE__ */ Symbol("GENERATOR");
+var STYLER = /* @__PURE__ */ Symbol("STYLER");
+var IS_EMPTY = /* @__PURE__ */ Symbol("IS_EMPTY");
+var levelMapping = [
+  "ansi",
+  "ansi",
+  "ansi256",
+  "ansi16m"
+];
+var styles2 = /* @__PURE__ */ Object.create(null);
+var applyOptions = (object2, options = {}) => {
+  if (options.level && !(Number.isInteger(options.level) && options.level >= 0 && options.level <= 3)) {
+    throw new Error("The `level` option should be an integer from 0 to 3");
+  }
+  const colorLevel = stdoutColor ? stdoutColor.level : 0;
+  object2.level = options.level === void 0 ? colorLevel : options.level;
+};
+var chalkFactory = (options) => {
+  const chalk2 = (...strings) => strings.join(" ");
+  applyOptions(chalk2, options);
+  Object.setPrototypeOf(chalk2, createChalk.prototype);
+  return chalk2;
+};
+function createChalk(options) {
+  return chalkFactory(options);
+}
+Object.setPrototypeOf(createChalk.prototype, Function.prototype);
+for (const [styleName, style] of Object.entries(ansi_styles_default)) {
+  styles2[styleName] = {
+    get() {
+      const builder = createBuilder(this, createStyler(style.open, style.close, this[STYLER]), this[IS_EMPTY]);
+      Object.defineProperty(this, styleName, { value: builder });
+      return builder;
+    }
+  };
+}
+styles2.visible = {
+  get() {
+    const builder = createBuilder(this, this[STYLER], true);
+    Object.defineProperty(this, "visible", { value: builder });
+    return builder;
+  }
+};
+var getModelAnsi = (model, level, type, ...arguments_) => {
+  if (model === "rgb") {
+    if (level === "ansi16m") {
+      return ansi_styles_default[type].ansi16m(...arguments_);
+    }
+    if (level === "ansi256") {
+      return ansi_styles_default[type].ansi256(ansi_styles_default.rgbToAnsi256(...arguments_));
+    }
+    return ansi_styles_default[type].ansi(ansi_styles_default.rgbToAnsi(...arguments_));
+  }
+  if (model === "hex") {
+    return getModelAnsi("rgb", level, type, ...ansi_styles_default.hexToRgb(...arguments_));
+  }
+  return ansi_styles_default[type][model](...arguments_);
+};
+var usedModels = ["rgb", "hex", "ansi256"];
+for (const model of usedModels) {
+  styles2[model] = {
+    get() {
+      const { level } = this;
+      return function(...arguments_) {
+        const styler = createStyler(getModelAnsi(model, levelMapping[level], "color", ...arguments_), ansi_styles_default.color.close, this[STYLER]);
+        return createBuilder(this, styler, this[IS_EMPTY]);
+      };
+    }
+  };
+  const bgModel = "bg" + model[0].toUpperCase() + model.slice(1);
+  styles2[bgModel] = {
+    get() {
+      const { level } = this;
+      return function(...arguments_) {
+        const styler = createStyler(getModelAnsi(model, levelMapping[level], "bgColor", ...arguments_), ansi_styles_default.bgColor.close, this[STYLER]);
+        return createBuilder(this, styler, this[IS_EMPTY]);
+      };
+    }
+  };
+}
+var proto = Object.defineProperties(() => {
+}, {
+  ...styles2,
+  level: {
+    enumerable: true,
+    get() {
+      return this[GENERATOR].level;
+    },
+    set(level) {
+      this[GENERATOR].level = level;
+    }
+  }
+});
+var createStyler = (open, close, parent) => {
+  let openAll;
+  let closeAll;
+  if (parent === void 0) {
+    openAll = open;
+    closeAll = close;
+  } else {
+    openAll = parent.openAll + open;
+    closeAll = close + parent.closeAll;
+  }
+  return {
+    open,
+    close,
+    openAll,
+    closeAll,
+    parent
+  };
+};
+var createBuilder = (self, _styler, _isEmpty) => {
+  const builder = (...arguments_) => applyStyle(builder, arguments_.length === 1 ? "" + arguments_[0] : arguments_.join(" "));
+  Object.setPrototypeOf(builder, proto);
+  builder[GENERATOR] = self;
+  builder[STYLER] = _styler;
+  builder[IS_EMPTY] = _isEmpty;
+  return builder;
+};
+var applyStyle = (self, string4) => {
+  if (self.level <= 0 || !string4) {
+    return self[IS_EMPTY] ? "" : string4;
+  }
+  let styler = self[STYLER];
+  if (styler === void 0) {
+    return string4;
+  }
+  const { openAll, closeAll } = styler;
+  if (string4.includes("\x1B")) {
+    while (styler !== void 0) {
+      string4 = stringReplaceAll(string4, styler.close, styler.open);
+      styler = styler.parent;
+    }
+  }
+  const lfIndex = string4.indexOf("\n");
+  if (lfIndex !== -1) {
+    string4 = stringEncaseCRLFWithFirstIndex(string4, closeAll, openAll, lfIndex);
+  }
+  return openAll + string4 + closeAll;
+};
+Object.defineProperties(createChalk.prototype, styles2);
+var chalk = createChalk();
+var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
+var source_default = chalk;
+
+// src/theme.ts
+function colorSeverity(severity, text, colorizer = source_default) {
+  switch (severity) {
+    case "CRITICAL":
+      return colorizer.red.bold(text);
+    case "HIGH":
+      return colorizer.hex("#ff6b00").bold(text);
+    case "MEDIUM":
+      return colorizer.yellow(text);
+    case "LOW":
+      return colorizer.cyan(text);
+    case "INFORMATIONAL":
+      return colorizer.gray(text);
+    default:
+      return text;
+  }
+}
+function colorBanner(text, colorizer = source_default) {
+  return colorizer.cyan.bold(text);
+}
+function colorMuted(text, colorizer = source_default) {
+  return colorizer.dim(text);
+}
+function colorSuccess(text, colorizer = source_default) {
+  return colorizer.green(text);
+}
+function colorError(text, colorizer = source_default) {
+  return colorizer.red(text);
+}
+function colorWarning(text, colorizer = source_default) {
+  return colorizer.yellow(text);
+}
+function colorAccentBold(text, colorizer = source_default) {
+  return colorizer.bold.cyan(text);
+}
+function colorAccentUnderline(text, colorizer = source_default) {
+  return colorizer.underline.cyan(text);
+}
+
 // src/auth/commands.ts
 function getClientId() {
   const clientId = "client_01KEZ01W5Q3107GTBY51WQ67HT";
@@ -25172,6 +25706,34 @@ function planOrganizationSelectionPersistence(args) {
 function isSafeOrganizationId(organizationId) {
   return SAFE_ORGANIZATION_ID_PATTERN.test(organizationId);
 }
+function parseOrganizationSelectorInputKey(input) {
+  const rawInput = typeof input === "string" ? input : input.toString("utf8");
+  if (rawInput === "\x1B[A" || rawInput === "\x1BOA") {
+    return "up";
+  }
+  if (rawInput === "\x1B[B" || rawInput === "\x1BOB") {
+    return "down";
+  }
+  if (rawInput === "\r" || rawInput === "\n") {
+    return "enter";
+  }
+  if (rawInput === "\x1B") {
+    return "escape";
+  }
+  if (rawInput === "") {
+    return "interrupt";
+  }
+  return "other";
+}
+function getNextOrganizationSelectionIndex(currentIndex, direction, organizationCount) {
+  if (organizationCount <= 0) {
+    return 0;
+  }
+  if (direction === "up") {
+    return (currentIndex - 1 + organizationCount) % organizationCount;
+  }
+  return (currentIndex + 1) % organizationCount;
+}
 async function fetchOrganizationContext() {
   const result = await authenticatedRequest((client) => client.organization.listMyOrganizations());
   if (result.status !== 200) {
@@ -25285,35 +25847,102 @@ function resolveOrganizationSelectionInput(organizations, input) {
   return findOrganizationByInput(organizations, trimmedInput);
 }
 async function promptForOrganizationSelection(organizations, activeOrganizationId) {
-  console.log("Select an organization:");
-  for (const [index, organization] of organizations.entries()) {
-    const marker = organization.organizationId === activeOrganizationId ? "*" : " ";
-    console.log(
-      `${marker} ${index + 1}) ${sanitizeForOutput(organization.name)} (${sanitizeForOutput(organization.slug)}) - ${organization.organizationId}`
-    );
+  if (organizations.length === 0) {
+    return null;
   }
-  console.log("");
-  const readline = createInterface({
-    input: process.stdin,
-    output: process.stdout
-  });
-  try {
-    while (true) {
-      const input = await readline.question(
-        "Enter number, organization ID, slug, or name (press Enter to cancel): "
-      );
-      if (input.trim().length === 0) {
-        return null;
-      }
-      const selection = resolveOrganizationSelectionInput(organizations, input);
-      if ("organization" in selection) {
-        return selection.organization;
+  if (!process.stdin.setRawMode) {
+    const readline = createInterface({
+      input: process.stdin,
+      output: process.stdout
+    });
+    try {
+      while (true) {
+        const input = await readline.question(
+          "Enter number, organization ID, slug, or name (press Enter to cancel): "
+        );
+        if (input.trim().length === 0) {
+          return null;
+        }
+        const selection = resolveOrganizationSelectionInput(organizations, input);
+        if ("organization" in selection) {
+          return selection.organization;
+        }
+        console.error(selection.error);
       }
-      console.error(selection.error);
+    } finally {
+      readline.close();
     }
-  } finally {
-    readline.close();
   }
+  const stdin = process.stdin;
+  const stdout = process.stdout;
+  const activeOrganizationIndex = organizations.findIndex(
+    (organization) => organization.organizationId === activeOrganizationId
+  );
+  let selectedOrganizationIndex = activeOrganizationIndex >= 0 ? activeOrganizationIndex : 0;
+  let renderedLineCount = 0;
+  const wasRawModeEnabled = Boolean(stdin.isRaw);
+  const renderSelector = () => {
+    const lines = ["Select an organization (use Up/Down arrows and Enter):", ""];
+    for (const [index, organization] of organizations.entries()) {
+      const isSelected = index === selectedOrganizationIndex;
+      const isActive = organization.organizationId === activeOrganizationId;
+      const selectionMarker = isSelected ? ">" : " ";
+      const activeMarker = isActive ? "*" : " ";
+      lines.push(
+        `${selectionMarker} ${activeMarker} ${sanitizeForOutput(organization.name)} (${sanitizeForOutput(organization.slug)}) - ${organization.organizationId}`
+      );
+    }
+    lines.push("", "Press Esc to cancel.");
+    if (renderedLineCount > 0) {
+      stdout.write(`\x1B[${renderedLineCount}A`);
+    }
+    for (const line of lines) {
+      stdout.write(`\x1B[2K${line}
+`);
+    }
+    renderedLineCount = lines.length;
+  };
+  return await new Promise((resolve) => {
+    const finishSelection = (result) => {
+      stdin.off("data", handleInput);
+      stdin.setRawMode(wasRawModeEnabled);
+      stdout.write("\x1B[2K");
+      resolve(result);
+    };
+    const handleInput = (chunk) => {
+      const inputKey = parseOrganizationSelectorInputKey(chunk);
+      if (inputKey === "up") {
+        selectedOrganizationIndex = getNextOrganizationSelectionIndex(
+          selectedOrganizationIndex,
+          "up",
+          organizations.length
+        );
+        renderSelector();
+        return;
+      }
+      if (inputKey === "down") {
+        selectedOrganizationIndex = getNextOrganizationSelectionIndex(
+          selectedOrganizationIndex,
+          "down",
+          organizations.length
+        );
+        renderSelector();
+        return;
+      }
+      if (inputKey === "enter") {
+        const selectedOrganization = organizations[selectedOrganizationIndex];
+        finishSelection(selectedOrganization ?? null);
+        return;
+      }
+      if (inputKey === "escape" || inputKey === "interrupt") {
+        finishSelection(null);
+      }
+    };
+    stdin.setRawMode(true);
+    stdin.resume();
+    stdin.on("data", handleInput);
+    renderSelector();
+  });
 }
 async function refreshAfterOrganizationSwitch(workosOrganizationId, refreshForOrganization = (organizationId) => refreshStoredAccessTokenForOrganization(organizationId)) {
   if (!workosOrganizationId || workosOrganizationId.trim().length === 0) {
@@ -25331,22 +25960,24 @@ Examples:
   ).action(async () => {
     const existingToken = readToken();
     if (existingToken) {
-      console.log("You are already logged in. Run `trace auth logout` first to re-authenticate.");
+      console.log(
+        `${colorWarning("You are already logged in.")} Run \`trace auth logout\` first to re-authenticate.`
+      );
       return;
     }
     const clientId = getClientId();
     console.log("Initiating device authorization...\n");
     const auth = await requestDeviceAuthorization(clientId);
     console.log("Your one-time code is:\n");
-    console.log(`  ${auth.user_code}
+    console.log(`  ${colorAccentBold(auth.user_code)}
 `);
-    console.log(`Open this URL in your browser: ${auth.verification_uri}`);
+    console.log(`Open this URL in your browser: ${colorAccentUnderline(auth.verification_uri)}`);
     console.log("");
     const opened = await openBrowser(auth.verification_uri_complete);
     if (opened) {
-      console.log("A browser window has been opened for you.");
+      console.log(colorSuccess("A browser window has been opened for you."));
     } else {
-      console.log(`Or visit: ${auth.verification_uri_complete}`);
+      console.log(`Or visit: ${colorAccentUnderline(auth.verification_uri_complete)}`);
     }
     console.log("\nWaiting for authorization...");
     const tokenResponse = await pollForToken(clientId, auth.device_code, {
@@ -25357,8 +25988,8 @@ Examples:
     const name = [tokenResponse.user.first_name, tokenResponse.user.last_name].filter(Boolean).join(" ");
     const displayName = name || tokenResponse.user.email;
     console.log(`
-Authenticated as ${displayName} (${tokenResponse.user.email})`);
-    console.log("Tokens saved to ~/.trace");
+${colorSuccess(`Authenticated as ${displayName} (${tokenResponse.user.email})`)}`);
+    console.log(colorSuccess("Tokens saved to ~/.trace"));
   });
 }
 function createLogoutCommand() {
@@ -25370,9 +26001,11 @@ Examples:
   ).action(() => {
     const removed = removeToken();
     if (removed) {
-      console.log("Logged out successfully. Local session data removed from ~/.trace/");
+      console.log(
+        colorSuccess("Logged out successfully. Local session data removed from ~/.trace/")
+      );
     } else {
-      console.log("No active session found.");
+      console.log(colorWarning("No active session found."));
     }
   });
 }
@@ -25437,7 +26070,7 @@ Examples:
       return;
     }
     if (!info.loggedIn) {
-      console.log("Not logged in. Run `tracecli auth login` to authenticate.");
+      console.log(colorError("Not logged in. Run `tracecli auth login` to authenticate."));
       return;
     }
     console.log("Logged in to Trace");
@@ -25451,7 +26084,9 @@ Examples:
       console.log(`  Active Org (CLI): ${info.activeOrg}`);
     }
     if (info.expires) {
-      console.log(`  Expires: ${info.expires}${info.expired ? " (EXPIRED)" : ""}`);
+      console.log(
+        info.expired ? `  Expires: ${info.expires} ${colorError("(EXPIRED)")}` : `  Expires: ${info.expires}`
+      );
     }
     console.log(
       `  Refresh: ${info.hasRefreshToken ? "Available (auto-refresh enabled)" : "Not available"}`
@@ -25637,10 +26272,6 @@ function createAuthCommand() {
 }
 
 // src/banner.ts
-var ESC = "\x1B";
-var RESET = `${ESC}[0m`;
-var CYAN_BOLD = `${ESC}[1;36m`;
-var DIM = `${ESC}[2m`;
 var BANNER = `
  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557
  \u255A\u2550\u2550\u2588\u2588\u2554\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D
@@ -25650,8 +26281,8 @@ var BANNER = `
     \u255A\u2550\u255D   \u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D
 `;
 function showBanner() {
-  console.log(`${CYAN_BOLD}${BANNER}${RESET}`);
-  console.log(`${DIM}  Continuous security vulnerability intelligence${RESET}
+  console.log(colorBanner(BANNER));
+  console.log(`${colorMuted("  Continuous security vulnerability intelligence")}
 `);
 }
 
@@ -26236,10 +26867,11 @@ Examples:
 `);
     for (const finding of sorted) {
       const sev = formatFindingSeverity(finding.severity);
+      const severityLabel = colorSeverity(finding.severity, sev);
       const status = formatStatus(finding.status);
       const cwes = finding.cweIds.length > 0 ? ` | ${finding.cweIds.join(", ")}` : "";
       const score = finding.cvssScore != null ? ` | CVSS ${finding.cvssScore.toFixed(1)}` : "";
-      console.log(`  [${sev}] ${finding.title}`);
+      console.log(`  [${severityLabel}] ${finding.title}`);
       console.log(`         ${finding.category} \xB7 ${status}${cwes}${score}`);
       if (finding.repositories.length > 0) {
         for (const repo of finding.repositories) {
@@ -26268,11 +26900,11 @@ import { chmodSync, mkdtempSync, rmSync as rmSync2, writeFileSync as writeFileSy
 import { tmpdir } from "os";
 import { join as join3 } from "path";
 function stripAnsi(str) {
-  const ESC2 = String.fromCharCode(27);
+  const ESC = String.fromCharCode(27);
   const CSI = String.fromCharCode(155);
   const BEL = String.fromCharCode(7);
-  const csi = `[${ESC2}${CSI}][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]`;
-  const osc = `${ESC2}\\].*?(?:${BEL}|${ESC2}\\\\)`;
+  const csi = `[${ESC}${CSI}][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]`;
+  const osc = `${ESC}\\].*?(?:${BEL}|${ESC}\\\\)`;
   const pattern = new RegExp(`${osc}|${csi}`, "g");
   return str.replace(pattern, "");
 }
@@ -26548,6 +27180,101 @@ function collectFilterExpression(value, previous) {
   previous.push(value);
   return previous;
 }
+function extractErrorMessage(body) {
+  if (typeof body === "object" && body !== null && "message" in body && typeof body.message === "string") {
+    const message = body.message.trim();
+    return message.length > 0 ? message : null;
+  }
+  return null;
+}
+function decodeJwtExpiration(token) {
+  if (!token) {
+    return null;
+  }
+  const parts = token.split(".");
+  const payload = parts[1];
+  if (!payload) {
+    return null;
+  }
+  try {
+    const decoded = JSON.parse(Buffer.from(payload, "base64url").toString("utf-8"));
+    if (typeof decoded.exp !== "number" || !Number.isFinite(decoded.exp)) {
+      return null;
+    }
+    return new Date(decoded.exp * 1e3);
+  } catch {
+    return null;
+  }
+}
+function resolveLocalCloneAuthFailure() {
+  const token = readTokenSafe();
+  if (!token) {
+    return { kind: "not_logged_in", hasRefreshToken: readRefreshToken() !== null };
+  }
+  const expiresAt = decodeJwtExpiration(token);
+  if (expiresAt && expiresAt.getTime() <= Date.now()) {
+    return { kind: "expired_access_token", hasRefreshToken: readRefreshToken() !== null };
+  }
+  return { kind: "organization_unresolved" };
+}
+function buildCloneTokenFailureWarning(cloneUrl, failure) {
+  const fallbackSuffix = "Falling back to standard git authentication for this clone attempt.";
+  const quotedMessage = failure.message ? ` (${failure.message})` : "";
+  switch (failure.kind) {
+    case "not_logged_in":
+      return `Trace clone credentials are unavailable for ${cloneUrl}: you are not logged in. Run \`tracecli auth login\`. ${fallbackSuffix}`;
+    case "expired_access_token":
+      return `Trace clone credentials are unavailable for ${cloneUrl}: your CLI access token is expired${failure.hasRefreshToken ? ", and refresh did not complete" : ""}. Run \`tracecli auth logout && tracecli auth login\`, then retry. ${fallbackSuffix}`;
+    case "organization_unresolved":
+      return `Trace clone credentials are unavailable for ${cloneUrl}: the active organization could not be resolved from your session. Run \`tracecli org current\` and \`tracecli org switch <organization>\`, or re-authenticate with \`tracecli auth logout && tracecli auth login\`. ${fallbackSuffix}`;
+    case "request_failed":
+      return `Trace clone credentials are temporarily unavailable for ${cloneUrl}: the request to the Trace API failed. Check connectivity, then retry. ${fallbackSuffix}`;
+    case "unauthorized":
+      return `Trace rejected clone credential generation for ${cloneUrl} (401${quotedMessage}). Re-authenticate with \`tracecli auth logout && tracecli auth login\`, then retry. ${fallbackSuffix}`;
+    case "forbidden":
+      return `Trace denied clone credential generation for ${cloneUrl} (403${quotedMessage}). Confirm you can access this organization and repository in Trace. ${fallbackSuffix}`;
+    case "not_found":
+      return `Trace could not generate clone credentials for ${cloneUrl} (404${quotedMessage}). Ensure the repository is connected in the active organization and the GitHub App installation is active. ${fallbackSuffix}`;
+    case "server_error":
+      return `Trace failed to generate clone credentials for ${cloneUrl} due to a server error${quotedMessage}. Retry shortly. ${fallbackSuffix}`;
+    case "unexpected_status":
+      return `Trace returned an unexpected response while generating clone credentials for ${cloneUrl}${quotedMessage ? ` ${quotedMessage}` : ""}. ${fallbackSuffix}`;
+  }
+}
+function withOptionalMessage(base, message) {
+  if (typeof message === "string") {
+    return { ...base, message };
+  }
+  return base;
+}
+async function listOrganizationsSafe() {
+  const result = await authenticatedRequestSafe(
+    (client) => client.organization.listMyOrganizations()
+  );
+  if (!result || result.status !== 200) {
+    return null;
+  }
+  return result.body;
+}
+function resolveWorkosOrganizationId(organizations, organizationId) {
+  const organization = organizations.find((item) => item.organizationId === organizationId);
+  const workosOrganizationId = organization?.workosOrganizationId;
+  if (!workosOrganizationId || workosOrganizationId.trim().length === 0) {
+    return null;
+  }
+  return workosOrganizationId;
+}
+async function maybeRefreshCloneTokenSessionForOrganization(organizationId, listOrganizations = listOrganizationsSafe, refreshForOrganization = (workosOrganizationId) => refreshStoredAccessTokenForOrganization(workosOrganizationId)) {
+  const organizations = await listOrganizations();
+  if (!organizations) {
+    return false;
+  }
+  const workosOrganizationId = resolveWorkosOrganizationId(organizations, organizationId);
+  if (!workosOrganizationId) {
+    return false;
+  }
+  return refreshForOrganization(workosOrganizationId);
+}
 function toRepositoryListFilterOptions(options) {
   return {
     ...options.platform ? { platform: options.platform } : {},
@@ -26764,24 +27491,66 @@ async function fetchCloneToken(repoUrl) {
   try {
     const organizationId = await resolveOrganizationIdSafe();
     if (!organizationId) {
-      return null;
+      return { token: null, failure: resolveLocalCloneAuthFailure() };
     }
-    const result = await authenticatedRequestSafe(
+    let result = await authenticatedRequestSafe(
       (client) => client.repository.getCloneToken({
         params: { organizationId },
         body: { repositoryUrl: repoUrl }
       })
     );
+    if (result && (result.status === 401 || result.status === 403)) {
+      const refreshed = await maybeRefreshCloneTokenSessionForOrganization(organizationId);
+      if (refreshed) {
+        result = await authenticatedRequestSafe(
+          (client) => client.repository.getCloneToken({
+            params: { organizationId },
+            body: { repositoryUrl: repoUrl }
+          })
+        );
+      }
+    }
     if (!result) {
-      return null;
+      return { token: null, failure: { kind: "request_failed" } };
     }
     if (result.status === 200) {
       const token = result.body.token.trim();
-      return token.length > 0 ? token : null;
+      if (token.length > 0) {
+        return { token, failure: null };
+      }
+      return { token: null, failure: { kind: "unexpected_status", status: 200 } };
     }
-    return null;
+    const message = extractErrorMessage(result.body) ?? void 0;
+    if (result.status === 401) {
+      return {
+        token: null,
+        failure: withOptionalMessage({ kind: "unauthorized", status: 401 }, message)
+      };
+    }
+    if (result.status === 403) {
+      return {
+        token: null,
+        failure: withOptionalMessage({ kind: "forbidden", status: 403 }, message)
+      };
+    }
+    if (result.status === 404) {
+      return {
+        token: null,
+        failure: withOptionalMessage({ kind: "not_found", status: 404 }, message)
+      };
+    }
+    if (result.status >= 500) {
+      return {
+        token: null,
+        failure: withOptionalMessage({ kind: "server_error", status: result.status }, message)
+      };
+    }
+    return {
+      token: null,
+      failure: withOptionalMessage({ kind: "unexpected_status", status: result.status }, message)
+    };
   } catch {
-    return null;
+    return { token: null, failure: { kind: "request_failed" } };
   }
 }
 function createCloneCommand() {
@@ -26797,8 +27566,14 @@ Examples:
       const cloneUrl = resolveRepoUrl(repository);
       const targetDir = directory ?? extractRepoName(repository);
       let installationToken = null;
+      let cloneTokenFailure = null;
       if (cloneUrl.startsWith("https://github.com/")) {
-        installationToken = await fetchCloneToken(cloneUrl);
+        const cloneTokenResult = await fetchCloneToken(cloneUrl);
+        installationToken = cloneTokenResult.token;
+        cloneTokenFailure = cloneTokenResult.failure;
+        if (cloneTokenFailure) {
+          console.warn(buildCloneTokenFailureWarning(cloneUrl, cloneTokenFailure));
+        }
       }
       const effectiveUrl = installationToken ? urlWithUsername(cloneUrl) : cloneUrl;
       let askPassScript;
@@ -26827,6 +27602,11 @@ Examples:
         });
         const exitCode = await proc.exited;
         if (exitCode !== 0) {
+          if (!installationToken && cloneTokenFailure) {
+            console.error(
+              "Clone failed while Trace clone credentials were unavailable. Resolve the warning above and retry."
+            );
+          }
           process.exit(1);
         }
         if (installationToken) {
@@ -26928,11 +27708,12 @@ function printVulnerabilities(vulnerabilities) {
   );
   for (const vuln of sorted) {
     const sev = formatSeverity(vuln.severity);
+    const displaySeverity = colorSeverity(vuln.severity, sev);
     const status = formatStatus(vuln.status);
     const repo = vuln.repositoryName;
     const file2 = vuln.codeSnippet.filePath;
     const line = vuln.codeSnippet.startLine;
-    console.log(`  [${sev}] ${vuln.title}`);
+    console.log(`  [${displaySeverity}] ${vuln.title}`);
     console.log(`         ${repo} \xB7 ${file2}:${line} \xB7 ${status}`);
     console.log(`         ${vuln.traceId}`);
     console.log("");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securewithtrace",
-  "version": "0.18.0",
+  "version": "0.18.2",
   "description": "Official Trace CLI for vulnerability intelligence in your terminal",
   "type": "module",
   "bin": {
@@ -34,5 +34,8 @@
   ],
   "publishConfig": {
     "access": "public"
+  },
+  "dependencies": {
+    "chalk": "5.6.2"
   }
 }