securewithtrace 0.34.0 → 0.34.1

package/dist/index.js

@@ -6,7 +6,7 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b2) => (typeof require !== "undefined" ? require : a)[b2]
+  get: (a2, b) => (typeof require !== "undefined" ? require : a2)[b]
 }) : x)(function(x) {
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
@@ -236,8 +236,8 @@ var require_help = __commonJS({
           visibleCommands.push(helpCommand);
         }
         if (this.sortSubcommands) {
-          visibleCommands.sort((a, b2) => {
-            return a.name().localeCompare(b2.name());
+          visibleCommands.sort((a2, b) => {
+            return a2.name().localeCompare(b.name());
           });
         }
         return visibleCommands;
@@ -249,11 +249,11 @@ var require_help = __commonJS({
        * @param {Option} b
        * @returns {number}
        */
-      compareOptions(a, b2) {
+      compareOptions(a2, b) {
         const getSortKey = (option) => {
           return option.short ? option.short.replace(/^-/, "") : option.long.replace(/^--/, "");
         };
-        return getSortKey(a).localeCompare(getSortKey(b2));
+        return getSortKey(a2).localeCompare(getSortKey(b));
       }
       /**
        * Get an array of the visible options. Includes a placeholder for the implicit help option, if there is one.
@@ -1076,38 +1076,38 @@ var require_suggestSimilar = __commonJS({
   "../../node_modules/.bun/commander@13.1.0/node_modules/commander/lib/suggestSimilar.js"(exports) {
     "use strict";
     var maxDistance = 3;
-    function editDistance(a, b2) {
-      if (Math.abs(a.length - b2.length) > maxDistance)
-        return Math.max(a.length, b2.length);
-      const d2 = [];
-      for (let i = 0; i <= a.length; i++) {
-        d2[i] = [i];
-      }
-      for (let j3 = 0; j3 <= b2.length; j3++) {
-        d2[0][j3] = j3;
-      }
-      for (let j3 = 1; j3 <= b2.length; j3++) {
-        for (let i = 1; i <= a.length; i++) {
+    function editDistance(a2, b) {
+      if (Math.abs(a2.length - b.length) > maxDistance)
+        return Math.max(a2.length, b.length);
+      const d = [];
+      for (let i2 = 0; i2 <= a2.length; i2++) {
+        d[i2] = [i2];
+      }
+      for (let j = 0; j <= b.length; j++) {
+        d[0][j] = j;
+      }
+      for (let j = 1; j <= b.length; j++) {
+        for (let i2 = 1; i2 <= a2.length; i2++) {
           let cost = 1;
-          if (a[i - 1] === b2[j3 - 1]) {
+          if (a2[i2 - 1] === b[j - 1]) {
             cost = 0;
           } else {
             cost = 1;
           }
-          d2[i][j3] = Math.min(
-            d2[i - 1][j3] + 1,
+          d[i2][j] = Math.min(
+            d[i2 - 1][j] + 1,
             // deletion
-            d2[i][j3 - 1] + 1,
+            d[i2][j - 1] + 1,
             // insertion
-            d2[i - 1][j3 - 1] + cost
+            d[i2 - 1][j - 1] + cost
             // substitution
           );
-          if (i > 1 && j3 > 1 && a[i - 1] === b2[j3 - 2] && a[i - 2] === b2[j3 - 1]) {
-            d2[i][j3] = Math.min(d2[i][j3], d2[i - 2][j3 - 2] + 1);
+          if (i2 > 1 && j > 1 && a2[i2 - 1] === b[j - 2] && a2[i2 - 2] === b[j - 1]) {
+            d[i2][j] = Math.min(d[i2][j], d[i2 - 2][j - 2] + 1);
           }
         }
       }
-      return d2[a.length][b2.length];
+      return d[a2.length][b.length];
     }
     function suggestSimilar(word, candidates) {
       if (!candidates || candidates.length === 0) return "";
@@ -1134,7 +1134,7 @@ var require_suggestSimilar = __commonJS({
           }
         }
       });
-      similar.sort((a, b2) => a.localeCompare(b2));
+      similar.sort((a2, b) => a2.localeCompare(b));
       if (searchingOptions) {
         similar = similar.map((candidate) => `--${candidate}`);
       }
@@ -1773,8 +1773,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
         } else if (fn instanceof RegExp) {
           const regex = fn;
           fn = (val, def) => {
-            const m = regex.exec(val);
-            return m ? m[0] : def;
+            const m2 = regex.exec(val);
+            return m2 ? m2[0] : def;
           };
           option.default(defaultValue).argParser(fn);
         } else {
@@ -2316,8 +2316,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @private
        */
       _checkNumberOfArguments() {
-        this.registeredArguments.forEach((arg, i) => {
-          if (arg.required && this.args[i] == null) {
+        this.registeredArguments.forEach((arg, i2) => {
+          if (arg.required && this.args[i2] == null) {
             this.missingArgument(arg.name());
           }
         });
@@ -2355,8 +2355,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
             if (index < this.args.length) {
               value = this.args.slice(index);
               if (declaredArg.parseArg) {
-                value = value.reduce((processed, v2) => {
-                  return myParseArg(declaredArg, v2, processed);
+                value = value.reduce((processed, v) => {
+                  return myParseArg(declaredArg, v, processed);
                 }, declaredArg.defaultValue);
               }
             } else if (value === void 0) {
@@ -2697,8 +2697,8 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (this._storeOptionsAsProperties) {
           const result = {};
           const len = this.options.length;
-          for (let i = 0; i < len; i++) {
-            const key = this.options[i].attributeName();
+          for (let i2 = 0; i2 < len; i2++) {
+            const key = this.options[i2].attributeName();
             result[key] = key === this._versionOptionName ? this._version : this[key];
           }
           return result;
@@ -3342,7 +3342,7 @@ var require_src = __commonJS({
     var ESC2 = "\x1B";
     var CSI2 = `${ESC2}[`;
     var beep = "\x07";
-    var cursor = {
+    var cursor3 = {
       to(x, y) {
         if (!y) return `${CSI2}${x + 1}G`;
         return `${CSI2}${y + 1};${x + 1}H`;
@@ -3371,7 +3371,7 @@ var require_src = __commonJS({
       up: (count = 1) => `${CSI2}S`.repeat(count),
       down: (count = 1) => `${CSI2}T`.repeat(count)
     };
-    var erase = {
+    var erase3 = {
       screen: `${CSI2}2J`,
       up: (count = 1) => `${CSI2}1J`.repeat(count),
       down: (count = 1) => `${CSI2}J`.repeat(count),
@@ -3380,14 +3380,14 @@ var require_src = __commonJS({
       lineStart: `${CSI2}1K`,
       lines(count) {
         let clear = "";
-        for (let i = 0; i < count; i++)
-          clear += this.line + (i < count - 1 ? cursor.up() : "");
+        for (let i2 = 0; i2 < count; i2++)
+          clear += this.line + (i2 < count - 1 ? cursor3.up() : "");
         if (count)
-          clear += cursor.left;
+          clear += cursor3.left;
         return clear;
       }
     };
-    module.exports = { cursor, scroll, erase, beep };
+    module.exports = { cursor: cursor3, scroll, erase: erase3, beep };
   }
 });
 
@@ -3427,16 +3427,16 @@ var util;
     return obj;
   };
   util2.getValidEnumValues = (obj) => {
-    const validKeys = util2.objectKeys(obj).filter((k2) => typeof obj[obj[k2]] !== "number");
+    const validKeys = util2.objectKeys(obj).filter((k) => typeof obj[obj[k]] !== "number");
     const filtered = {};
-    for (const k2 of validKeys) {
-      filtered[k2] = obj[k2];
+    for (const k of validKeys) {
+      filtered[k] = obj[k];
     }
     return util2.objectValues(filtered);
   };
   util2.objectValues = (obj) => {
-    return util2.objectKeys(obj).map(function(e2) {
-      return obj[e2];
+    return util2.objectKeys(obj).map(function(e) {
+      return obj[e];
     });
   };
   util2.objectKeys = typeof Object.keys === "function" ? (obj) => Object.keys(obj) : (object2) => {
@@ -3500,8 +3500,8 @@ var ZodParsedType = util.arrayToEnum([
   "set"
 ]);
 var getParsedType = (data) => {
-  const t = typeof data;
-  switch (t) {
+  const t2 = typeof data;
+  switch (t2) {
     case "undefined":
       return ZodParsedType.undefined;
     case "string":
@@ -3601,10 +3601,10 @@ var ZodError = class extends Error {
           fieldErrors._errors.push(mapper(issue2));
         } else {
           let curr = fieldErrors;
-          let i = 0;
-          while (i < issue2.path.length) {
-            const el = issue2.path[i];
-            const terminal = i === issue2.path.length - 1;
+          let i2 = 0;
+          while (i2 < issue2.path.length) {
+            const el = issue2.path[i2];
+            const terminal = i2 === issue2.path.length - 1;
             if (!terminal) {
               curr[el] = curr[el] || { _errors: [] };
             } else {
@@ -3612,7 +3612,7 @@ var ZodError = class extends Error {
               curr[el]._errors.push(mapper(issue2));
             }
             curr = curr[el];
-            i++;
+            i2++;
           }
         }
       }
@@ -3763,7 +3763,7 @@ var makeIssue = (params) => {
     path: fullPath
   };
   let errorMessage = "";
-  const maps = errorMaps.filter((m) => !!m).slice().reverse();
+  const maps = errorMaps.filter((m2) => !!m2).slice().reverse();
   for (const map2 of maps) {
     errorMessage = map2(fullIssue, { data, defaultError: errorMessage }).message;
   }
@@ -5314,14 +5314,14 @@ var ZodArray = class _ZodArray extends ZodType {
       }
     }
     if (ctx.common.async) {
-      return Promise.all([...ctx.data].map((item, i) => {
-        return def.type._parseAsync(new ParseInputLazyPath(ctx, item, ctx.path, i));
+      return Promise.all([...ctx.data].map((item, i2) => {
+        return def.type._parseAsync(new ParseInputLazyPath(ctx, item, ctx.path, i2));
       })).then((result2) => {
         return ParseStatus.mergeArray(status, result2);
       });
     }
-    const result = [...ctx.data].map((item, i) => {
-      return def.type._parseSync(new ParseInputLazyPath(ctx, item, ctx.path, i));
+    const result = [...ctx.data].map((item, i2) => {
+      return def.type._parseSync(new ParseInputLazyPath(ctx, item, ctx.path, i2));
     });
     return ParseStatus.mergeArray(status, result);
   }
@@ -5911,17 +5911,17 @@ var ZodDiscriminatedUnion = class _ZodDiscriminatedUnion extends ZodType {
     });
   }
 };
-function mergeValues(a, b2) {
-  const aType = getParsedType(a);
-  const bType = getParsedType(b2);
-  if (a === b2) {
-    return { valid: true, data: a };
+function mergeValues(a2, b) {
+  const aType = getParsedType(a2);
+  const bType = getParsedType(b);
+  if (a2 === b) {
+    return { valid: true, data: a2 };
   } else if (aType === ZodParsedType.object && bType === ZodParsedType.object) {
-    const bKeys = util.objectKeys(b2);
-    const sharedKeys = util.objectKeys(a).filter((key) => bKeys.indexOf(key) !== -1);
-    const newObj = { ...a, ...b2 };
+    const bKeys = util.objectKeys(b);
+    const sharedKeys = util.objectKeys(a2).filter((key) => bKeys.indexOf(key) !== -1);
+    const newObj = { ...a2, ...b };
     for (const key of sharedKeys) {
-      const sharedValue = mergeValues(a[key], b2[key]);
+      const sharedValue = mergeValues(a2[key], b[key]);
       if (!sharedValue.valid) {
         return { valid: false };
       }
@@ -5929,13 +5929,13 @@ function mergeValues(a, b2) {
     }
     return { valid: true, data: newObj };
   } else if (aType === ZodParsedType.array && bType === ZodParsedType.array) {
-    if (a.length !== b2.length) {
+    if (a2.length !== b.length) {
       return { valid: false };
     }
     const newArray = [];
-    for (let index = 0; index < a.length; index++) {
-      const itemA = a[index];
-      const itemB = b2[index];
+    for (let index = 0; index < a2.length; index++) {
+      const itemA = a2[index];
+      const itemB = b[index];
       const sharedValue = mergeValues(itemA, itemB);
       if (!sharedValue.valid) {
         return { valid: false };
@@ -5943,8 +5943,8 @@ function mergeValues(a, b2) {
       newArray.push(sharedValue.data);
     }
     return { valid: true, data: newArray };
-  } else if (aType === ZodParsedType.date && bType === ZodParsedType.date && +a === +b2) {
-    return { valid: true, data: a };
+  } else if (aType === ZodParsedType.date && bType === ZodParsedType.date && +a2 === +b) {
+    return { valid: true, data: a2 };
   } else {
     return { valid: false };
   }
@@ -6237,7 +6237,7 @@ var ZodSet = class _ZodSet extends ZodType {
       }
       return { status: status.value, value: parsedSet };
     }
-    const elements = [...ctx.data.values()].map((item, i) => valueType._parse(new ParseInputLazyPath(ctx, item, ctx.path, i)));
+    const elements = [...ctx.data.values()].map((item, i2) => valueType._parse(new ParseInputLazyPath(ctx, item, ctx.path, i2)));
     if (ctx.common.async) {
       return Promise.all(elements).then((elements2) => finalizeSet(elements2));
     } else {
@@ -6322,29 +6322,29 @@ var ZodFunction = class _ZodFunction extends ZodType {
     const params = { errorMap: ctx.common.contextualErrorMap };
     const fn = ctx.data;
     if (this._def.returns instanceof ZodPromise) {
-      const me2 = this;
+      const me = this;
       return OK(async function(...args) {
         const error48 = new ZodError([]);
-        const parsedArgs = await me2._def.args.parseAsync(args, params).catch((e2) => {
-          error48.addIssue(makeArgsIssue(args, e2));
+        const parsedArgs = await me._def.args.parseAsync(args, params).catch((e) => {
+          error48.addIssue(makeArgsIssue(args, e));
           throw error48;
         });
         const result = await Reflect.apply(fn, this, parsedArgs);
-        const parsedReturns = await me2._def.returns._def.type.parseAsync(result, params).catch((e2) => {
-          error48.addIssue(makeReturnsIssue(result, e2));
+        const parsedReturns = await me._def.returns._def.type.parseAsync(result, params).catch((e) => {
+          error48.addIssue(makeReturnsIssue(result, e));
           throw error48;
         });
         return parsedReturns;
       });
     } else {
-      const me2 = this;
+      const me = this;
       return OK(function(...args) {
-        const parsedArgs = me2._def.args.safeParse(args, params);
+        const parsedArgs = me._def.args.safeParse(args, params);
         if (!parsedArgs.success) {
           throw new ZodError([makeArgsIssue(args, parsedArgs.error)]);
         }
         const result = Reflect.apply(fn, this, parsedArgs.data);
-        const parsedReturns = me2._def.returns.safeParse(result, params);
+        const parsedReturns = me._def.returns.safeParse(result, params);
         if (!parsedReturns.success) {
           throw new ZodError([makeReturnsIssue(result, parsedReturns.error)]);
         }
@@ -6879,10 +6879,10 @@ var ZodPipeline = class _ZodPipeline extends ZodType {
       }
     }
   }
-  static create(a, b2) {
+  static create(a2, b) {
     return new _ZodPipeline({
-      in: a,
-      out: b2,
+      in: a2,
+      out: b,
       typeName: ZodFirstPartyTypeKind.ZodPipeline
     });
   }
@@ -6908,10 +6908,10 @@ var custom = (check2, params = {}, fatal) => {
     return ZodAny.create().superRefine((data, ctx) => {
       var _a2, _b;
       if (!check2(data)) {
-        const p2 = typeof params === "function" ? params(data) : typeof params === "string" ? { message: params } : params;
-        const _fatal = (_b = (_a2 = p2.fatal) !== null && _a2 !== void 0 ? _a2 : fatal) !== null && _b !== void 0 ? _b : true;
-        const p22 = typeof p2 === "string" ? { message: p2 } : p2;
-        ctx.addIssue({ code: "custom", ...p22, fatal: _fatal });
+        const p = typeof params === "function" ? params(data) : typeof params === "string" ? { message: params } : params;
+        const _fatal = (_b = (_a2 = p.fatal) !== null && _a2 !== void 0 ? _a2 : fatal) !== null && _b !== void 0 ? _b : true;
+        const p2 = typeof p === "string" ? { message: p } : p;
+        ctx.addIssue({ code: "custom", ...p2, fatal: _fatal });
       }
     });
   return ZodAny.create();
@@ -7316,7 +7316,7 @@ var initContract = () => {
 };
 var insertParamsIntoPath = ({ path, params }) => {
   const pathParams = params;
-  return path.replace(/\/?:([^/?]+)\??/g, (matched, p2) => pathParams[p2] ? `${matched.startsWith("/") ? "/" : ""}${pathParams[p2]}` : "");
+  return path.replace(/\/?:([^/?]+)\??/g, (matched, p) => pathParams[p] ? `${matched.startsWith("/") ? "/" : ""}${pathParams[p]}` : "");
 };
 var convertQueryParamsToUrlString = (query, json2 = false) => {
   const queryString = json2 ? encodeQueryParamsJson(query) : encodeQueryParams(query);
@@ -7346,7 +7346,7 @@ var encodeQueryParams = (query) => {
 };
 var tokeniseValue = (key, value) => {
   if (Array.isArray(value)) {
-    return value.flatMap((v2, idx) => tokeniseValue(`${key}[${idx}]`, v2));
+    return value.flatMap((v, idx) => tokeniseValue(`${key}[${idx}]`, v));
   }
   if (value instanceof Date) {
     return [[`${key}`, value.toISOString()]];
@@ -7358,10 +7358,10 @@ var tokeniseValue = (key, value) => {
     return [];
   }
   if (typeof value === "object") {
-    return Object.keys(value).flatMap((k2) => (
+    return Object.keys(value).flatMap((k) => (
       // eslint-disable-next-line @typescript-eslint/ban-ts-comment
       // @ts-ignore
-      tokeniseValue(`${key}[${k2}]`, value[k2])
+      tokeniseValue(`${key}[${k}]`, value[k])
     ));
   }
   return [[`${key}`, `${value}`]];
@@ -7435,7 +7435,7 @@ var createFormData = (body) => {
   return formData;
 };
 var normalizeHeaders = (headers) => {
-  return Object.fromEntries(Object.entries(headers).map(([k2, v2]) => [k2.toLowerCase(), v2]));
+  return Object.fromEntries(Object.entries(headers).map(([k, v]) => [k.toLowerCase(), v]));
 };
 var fetchApi = (options) => {
   const { path, clientArgs, route, body, query, extraInputArgs, headers, fetchOptions } = options;
@@ -8126,10 +8126,10 @@ function $constructor(name, initializer3, params) {
     initializer3(inst, def);
     const proto2 = _.prototype;
     const keys = Object.keys(proto2);
-    for (let i = 0; i < keys.length; i++) {
-      const k2 = keys[i];
-      if (!(k2 in inst)) {
-        inst[k2] = proto2[k2].bind(inst);
+    for (let i2 = 0; i2 < keys.length; i2++) {
+      const k = keys[i2];
+      if (!(k in inst)) {
+        inst[k] = proto2[k].bind(inst);
       }
     }
   }
@@ -8257,8 +8257,8 @@ function assertNever(_x) {
 function assert(_) {
 }
 function getEnumValues(entries) {
-  const numericValues = Object.values(entries).filter((v2) => typeof v2 === "number");
-  const values = Object.entries(entries).filter(([k2, _]) => numericValues.indexOf(+k2) === -1).map(([_, v2]) => v2);
+  const numericValues = Object.values(entries).filter((v) => typeof v === "number");
+  const values = Object.entries(entries).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
   return values;
 }
 function joinValues(array2, separator = "|") {
@@ -8319,9 +8319,9 @@ function defineLazy(object2, key, getter) {
       }
       return value;
     },
-    set(v2) {
+    set(v) {
       Object.defineProperty(object2, key, {
-        value: v2
+        value: v
         // configurable: true,
       });
     },
@@ -8360,8 +8360,8 @@ function promiseAllObject(promisesObj) {
   const promises = keys.map((key) => promisesObj[key]);
   return Promise.all(promises).then((results) => {
     const resolvedObj = {};
-    for (let i = 0; i < keys.length; i++) {
-      resolvedObj[keys[i]] = results[i];
+    for (let i2 = 0; i2 < keys.length; i2++) {
+      resolvedObj[keys[i2]] = results[i2];
     }
     return resolvedObj;
   });
@@ -8369,7 +8369,7 @@ function promiseAllObject(promisesObj) {
 function randomString(length = 10) {
   const chars = "abcdefghijklmnopqrstuvwxyz";
   let str = "";
-  for (let i = 0; i < length; i++) {
+  for (let i2 = 0; i2 < length; i2++) {
     str += chars[Math.floor(Math.random() * chars.length)];
   }
   return str;
@@ -8390,17 +8390,17 @@ var allowsEval = cached(() => {
     return false;
   }
   try {
-    const F2 = Function;
-    new F2("");
+    const F = Function;
+    new F("");
     return true;
   } catch (_) {
     return false;
   }
 });
-function isPlainObject(o) {
-  if (isObject(o) === false)
+function isPlainObject(o2) {
+  if (isObject(o2) === false)
     return false;
-  const ctor = o.constructor;
+  const ctor = o2.constructor;
   if (ctor === void 0)
     return true;
   if (typeof ctor !== "function")
@@ -8413,12 +8413,12 @@ function isPlainObject(o) {
   }
   return true;
 }
-function shallowClone(o) {
-  if (isPlainObject(o))
-    return { ...o };
-  if (Array.isArray(o))
-    return [...o];
-  return o;
+function shallowClone(o2) {
+  if (isPlainObject(o2))
+    return { ...o2 };
+  if (Array.isArray(o2))
+    return [...o2];
+  return o2;
 }
 function numKeys(data) {
   let keyCount = 0;
@@ -8430,8 +8430,8 @@ function numKeys(data) {
   return keyCount;
 }
 var getParsedType2 = (data) => {
-  const t = typeof data;
-  switch (t) {
+  const t2 = typeof data;
+  switch (t2) {
     case "undefined":
       return "undefined";
     case "string":
@@ -8470,7 +8470,7 @@ var getParsedType2 = (data) => {
       }
       return "object";
     default:
-      throw new Error(`Unknown data type: ${t}`);
+      throw new Error(`Unknown data type: ${t2}`);
   }
 };
 var propertyKeyTypes = /* @__PURE__ */ new Set(["string", "number", "symbol"]);
@@ -8541,8 +8541,8 @@ function stringifyPrimitive(value) {
   return `${value}`;
 }
 function optionalKeys(shape) {
-  return Object.keys(shape).filter((k2) => {
-    return shape[k2]._zod.optin === "optional" && shape[k2]._zod.optout === "optional";
+  return Object.keys(shape).filter((k) => {
+    return shape[k]._zod.optin === "optional" && shape[k]._zod.optout === "optional";
   });
 }
 var NUMBER_FORMAT_RANGES = {
@@ -8642,20 +8642,20 @@ function safeExtend(schema, shape) {
   });
   return clone(schema, def);
 }
-function merge(a, b2) {
-  const def = mergeDefs(a._zod.def, {
+function merge(a2, b) {
+  const def = mergeDefs(a2._zod.def, {
     get shape() {
-      const _shape = { ...a._zod.def.shape, ...b2._zod.def.shape };
+      const _shape = { ...a2._zod.def.shape, ...b._zod.def.shape };
       assignProp(this, "shape", _shape);
       return _shape;
     },
     get catchall() {
-      return b2._zod.def.catchall;
+      return b._zod.def.catchall;
     },
     checks: []
     // delete existing checks
   });
-  return clone(a, def);
+  return clone(a2, def);
 }
 function partial(Class2, schema, mask) {
   const currDef = schema._zod.def;
@@ -8729,8 +8729,8 @@ function required(Class2, schema, mask) {
 function aborted(x, startIndex = 0) {
   if (x.aborted === true)
     return true;
-  for (let i = startIndex; i < x.issues.length; i++) {
-    if (x.issues[i]?.continue !== true) {
+  for (let i2 = startIndex; i2 < x.issues.length; i2++) {
+    if (x.issues[i2]?.continue !== true) {
       return true;
     }
   }
@@ -8777,8 +8777,8 @@ function getLengthableOrigin(input) {
   return "unknown";
 }
 function parsedType(data) {
-  const t = typeof data;
-  switch (t) {
+  const t2 = typeof data;
+  switch (t2) {
     case "number": {
       return Number.isNaN(data) ? "nan" : "number";
     }
@@ -8795,7 +8795,7 @@ function parsedType(data) {
       }
     }
   }
-  return t;
+  return t2;
 }
 function issue(...args) {
   const [iss, input, inst] = args;
@@ -8810,22 +8810,22 @@ function issue(...args) {
   return { ...iss };
 }
 function cleanEnum(obj) {
-  return Object.entries(obj).filter(([k2, _]) => {
-    return Number.isNaN(Number.parseInt(k2, 10));
+  return Object.entries(obj).filter(([k, _]) => {
+    return Number.isNaN(Number.parseInt(k, 10));
   }).map((el) => el[1]);
 }
 function base64ToUint8Array(base643) {
   const binaryString = atob(base643);
   const bytes = new Uint8Array(binaryString.length);
-  for (let i = 0; i < binaryString.length; i++) {
-    bytes[i] = binaryString.charCodeAt(i);
+  for (let i2 = 0; i2 < binaryString.length; i2++) {
+    bytes[i2] = binaryString.charCodeAt(i2);
   }
   return bytes;
 }
 function uint8ArrayToBase64(bytes) {
   let binaryString = "";
-  for (let i = 0; i < bytes.length; i++) {
-    binaryString += String.fromCharCode(bytes[i]);
+  for (let i2 = 0; i2 < bytes.length; i2++) {
+    binaryString += String.fromCharCode(bytes[i2]);
   }
   return btoa(binaryString);
 }
@@ -8843,13 +8843,13 @@ function hexToUint8Array(hex3) {
     throw new Error("Invalid hex string length");
   }
   const bytes = new Uint8Array(cleanHex.length / 2);
-  for (let i = 0; i < cleanHex.length; i += 2) {
-    bytes[i / 2] = Number.parseInt(cleanHex.slice(i, i + 2), 16);
+  for (let i2 = 0; i2 < cleanHex.length; i2 += 2) {
+    bytes[i2 / 2] = Number.parseInt(cleanHex.slice(i2, i2 + 2), 16);
   }
   return bytes;
 }
 function uint8ArrayToHex(bytes) {
-  return Array.from(bytes).map((b2) => b2.toString(16).padStart(2, "0")).join("");
+  return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 var Class = class {
   constructor(..._args) {
@@ -8902,10 +8902,10 @@ function formatError(error48, mapper = (issue2) => issue2.message) {
         fieldErrors._errors.push(mapper(issue2));
       } else {
         let curr = fieldErrors;
-        let i = 0;
-        while (i < issue2.path.length) {
-          const el = issue2.path[i];
-          const terminal = i === issue2.path.length - 1;
+        let i2 = 0;
+        while (i2 < issue2.path.length) {
+          const el = issue2.path[i2];
+          const terminal = i2 === issue2.path.length - 1;
           if (!terminal) {
             curr[el] = curr[el] || { _errors: [] };
           } else {
@@ -8913,7 +8913,7 @@ function formatError(error48, mapper = (issue2) => issue2.message) {
             curr[el]._errors.push(mapper(issue2));
           }
           curr = curr[el];
-          i++;
+          i2++;
         }
       }
     }
@@ -8939,10 +8939,10 @@ function treeifyError(error48, mapper = (issue2) => issue2.message) {
           continue;
         }
         let curr = result;
-        let i = 0;
-        while (i < fullpath.length) {
-          const el = fullpath[i];
-          const terminal = i === fullpath.length - 1;
+        let i2 = 0;
+        while (i2 < fullpath.length) {
+          const el = fullpath[i2];
+          const terminal = i2 === fullpath.length - 1;
           if (typeof el === "string") {
             curr.properties ?? (curr.properties = {});
             (_a2 = curr.properties)[el] ?? (_a2[el] = { errors: [] });
@@ -8955,7 +8955,7 @@ function treeifyError(error48, mapper = (issue2) => issue2.message) {
           if (terminal) {
             curr.errors.push(mapper(issue2));
           }
-          i++;
+          i2++;
         }
       }
     }
@@ -8983,7 +8983,7 @@ function toDotPath(_path) {
 }
 function prettifyError(error48) {
   const lines = [];
-  const issues = [...error48.issues].sort((a, b2) => (a.path ?? []).length - (b2.path ?? []).length);
+  const issues = [...error48.issues].sort((a2, b) => (a2.path ?? []).length - (b.path ?? []).length);
   for (const issue2 of issues) {
     lines.push(`\u2716 ${issue2.message}`);
     if (issue2.path?.length)
@@ -9000,9 +9000,9 @@ var _parse = (_Err) => (schema, value, _ctx, _params) => {
     throw new $ZodAsyncError();
   }
   if (result.issues.length) {
-    const e2 = new (_params?.Err ?? _Err)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())));
-    captureStackTrace(e2, _params?.callee);
-    throw e2;
+    const e = new (_params?.Err ?? _Err)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())));
+    captureStackTrace(e, _params?.callee);
+    throw e;
   }
   return result.value;
 };
@@ -9013,9 +9013,9 @@ var _parseAsync = (_Err) => async (schema, value, _ctx, params) => {
   if (result instanceof Promise)
     result = await result;
   if (result.issues.length) {
-    const e2 = new (params?.Err ?? _Err)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())));
-    captureStackTrace(e2, params?.callee);
-    throw e2;
+    const e = new (params?.Err ?? _Err)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())));
+    captureStackTrace(e, params?.callee);
+    throw e;
   }
   return result.value;
 };
@@ -9813,11 +9813,11 @@ var Doc = class {
     }
   }
   compile() {
-    const F2 = Function;
+    const F = Function;
     const args = this?.args;
     const content = this?.content ?? [``];
     const lines = [...content.map((x) => `  ${x}`)];
-    return new F2(...args, lines.join("\n"));
+    return new F(...args, lines.join("\n"));
   }
 };
 
@@ -9928,10 +9928,10 @@ var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
   defineLazy(inst, "~standard", () => ({
     validate: (value) => {
       try {
-        const r = safeParse(inst, value);
-        return r.success ? { value: r.data } : { issues: r.error?.issues };
+        const r2 = safeParse(inst, value);
+        return r2.success ? { value: r2.data } : { issues: r2.error?.issues };
       } catch (_) {
-        return safeParseAsync(inst, value).then((r) => r.success ? { value: r.data } : { issues: r.error?.issues });
+        return safeParseAsync(inst, value).then((r2) => r2.success ? { value: r2.data } : { issues: r2.error?.issues });
       }
     },
     vendor: "zod",
@@ -9978,10 +9978,10 @@ var $ZodUUID = /* @__PURE__ */ $constructor("$ZodUUID", (inst, def) => {
       v7: 7,
       v8: 8
     };
-    const v2 = versionMap[def.version];
-    if (v2 === void 0)
+    const v = versionMap[def.version];
+    if (v === void 0)
       throw new Error(`Invalid UUID version: "${def.version}"`);
-    def.pattern ?? (def.pattern = uuid(v2));
+    def.pattern ?? (def.pattern = uuid(v));
   } else
     def.pattern ?? (def.pattern = uuid());
   $ZodStringFormat.init(inst, def);
@@ -10452,16 +10452,16 @@ var $ZodArray = /* @__PURE__ */ $constructor("$ZodArray", (inst, def) => {
     }
     payload.value = Array(input.length);
     const proms = [];
-    for (let i = 0; i < input.length; i++) {
-      const item = input[i];
+    for (let i2 = 0; i2 < input.length; i2++) {
+      const item = input[i2];
       const result = def.element._zod.run({
         value: item,
         issues: []
       }, ctx);
       if (result instanceof Promise) {
-        proms.push(result.then((result2) => handleArrayResult(result2, payload, i)));
+        proms.push(result.then((result2) => handleArrayResult(result2, payload, i2)));
       } else {
-        handleArrayResult(result, payload, i);
+        handleArrayResult(result, payload, i2);
       }
     }
     if (proms.length) {
@@ -10487,9 +10487,9 @@ function handlePropertyResult(result, final, key, input, isOptionalOut) {
 }
 function normalizeDef(def) {
   const keys = Object.keys(def.shape);
-  for (const k2 of keys) {
-    if (!def.shape?.[k2]?._zod?.traits?.has("$ZodType")) {
-      throw new Error(`Invalid element at key "${k2}": expected a Zod schema`);
+  for (const k of keys) {
+    if (!def.shape?.[k]?._zod?.traits?.has("$ZodType")) {
+      throw new Error(`Invalid element at key "${k}": expected a Zod schema`);
     }
   }
   const okeys = optionalKeys(def.shape);
@@ -10505,20 +10505,20 @@ function handleCatchall(proms, input, payload, ctx, def, inst) {
   const unrecognized = [];
   const keySet = def.keySet;
   const _catchall = def.catchall._zod;
-  const t = _catchall.def.type;
+  const t2 = _catchall.def.type;
   const isOptionalOut = _catchall.optout === "optional";
   for (const key in input) {
     if (keySet.has(key))
       continue;
-    if (t === "never") {
+    if (t2 === "never") {
       unrecognized.push(key);
       continue;
     }
-    const r = _catchall.run({ value: input[key], issues: [] }, ctx);
-    if (r instanceof Promise) {
-      proms.push(r.then((r2) => handlePropertyResult(r2, payload, key, input, isOptionalOut)));
+    const r2 = _catchall.run({ value: input[key], issues: [] }, ctx);
+    if (r2 instanceof Promise) {
+      proms.push(r2.then((r3) => handlePropertyResult(r3, payload, key, input, isOptionalOut)));
     } else {
-      handlePropertyResult(r, payload, key, input, isOptionalOut);
+      handlePropertyResult(r2, payload, key, input, isOptionalOut);
     }
   }
   if (unrecognized.length) {
@@ -10558,8 +10558,8 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
       const field = shape[key]._zod;
       if (field.values) {
         propValues[key] ?? (propValues[key] = /* @__PURE__ */ new Set());
-        for (const v2 of field.values)
-          propValues[key].add(v2);
+        for (const v of field.values)
+          propValues[key].add(v);
       }
     }
     return propValues;
@@ -10585,11 +10585,11 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
     for (const key of value.keys) {
       const el = shape[key];
       const isOptionalOut = el._zod.optout === "optional";
-      const r = el._zod.run({ value: input[key], issues: [] }, ctx);
-      if (r instanceof Promise) {
-        proms.push(r.then((r2) => handlePropertyResult(r2, payload, key, input, isOptionalOut)));
+      const r2 = el._zod.run({ value: input[key], issues: [] }, ctx);
+      if (r2 instanceof Promise) {
+        proms.push(r2.then((r3) => handlePropertyResult(r3, payload, key, input, isOptionalOut)));
       } else {
-        handlePropertyResult(r, payload, key, input, isOptionalOut);
+        handlePropertyResult(r2, payload, key, input, isOptionalOut);
       }
     }
     if (!catchall) {
@@ -10606,8 +10606,8 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
     const doc = new Doc(["shape", "payload", "ctx"]);
     const normalized = _normalized.value;
     const parseStr = (key) => {
-      const k2 = esc(key);
-      return `shape[${k2}]._zod.run({ value: input[${k2}], issues: [] }, ctx)`;
+      const k = esc(key);
+      return `shape[${k}]._zod.run({ value: input[${k}], issues: [] }, ctx)`;
     };
     doc.write(`const input = payload.value;`);
     const ids = /* @__PURE__ */ Object.create(null);
@@ -10618,27 +10618,27 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
     doc.write(`const newResult = {};`);
     for (const key of normalized.keys) {
       const id = ids[key];
-      const k2 = esc(key);
+      const k = esc(key);
       const schema = shape[key];
       const isOptionalOut = schema?._zod?.optout === "optional";
       doc.write(`const ${id} = ${parseStr(key)};`);
       if (isOptionalOut) {
         doc.write(`
         if (${id}.issues.length) {
-          if (${k2} in input) {
+          if (${k} in input) {
             payload.issues = payload.issues.concat(${id}.issues.map(iss => ({
               ...iss,
-              path: iss.path ? [${k2}, ...iss.path] : [${k2}]
+              path: iss.path ? [${k}, ...iss.path] : [${k}]
             })));
           }
         }
         
         if (${id}.value === undefined) {
-          if (${k2} in input) {
-            newResult[${k2}] = undefined;
+          if (${k} in input) {
+            newResult[${k}] = undefined;
           }
         } else {
-          newResult[${k2}] = ${id}.value;
+          newResult[${k}] = ${id}.value;
         }
         
       `);
@@ -10647,16 +10647,16 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
         if (${id}.issues.length) {
           payload.issues = payload.issues.concat(${id}.issues.map(iss => ({
             ...iss,
-            path: iss.path ? [${k2}, ...iss.path] : [${k2}]
+            path: iss.path ? [${k}, ...iss.path] : [${k}]
           })));
         }
         
         if (${id}.value === undefined) {
-          if (${k2} in input) {
-            newResult[${k2}] = undefined;
+          if (${k} in input) {
+            newResult[${k}] = undefined;
           }
         } else {
-          newResult[${k2}] = ${id}.value;
+          newResult[${k}] = ${id}.value;
         }
         
       `);
@@ -10704,7 +10704,7 @@ function handleUnionResults(results, final, inst, ctx) {
       return final;
     }
   }
-  const nonaborted = results.filter((r) => !aborted(r));
+  const nonaborted = results.filter((r2) => !aborted(r2));
   if (nonaborted.length === 1) {
     final.value = nonaborted[0].value;
     return nonaborted[0];
@@ -10719,18 +10719,18 @@ function handleUnionResults(results, final, inst, ctx) {
 }
 var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
   $ZodType.init(inst, def);
-  defineLazy(inst._zod, "optin", () => def.options.some((o) => o._zod.optin === "optional") ? "optional" : void 0);
-  defineLazy(inst._zod, "optout", () => def.options.some((o) => o._zod.optout === "optional") ? "optional" : void 0);
+  defineLazy(inst._zod, "optin", () => def.options.some((o2) => o2._zod.optin === "optional") ? "optional" : void 0);
+  defineLazy(inst._zod, "optout", () => def.options.some((o2) => o2._zod.optout === "optional") ? "optional" : void 0);
   defineLazy(inst._zod, "values", () => {
-    if (def.options.every((o) => o._zod.values)) {
+    if (def.options.every((o2) => o2._zod.values)) {
       return new Set(def.options.flatMap((option) => Array.from(option._zod.values)));
     }
     return void 0;
   });
   defineLazy(inst._zod, "pattern", () => {
-    if (def.options.every((o) => o._zod.pattern)) {
-      const patterns = def.options.map((o) => o._zod.pattern);
-      return new RegExp(`^(${patterns.map((p2) => cleanRegex(p2.source)).join("|")})$`);
+    if (def.options.every((o2) => o2._zod.pattern)) {
+      const patterns = def.options.map((o2) => o2._zod.pattern);
+      return new RegExp(`^(${patterns.map((p) => cleanRegex(p.source)).join("|")})$`);
     }
     return void 0;
   });
@@ -10764,7 +10764,7 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
   };
 });
 function handleExclusiveUnionResults(results, final, inst, ctx) {
-  const successes = results.filter((r) => r.issues.length === 0);
+  const successes = results.filter((r2) => r2.issues.length === 0);
   if (successes.length === 1) {
     final.value = successes[0].value;
     return final;
@@ -10827,11 +10827,11 @@ var $ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("$ZodDiscriminatedUnio
       const pv = option._zod.propValues;
       if (!pv || Object.keys(pv).length === 0)
         throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(option)}"`);
-      for (const [k2, v2] of Object.entries(pv)) {
-        if (!propValues[k2])
-          propValues[k2] = /* @__PURE__ */ new Set();
-        for (const val of v2) {
-          propValues[k2].add(val);
+      for (const [k, v] of Object.entries(pv)) {
+        if (!propValues[k])
+          propValues[k] = /* @__PURE__ */ new Set();
+        for (const val of v) {
+          propValues[k].add(val);
         }
       }
     }
@@ -10840,15 +10840,15 @@ var $ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("$ZodDiscriminatedUnio
   const disc = cached(() => {
     const opts = def.options;
     const map2 = /* @__PURE__ */ new Map();
-    for (const o of opts) {
-      const values = o._zod.propValues?.[def.discriminator];
+    for (const o2 of opts) {
+      const values = o2._zod.propValues?.[def.discriminator];
       if (!values || values.size === 0)
-        throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(o)}"`);
-      for (const v2 of values) {
-        if (map2.has(v2)) {
-          throw new Error(`Duplicate discriminator value "${String(v2)}"`);
+        throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(o2)}"`);
+      for (const v of values) {
+        if (map2.has(v)) {
+          throw new Error(`Duplicate discriminator value "${String(v)}"`);
         }
-        map2.set(v2, o);
+        map2.set(v, o2);
       }
     }
     return map2;
@@ -10898,19 +10898,19 @@ var $ZodIntersection = /* @__PURE__ */ $constructor("$ZodIntersection", (inst, d
     return handleIntersectionResults(payload, left, right);
   };
 });
-function mergeValues2(a, b2) {
-  if (a === b2) {
-    return { valid: true, data: a };
+function mergeValues2(a2, b) {
+  if (a2 === b) {
+    return { valid: true, data: a2 };
   }
-  if (a instanceof Date && b2 instanceof Date && +a === +b2) {
-    return { valid: true, data: a };
+  if (a2 instanceof Date && b instanceof Date && +a2 === +b) {
+    return { valid: true, data: a2 };
   }
-  if (isPlainObject(a) && isPlainObject(b2)) {
-    const bKeys = Object.keys(b2);
-    const sharedKeys = Object.keys(a).filter((key) => bKeys.indexOf(key) !== -1);
-    const newObj = { ...a, ...b2 };
+  if (isPlainObject(a2) && isPlainObject(b)) {
+    const bKeys = Object.keys(b);
+    const sharedKeys = Object.keys(a2).filter((key) => bKeys.indexOf(key) !== -1);
+    const newObj = { ...a2, ...b };
     for (const key of sharedKeys) {
-      const sharedValue = mergeValues2(a[key], b2[key]);
+      const sharedValue = mergeValues2(a2[key], b[key]);
       if (!sharedValue.valid) {
         return {
           valid: false,
@@ -10921,14 +10921,14 @@ function mergeValues2(a, b2) {
     }
     return { valid: true, data: newObj };
   }
-  if (Array.isArray(a) && Array.isArray(b2)) {
-    if (a.length !== b2.length) {
+  if (Array.isArray(a2) && Array.isArray(b)) {
+    if (a2.length !== b.length) {
       return { valid: false, mergeErrorPath: [] };
     }
     const newArray = [];
-    for (let index = 0; index < a.length; index++) {
-      const itemA = a[index];
-      const itemB = b2[index];
+    for (let index = 0; index < a2.length; index++) {
+      const itemA = a2[index];
+      const itemB = b[index];
       const sharedValue = mergeValues2(itemA, itemB);
       if (!sharedValue.valid) {
         return {
@@ -10948,10 +10948,10 @@ function handleIntersectionResults(result, left, right) {
   for (const iss of left.issues) {
     if (iss.code === "unrecognized_keys") {
       unrecIssue ?? (unrecIssue = iss);
-      for (const k2 of iss.keys) {
-        if (!unrecKeys.has(k2))
-          unrecKeys.set(k2, {});
-        unrecKeys.get(k2).l = true;
+      for (const k of iss.keys) {
+        if (!unrecKeys.has(k))
+          unrecKeys.set(k, {});
+        unrecKeys.get(k).l = true;
       }
     } else {
       result.issues.push(iss);
@@ -10959,16 +10959,16 @@ function handleIntersectionResults(result, left, right) {
   }
   for (const iss of right.issues) {
     if (iss.code === "unrecognized_keys") {
-      for (const k2 of iss.keys) {
-        if (!unrecKeys.has(k2))
-          unrecKeys.set(k2, {});
-        unrecKeys.get(k2).r = true;
+      for (const k of iss.keys) {
+        if (!unrecKeys.has(k))
+          unrecKeys.set(k, {});
+        unrecKeys.get(k).r = true;
       }
     } else {
       result.issues.push(iss);
     }
   }
-  const bothKeys = [...unrecKeys].filter(([, f]) => f.l && f.r).map(([k2]) => k2);
+  const bothKeys = [...unrecKeys].filter(([, f]) => f.l && f.r).map(([k]) => k);
   if (bothKeys.length && unrecIssue) {
     result.issues.push({ ...unrecIssue, keys: bothKeys });
   }
@@ -11012,35 +11012,35 @@ var $ZodTuple = /* @__PURE__ */ $constructor("$ZodTuple", (inst, def) => {
         return payload;
       }
     }
-    let i = -1;
+    let i2 = -1;
     for (const item of items) {
-      i++;
-      if (i >= input.length) {
-        if (i >= optStart)
+      i2++;
+      if (i2 >= input.length) {
+        if (i2 >= optStart)
           continue;
       }
       const result = item._zod.run({
-        value: input[i],
+        value: input[i2],
         issues: []
       }, ctx);
       if (result instanceof Promise) {
-        proms.push(result.then((result2) => handleTupleResult(result2, payload, i)));
+        proms.push(result.then((result2) => handleTupleResult(result2, payload, i2)));
       } else {
-        handleTupleResult(result, payload, i);
+        handleTupleResult(result, payload, i2);
       }
     }
     if (def.rest) {
       const rest = input.slice(items.length);
       for (const el of rest) {
-        i++;
+        i2++;
         const result = def.rest._zod.run({
           value: el,
           issues: []
         }, ctx);
         if (result instanceof Promise) {
-          proms.push(result.then((result2) => handleTupleResult(result2, payload, i)));
+          proms.push(result.then((result2) => handleTupleResult(result2, payload, i2)));
         } else {
-          handleTupleResult(result, payload, i);
+          handleTupleResult(result, payload, i2);
         }
       }
     }
@@ -11262,7 +11262,7 @@ var $ZodEnum = /* @__PURE__ */ $constructor("$ZodEnum", (inst, def) => {
   const values = getEnumValues(def.entries);
   const valuesSet = new Set(values);
   inst._zod.values = valuesSet;
-  inst._zod.pattern = new RegExp(`^(${values.filter((k2) => propertyKeyTypes.has(typeof k2)).map((o) => typeof o === "string" ? escapeRegex(o) : o.toString()).join("|")})$`);
+  inst._zod.pattern = new RegExp(`^(${values.filter((k) => propertyKeyTypes.has(typeof k)).map((o2) => typeof o2 === "string" ? escapeRegex(o2) : o2.toString()).join("|")})$`);
   inst._zod.parse = (payload, _ctx) => {
     const input = payload.value;
     if (valuesSet.has(input)) {
@@ -11284,7 +11284,7 @@ var $ZodLiteral = /* @__PURE__ */ $constructor("$ZodLiteral", (inst, def) => {
   }
   const values = new Set(def.values);
   inst._zod.values = values;
-  inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex(o) : o ? escapeRegex(o.toString()) : String(o)).join("|")})$`);
+  inst._zod.pattern = new RegExp(`^(${def.values.map((o2) => typeof o2 === "string" ? escapeRegex(o2) : o2 ? escapeRegex(o2.toString()) : String(o2)).join("|")})$`);
   inst._zod.parse = (payload, _ctx) => {
     const input = payload.value;
     if (values.has(input)) {
@@ -11356,7 +11356,7 @@ var $ZodOptional = /* @__PURE__ */ $constructor("$ZodOptional", (inst, def) => {
     if (def.innerType._zod.optin === "optional") {
       const result = def.innerType._zod.run(payload, ctx);
       if (result instanceof Promise)
-        return result.then((r) => handleOptionalResult(r, payload.value));
+        return result.then((r2) => handleOptionalResult(r2, payload.value));
       return handleOptionalResult(result, payload.value);
     }
     if (payload.value === void 0) {
@@ -11432,8 +11432,8 @@ var $ZodPrefault = /* @__PURE__ */ $constructor("$ZodPrefault", (inst, def) => {
 var $ZodNonOptional = /* @__PURE__ */ $constructor("$ZodNonOptional", (inst, def) => {
   $ZodType.init(inst, def);
   defineLazy(inst._zod, "values", () => {
-    const v2 = def.innerType._zod.values;
-    return v2 ? new Set([...v2].filter((x) => x !== void 0)) : void 0;
+    const v = def.innerType._zod.values;
+    return v ? new Set([...v].filter((x) => x !== void 0)) : void 0;
   });
   inst._zod.parse = (payload, ctx) => {
     const result = def.innerType._zod.run(payload, ctx);
@@ -11719,9 +11719,9 @@ var $ZodFunction = /* @__PURE__ */ $constructor("$ZodFunction", (inst, def) => {
     return payload;
   };
   inst.input = (...args) => {
-    const F2 = inst.constructor;
+    const F = inst.constructor;
     if (Array.isArray(args[0])) {
-      return new F2({
+      return new F({
         type: "function",
         input: new $ZodTuple({
           type: "tuple",
@@ -11731,15 +11731,15 @@ var $ZodFunction = /* @__PURE__ */ $constructor("$ZodFunction", (inst, def) => {
         output: inst._def.output
       });
     }
-    return new F2({
+    return new F({
       type: "function",
       input: args[0],
       output: inst._def.output
     });
   };
   inst.output = (output) => {
-    const F2 = inst.constructor;
-    return new F2({
+    const F = inst.constructor;
+    return new F({
       type: "function",
       input: inst._def.input,
       output
@@ -11773,11 +11773,11 @@ var $ZodCustom = /* @__PURE__ */ $constructor("$ZodCustom", (inst, def) => {
   };
   inst._zod.check = (payload) => {
     const input = payload.value;
-    const r = def.fn(input);
-    if (r instanceof Promise) {
-      return r.then((r2) => handleRefineResult(r2, payload, input, inst));
+    const r2 = def.fn(input);
+    if (r2 instanceof Promise) {
+      return r2.then((r3) => handleRefineResult(r3, payload, input, inst));
     }
-    handleRefineResult(r, payload, input, inst);
+    handleRefineResult(r2, payload, input, inst);
     return;
   };
 });
@@ -13617,17 +13617,17 @@ var error16 = () => {
     number: { unit: "", shortLabel: "\u05E7\u05D8\u05DF", longLabel: "\u05D2\u05D3\u05D5\u05DC" }
     // no unit
   };
-  const typeEntry = (t) => t ? TypeNames[t] : void 0;
-  const typeLabel = (t) => {
-    const e2 = typeEntry(t);
-    if (e2)
-      return e2.label;
-    return t ?? TypeNames.unknown.label;
-  };
-  const withDefinite = (t) => `\u05D4${typeLabel(t)}`;
-  const verbFor = (t) => {
-    const e2 = typeEntry(t);
-    const gender = e2?.gender ?? "m";
+  const typeEntry = (t2) => t2 ? TypeNames[t2] : void 0;
+  const typeLabel = (t2) => {
+    const e = typeEntry(t2);
+    if (e)
+      return e.label;
+    return t2 ?? TypeNames.unknown.label;
+  };
+  const withDefinite = (t2) => `\u05D4${typeLabel(t2)}`;
+  const verbFor = (t2) => {
+    const e = typeEntry(t2);
+    const gender = e?.gender ?? "m";
     return gender === "f" ? "\u05E6\u05E8\u05D9\u05DB\u05D4 \u05DC\u05D4\u05D9\u05D5\u05EA" : "\u05E6\u05E8\u05D9\u05DA \u05DC\u05D4\u05D9\u05D5\u05EA";
   };
   const getSizing = (origin) => {
@@ -13686,7 +13686,7 @@ var error16 = () => {
         if (issue2.values.length === 1) {
           return `\u05E2\u05E8\u05DA \u05DC\u05D0 \u05EA\u05E7\u05D9\u05DF: \u05D4\u05E2\u05E8\u05DA \u05D7\u05D9\u05D9\u05D1 \u05DC\u05D4\u05D9\u05D5\u05EA ${stringifyPrimitive(issue2.values[0])}`;
         }
-        const stringified = issue2.values.map((v2) => stringifyPrimitive(v2));
+        const stringified = issue2.values.map((v) => stringifyPrimitive(v));
         if (issue2.values.length === 2) {
           return `\u05E2\u05E8\u05DA \u05DC\u05D0 \u05EA\u05E7\u05D9\u05DF: \u05D4\u05D0\u05E4\u05E9\u05E8\u05D5\u05D9\u05D5\u05EA \u05D4\u05DE\u05EA\u05D0\u05D9\u05DE\u05D5\u05EA \u05D4\u05DF ${stringified[0]} \u05D0\u05D5 ${stringified[1]}`;
         }
@@ -17407,9 +17407,9 @@ var $ZodRegistry = class {
     return this;
   }
   get(schema) {
-    const p2 = schema._zod.parent;
-    if (p2) {
-      const pm = { ...this.get(p2) ?? {} };
+    const p = schema._zod.parent;
+    if (p) {
+      const pm = { ...this.get(p) ?? {} };
       delete pm.id;
       const f = { ...pm, ...this._map.get(schema) };
       return Object.keys(f).length ? f : void 0;
@@ -18197,7 +18197,7 @@ function _set(Class2, valueType, params) {
 }
 // @__NO_SIDE_EFFECTS__
 function _enum(Class2, values, params) {
-  const entries = Array.isArray(values) ? Object.fromEntries(values.map((v2) => [v2, v2])) : values;
+  const entries = Array.isArray(values) ? Object.fromEntries(values.map((v) => [v, v])) : values;
   return new Class2({
     type: "enum",
     entries,
@@ -18402,8 +18402,8 @@ function _stringbool(Classes, _params) {
   let truthyArray = params.truthy ?? ["true", "1", "yes", "on", "y", "enabled"];
   let falsyArray = params.falsy ?? ["false", "0", "no", "off", "n", "disabled"];
   if (params.case !== "sensitive") {
-    truthyArray = truthyArray.map((v2) => typeof v2 === "string" ? v2.toLowerCase() : v2);
-    falsyArray = falsyArray.map((v2) => typeof v2 === "string" ? v2.toLowerCase() : v2);
+    truthyArray = truthyArray.map((v) => typeof v === "string" ? v.toLowerCase() : v);
+    falsyArray = falsyArray.map((v) => typeof v === "string" ? v.toLowerCase() : v);
   }
   const truthySet = new Set(truthyArray);
   const falsySet = new Set(falsyArray);
@@ -18949,9 +18949,9 @@ var dateProcessor = (_schema, ctx, _json, _params) => {
 var enumProcessor = (schema, _ctx, json2, _params) => {
   const def = schema._zod.def;
   const values = getEnumValues(def.entries);
-  if (values.every((v2) => typeof v2 === "number"))
+  if (values.every((v) => typeof v === "number"))
     json2.type = "number";
-  if (values.every((v2) => typeof v2 === "string"))
+  if (values.every((v) => typeof v === "string"))
     json2.type = "string";
   json2.enum = values;
 };
@@ -18984,13 +18984,13 @@ var literalProcessor = (schema, ctx, json2, _params) => {
       json2.const = val;
     }
   } else {
-    if (vals.every((v2) => typeof v2 === "number"))
+    if (vals.every((v) => typeof v === "number"))
       json2.type = "number";
-    if (vals.every((v2) => typeof v2 === "string"))
+    if (vals.every((v) => typeof v === "string"))
       json2.type = "string";
-    if (vals.every((v2) => typeof v2 === "boolean"))
+    if (vals.every((v) => typeof v === "boolean"))
       json2.type = "boolean";
-    if (vals.every((v2) => v2 === null))
+    if (vals.every((v) => v === null))
       json2.type = "null";
     json2.enum = vals;
   }
@@ -19026,7 +19026,7 @@ var fileProcessor = (schema, _ctx, json2, _params) => {
       Object.assign(_json, file2);
     } else {
       Object.assign(_json, file2);
-      _json.anyOf = mime.map((m) => ({ contentMediaType: m }));
+      _json.anyOf = mime.map((m2) => ({ contentMediaType: m2 }));
     }
   } else {
     Object.assign(_json, file2);
@@ -19085,11 +19085,11 @@ var objectProcessor = (schema, ctx, _json, params) => {
   }
   const allKeys = new Set(Object.keys(shape));
   const requiredKeys = new Set([...allKeys].filter((key) => {
-    const v2 = def.shape[key]._zod;
+    const v = def.shape[key]._zod;
     if (ctx.io === "input") {
-      return v2.optin === void 0;
+      return v.optin === void 0;
     } else {
-      return v2.optout === void 0;
+      return v.optout === void 0;
     }
   }));
   if (requiredKeys.size > 0) {
@@ -19110,9 +19110,9 @@ var objectProcessor = (schema, ctx, _json, params) => {
 var unionProcessor = (schema, ctx, json2, params) => {
   const def = schema._zod.def;
   const isExclusive = def.inclusive === false;
-  const options = def.options.map((x, i) => process2(x, ctx, {
+  const options = def.options.map((x, i2) => process2(x, ctx, {
     ...params,
-    path: [...params.path, isExclusive ? "oneOf" : "anyOf", i]
+    path: [...params.path, isExclusive ? "oneOf" : "anyOf", i2]
   }));
   if (isExclusive) {
     json2.oneOf = options;
@@ -19122,18 +19122,18 @@ var unionProcessor = (schema, ctx, json2, params) => {
 };
 var intersectionProcessor = (schema, ctx, json2, params) => {
   const def = schema._zod.def;
-  const a = process2(def.left, ctx, {
+  const a2 = process2(def.left, ctx, {
     ...params,
     path: [...params.path, "allOf", 0]
   });
-  const b2 = process2(def.right, ctx, {
+  const b = process2(def.right, ctx, {
     ...params,
     path: [...params.path, "allOf", 1]
   });
   const isSimpleIntersection = (val) => "allOf" in val && Object.keys(val).length === 1;
   const allOf = [
-    ...isSimpleIntersection(a) ? a.allOf : [a],
-    ...isSimpleIntersection(b2) ? b2.allOf : [b2]
+    ...isSimpleIntersection(a2) ? a2.allOf : [a2],
+    ...isSimpleIntersection(b) ? b.allOf : [b]
   ];
   json2.allOf = allOf;
 };
@@ -19143,9 +19143,9 @@ var tupleProcessor = (schema, ctx, _json, params) => {
   json2.type = "array";
   const prefixPath = ctx.target === "draft-2020-12" ? "prefixItems" : "items";
   const restPath = ctx.target === "draft-2020-12" ? "items" : ctx.target === "openapi-3.0" ? "items" : "additionalItems";
-  const prefixItems = def.items.map((x, i) => process2(x, ctx, {
+  const prefixItems = def.items.map((x, i2) => process2(x, ctx, {
     ...params,
-    path: [...params.path, prefixPath, i]
+    path: [...params.path, prefixPath, i2]
   }));
   const rest = def.rest ? process2(def.rest, ctx, {
     ...params,
@@ -19209,7 +19209,7 @@ var recordProcessor = (schema, ctx, _json, params) => {
   }
   const keyValues = keyType._zod.values;
   if (keyValues) {
-    const validKeyValues = [...keyValues].filter((v2) => typeof v2 === "string" || typeof v2 === "number");
+    const validKeyValues = [...keyValues].filter((v) => typeof v === "string" || typeof v === "number");
     if (validKeyValues.length > 0) {
       json2.required = validKeyValues;
     }
@@ -20381,11 +20381,11 @@ function record(keyType, valueType, params) {
   });
 }
 function partialRecord(keyType, valueType, params) {
-  const k2 = clone(keyType);
-  k2._zod.values = void 0;
+  const k = clone(keyType);
+  k._zod.values = void 0;
   return new ZodRecord2({
     type: "record",
-    keyType: k2,
+    keyType: k,
     valueType,
     ...util_exports.normalizeParams(params)
   });
@@ -20473,7 +20473,7 @@ var ZodEnum2 = /* @__PURE__ */ $constructor("ZodEnum", (inst, def) => {
   };
 });
 function _enum2(values, params) {
-  const entries = Array.isArray(values) ? Object.fromEntries(values.map((v2) => [v2, v2])) : values;
+  const entries = Array.isArray(values) ? Object.fromEntries(values.map((v) => [v, v])) : values;
   return new ZodEnum2({
     type: "enum",
     entries,
@@ -21007,10 +21007,10 @@ function convertBaseSchema(schema, ctx) {
     if (enumValues.length === 1) {
       return z2.literal(enumValues[0]);
     }
-    if (enumValues.every((v2) => typeof v2 === "string")) {
+    if (enumValues.every((v) => typeof v === "string")) {
       return z2.enum(enumValues);
     }
-    const literalSchemas = enumValues.map((v2) => z2.literal(v2));
+    const literalSchemas = enumValues.map((v) => z2.literal(v));
     if (literalSchemas.length < 2) {
       return literalSchemas[0];
     }
@@ -21021,8 +21021,8 @@ function convertBaseSchema(schema, ctx) {
   }
   const type = schema.type;
   if (Array.isArray(type)) {
-    const typeSchemas = type.map((t) => {
-      const typeSchema = { ...schema, type: t };
+    const typeSchemas = type.map((t2) => {
+      const typeSchema = { ...schema, type: t2 };
       return convertBaseSchema(typeSchema, ctx);
     });
     if (typeSchemas.length === 0) {
@@ -21175,8 +21175,8 @@ function convertBaseSchema(schema, ctx) {
           zodSchema = schemasToIntersect[0];
         } else {
           let result = z2.intersection(schemasToIntersect[0], schemasToIntersect[1]);
-          for (let i = 2; i < schemasToIntersect.length; i++) {
-            result = z2.intersection(result, schemasToIntersect[i]);
+          for (let i2 = 2; i2 < schemasToIntersect.length; i2++) {
+            result = z2.intersection(result, schemasToIntersect[i2]);
           }
           zodSchema = result;
         }
@@ -21271,8 +21271,8 @@ function convertSchema(schema, ctx) {
     } else {
       let result = hasExplicitType ? baseSchema : convertSchema(schema.allOf[0], ctx);
       const startIdx = hasExplicitType ? 0 : 1;
-      for (let i = startIdx; i < schema.allOf.length; i++) {
-        result = z2.intersection(result, convertSchema(schema.allOf[i], ctx));
+      for (let i2 = startIdx; i2 < schema.allOf.length; i2++) {
+        result = z2.intersection(result, convertSchema(schema.allOf[i2], ctx));
       }
       baseSchema = result;
     }
@@ -22215,6 +22215,180 @@ var ROLE_PERMISSIONS = {
   [Role.admin]: new Set(Object.values(Permission))
 };
 
+// ../../packages/core/src/auth/totp.ts
+var TOTP_ALGORITHMS = ["SHA1", "SHA256", "SHA512"];
+var TOTP_DIGITS = [6, 8];
+var TOTP_DEFAULT_ALGORITHM = "SHA1";
+var TOTP_DEFAULT_DIGITS = 6;
+var TOTP_DEFAULT_PERIOD_SECONDS = 30;
+var TOTP_MIN_PERIOD_SECONDS = 5;
+var TOTP_MAX_PERIOD_SECONDS = 300;
+var TOTP_MIN_SECRET_CHARS = 16;
+var TOTP_MAX_SECRET_CHARS = 512;
+var TOTP_MAX_LABEL_CHARS = 500;
+var BASE32_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
+var TotpSetupKeyError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "TotpSetupKeyError";
+  }
+};
+function normalizeSecret(raw) {
+  return raw.replace(/[\s-]/g, "").replace(/=+$/, "").toUpperCase();
+}
+function parseSecret(raw) {
+  const secret = normalizeSecret(raw);
+  if (secret.length === 0) {
+    throw new TotpSetupKeyError(
+      'Setup key has an empty secret. Expected the base32 key the app shows next to the QR code (e.g. "JBSWY3DPEHPK3PXP").'
+    );
+  }
+  if (secret.length < TOTP_MIN_SECRET_CHARS) {
+    throw new TotpSetupKeyError(
+      `Setup key secret is ${secret.length} characters; expected at least ${TOTP_MIN_SECRET_CHARS}. This usually means the value was truncated when it was copied.`
+    );
+  }
+  if (secret.length > TOTP_MAX_SECRET_CHARS) {
+    throw new TotpSetupKeyError(
+      `Setup key secret is ${secret.length} characters; the maximum is ${TOTP_MAX_SECRET_CHARS}. Paste only the base32 key, not the whole QR payload or a file.`
+    );
+  }
+  for (const char of secret) {
+    if (!BASE32_ALPHABET.includes(char)) {
+      throw new TotpSetupKeyError(
+        "Setup key secret contains characters outside the base32 alphabet (A\u2013Z and 2\u20137). Check for a mistyped 0/O or 1/I, and paste the key exactly as the app displays it."
+      );
+    }
+  }
+  return secret;
+}
+function parseAlgorithm(raw) {
+  if (raw === null || raw === "") return TOTP_DEFAULT_ALGORITHM;
+  const upper = raw.toUpperCase();
+  const match = TOTP_ALGORITHMS.find((a2) => a2 === upper);
+  if (!match) {
+    throw new TotpSetupKeyError(
+      `Setup key has algorithm "${raw}"; expected one of ${TOTP_ALGORITHMS.join(", ")}.`
+    );
+  }
+  return match;
+}
+function parseDigits(raw) {
+  if (raw === null || raw === "") return TOTP_DEFAULT_DIGITS;
+  const parsed = Number(raw);
+  const match = TOTP_DIGITS.find((d) => d === parsed);
+  if (!match) {
+    throw new TotpSetupKeyError(
+      `Setup key has digits "${raw}"; expected ${TOTP_DIGITS.join(" or ")}.`
+    );
+  }
+  return match;
+}
+function parsePeriod(raw) {
+  if (raw === null || raw === "") return TOTP_DEFAULT_PERIOD_SECONDS;
+  const parsed = Number(raw);
+  if (!Number.isInteger(parsed)) {
+    throw new TotpSetupKeyError(
+      `Setup key has period "${raw}"; expected a whole number of seconds (usually 30).`
+    );
+  }
+  if (parsed < TOTP_MIN_PERIOD_SECONDS || parsed > TOTP_MAX_PERIOD_SECONDS) {
+    throw new TotpSetupKeyError(
+      `Setup key has period ${parsed}s; expected between ${TOTP_MIN_PERIOD_SECONDS} and ${TOTP_MAX_PERIOD_SECONDS} seconds (usually 30).`
+    );
+  }
+  return parsed;
+}
+function parseLabel(pathname) {
+  let label = pathname.replace(/^\//, "");
+  try {
+    label = decodeURIComponent(label);
+  } catch {
+  }
+  if (label.length === 0) return { issuer: null, accountName: null };
+  const colon = label.indexOf(":");
+  if (colon === -1) return { issuer: null, accountName: clampLabel(label) };
+  return {
+    issuer: clampLabel(label.slice(0, colon)),
+    accountName: clampLabel(label.slice(colon + 1))
+  };
+}
+function clampLabel(value) {
+  const trimmed = value.trim();
+  if (trimmed.length === 0) return null;
+  return trimmed.slice(0, TOTP_MAX_LABEL_CHARS);
+}
+function parseTotpSetupKey(input) {
+  const trimmed = input.trim();
+  if (trimmed.length === 0) {
+    throw new TotpSetupKeyError(
+      "Setup key is empty. Provide an otpauth:// URI or the base32 key shown next to the QR code."
+    );
+  }
+  if (!/^otpauth:/i.test(trimmed)) {
+    if (/^otpauth-migration:/i.test(trimmed)) {
+      throw new TotpSetupKeyError(
+        "This is a Google Authenticator export URI (otpauth-migration://), which packs several accounts into one protobuf blob. Open the account in the authenticator and use its individual otpauth:// URI or base32 key instead."
+      );
+    }
+    return {
+      secret: parseSecret(trimmed),
+      algorithm: TOTP_DEFAULT_ALGORITHM,
+      digits: TOTP_DEFAULT_DIGITS,
+      periodSeconds: TOTP_DEFAULT_PERIOD_SECONDS,
+      issuer: null,
+      accountName: null
+    };
+  }
+  let url2;
+  try {
+    url2 = new URL(trimmed);
+  } catch {
+    throw new TotpSetupKeyError(
+      "Setup key starts with otpauth: but is not a valid URI. Expected otpauth://totp/Label?secret=BASE32."
+    );
+  }
+  const kind = url2.host.toLowerCase();
+  if (kind === "hotp") {
+    throw new TotpSetupKeyError(
+      "This is a counter-based HOTP key (otpauth://hotp/). Only time-based TOTP keys are supported \u2014 re-enrol the account choosing an authenticator app / time-based code."
+    );
+  }
+  if (kind !== "totp") {
+    throw new TotpSetupKeyError(
+      `Setup key type is "${kind || "(none)"}"; expected otpauth://totp/.`
+    );
+  }
+  const secretParam = url2.searchParams.get("secret");
+  if (secretParam === null) {
+    throw new TotpSetupKeyError(
+      "Setup key URI has no `secret` parameter. Expected otpauth://totp/Label?secret=BASE32."
+    );
+  }
+  const label = parseLabel(url2.pathname);
+  const issuerParam = url2.searchParams.get("issuer");
+  return {
+    secret: parseSecret(secretParam),
+    algorithm: parseAlgorithm(url2.searchParams.get("algorithm")),
+    digits: parseDigits(url2.searchParams.get("digits")),
+    periodSeconds: parsePeriod(url2.searchParams.get("period")),
+    // The `issuer` parameter wins over the label prefix: the spec calls the
+    // parameter "strongly recommended" and the prefix a legacy duplicate, and
+    // when they disagree the parameter is the one the issuer set deliberately.
+    // Clamped on this path too — it does not go through parseLabel.
+    issuer: (issuerParam === null ? null : clampLabel(issuerParam)) ?? label.issuer,
+    accountName: label.accountName
+  };
+}
+function totpSetupKeyError(input) {
+  try {
+    parseTotpSetupKey(input);
+    return null;
+  } catch (err) {
+    return err instanceof TotpSetupKeyError ? err.message : "Setup key could not be parsed.";
+  }
+}
+
 // ../../packages/core/src/application/types.ts
 var URL_BEARING_APPLICATION_TYPES = /* @__PURE__ */ new Set(["WEB", "API_SERVICE"]);
 function isUrlBearingApplicationType(type) {
@@ -24014,15 +24188,15 @@ var MagicAuthConfigSchema = external_exports.object({
 }).strict();
 var canonicalOrigin = external_exports.string().max(2048).transform((s, ctx) => {
   try {
-    const u = new URL(s);
-    if (u.protocol !== "https:" && u.protocol !== "http:" || u.username !== "" || u.password !== "") {
+    const u4 = new URL(s);
+    if (u4.protocol !== "https:" && u4.protocol !== "http:" || u4.username !== "" || u4.password !== "") {
       ctx.addIssue({
         code: "custom",
         message: "origin must be scheme://host[:port] with no path/query/credentials"
       });
       return external_exports.NEVER;
     }
-    return u.origin;
+    return u4.origin;
   } catch {
     ctx.addIssue({ code: "custom", message: "origin must be a valid absolute http(s) URL" });
     return external_exports.NEVER;
@@ -24068,17 +24242,42 @@ var StorageStateSchema = external_exports.object({
   } catch {
     return;
   }
-  s.cookies.forEach((c51, i) => {
-    const d2 = c51.domain.replace(/^\./, "").toLowerCase();
-    if (d2 !== host && !host.endsWith(`.${d2}`)) {
+  s.cookies.forEach((c51, i2) => {
+    const d = c51.domain.replace(/^\./, "").toLowerCase();
+    if (d !== host && !host.endsWith(`.${d}`)) {
       ctx.addIssue({
         code: "custom",
-        path: ["cookies", i, "domain"],
+        path: ["cookies", i2, "domain"],
         message: `cookie domain "${c51.domain}" is not the capture origin host "${host}" or a parent domain of it`
       });
     }
   });
 });
+var CredentialMfaKindValues = ["TOTP"];
+var CredentialMfaKind = external_exports.enum(CredentialMfaKindValues);
+var TotpSetupKeySchema = external_exports.string().min(1).max(TOTP_MAX_SECRET_CHARS * 4).superRefine((value, ctx) => {
+  const message = totpSetupKeyError(value);
+  if (message !== null) ctx.addIssue({ code: "custom", message });
+});
+var CredentialMfaConfigSchema = external_exports.object({
+  kind: external_exports.literal("TOTP"),
+  // Both bounds come from the SAME constant the parser clamps to. They used
+  // to be an independent `.max(500)`, which let a long otpauth label parse
+  // clean, persist, and then fail this schema on read — enrolment answered
+  // 200 with `mfa: null` while the seed sat in the row, and every code
+  // request 422'd. One constant, one bound.
+  /** Service name from the setup key's `issuer` param or label prefix. */
+  issuer: external_exports.string().max(TOTP_MAX_LABEL_CHARS).nullable(),
+  /** Account identifier from the setup key's label. May be an email. */
+  accountName: external_exports.string().max(TOTP_MAX_LABEL_CHARS).nullable(),
+  digits: external_exports.union([external_exports.literal(TOTP_DIGITS[0]), external_exports.literal(TOTP_DIGITS[1])]),
+  periodSeconds: external_exports.number().int().min(TOTP_MIN_PERIOD_SECONDS).max(TOTP_MAX_PERIOD_SECONDS),
+  algorithm: external_exports.enum(TOTP_ALGORITHMS)
+}).strict();
+var CredentialMfaSummarySchema = CredentialMfaConfigSchema.extend({
+  /** When the factor was last enrolled or replaced. */
+  enrolledAt: external_exports.coerce.date()
+}).strict();
 var CredentialAuthConfigSchema = external_exports.discriminatedUnion("type", [
   BearerAuthConfigSchema,
   JwtAuthConfigSchema,
@@ -24241,7 +24440,13 @@ var CredentialResponseSchema = external_exports.object({
    * edits — so only this field can evidence a secret change. Not secret
    * material: a timestamp, safe on the read path.
    */
-  secretRotatedAt: external_exports.date().nullable()
+  secretRotatedAt: external_exports.date().nullable(),
+  /**
+   * The account's second factor, or null when it has none. NON-secret
+   * parameters only — the seed lives in its own KMS envelope on the row and
+   * has no reveal endpoint at all (see the reveal union below).
+   */
+  mfa: CredentialMfaSummarySchema.nullable()
 }).strict();
 var ListCredentialsResponseSchema = external_exports.array(CredentialResponseSchema);
 var UpdateCredentialRequestSchema = external_exports.object({
@@ -24262,6 +24467,15 @@ var RotateCredentialSecretRequestSchema = external_exports.discriminatedUnion("c
   }).strict(),
   external_exports.object({ credentialType: external_exports.literal("SESSION_STATE"), ...SECRET_SHAPES.SESSION_STATE }).strict()
 ]);
+var SetCredentialMfaRequestSchema = external_exports.object({
+  kind: external_exports.literal("TOTP"),
+  /** otpauth:// URI or bare base32 key. Validated by the shared parser. */
+  setupKey: TotpSetupKeySchema
+}).strict();
+var CredentialMfaCodeResponseSchema = external_exports.object({
+  code: external_exports.string().min(6).max(8),
+  expiresInSeconds: external_exports.number().int().positive()
+}).strict();
 var RevealCredentialSecretResponseSchema = external_exports.discriminatedUnion("credentialType", [
   external_exports.object({
     credentialType: external_exports.literal("USERNAME_PASSWORD"),
@@ -24387,6 +24601,73 @@ var credentialContract = c9.router({
       500: ErrorResponseSchema
     }
   },
+  // Attach or replace the account's SECOND FACTOR. Its own sub-resource for
+  // the same reason rotate has one: every route that touches KMS or plaintext
+  // is greppable at its own URL. PUT because the body carries the complete
+  // factor — re-sending it is idempotent.
+  //
+  // Like rotate, and unlike delete/env-move, this is NOT subject to the
+  // CREDENTIAL_IN_USE guard: enrolling MFA preserves credentialId and the
+  // engagement's credential set, and mid-engagement is exactly when a target
+  // that has just started enforcing MFA needs a seed attached.
+  setCredentialMfa: {
+    method: "PUT",
+    path: "/organizations/:organizationId/environments/:environmentId/credentials/:credentialId/mfa",
+    pathParams: CredentialIdParamsSchema,
+    body: SetCredentialMfaRequestSchema,
+    responses: {
+      // Never echoes the setup key back — the standard credential shape, whose
+      // `mfa` field carries the derived non-secret parameters.
+      200: CredentialResponseSchema,
+      400: ErrorResponseSchema,
+      401: ErrorResponseSchema,
+      403: ErrorResponseSchema,
+      404: ErrorResponseSchema,
+      // 422 — the credential's type cannot carry a second factor
+      // (errorCode CREDENTIAL_MFA_UNSUPPORTED_TYPE). See
+      // MFA_CAPABLE_CREDENTIAL_TYPES.
+      422: ErrorResponseSchema,
+      500: ErrorResponseSchema
+    }
+  },
+  // Derive the CURRENT second-factor code. POST, not GET, for the same reason
+  // as reveal: it must never sit in an access log, a browser history entry, or
+  // a cacheable read. Requires a user principal — a leaked trace_sk_* cannot
+  // mint codes against a customer's account.
+  //
+  // This is the STAFF/human route (it exists so an operator can confirm a seed
+  // they just pasted is the right one). The pentest agent reaches the same
+  // service method over the separate run-token internal channel, never this.
+  generateCredentialMfaCode: {
+    method: "POST",
+    path: "/organizations/:organizationId/environments/:environmentId/credentials/:credentialId/mfa/code",
+    pathParams: CredentialIdParamsSchema,
+    body: c9.noBody(),
+    responses: {
+      200: CredentialMfaCodeResponseSchema,
+      401: ErrorResponseSchema,
+      403: ErrorResponseSchema,
+      404: ErrorResponseSchema,
+      // 422 — the credential has no second factor, or its stored parameters
+      // are unreadable (errorCode CREDENTIAL_MFA_NOT_ENROLLED).
+      422: ErrorResponseSchema,
+      500: ErrorResponseSchema
+    }
+  },
+  // Remove the second factor. Idempotent: clearing a credential that has none
+  // succeeds, so a caller reconciling state doesn't have to check first.
+  clearCredentialMfa: {
+    method: "DELETE",
+    path: "/organizations/:organizationId/environments/:environmentId/credentials/:credentialId/mfa",
+    pathParams: CredentialIdParamsSchema,
+    responses: {
+      200: CredentialResponseSchema,
+      401: ErrorResponseSchema,
+      403: ErrorResponseSchema,
+      404: ErrorResponseSchema,
+      500: ErrorResponseSchema
+    }
+  },
   deleteCredential: {
     method: "DELETE",
     path: "/organizations/:organizationId/environments/:environmentId/credentials/:credentialId",
@@ -24515,7 +24796,7 @@ var DependencyAutocompleteResponseSchema = external_exports.object({
 });
 var ListRepoDependenciesQuerySchema = external_exports.object({
   search: external_exports.string().max(200).optional(),
-  isDirect: external_exports.enum(["true", "false"]).transform((v2) => v2 === "true").optional(),
+  isDirect: external_exports.enum(["true", "false"]).transform((v) => v === "true").optional(),
   scope: DependencyScope.optional(),
   ecosystem: external_exports.enum(PackageEcosystemValues).optional(),
   /** Exact version match, e.g. "1.2.3". */
@@ -27922,7 +28203,7 @@ var CreateAttestationRequestSchema = external_exports.object({
   classification: AttestationClassification,
   version: external_exports.string().min(1).max(50),
   scopeText: external_exports.string().max(4e3)
-}).refine((d2) => d2.testingWindowStart <= d2.testingWindowEnd, {
+}).refine((d) => d.testingWindowStart <= d.testingWindowEnd, {
   message: "testingWindowStart must be on or before testingWindowEnd",
   path: ["testingWindowEnd"]
 });
@@ -28491,7 +28772,7 @@ var FindingRewritesJsonSchema = external_exports.object({
   // generated 1:1 against published PentestFinding rows; a payload over
   // this cap would indicate corruption.
   rewrites: external_exports.array(FindingRewriteJsonSchema).max(1e3)
-}).refine((v2) => new Set(v2.rewrites.map((r) => r.displayId)).size === v2.rewrites.length, {
+}).refine((v) => new Set(v.rewrites.map((r2) => r2.displayId)).size === v.rewrites.length, {
   // The renderer's merge step (`mergeRewritesIntoFindings` in
   // pentest-report-pdf.service.ts) keys by displayId; a duplicate would
   // silently overwrite one finding's rewrite with another. Reject at
@@ -29180,7 +29461,7 @@ var CurateFindingEvidenceRequestSchema = external_exports.object({
   displayOrder: external_exports.number().int().min(0).optional(),
   // VIDEO only: staff edit the stepped PoC chapters (null clears them).
   videoSteps: VideoStepsSchema.nullable().optional()
-}).strict().refine((v2) => Object.keys(v2).length > 0, {
+}).strict().refine((v) => Object.keys(v).length > 0, {
   message: "At least one curation field must be provided"
 });
 var MAX_STAFF_EVIDENCE_UPLOAD_BYTES = 256 * 1024 * 1024;
@@ -31378,7 +31659,7 @@ var CreateTestIntegrationRequestSchema = external_exports.object({
   notes: external_exports.string().max(NOTES_MAX).optional(),
   apiKey: external_exports.string().min(1).max(4096).optional(),
   login: TestIntegrationLoginSchema.optional()
-}).strict().refine((v2) => v2.apiKey !== void 0 || v2.login !== void 0, {
+}).strict().refine((v) => v.apiKey !== void 0 || v.login !== void 0, {
   message: "At least one of apiKey or login is required."
 });
 var UpdateTestIntegrationRequestSchema = external_exports.object({
@@ -32224,14 +32505,14 @@ function isPrivateIpv4Literal(hostname3) {
   if (octets.length !== 4 || octets.some((octet) => Number.isNaN(octet))) {
     return false;
   }
-  const [a, b2] = octets;
-  if (a === void 0 || b2 === void 0) {
+  const [a2, b] = octets;
+  if (a2 === void 0 || b === void 0) {
     return false;
   }
-  if (a === 127 || a === 10 || a === 0 || a >= 224) return true;
-  if (a === 172 && b2 >= 16 && b2 <= 31) return true;
-  if (a === 192 && b2 === 168) return true;
-  if (a === 169 && b2 === 254) return true;
+  if (a2 === 127 || a2 === 10 || a2 === 0 || a2 >= 224) return true;
+  if (a2 === 172 && b >= 16 && b <= 31) return true;
+  if (a2 === 192 && b === 168) return true;
+  if (a2 === 169 && b === 254) return true;
   return false;
 }
 function isPrivateIpv6Literal(hostname3) {
@@ -33025,6 +33306,24 @@ var AgentSessionLoginCodeResponseSchema = external_exports.object({
   value: external_exports.string().optional(),
   receivedAt: external_exports.coerce.date().optional()
 });
+var AgentSessionTotpCodeRequestSchema = external_exports.object({
+  runVersion: external_exports.number().int().nonnegative(),
+  /** Which account (by `Credential.label`); omit if exactly one is enrolled. */
+  credentialLabel: external_exports.string().min(1).max(200).optional()
+});
+var AgentSessionTotpCodeResponseSchema = external_exports.object({
+  /** The account the code belongs to, echoed so the agent can name it. */
+  credentialLabel: external_exports.string().max(200),
+  /** The current code. 6 or 8 digits, zero-padded. */
+  code: external_exports.string().min(6).max(8),
+  /**
+   * Whole seconds the code stays valid. Guaranteed to leave usable time: the
+   * api waits for the next window rather than returning a code that is about to
+   * expire, so an agent that submits promptly is never rejected as stale (which
+   * it would otherwise misread as a wrong password).
+   */
+  expiresInSeconds: external_exports.number().int().positive()
+});
 var AgentSessionListInboxMessagesRequestSchema = external_exports.object({
   runVersion: external_exports.number().int().nonnegative(),
   /** Which account's inbox (by `Credential.label`); omit if exactly one is readable. */
@@ -33256,8 +33555,8 @@ var OperatorRecordFindingRetestRequestSchema = CreatePentestFindingRetestRequest
   pentestFindingId: external_exports.uuid(),
   outcome: RetestOutcome,
   verification: external_exports.string().min(1).max(8e3).optional()
-}).superRefine((v2, ctx) => {
-  if (v2.outcome !== "FIXED" && v2.verification !== void 0) {
+}).superRefine((v, ctx) => {
+  if (v.outcome !== "FIXED" && v.verification !== void 0) {
     ctx.addIssue({
       code: "custom",
       message: "verification report prose is only allowed when outcome is FIXED",
@@ -33275,15 +33574,15 @@ var OperatorEditFindingRetestRequestSchema = external_exports.object({
   outcome: RetestOutcome.optional(),
   notes: external_exports.string().trim().min(1).max(1e4).optional(),
   verification: external_exports.string().min(1).max(8e3).optional()
-}).superRefine((v2, ctx) => {
-  if (v2.outcome === void 0 && v2.notes === void 0) {
+}).superRefine((v, ctx) => {
+  if (v.outcome === void 0 && v.notes === void 0) {
     ctx.addIssue({
       code: "custom",
       message: "provide outcome, notes, or both \u2014 an edit must change something",
       path: ["notes"]
     });
   }
-  if (v2.verification !== void 0 && v2.outcome !== "FIXED") {
+  if (v.verification !== void 0 && v.outcome !== "FIXED") {
     ctx.addIssue({
       code: "custom",
       message: "verification report prose is only allowed when outcome is FIXED",
@@ -33625,6 +33924,33 @@ var agentSessionInternalContract = c43.router({
       503: ErrorResponseSchema
     }
   },
+  // get_totp_code: derive the CURRENT second-factor code for one of the run's
+  // accounts. Same resolution + ownership gate as login-code (org + pentest
+  // from the run token, never from agent input).
+  //
+  // The seed stays in the api: the launch resolver ships only a `mfa` marker on
+  // the credential entry, never the key. What crosses this wire is a code that
+  // is single-use and dead within a period — which is why this is a JIT call
+  // rather than another value in the task env.
+  totpCode: {
+    method: "POST",
+    path: "/internal/v1/agent-sessions/:agentSessionId/totp-code",
+    pathParams: AgentSessionInternalParamsSchema,
+    body: AgentSessionTotpCodeRequestSchema,
+    responses: {
+      200: AgentSessionTotpCodeResponseSchema,
+      // Ambiguous credentialLabel (several enrolled accounts, none named), or a
+      // label that matches more than one environment's credential.
+      400: ErrorResponseSchema,
+      401: ErrorResponseSchema,
+      409: ErrorResponseSchema,
+      // No enrolled account on the pentest's environments under this org.
+      404: ErrorResponseSchema,
+      // The row claims a factor but its stored parameters are unusable.
+      422: ErrorResponseSchema,
+      500: ErrorResponseSchema
+    }
+  },
   // list_emails: newest-first metadata for the pentest's readable Trace-managed
   // inbox. Same resolution + ownership gate as login-code (org + pentest
   // environments + provider-side inbox tenancy); no bodies cross the wire here.
@@ -35886,21 +36212,21 @@ function filterRepositories(repositories, options) {
   });
 }
 function parseListLimit(value) {
-  const n = Number(value);
-  if (!Number.isInteger(n) || n < 1) {
+  const n3 = Number(value);
+  if (!Number.isInteger(n3) || n3 < 1) {
     throw new Error("--limit must be a positive integer");
   }
-  if (n > MAX_LIMIT) {
+  if (n3 > MAX_LIMIT) {
     throw new Error(`--limit cannot exceed ${MAX_LIMIT}`);
   }
-  return n;
+  return n3;
 }
 function parseListPage(value) {
-  const n = Number(value);
-  if (!Number.isInteger(n) || n < 1) {
+  const n3 = Number(value);
+  if (!Number.isInteger(n3) || n3 < 1) {
     throw new Error("--page must be a positive integer");
   }
-  return n;
+  return n3;
 }
 function paginateResults(items, options) {
   if (options.all) {
@@ -35958,11 +36284,11 @@ function buildRepositoriesTable(repositories) {
     ]
   );
   const colWidths = headers.map(
-    (h2, i) => Math.max(h2.length, ...rows.map((r) => (r[i] ?? "").length))
+    (h2, i2) => Math.max(h2.length, ...rows.map((r2) => (r2[i2] ?? "").length))
   );
-  const pad = (s, w3) => s.padEnd(w3);
-  const headerLine = headers.map((h2, i) => pad(h2, colWidths[i] ?? h2.length)).join("  ");
-  const rowLines = rows.map((row) => row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  "));
+  const pad = (s, w) => s.padEnd(w);
+  const headerLine = headers.map((h2, i2) => pad(h2, colWidths[i2] ?? h2.length)).join("  ");
+  const rowLines = rows.map((row) => row.map((cell, i2) => pad(cell, colWidths[i2] ?? 0)).join("  "));
   return { headerLine, rowLines };
 }
 function collectFilterExpression(value, previous) {
@@ -36186,7 +36512,7 @@ async function runRepositoryListCommand(options) {
   await runInteractivePager({
     items: displayedRepositories,
     header: headerLine,
-    renderItem: (_repo, i) => [rowLines[i] ?? ""],
+    renderItem: (_repo, i2) => [rowLines[i2] ?? ""],
     disabled: options.pager === false
   });
   printPaginationHint(
@@ -36226,11 +36552,11 @@ async function runDependencyFilter(organizationId, options) {
     }
     for (const repo of pkg.repositories) {
       const existing = repoMap.get(repo.repositoryId);
-      const versionStrings = repo.versions.map((v2) => v2.version);
+      const versionStrings = repo.versions.map((v) => v.version);
       if (existing) {
-        for (const v2 of versionStrings) {
-          if (!existing.versions.includes(v2)) {
-            existing.versions.push(v2);
+        for (const v of versionStrings) {
+          if (!existing.versions.includes(v)) {
+            existing.versions.push(v);
           }
         }
       } else {
@@ -36559,14 +36885,14 @@ async function runSetScanningBranchCommand(repoUrl, options) {
       console.error(`Failed to list repositories (status ${listResult2.status}).`);
       process.exit(1);
     }
-    const ids = listResult2.body.map((r) => r.repositoryId);
+    const ids = listResult2.body.map((r2) => r2.repositoryId);
     if (ids.length === 0) {
       console.log("No repositories found.");
       return;
     }
     const chunks = [];
-    for (let i = 0; i < ids.length; i += 100) {
-      chunks.push(ids.slice(i, i + 100));
+    for (let i2 = 0; i2 < ids.length; i2 += 100) {
+      chunks.push(ids.slice(i2, i2 + 100));
     }
     const allResults = [];
     for (const chunk of chunks) {
@@ -36586,19 +36912,19 @@ async function runSetScanningBranchCommand(repoUrl, options) {
       }
       allResults.push(...result2.body.results);
     }
-    const urlById = new Map(listResult2.body.map((r) => [r.repositoryId, r.repositoryUrl]));
+    const urlById = new Map(listResult2.body.map((r2) => [r2.repositoryId, r2.repositoryUrl]));
     if (options.output === "json") {
       console.log(JSON.stringify(allResults, null, 2));
       return;
     }
     console.log("repositoryUrl	status	relabeledCount	error");
-    for (const r of allResults) {
+    for (const r2 of allResults) {
       console.log(
         [
-          urlById.get(r.repositoryId) ?? r.repositoryId,
-          r.status,
-          r.relabeledVulnerabilityCount ?? "",
-          r.errorMessage ?? ""
+          urlById.get(r2.repositoryId) ?? r2.repositoryId,
+          r2.status,
+          r2.relabeledVulnerabilityCount ?? "",
+          r2.errorMessage ?? ""
         ].join("	")
       );
     }
@@ -36618,7 +36944,7 @@ async function runSetScanningBranchCommand(repoUrl, options) {
   }
   const normalizedTarget = normalizeForMatching(targetUrl);
   const match = listResult.body.find(
-    (r) => normalizeForMatching(r.repositoryUrl) === normalizedTarget
+    (r2) => normalizeForMatching(r2.repositoryUrl) === normalizedTarget
   );
   if (!match) {
     console.error(`Repository not found: ${targetUrl}`);
@@ -36922,12 +37248,12 @@ function printApplicationsTsv(apps) {
   }
 }
 function buildApplicationsTable(apps) {
-  const cells = apps.map((a) => ({
-    id: a.applicationId,
-    name: sanitizeDisplay(a.name),
-    type: a.type,
-    repos: String(a.repositories.length),
-    url: a.applicationUrl ? sanitizeDisplay(a.applicationUrl) : "\u2014"
+  const cells = apps.map((a2) => ({
+    id: a2.applicationId,
+    name: sanitizeDisplay(a2.name),
+    type: a2.type,
+    repos: String(a2.repositories.length),
+    url: a2.applicationUrl ? sanitizeDisplay(a2.applicationUrl) : "\u2014"
   }));
   const idWidth = Math.max(2, ...cells.map((c51) => c51.id.length));
   const nameWidth = Math.max(4, ...cells.map((c51) => c51.name.length));
@@ -36943,16 +37269,16 @@ function formatLinkRole(role, roleLabel) {
 }
 function sortApplicationRepositoryLinks(links) {
   return [...links].sort(
-    (a, b2) => a.repositoryName.localeCompare(b2.repositoryName) || a.repositoryId.localeCompare(b2.repositoryId)
+    (a2, b) => a2.repositoryName.localeCompare(b.repositoryName) || a2.repositoryId.localeCompare(b.repositoryId)
   );
 }
 function buildApplicationRepositoriesTable(links) {
-  const cells = links.map((l) => ({
-    name: sanitizeDisplay(l.repositoryName),
-    scan: l.scanEnabled ? "yes" : "no",
-    role: sanitizeDisplay(formatLinkRole(l.role, l.roleLabel)),
-    path: l.repositoryPath ? sanitizeDisplay(l.repositoryPath) : "\u2014",
-    status: formatStatus(l.repositoryStatus)
+  const cells = links.map((l2) => ({
+    name: sanitizeDisplay(l2.repositoryName),
+    scan: l2.scanEnabled ? "yes" : "no",
+    role: sanitizeDisplay(formatLinkRole(l2.role, l2.roleLabel)),
+    path: l2.repositoryPath ? sanitizeDisplay(l2.repositoryPath) : "\u2014",
+    status: formatStatus(l2.repositoryStatus)
   }));
   const nameWidth = Math.max(10, ...cells.map((c51) => c51.name.length));
   const roleWidth = Math.max(4, ...cells.map((c51) => c51.role.length));
@@ -36964,7 +37290,7 @@ function buildApplicationRepositoriesTable(links) {
   return { header, rows };
 }
 function scanDisabledWarning(links) {
-  const disabled = links.filter((l) => !l.scanEnabled).length;
+  const disabled = links.filter((l2) => !l2.scanEnabled).length;
   if (disabled === 0) {
     return null;
   }
@@ -37037,7 +37363,7 @@ async function runCreate(name, options) {
   if (!type) {
     console.error(
       colorError(
-        `Invalid --type '${options.type}'. Use one of: ${ApplicationTypeValues.map((t) => t.toLowerCase().replace(/_/g, "-")).join(", ")}.`
+        `Invalid --type '${options.type}'. Use one of: ${ApplicationTypeValues.map((t2) => t2.toLowerCase().replace(/_/g, "-")).join(", ")}.`
       )
     );
     process.exit(1);
@@ -37098,7 +37424,7 @@ async function runList(options) {
   await runInteractivePager({
     items: apps,
     header,
-    renderItem: (_app, i) => [rows[i] ?? ""],
+    renderItem: (_app, i2) => [rows[i2] ?? ""],
     disabled: options.pager === false
   });
 }
@@ -37147,7 +37473,7 @@ async function runRepos(applicationId, options) {
   await runInteractivePager({
     items: links,
     header,
-    renderItem: (_link, i) => [rows[i] ?? ""],
+    renderItem: (_link, i2) => [rows[i2] ?? ""],
     disabled: options.pager === false
   });
   const warning = scanDisabledWarning(links);
@@ -37290,11 +37616,11 @@ function createApplicationCommand() {
 // src/auth/commands.ts
 import { createInterface as createInterface3 } from "readline/promises";
 
-// ../../node_modules/.bun/@clack+core@1.3.0/node_modules/@clack/core/dist/index.mjs
-import { styleText as v } from "util";
-import { stdout as S, stdin as D } from "process";
-import * as b from "readline";
-import E from "readline";
+// ../../node_modules/.bun/@clack+core@1.4.3/node_modules/@clack/core/dist/index.mjs
+import { styleText } from "util";
+import { stdout, stdin } from "process";
+import * as l from "readline";
+import l__default from "readline";
 
 // ../../node_modules/.bun/fast-string-truncated-width@3.0.3/node_modules/fast-string-truncated-width/dist/utils.js
 var getCodePointsLength = /* @__PURE__ */ (() => {
@@ -37382,8 +37708,8 @@ var getStringTruncatedWidth = (input, truncationOptions = {}, widthOptions = {})
     if (index >= length) {
       break outer;
     }
-    for (let i = 0, l = PARSE_BLOCKS.length; i < l; i++) {
-      const [BLOCK_RE, BLOCK_WIDTH] = PARSE_BLOCKS[i];
+    for (let i2 = 0, l2 = PARSE_BLOCKS.length; i2 < l2; i2++) {
+      const [BLOCK_RE, BLOCK_WIDTH] = PARSE_BLOCKS[i2];
       BLOCK_RE.lastIndex = index;
       if (BLOCK_RE.test(input)) {
         lengthExtra = BLOCK_RE === CJKT_WIDE_RE ? getCodePointsLength(input.slice(index, BLOCK_RE.lastIndex)) : BLOCK_RE === EMOJI_RE ? 1 : BLOCK_RE.lastIndex - index;
@@ -37586,8 +37912,8 @@ var exec = (string4, columns, options = {}) => {
   }
   const preString = rows.join("\n");
   let inSurrogate = false;
-  for (let i = 0; i < preString.length; i++) {
-    const character = preString[i];
+  for (let i2 = 0; i2 < preString.length; i2++) {
+    const character = preString[i2];
     returnValue += character;
     if (!inSurrogate) {
       inSurrogate = character >= "\uD800" && character <= "\uDBFF";
@@ -37598,7 +37924,7 @@ var exec = (string4, columns, options = {}) => {
       inSurrogate = false;
     }
     if (character === ESC || character === CSI) {
-      GROUP_REGEX.lastIndex = i + 1;
+      GROUP_REGEX.lastIndex = i2 + 1;
       const groupsResult = GROUP_REGEX.exec(preString);
       const groups = groupsResult?.groups;
       if (groups?.code !== void 0) {
@@ -37608,7 +37934,7 @@ var exec = (string4, columns, options = {}) => {
         escapeUrl = groups.uri.length === 0 ? void 0 : groups.uri;
       }
     }
-    if (preString[i + 1] === "\n") {
+    if (preString[i2 + 1] === "\n") {
       if (escapeUrl) {
         returnValue += wrapAnsiHyperlink("");
       }
@@ -37632,66 +37958,134 @@ function wrapAnsi(string4, columns, options) {
   return String(string4).normalize().split(CRLF_OR_LF).map((line) => exec(line, columns, options)).join("\n");
 }
 
-// ../../node_modules/.bun/@clack+core@1.3.0/node_modules/@clack/core/dist/index.mjs
+// ../../node_modules/.bun/@clack+core@1.4.3/node_modules/@clack/core/dist/index.mjs
 var import_sisteransi = __toESM(require_src(), 1);
-import { ReadStream as O } from "tty";
-function d(r, t, s) {
-  if (!s.some((o) => !o.disabled)) return r;
-  const e2 = r + t, i = Math.max(s.length - 1, 0), n = e2 < 0 ? i : e2 > i ? 0 : e2;
-  return s[n].disabled ? d(n, t < 0 ? -1 : 1, s) : n;
-}
-function I(r, t, s, e2) {
-  const i = e2.split(`
+import { ReadStream } from "tty";
+function findCursor(s, o2, l2) {
+  if (!l2.some((r2) => !r2.disabled))
+    return s;
+  const t2 = s + o2, n3 = Math.max(l2.length - 1, 0), e = t2 < 0 ? n3 : t2 > n3 ? 0 : t2;
+  return l2[e]?.disabled ? findCursor(e, o2 < 0 ? -1 : 1, l2) : e;
+}
+function findTextCursor(s, o2, l2, i2) {
+  const t2 = i2.split(`
 `);
-  let n = 0, o = r;
-  for (const a of i) {
-    if (o <= a.length) break;
-    o -= a.length + 1, n++;
-  }
-  for (n = Math.max(0, Math.min(i.length - 1, n + s)), o = Math.min(o, i[n].length) + t; o < 0 && n > 0; ) n--, o += i[n].length + 1;
-  for (; o > i[n].length && n < i.length - 1; ) o -= i[n].length + 1, n++;
-  o = Math.max(0, Math.min(i[n].length, o));
-  let u = 0;
-  for (let a = 0; a < n; a++) u += i[a].length + 1;
-  return u + o;
-}
-var G = ["up", "down", "left", "right", "space", "enter", "cancel"];
-var K = ["January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December"];
-var h = { actions: new Set(G), aliases: /* @__PURE__ */ new Map([["k", "up"], ["j", "down"], ["h", "left"], ["l", "right"], ["", "cancel"], ["escape", "cancel"]]), messages: { cancel: "Canceled", error: "Something went wrong" }, withGuide: true, date: { monthNames: [...K], messages: { required: "Please enter a valid date", invalidMonth: "There are only 12 months in a year", invalidDay: (r, t) => `There are only ${r} days in ${t}`, afterMin: (r) => `Date must be on or after ${r.toISOString().slice(0, 10)}`, beforeMax: (r) => `Date must be on or before ${r.toISOString().slice(0, 10)}` } } };
-function C(r, t) {
-  if (typeof r == "string") return h.aliases.get(r) === t;
-  for (const s of r) if (s !== void 0 && C(s, t)) return true;
+  let n3 = 0, e = s;
+  for (const r2 of t2) {
+    if (e <= r2.length)
+      break;
+    e -= r2.length + 1, n3++;
+  }
+  for (n3 = Math.max(0, Math.min(t2.length - 1, n3 + l2)), e = Math.min(e, t2[n3].length) + o2; e < 0 && n3 > 0; )
+    n3--, e += t2[n3].length + 1;
+  for (; e > t2[n3].length && n3 < t2.length - 1; )
+    e -= t2[n3].length + 1, n3++;
+  e = Math.max(0, Math.min(t2[n3].length, e));
+  let h2 = 0;
+  for (let r2 = 0; r2 < n3; r2++)
+    h2 += t2[r2].length + 1;
+  return h2 + e;
+}
+var a$1 = ["up", "down", "left", "right", "space", "enter", "cancel"];
+var t = [
+  "January",
+  "February",
+  "March",
+  "April",
+  "May",
+  "June",
+  "July",
+  "August",
+  "September",
+  "October",
+  "November",
+  "December"
+];
+var settings = {
+  actions: new Set(a$1),
+  aliases: /* @__PURE__ */ new Map([
+    // vim support
+    ["k", "up"],
+    ["j", "down"],
+    ["h", "left"],
+    ["l", "right"],
+    ["", "cancel"],
+    // opinionated defaults!
+    ["escape", "cancel"]
+  ]),
+  messages: {
+    cancel: "Canceled",
+    error: "Something went wrong"
+  },
+  withGuide: true,
+  date: {
+    monthNames: [...t],
+    messages: {
+      required: "Please enter a valid date",
+      invalidMonth: "There are only 12 months in a year",
+      invalidDay: (n3, e) => `There are only ${n3} days in ${e}`,
+      afterMin: (n3) => `Date must be on or after ${n3.toISOString().slice(0, 10)}`,
+      beforeMax: (n3) => `Date must be on or before ${n3.toISOString().slice(0, 10)}`
+    }
+  }
+};
+function isActionKey(n3, e) {
+  if (typeof n3 == "string")
+    return settings.aliases.get(n3) === e;
+  for (const s of n3)
+    if (s !== void 0 && isActionKey(s, e))
+      return true;
   return false;
 }
-function z3(r, t) {
-  if (r === t) return;
-  const s = r.split(`
-`), e2 = t.split(`
-`), i = Math.max(s.length, e2.length), n = [];
-  for (let o = 0; o < i; o++) s[o] !== e2[o] && n.push(o);
-  return { lines: n, numLinesBefore: s.length, numLinesAfter: e2.length, numLines: i };
-}
-var Y = globalThis.process.platform.startsWith("win");
-var k = /* @__PURE__ */ Symbol("clack:cancel");
-function q(r) {
-  return r === k;
-}
-function w(r, t) {
-  const s = r;
-  s.isTTY && s.setRawMode(t);
-}
-var A = (r) => "columns" in r && typeof r.columns == "number" ? r.columns : 80;
-var L = (r) => "rows" in r && typeof r.rows == "number" ? r.rows : 20;
-function W(r, t, s, e2 = s, i) {
-  const n = A(r ?? S);
-  return wrapAnsi(t, n - s.length, { hard: true, trim: false }).split(`
-`).map((o, u) => {
-    const a = i ? i(o, u) : o;
-    return `${u === 0 ? e2 : s}${a}`;
+function diffLines(i2, s) {
+  if (i2 === s) return;
+  const e = i2.split(`
+`), t2 = s.split(`
+`), r2 = Math.max(e.length, t2.length), f = [];
+  for (let n3 = 0; n3 < r2; n3++)
+    e[n3] !== t2[n3] && f.push(n3);
+  return {
+    lines: f,
+    numLinesBefore: e.length,
+    numLinesAfter: t2.length,
+    numLines: r2
+  };
+}
+var R = globalThis.process.platform.startsWith("win");
+var CANCEL_SYMBOL = /* @__PURE__ */ Symbol("clack:cancel");
+function isCancel(e) {
+  return e === CANCEL_SYMBOL;
+}
+function setRawMode(e, r2) {
+  const o2 = e;
+  o2.isTTY && o2.setRawMode(r2);
+}
+var getColumns = (e) => "columns" in e && typeof e.columns == "number" ? e.columns : 80;
+var getRows = (e) => "rows" in e && typeof e.rows == "number" ? e.rows : 20;
+function wrapTextWithPrefix(e, r2, o2, t2 = o2, s = o2, n3) {
+  const f = getColumns(e ?? stdout);
+  return wrapAnsi(r2, f - o2.length, {
+    hard: true,
+    trim: false
+  }).split(`
+`).map((c51, i2, m2) => {
+    const d = n3 ? n3(c51, i2) : c51;
+    return i2 === 0 ? `${t2}${d}` : i2 === m2.length - 1 ? `${s}${d}` : `${o2}${d}`;
   }).join(`
 `);
 }
-var p = class {
+function runValidation(e, n3) {
+  if ("~standard" in e) {
+    const a2 = e["~standard"].validate(n3);
+    if (a2 instanceof Promise)
+      throw new TypeError(
+        "Schema validation must be synchronous. Update `validate()` and remove any asynchronous logic."
+      );
+    return a2.issues?.at(0)?.message;
+  }
+  return e(n3);
+}
+var V = class {
   input;
   output;
   _abortSignal;
@@ -37706,247 +38100,310 @@ var p = class {
   error = "";
   value;
   userInput = "";
-  constructor(t, s = true) {
-    const { input: e2 = D, output: i = S, render: n, signal: o, ...u } = t;
-    this.opts = u, this.onKeypress = this.onKeypress.bind(this), this.close = this.close.bind(this), this.render = this.render.bind(this), this._render = n.bind(this), this._track = s, this._abortSignal = o, this.input = e2, this.output = i;
+  constructor(t2, e = true) {
+    const { input: i2 = stdin, output: n3 = stdout, render: s, signal: r2, ...o2 } = t2;
+    this.opts = o2, this.onKeypress = this.onKeypress.bind(this), this.close = this.close.bind(this), this.render = this.render.bind(this), this._render = s.bind(this), this._track = e, this._abortSignal = r2, this.input = i2, this.output = n3;
   }
+  /**
+   * Unsubscribe all listeners
+   */
   unsubscribe() {
     this._subscribers.clear();
   }
-  setSubscriber(t, s) {
-    const e2 = this._subscribers.get(t) ?? [];
-    e2.push(s), this._subscribers.set(t, e2);
+  /**
+   * Set a subscriber with opts
+   * @param event - The event name
+   */
+  setSubscriber(t2, e) {
+    const i2 = this._subscribers.get(t2) ?? [];
+    i2.push(e), this._subscribers.set(t2, i2);
   }
-  on(t, s) {
-    this.setSubscriber(t, { cb: s });
+  /**
+   * Subscribe to an event
+   * @param event - The event name
+   * @param cb - The callback
+   */
+  on(t2, e) {
+    this.setSubscriber(t2, { cb: e });
   }
-  once(t, s) {
-    this.setSubscriber(t, { cb: s, once: true });
+  /**
+   * Subscribe to an event once
+   * @param event - The event name
+   * @param cb - The callback
+   */
+  once(t2, e) {
+    this.setSubscriber(t2, { cb: e, once: true });
   }
-  emit(t, ...s) {
-    const e2 = this._subscribers.get(t) ?? [], i = [];
-    for (const n of e2) n.cb(...s), n.once && i.push(() => e2.splice(e2.indexOf(n), 1));
-    for (const n of i) n();
+  /**
+   * Emit an event with data
+   * @param event - The event name
+   * @param data - The data to pass to the callback
+   */
+  emit(t2, ...e) {
+    const i2 = this._subscribers.get(t2) ?? [], n3 = [];
+    for (const s of i2)
+      s.cb(...e), s.once && n3.push(() => i2.splice(i2.indexOf(s), 1));
+    for (const s of n3)
+      s();
   }
   prompt() {
-    return new Promise((t) => {
+    return new Promise((t2) => {
       if (this._abortSignal) {
-        if (this._abortSignal.aborted) return this.state = "cancel", this.close(), t(k);
-        this._abortSignal.addEventListener("abort", () => {
-          this.state = "cancel", this.close();
-        }, { once: true });
+        if (this._abortSignal.aborted)
+          return this.state = "cancel", this.close(), t2(CANCEL_SYMBOL);
+        this._abortSignal.addEventListener(
+          "abort",
+          () => {
+            this.state = "cancel", this.close();
+          },
+          { once: true }
+        );
       }
-      this.rl = E.createInterface({ input: this.input, tabSize: 2, prompt: "", escapeCodeTimeout: 50, terminal: true }), this.rl.prompt(), this.opts.initialUserInput !== void 0 && this._setUserInput(this.opts.initialUserInput, true), this.input.on("keypress", this.onKeypress), w(this.input, true), this.output.on("resize", this.render), this.render(), this.once("submit", () => {
-        this.output.write(import_sisteransi.cursor.show), this.output.off("resize", this.render), w(this.input, false), t(this.value);
+      this.rl = l__default.createInterface({
+        input: this.input,
+        tabSize: 2,
+        prompt: "",
+        escapeCodeTimeout: 50,
+        terminal: true
+      }), this.rl.prompt(), this.opts.initialUserInput !== void 0 && this._setUserInput(this.opts.initialUserInput, true), this.input.on("keypress", this.onKeypress), setRawMode(this.input, true), this.output.on("resize", this.render), this.render(), this.once("submit", () => {
+        this.output.write(import_sisteransi.cursor.show), this.output.off("resize", this.render), setRawMode(this.input, false), t2(this.value);
       }), this.once("cancel", () => {
-        this.output.write(import_sisteransi.cursor.show), this.output.off("resize", this.render), w(this.input, false), t(k);
+        this.output.write(import_sisteransi.cursor.show), this.output.off("resize", this.render), setRawMode(this.input, false), t2(CANCEL_SYMBOL);
       });
     });
   }
-  _isActionKey(t, s) {
-    return t === "	";
+  _isActionKey(t2, e) {
+    return t2 === "	";
   }
-  _shouldSubmit(t, s) {
+  _shouldSubmit(t2, e) {
     return true;
   }
-  _setValue(t) {
-    this.value = t, this.emit("value", this.value);
+  _setValue(t2) {
+    this.value = t2, this.emit("value", this.value);
   }
-  _setUserInput(t, s) {
-    this.userInput = t ?? "", this.emit("userInput", this.userInput), s && this._track && this.rl && (this.rl.write(this.userInput), this._cursor = this.rl.cursor);
+  _setUserInput(t2, e) {
+    this.userInput = t2 ?? "", this.emit("userInput", this.userInput), e && this._track && this.rl && (this.rl.write(this.userInput), this._cursor = this.rl.cursor);
   }
   _clearUserInput() {
     this.rl?.write(null, { ctrl: true, name: "u" }), this._setUserInput("");
   }
-  onKeypress(t, s) {
-    if (this._track && s.name !== "return" && (s.name && this._isActionKey(t, s) && this.rl?.write(null, { ctrl: true, name: "h" }), this._cursor = this.rl?.cursor ?? 0, this._setUserInput(this.rl?.line)), this.state === "error" && (this.state = "active"), s?.name && (!this._track && h.aliases.has(s.name) && this.emit("cursor", h.aliases.get(s.name)), h.actions.has(s.name) && this.emit("cursor", s.name)), t && (t.toLowerCase() === "y" || t.toLowerCase() === "n") && this.emit("confirm", t.toLowerCase() === "y"), this.emit("key", t?.toLowerCase(), s), s?.name === "return" && this._shouldSubmit(t, s)) {
+  onKeypress(t2, e) {
+    if (this._track && e.name !== "return" && (e.name && this._isActionKey(t2, e) && this.rl?.write(null, { ctrl: true, name: "h" }), this._cursor = this.rl?.cursor ?? 0, this._setUserInput(this.rl?.line)), this.state === "error" && (this.state = "active"), e?.name && (!this._track && settings.aliases.has(e.name) && this.emit("cursor", settings.aliases.get(e.name)), settings.actions.has(e.name) && this.emit("cursor", e.name)), t2 && (t2.toLowerCase() === "y" || t2.toLowerCase() === "n") && this.emit("confirm", t2.toLowerCase() === "y"), this.emit("key", t2, e), e?.name === "return" && this._shouldSubmit(t2, e)) {
       if (this.opts.validate) {
-        const e2 = this.opts.validate(this.value);
-        e2 && (this.error = e2 instanceof Error ? e2.message : e2, this.state = "error", this.rl?.write(this.userInput));
+        const i2 = runValidation(this.opts.validate, this.value);
+        i2 && (this.error = i2 instanceof Error ? i2.message : i2, this.state = "error", this.rl?.write(this.userInput));
       }
       this.state !== "error" && (this.state = "submit");
     }
-    C([t, s?.name, s?.sequence], "cancel") && (this.state = "cancel"), (this.state === "submit" || this.state === "cancel") && this.emit("finalize"), this.render(), (this.state === "submit" || this.state === "cancel") && this.close();
+    isActionKey([t2, e?.name, e?.sequence], "cancel") && (this.state = "cancel"), (this.state === "submit" || this.state === "cancel") && this.emit("finalize"), this.render(), (this.state === "submit" || this.state === "cancel") && this.close();
   }
   close() {
     this.input.unpipe(), this.input.removeListener("keypress", this.onKeypress), this.output.write(`
-`), w(this.input, false), this.rl?.close(), this.rl = void 0, this.emit(`${this.state}`, this.value), this.unsubscribe();
+`), setRawMode(this.input, false), this.rl?.close(), this.rl = void 0, this.emit(`${this.state}`, this.value), this.unsubscribe();
   }
   restoreCursor() {
-    const t = wrapAnsi(this._prevFrame, process.stdout.columns, { hard: true, trim: false }).split(`
+    const t2 = wrapAnsi(this._prevFrame, process.stdout.columns, { hard: true, trim: false }).split(`
 `).length - 1;
-    this.output.write(import_sisteransi.cursor.move(-999, t * -1));
+    this.output.write(import_sisteransi.cursor.move(-999, t2 * -1));
   }
   render() {
-    const t = wrapAnsi(this._render(this) ?? "", process.stdout.columns, { hard: true, trim: false });
-    if (t !== this._prevFrame) {
-      if (this.state === "initial") this.output.write(import_sisteransi.cursor.hide);
+    const t2 = wrapAnsi(this._render(this) ?? "", process.stdout.columns, {
+      hard: true,
+      trim: false
+    });
+    if (t2 !== this._prevFrame) {
+      if (this.state === "initial")
+        this.output.write(import_sisteransi.cursor.hide);
       else {
-        const s = z3(this._prevFrame, t), e2 = L(this.output);
-        if (this.restoreCursor(), s) {
-          const i = Math.max(0, s.numLinesAfter - e2), n = Math.max(0, s.numLinesBefore - e2);
-          let o = s.lines.find((u) => u >= i);
-          if (o === void 0) {
-            this._prevFrame = t;
+        const e = diffLines(this._prevFrame, t2), i2 = getRows(this.output);
+        if (this.restoreCursor(), e) {
+          const n3 = Math.max(0, e.numLinesAfter - i2), s = Math.max(0, e.numLinesBefore - i2);
+          let r2 = e.lines.find((o2) => o2 >= n3);
+          if (r2 === void 0) {
+            this._prevFrame = t2;
             return;
           }
-          if (s.lines.length === 1) {
-            this.output.write(import_sisteransi.cursor.move(0, o - n)), this.output.write(import_sisteransi.erase.lines(1));
-            const u = t.split(`
+          if (e.lines.length === 1) {
+            this.output.write(import_sisteransi.cursor.move(0, r2 - s)), this.output.write(import_sisteransi.erase.lines(1));
+            const o2 = t2.split(`
 `);
-            this.output.write(u[o]), this._prevFrame = t, this.output.write(import_sisteransi.cursor.move(0, u.length - o - 1));
+            this.output.write(o2[r2]), this._prevFrame = t2, this.output.write(import_sisteransi.cursor.move(0, o2.length - r2 - 1));
             return;
-          } else if (s.lines.length > 1) {
-            if (i < n) o = i;
+          } else if (e.lines.length > 1) {
+            if (n3 < s)
+              r2 = n3;
             else {
-              const a = o - n;
-              a > 0 && this.output.write(import_sisteransi.cursor.move(0, a));
+              const h2 = r2 - s;
+              h2 > 0 && this.output.write(import_sisteransi.cursor.move(0, h2));
             }
             this.output.write(import_sisteransi.erase.down());
-            const u = t.split(`
-`).slice(o);
-            this.output.write(u.join(`
-`)), this._prevFrame = t;
+            const f = t2.split(`
+`).slice(r2);
+            this.output.write(f.join(`
+`)), this._prevFrame = t2;
             return;
           }
         }
         this.output.write(import_sisteransi.erase.down());
       }
-      this.output.write(t), this.state === "initial" && (this.state = "active"), this._prevFrame = t;
+      this.output.write(t2), this.state === "initial" && (this.state = "active"), this._prevFrame = t2;
     }
   }
 };
-var X = class extends p {
+var r = class extends V {
   get cursor() {
     return this.value ? 0 : 1;
   }
   get _value() {
     return this.cursor === 0;
   }
-  constructor(t) {
-    super(t, false), this.value = !!t.initialValue, this.on("userInput", () => {
+  constructor(t2) {
+    super(t2, false), this.value = !!t2.initialValue, this.on("userInput", () => {
       this.value = this._value;
-    }), this.on("confirm", (s) => {
-      this.output.write(import_sisteransi.cursor.move(0, -1)), this.value = s, this.state = "submit", this.close();
+    }), this.on("confirm", (i2) => {
+      this.output.write(import_sisteransi.cursor.move(0, -1)), this.value = i2, this.state = "submit", this.close();
     }), this.on("cursor", () => {
       this.value = !this.value;
     });
   }
 };
-var rt = class extends p {
-  #s = false;
-  #r;
+var o = /* @__PURE__ */ new Set(["up", "down", "left", "right"]);
+var h = class extends V {
+  #t = false;
+  #s;
   focused = "editor";
   get userInputWithCursor() {
-    if (this.state === "submit") return this.userInput;
-    const t = this.userInput;
-    if (this.cursor >= t.length) return `${t}\u2588`;
-    const s = t.slice(0, this.cursor), e2 = t[this.cursor], i = t.slice(this.cursor + 1);
-    return e2 === `
+    if (this.state === "submit")
+      return this.userInput;
+    const t2 = this.userInput;
+    if (this.cursor >= t2.length)
+      return `${t2}\u2588`;
+    const s = t2.slice(0, this.cursor), r2 = t2.slice(this.cursor, this.cursor + 1), i2 = t2.slice(this.cursor + 1);
+    return r2 === `
 ` ? `${s}\u2588
-${i}` : `${s}${v("inverse", e2)}${i}`;
+${i2}` : `${s}${styleText("inverse", r2)}${i2}`;
   }
   get cursor() {
     return this._cursor;
   }
-  #t(t) {
+  #r(t2) {
     if (this.userInput.length === 0) {
-      this._setUserInput(t);
+      this._setUserInput(t2);
       return;
     }
-    this._setUserInput(this.userInput.slice(0, this.cursor) + t + this.userInput.slice(this.cursor));
+    this._setUserInput(
+      this.userInput.slice(0, this.cursor) + t2 + this.userInput.slice(this.cursor)
+    );
   }
-  #n(t) {
+  #i(t2) {
     const s = this.value ?? "";
-    switch (t) {
+    switch (t2) {
       case "up":
-        this._cursor = I(this._cursor, 0, -1, s);
+        this._cursor = findTextCursor(this._cursor, 0, -1, s);
         return;
       case "down":
-        this._cursor = I(this._cursor, 0, 1, s);
+        this._cursor = findTextCursor(this._cursor, 0, 1, s);
         return;
       case "left":
-        this._cursor = I(this._cursor, -1, 0, s);
+        this._cursor = findTextCursor(this._cursor, -1, 0, s);
         return;
       case "right":
-        this._cursor = I(this._cursor, 1, 0, s);
+        this._cursor = findTextCursor(this._cursor, 1, 0, s);
         return;
     }
   }
-  _shouldSubmit(t, s) {
-    if (this.#r) return this.focused === "submit" ? true : (this.#t(`
+  _shouldSubmit(t2, s) {
+    if (this.#s)
+      return this.focused === "submit" ? true : (this.#r(`
 `), this._cursor++, false);
-    const e2 = this.#s;
-    return this.#s = true, e2 ? (this.userInput[this.cursor - 1] === `
-` && (this._setUserInput(this.userInput.slice(0, this.cursor - 1) + this.userInput.slice(this.cursor)), this._cursor--), true) : (this.#t(`
+    const r2 = this.#t;
+    return this.#t = true, r2 && this.cursor === this.userInput.length ? (this.userInput[this.cursor - 1] === `
+` && (this._setUserInput(
+      this.userInput.slice(0, this.cursor - 1) + this.userInput.slice(this.cursor)
+    ), this._cursor--), true) : (this.#r(`
 `), this._cursor++, false);
   }
-  constructor(t) {
-    super(t, false), this.#r = t.showSubmit ?? false, this.on("key", (s, e2) => {
-      if (e2?.name && h.actions.has(e2.name)) {
-        this.#n(e2.name);
+  constructor(t2) {
+    const s = t2.initialUserInput ?? t2.initialValue;
+    super(
+      {
+        ...t2,
+        initialUserInput: s
+      },
+      false
+    ), s !== void 0 && (this._cursor = s.length), this.#s = t2.showSubmit ?? false, this.on("key", (r2, i2) => {
+      if (i2?.name && o.has(i2.name)) {
+        this.#t = false, this.#i(i2.name);
         return;
       }
-      if (s === "	" && this.#r) {
+      if (r2 === "	" && this.#s) {
         this.focused = this.focused === "editor" ? "submit" : "editor";
         return;
       }
-      if (e2?.name !== "return") {
-        if (this.#s = false, e2?.name === "backspace" && this.cursor > 0) {
-          this._setUserInput(this.userInput.slice(0, this.cursor - 1) + this.userInput.slice(this.cursor)), this._cursor--;
+      if (i2?.name !== "return") {
+        if (this.#t = false, i2?.name === "backspace" && this.cursor > 0) {
+          this._setUserInput(
+            this.userInput.slice(0, this.cursor - 1) + this.userInput.slice(this.cursor)
+          ), this._cursor--;
           return;
         }
-        if (e2?.name === "delete" && this.cursor < this.userInput.length) {
-          this._setUserInput(this.userInput.slice(0, this.cursor) + this.userInput.slice(this.cursor + 1));
+        if (i2?.name === "delete" && this.cursor < this.userInput.length) {
+          this._setUserInput(
+            this.userInput.slice(0, this.cursor) + this.userInput.slice(this.cursor + 1)
+          );
           return;
         }
-        s && (this.#r && this.focused === "submit" && (this.focused = "editor"), this.#t(s ?? ""), this._cursor++);
+        r2 && (this.#s && this.focused === "submit" && (this.focused = "editor"), this.#r(r2 ?? ""), this._cursor++);
       }
-    }), this.on("userInput", (s) => {
-      this._setValue(s);
+    }), this.on("userInput", (r2) => {
+      this._setValue(r2);
     }), this.on("finalize", () => {
-      this.value || (this.value = t.defaultValue), this.value === void 0 && (this.value = "");
+      this.value || (this.value = t2.defaultValue), this.value === void 0 && (this.value = "");
     });
   }
 };
-var nt = class extends p {
+var a = class extends V {
   options;
   cursor = 0;
   get _value() {
-    return this.options[this.cursor].value;
+    return this.options[this.cursor]?.value;
   }
   get _enabledOptions() {
-    return this.options.filter((t) => t.disabled !== true);
+    return this.options.filter((e) => e.disabled !== true);
   }
   toggleAll() {
-    const t = this._enabledOptions, s = this.value !== void 0 && this.value.length === t.length;
-    this.value = s ? [] : t.map((e2) => e2.value);
+    const e = this._enabledOptions, i2 = this.value !== void 0 && this.value.length === e.length;
+    this.value = i2 ? [] : e.map((t2) => t2.value);
   }
   toggleInvert() {
-    const t = this.value;
-    if (!t) return;
-    const s = this._enabledOptions.filter((e2) => !t.includes(e2.value));
-    this.value = s.map((e2) => e2.value);
+    const e = this.value;
+    if (!e)
+      return;
+    const i2 = this._enabledOptions.filter((t2) => !e.includes(t2.value));
+    this.value = i2.map((t2) => t2.value);
   }
   toggleValue() {
     this.value === void 0 && (this.value = []);
-    const t = this.value.includes(this._value);
-    this.value = t ? this.value.filter((s) => s !== this._value) : [...this.value, this._value];
-  }
-  constructor(t) {
-    super(t, false), this.options = t.options, this.value = [...t.initialValues ?? []];
-    const s = Math.max(this.options.findIndex(({ value: e2 }) => e2 === t.cursorAt), 0);
-    this.cursor = this.options[s].disabled ? d(s, 1, this.options) : s, this.on("key", (e2) => {
-      e2 === "a" && this.toggleAll(), e2 === "i" && this.toggleInvert();
-    }), this.on("cursor", (e2) => {
-      switch (e2) {
+    const e = this.value.includes(this._value);
+    this.value = e ? this.value.filter((i2) => i2 !== this._value) : [...this.value, this._value];
+  }
+  constructor(e) {
+    super(e, false), this.options = e.options, this.value = [...e.initialValues ?? []];
+    const i2 = Math.max(
+      this.options.findIndex(({ value: t2 }) => t2 === e.cursorAt),
+      0
+    );
+    this.cursor = this.options[i2]?.disabled ? findCursor(i2, 1, this.options) : i2, this.on("key", (t2, l2) => {
+      l2.name === "a" && this.toggleAll(), l2.name === "i" && this.toggleInvert();
+    }), this.on("cursor", (t2) => {
+      switch (t2) {
         case "left":
         case "up":
-          this.cursor = d(this.cursor, -1, this.options);
+          this.cursor = findCursor(this.cursor, -1, this.options);
           break;
         case "down":
         case "right":
-          this.cursor = d(this.cursor, 1, this.options);
+          this.cursor = findCursor(this.cursor, 1, this.options);
           break;
         case "space":
           this.toggleValue();
@@ -37955,7 +38412,7 @@ var nt = class extends p {
     });
   }
 };
-var ot = class extends p {
+var u$1 = class u extends V {
   _mask = "\u2022";
   get cursor() {
     return this._cursor;
@@ -37964,42 +38421,47 @@ var ot = class extends p {
     return this.userInput.replaceAll(/./g, this._mask);
   }
   get userInputWithCursor() {
-    if (this.state === "submit" || this.state === "cancel") return this.masked;
-    const t = this.userInput;
-    if (this.cursor >= t.length) return `${this.masked}${v(["inverse", "hidden"], "_")}`;
-    const s = this.masked, e2 = s.slice(0, this.cursor), i = s.slice(this.cursor);
-    return `${e2}${v("inverse", i[0])}${i.slice(1)}`;
+    if (this.state === "submit" || this.state === "cancel")
+      return this.masked;
+    const t2 = this.userInput;
+    if (this.cursor >= t2.length)
+      return `${this.masked}${styleText(["inverse", "hidden"], "_")}`;
+    const s = this.masked, r2 = s.slice(0, this.cursor), i2 = s.slice(this.cursor, this.cursor + 1), o2 = s.slice(this.cursor + 1);
+    return `${r2}${styleText("inverse", i2)}${o2}`;
   }
   clear() {
     this._clearUserInput();
   }
-  constructor({ mask: t, ...s }) {
-    super(s), this._mask = t ?? "\u2022", this.on("userInput", (e2) => {
-      this._setValue(e2);
+  constructor({ mask: t2, ...s }) {
+    super(s), this._mask = t2 ?? "\u2022", this.on("userInput", (r2) => {
+      this._setValue(r2);
+    }), this.on("finalize", () => {
+      this.value === void 0 && (this.value = "");
     });
   }
 };
-var ut = class extends p {
+var n$1 = class n extends V {
   options;
   cursor = 0;
   get _selectedValue() {
     return this.options[this.cursor];
   }
   changeValue() {
-    this.value = this._selectedValue.value;
-  }
-  constructor(t) {
-    super(t, false), this.options = t.options;
-    const s = this.options.findIndex(({ value: i }) => i === t.initialValue), e2 = s === -1 ? 0 : s;
-    this.cursor = this.options[e2].disabled ? d(e2, 1, this.options) : e2, this.changeValue(), this.on("cursor", (i) => {
-      switch (i) {
+    const e = this._selectedValue;
+    this.value = e === void 0 ? void 0 : e.value;
+  }
+  constructor(e) {
+    super(e, false), this.options = e.options;
+    const o2 = this.options.findIndex(({ value: s }) => s === e.initialValue), t2 = o2 === -1 ? 0 : o2;
+    this.cursor = this.options[t2]?.disabled ? findCursor(t2, 1, this.options) : t2, this.changeValue(), this.on("cursor", (s) => {
+      switch (s) {
         case "left":
         case "up":
-          this.cursor = d(this.cursor, -1, this.options);
+          this.cursor = findCursor(this.cursor, -1, this.options);
           break;
         case "down":
         case "right":
-          this.cursor = d(this.cursor, 1, this.options);
+          this.cursor = findCursor(this.cursor, 1, this.options);
           break;
       }
       this.changeValue();
@@ -38007,290 +38469,476 @@ var ut = class extends p {
   }
 };
 
-// ../../node_modules/.bun/@clack+prompts@1.3.0/node_modules/@clack/prompts/dist/index.mjs
-import { styleText as e, stripVTControlCharacters as nt2 } from "util";
-import j2 from "process";
+// ../../node_modules/.bun/@clack+prompts@1.7.0/node_modules/@clack/prompts/dist/index.mjs
+import { styleText as styleText2, stripVTControlCharacters } from "util";
+import process$1 from "process";
 var import_sisteransi2 = __toESM(require_src(), 1);
-import { existsSync as zt, lstatSync as wt, readdirSync as Qt } from "fs";
-import { dirname as bt, join as Zt } from "path";
-function te() {
-  return j2.platform !== "win32" ? j2.env.TERM !== "linux" : !!j2.env.CI || !!j2.env.WT_SESSION || !!j2.env.TERMINUS_SUBLIME || j2.env.ConEmuTask === "{cmd::Cmder}" || j2.env.TERM_PROGRAM === "Terminus-Sublime" || j2.env.TERM_PROGRAM === "vscode" || j2.env.TERM === "xterm-256color" || j2.env.TERM === "alacritty" || j2.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
-}
-var tt = te();
-var w2 = (t, r) => tt ? t : r;
-var _t = w2("\u25C6", "*");
-var ot2 = w2("\u25A0", "x");
-var ut2 = w2("\u25B2", "x");
-var F = w2("\u25C7", "o");
-var lt = w2("\u250C", "T");
-var $ = w2("\u2502", "|");
-var E2 = w2("\u2514", "\u2014");
-var It = w2("\u2510", "T");
-var Et = w2("\u2518", "\u2014");
-var z4 = w2("\u25CF", ">");
-var H = w2("\u25CB", " ");
-var et2 = w2("\u25FB", "[\u2022]");
-var U = w2("\u25FC", "[+]");
-var J = w2("\u25FB", "[ ]");
-var Gt = w2("\u25AA", "\u2022");
-var st = w2("\u2500", "-");
-var ct = w2("\u256E", "+");
-var xt = w2("\u251C", "+");
-var $t = w2("\u256F", "+");
-var dt = w2("\u2570", "+");
-var Ot = w2("\u256D", "+");
-var ht2 = w2("\u25CF", "\u2022");
-var pt = w2("\u25C6", "*");
-var mt = w2("\u25B2", "!");
-var gt = w2("\u25A0", "x");
-var M = (t) => {
-  switch (t) {
+import { existsSync as existsSync2, lstatSync, readdirSync } from "fs";
+import { dirname, join as join3 } from "path";
+function isUnicodeSupported() {
+  if (process$1.platform !== "win32") {
+    return process$1.env.TERM !== "linux";
+  }
+  return Boolean(process$1.env.CI) || Boolean(process$1.env.WT_SESSION) || Boolean(process$1.env.TERMINUS_SUBLIME) || process$1.env.ConEmuTask === "{cmd::Cmder}" || process$1.env.TERM_PROGRAM === "Terminus-Sublime" || process$1.env.TERM_PROGRAM === "vscode" || process$1.env.TERM === "xterm-256color" || process$1.env.TERM === "alacritty" || process$1.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
+}
+var unicode = isUnicodeSupported();
+var unicodeOr = (o2, e) => unicode ? o2 : e;
+var S_STEP_ACTIVE = unicodeOr("\u25C6", "*");
+var S_STEP_CANCEL = unicodeOr("\u25A0", "x");
+var S_STEP_ERROR = unicodeOr("\u25B2", "x");
+var S_STEP_SUBMIT = unicodeOr("\u25C7", "o");
+var S_BAR_START = unicodeOr("\u250C", "T");
+var S_BAR = unicodeOr("\u2502", "|");
+var S_BAR_END = unicodeOr("\u2514", "\u2014");
+var S_BAR_START_RIGHT = unicodeOr("\u2510", "T");
+var S_BAR_END_RIGHT = unicodeOr("\u2518", "\u2014");
+var S_RADIO_ACTIVE = unicodeOr("\u25CF", ">");
+var S_RADIO_INACTIVE = unicodeOr("\u25CB", " ");
+var S_CHECKBOX_ACTIVE = unicodeOr("\u25FB", "[\u2022]");
+var S_CHECKBOX_SELECTED = unicodeOr("\u25FC", "[+]");
+var S_CHECKBOX_INACTIVE = unicodeOr("\u25FB", "[ ]");
+var S_PASSWORD_MASK = unicodeOr("\u25AA", "\u2022");
+var S_BAR_H = unicodeOr("\u2500", "-");
+var S_CORNER_TOP_RIGHT = unicodeOr("\u256E", "+");
+var S_CONNECT_LEFT = unicodeOr("\u251C", "+");
+var S_CORNER_BOTTOM_RIGHT = unicodeOr("\u256F", "+");
+var S_CORNER_BOTTOM_LEFT = unicodeOr("\u2570", "+");
+var S_CORNER_TOP_LEFT = unicodeOr("\u256D", "+");
+var S_INFO = unicodeOr("\u25CF", "\u2022");
+var S_SUCCESS = unicodeOr("\u25C6", "*");
+var S_WARN = unicodeOr("\u25B2", "!");
+var S_ERROR = unicodeOr("\u25A0", "x");
+var symbol2 = (o2) => {
+  switch (o2) {
     case "initial":
     case "active":
-      return e("cyan", _t);
+      return styleText2("cyan", S_STEP_ACTIVE);
     case "cancel":
-      return e("red", ot2);
+      return styleText2("red", S_STEP_CANCEL);
     case "error":
-      return e("yellow", ut2);
+      return styleText2("yellow", S_STEP_ERROR);
     case "submit":
-      return e("green", F);
+      return styleText2("green", S_STEP_SUBMIT);
   }
 };
-var yt = (t) => {
-  switch (t) {
+var symbolBar = (o2) => {
+  switch (o2) {
     case "initial":
     case "active":
-      return e("cyan", $);
+      return styleText2("cyan", S_BAR);
     case "cancel":
-      return e("red", $);
+      return styleText2("red", S_BAR);
     case "error":
-      return e("yellow", $);
+      return styleText2("yellow", S_BAR);
     case "submit":
-      return e("green", $);
+      return styleText2("green", S_BAR);
   }
 };
-var ee = (t, r, s, i, u) => {
-  let n = r, o = 0;
-  for (let c51 = s; c51 < i; c51++) {
-    const a = t[c51];
-    if (n = n - a.length, o++, n <= u) break;
-  }
-  return { lineCount: n, removals: o };
-};
-var Y2 = ({ cursor: t, options: r, style: s, output: i = process.stdout, maxItems: u = Number.POSITIVE_INFINITY, columnPadding: n = 0, rowPadding: o = 4 }) => {
-  const c51 = A(i) - n, a = L(i), l = e("dim", "..."), d2 = Math.max(a - o, 0), y = Math.max(Math.min(u, d2), 5);
-  let p2 = 0;
-  t >= y - 3 && (p2 = Math.max(Math.min(t - y + 3, r.length - y), 0));
-  let m = y < r.length && p2 > 0, g = y < r.length && p2 + y < r.length;
-  const S2 = Math.min(p2 + y, r.length), h2 = [];
+function formatInstructionFooter(o2, e) {
+  const r2 = [`${e ? `${styleText2("cyan", S_BAR)}  ` : ""}${o2.join(" \u2022 ")}`];
+  return e && r2.push(styleText2("cyan", S_BAR_END)), r2;
+}
+var I = (l2, e, w, p, b, C = false) => {
+  let r2 = e, O = 0;
+  if (C)
+    for (let i2 = p - 1; i2 >= w; i2--) {
+      const m2 = l2[i2];
+      if (m2 && (r2 -= m2.length), O++, r2 <= b) break;
+    }
+  else
+    for (let i2 = w; i2 < p; i2++) {
+      const m2 = l2[i2];
+      if (m2 && (r2 -= m2.length), O++, r2 <= b) break;
+    }
+  return { lineCount: r2, removals: O };
+};
+var limitOptions = ({
+  cursor: l2,
+  options: e,
+  style: w,
+  output: p = process.stdout,
+  maxItems: b = Number.POSITIVE_INFINITY,
+  columnPadding: C = 0,
+  rowPadding: r2 = 4
+}) => {
+  const i2 = getColumns(p) - C, m2 = getRows(p), M = styleText2("dim", "..."), v = Math.max(m2 - r2, 0), a2 = Math.max(Math.min(b, v), 5);
   let f = 0;
-  m && f++, g && f++;
-  const v2 = p2 + (m ? 1 : 0), T = S2 - (g ? 1 : 0);
-  for (let b2 = v2; b2 < T; b2++) {
-    const G2 = wrapAnsi(s(r[b2], b2 === t), c51, { hard: true, trim: false }).split(`
+  l2 >= a2 - 3 && (f = Math.max(
+    Math.min(l2 - a2 + 3, e.length - a2),
+    0
+  ));
+  let d = a2 < e.length && f > 0, c51 = a2 < e.length && f + a2 < e.length;
+  const W = Math.min(
+    f + a2,
+    e.length
+  ), s = [];
+  let g = 0;
+  d && g++, c51 && g++;
+  const T = f + (d ? 1 : 0), y = W - (c51 ? 1 : 0);
+  for (let t2 = T; t2 < y; t2++) {
+    const n3 = e[t2], o2 = n3 ? w(n3, t2 === l2) : "", h2 = wrapAnsi(o2, i2, {
+      hard: true,
+      trim: false
+    }).split(`
 `);
-    h2.push(G2), f += G2.length;
-  }
-  if (f > d2) {
-    let b2 = 0, G2 = 0, x = f;
-    const A2 = t - v2, P = (N, D2) => ee(h2, x, N, D2, d2);
-    m ? ({ lineCount: x, removals: b2 } = P(0, A2), x > d2 && ({ lineCount: x, removals: G2 } = P(A2 + 1, h2.length))) : ({ lineCount: x, removals: G2 } = P(A2 + 1, h2.length), x > d2 && ({ lineCount: x, removals: b2 } = P(0, A2))), b2 > 0 && (m = true, h2.splice(0, b2)), G2 > 0 && (g = true, h2.splice(h2.length - G2, G2));
-  }
-  const C2 = [];
-  m && C2.push(l);
-  for (const b2 of h2) for (const G2 of b2) C2.push(G2);
-  return g && C2.push(l), C2;
-};
-var ue = (t) => {
-  const r = t.active ?? "Yes", s = t.inactive ?? "No";
-  return new X({ active: r, inactive: s, signal: t.signal, input: t.input, output: t.output, initialValue: t.initialValue ?? true, render() {
-    const i = t.withGuide ?? h.withGuide, u = `${M(this.state)}  `, n = i ? `${e("gray", $)}  ` : "", o = W(t.output, t.message, n, u), c51 = `${i ? `${e("gray", $)}
-` : ""}${o}
-`, a = this.value ? r : s;
-    switch (this.state) {
-      case "submit": {
-        const l = i ? `${e("gray", $)}  ` : "";
-        return `${c51}${l}${e("dim", a)}`;
-      }
-      case "cancel": {
-        const l = i ? `${e("gray", $)}  ` : "";
-        return `${c51}${l}${e(["strikethrough", "dim"], a)}${i ? `
-${e("gray", $)}` : ""}`;
-      }
-      default: {
-        const l = i ? `${e("cyan", $)}  ` : "", d2 = i ? e("cyan", E2) : "";
-        return `${c51}${l}${this.value ? `${e("green", z4)} ${r}` : `${e("dim", H)} ${e("dim", r)}`}${t.vertical ? i ? `
-${e("cyan", $)}  ` : `
-` : ` ${e("dim", "/")} `}${this.value ? `${e("dim", H)} ${e("dim", s)}` : `${e("green", z4)} ${s}`}
-${d2}
+    s.push(h2), g += h2.length;
+  }
+  if (g > v) {
+    let t2 = 0, n3 = 0, o2 = g;
+    const h2 = l2 - T;
+    let u4 = v;
+    const L = () => I(s, o2, 0, h2, u4), E = () => I(
+      s,
+      o2,
+      h2 + 1,
+      s.length,
+      u4,
+      true
+    );
+    d ? ({ lineCount: o2, removals: t2 } = L(), o2 > u4 && (c51 || (u4 -= 1), { lineCount: o2, removals: n3 } = E())) : (c51 || (u4 -= 1), { lineCount: o2, removals: n3 } = E(), o2 > u4 && (u4 -= 1, { lineCount: o2, removals: t2 } = L())), t2 > 0 && (d = true, s.splice(0, t2)), n3 > 0 && (c51 = true, s.splice(s.length - n3, n3));
+  }
+  const x = [];
+  d && x.push(M);
+  for (const t2 of s)
+    for (const n3 of t2)
+      x.push(n3);
+  return c51 && x.push(M), x;
+};
+var confirm = (i2) => {
+  const a2 = i2.active ?? "Yes", s = i2.inactive ?? "No";
+  return new r({
+    active: a2,
+    inactive: s,
+    signal: i2.signal,
+    input: i2.input,
+    output: i2.output,
+    initialValue: i2.initialValue ?? true,
+    render() {
+      const e = i2.withGuide ?? settings.withGuide, u4 = `${symbol2(this.state)}  `, l2 = e ? `${styleText2("gray", S_BAR)}  ` : "", f = wrapTextWithPrefix(
+        i2.output,
+        i2.message,
+        l2,
+        u4
+      ), o2 = `${e ? `${styleText2("gray", S_BAR)}
+` : ""}${f}
+`, c51 = this.value ? a2 : s;
+      switch (this.state) {
+        case "submit": {
+          const r2 = e ? `${styleText2("gray", S_BAR)}  ` : "";
+          return `${o2}${r2}${styleText2("dim", c51)}`;
+        }
+        case "cancel": {
+          const r2 = e ? `${styleText2("gray", S_BAR)}  ` : "";
+          return `${o2}${r2}${styleText2(["strikethrough", "dim"], c51)}${e ? `
+${styleText2("gray", S_BAR)}` : ""}`;
+        }
+        default: {
+          const r2 = e ? `${styleText2("cyan", S_BAR)}  ` : "", g = e ? styleText2("cyan", S_BAR_END) : "";
+          return `${o2}${r2}${this.value ? `${styleText2("green", S_RADIO_ACTIVE)} ${a2}` : `${styleText2("dim", S_RADIO_INACTIVE)} ${styleText2("dim", a2)}`}${i2.vertical ? e ? `
+${styleText2("cyan", S_BAR)}  ` : `
+` : ` ${styleText2("dim", "/")} `}${this.value ? `${styleText2("dim", S_RADIO_INACTIVE)} ${styleText2("dim", s)}` : `${styleText2("green", S_RADIO_ACTIVE)} ${s}`}
+${g}
 `;
+        }
       }
     }
-  } }).prompt();
+  }).prompt();
 };
-var me = (t = "", r) => {
-  const s = r?.output ?? process.stdout, i = r?.withGuide ?? h.withGuide ? `${e("gray", E2)}  ` : "";
-  s.write(`${i}${e("red", t)}
-
+var MULTISELECT_INSTRUCTIONS = [
+  `${styleText2("dim", "\u2191/\u2193")} to navigate`,
+  `${styleText2("dim", "Space:")} select`,
+  `${styleText2("dim", "Enter:")} confirm`
+];
+var m = (i2, u4) => i2.split(`
+`).map((d) => u4(d)).join(`
 `);
-};
-var fe = (t) => new rt({ validate: t.validate, placeholder: t.placeholder, defaultValue: t.defaultValue, initialValue: t.initialValue, showSubmit: t.showSubmit, output: t.output, signal: t.signal, input: t.input, render() {
-  const r = t?.withGuide ?? h.withGuide, s = `${`${r ? `${e("gray", $)}
-` : ""}${M(this.state)}  `}${t.message}
-`, i = t.placeholder ? e("inverse", t.placeholder[0]) + e("dim", t.placeholder.slice(1)) : e(["inverse", "hidden"], "_"), u = this.userInput ? this.userInputWithCursor : i, n = this.value ?? "", o = t.showSubmit ? `
-  ${e(this.focused === "submit" ? "cyan" : "dim", "[ submit ]")}` : "";
-  switch (this.state) {
-    case "error": {
-      const c51 = `${e("yellow", $)}  `, a = r ? W(t.output, u, c51, void 0) : u, l = e("yellow", E2);
-      return `${s}${a}
-${l}  ${e("yellow", this.error)}${o}
+var multiselect = (i2) => {
+  const u4 = (t2, a2) => {
+    const r2 = t2.label ?? String(t2.value);
+    return a2 === "disabled" ? `${styleText2("gray", S_CHECKBOX_INACTIVE)} ${m(r2, (o2) => styleText2(["strikethrough", "gray"], o2))}${t2.hint ? ` ${styleText2("dim", `(${t2.hint ?? "disabled"})`)}` : ""}` : a2 === "active" ? `${styleText2("cyan", S_CHECKBOX_ACTIVE)} ${r2}${t2.hint ? ` ${styleText2("dim", `(${t2.hint})`)}` : ""}` : a2 === "selected" ? `${styleText2("green", S_CHECKBOX_SELECTED)} ${m(r2, (o2) => styleText2("dim", o2))}${t2.hint ? ` ${styleText2("dim", `(${t2.hint})`)}` : ""}` : a2 === "cancelled" ? `${m(r2, (o2) => styleText2(["strikethrough", "dim"], o2))}` : a2 === "active-selected" ? `${styleText2("green", S_CHECKBOX_SELECTED)} ${r2}${t2.hint ? ` ${styleText2("dim", `(${t2.hint})`)}` : ""}` : a2 === "submitted" ? `${m(r2, (o2) => styleText2("dim", o2))}` : `${styleText2("dim", S_CHECKBOX_INACTIVE)} ${m(r2, (o2) => styleText2("dim", o2))}`;
+  }, d = i2.required ?? true, v = i2.showInstructions ?? true;
+  return new a({
+    options: i2.options,
+    signal: i2.signal,
+    input: i2.input,
+    output: i2.output,
+    initialValues: i2.initialValues,
+    required: d,
+    cursorAt: i2.cursorAt,
+    validate(t2) {
+      if (d && (t2 === void 0 || t2.length === 0))
+        return `Please select at least one option.
+${styleText2(
+          "reset",
+          styleText2(
+            "dim",
+            `Press ${styleText2(["gray", "bgWhite", "inverse"], " space ")} to select, ${styleText2(
+              "gray",
+              styleText2("bgWhite", styleText2("inverse", " enter "))
+            )} to submit`
+          )
+        )}`;
+    },
+    render() {
+      const t2 = i2.withGuide ?? settings.withGuide, a2 = wrapTextWithPrefix(
+        i2.output,
+        i2.message,
+        t2 ? `${symbolBar(this.state)}  ` : "",
+        `${symbol2(this.state)}  `
+      ), r2 = `${t2 ? `${styleText2("gray", S_BAR)}
+` : ""}${a2}
+`, o2 = this.value ?? [], p = (n3, l2) => {
+        if (n3.disabled)
+          return u4(n3, "disabled");
+        const s = o2.includes(n3.value);
+        return l2 && s ? u4(n3, "active-selected") : s ? u4(n3, "selected") : u4(n3, l2 ? "active" : "inactive");
+      };
+      switch (this.state) {
+        case "submit": {
+          const n3 = this.options.filter(({ value: s }) => o2.includes(s)).map((s) => u4(s, "submitted")).join(styleText2("dim", ", ")) || styleText2("dim", "none"), l2 = wrapTextWithPrefix(
+            i2.output,
+            n3,
+            t2 ? `${styleText2("gray", S_BAR)}  ` : ""
+          );
+          return `${r2}${l2}`;
+        }
+        case "cancel": {
+          const n3 = this.options.filter(({ value: s }) => o2.includes(s)).map((s) => u4(s, "cancelled")).join(styleText2("dim", ", "));
+          if (n3.trim() === "")
+            return `${r2}${styleText2("gray", S_BAR)}`;
+          const l2 = wrapTextWithPrefix(
+            i2.output,
+            n3,
+            t2 ? `${styleText2("gray", S_BAR)}  ` : ""
+          );
+          return `${r2}${l2}${t2 ? `
+${styleText2("gray", S_BAR)}` : ""}`;
+        }
+        case "error": {
+          const n3 = t2 ? `${styleText2("yellow", S_BAR)}  ` : "", l2 = this.error.split(`
+`).map(
+            ($, C) => C === 0 ? `${t2 ? `${styleText2("yellow", S_BAR_END)}  ` : ""}${styleText2("yellow", $)}` : `   ${$}`
+          ).join(`
+`), s = r2.split(`
+`).length, h2 = l2.split(`
+`).length + 1;
+          return `${r2}${n3}${limitOptions({
+            output: i2.output,
+            options: this.options,
+            cursor: this.cursor,
+            maxItems: i2.maxItems,
+            columnPadding: n3.length,
+            rowPadding: s + h2,
+            style: p
+          }).join(`
+${n3}`)}
+${l2}
 `;
-    }
-    case "submit": {
-      const c51 = `${e("gray", $)}  `, a = r ? W(t.output, n, c51, void 0, (l) => e("dim", l)) : n ? e("dim", n) : "";
-      return `${s}${a}`;
-    }
-    case "cancel": {
-      const c51 = `${e("gray", $)}  `, a = r ? W(t.output, n, c51, void 0, (l) => e(["strikethrough", "dim"], l)) : n ? e(["strikethrough", "dim"], n) : "";
-      return `${s}${a}`;
-    }
-    default: {
-      const c51 = r ? `${e("cyan", $)}  ` : "", a = r ? e("cyan", E2) : "", l = r ? W(t.output, u, c51) : u;
-      return `${s}${l}
-${a}${o}
+        }
+        default: {
+          const n3 = t2 ? `${styleText2("cyan", S_BAR)}  ` : "", l2 = r2.split(`
+`).length, s = v ? formatInstructionFooter(MULTISELECT_INSTRUCTIONS, t2) : t2 ? [styleText2("cyan", S_BAR_END)] : [], h2 = s.join(`
+`), $ = s.length + 1;
+          return `${r2}${n3}${limitOptions({
+            output: i2.output,
+            options: this.options,
+            cursor: this.cursor,
+            maxItems: i2.maxItems,
+            columnPadding: n3.length,
+            rowPadding: l2 + $,
+            style: p
+          }).join(`
+${n3}`)}
+${h2}
 `;
+        }
+      }
     }
-  }
-} }).prompt();
-var Q2 = (t, r) => t.split(`
-`).map((s) => r(s)).join(`
+  }).prompt();
+};
+var cancel = (o2 = "", t2) => {
+  const i2 = t2?.output ?? process.stdout, e = t2?.withGuide ?? settings.withGuide ? `${styleText2("gray", S_BAR_END)}  ` : "";
+  i2.write(`${e}${styleText2("red", o2)}
+
 `);
-var ve = (t) => {
-  const r = (i, u) => {
-    const n = i.label ?? String(i.value);
-    return u === "disabled" ? `${e("gray", J)} ${Q2(n, (o) => e(["strikethrough", "gray"], o))}${i.hint ? ` ${e("dim", `(${i.hint ?? "disabled"})`)}` : ""}` : u === "active" ? `${e("cyan", et2)} ${n}${i.hint ? ` ${e("dim", `(${i.hint})`)}` : ""}` : u === "selected" ? `${e("green", U)} ${Q2(n, (o) => e("dim", o))}${i.hint ? ` ${e("dim", `(${i.hint})`)}` : ""}` : u === "cancelled" ? `${Q2(n, (o) => e(["strikethrough", "dim"], o))}` : u === "active-selected" ? `${e("green", U)} ${n}${i.hint ? ` ${e("dim", `(${i.hint})`)}` : ""}` : u === "submitted" ? `${Q2(n, (o) => e("dim", o))}` : `${e("dim", J)} ${Q2(n, (o) => e("dim", o))}`;
-  }, s = t.required ?? true;
-  return new nt({ options: t.options, signal: t.signal, input: t.input, output: t.output, initialValues: t.initialValues, required: s, cursorAt: t.cursorAt, validate(i) {
-    if (s && (i === void 0 || i.length === 0)) return `Please select at least one option.
-${e("reset", e("dim", `Press ${e(["gray", "bgWhite", "inverse"], " space ")} to select, ${e("gray", e("bgWhite", e("inverse", " enter ")))} to submit`))}`;
-  }, render() {
-    const i = t.withGuide ?? h.withGuide, u = W(t.output, t.message, i ? `${yt(this.state)}  ` : "", `${M(this.state)}  `), n = `${i ? `${e("gray", $)}
-` : ""}${u}
-`, o = this.value ?? [], c51 = (a, l) => {
-      if (a.disabled) return r(a, "disabled");
-      const d2 = o.includes(a.value);
-      return l && d2 ? r(a, "active-selected") : d2 ? r(a, "selected") : r(a, l ? "active" : "inactive");
-    };
+};
+var multiline = (e) => new h({
+  validate: e.validate,
+  placeholder: e.placeholder,
+  defaultValue: e.defaultValue,
+  initialValue: e.initialValue,
+  showSubmit: e.showSubmit,
+  output: e.output,
+  signal: e.signal,
+  input: e.input,
+  render() {
+    const i2 = e?.withGuide ?? settings.withGuide, o2 = `${`${i2 ? `${styleText2("gray", S_BAR)}
+` : ""}${symbol2(this.state)}  `}${e.message}
+`, m2 = e.placeholder && e.placeholder.length > 0 ? (
+      // biome-ignore lint/style/noNonNullAssertion: guarded by placeholder.length > 0
+      styleText2("inverse", e.placeholder[0]) + styleText2("dim", e.placeholder.slice(1))
+    ) : styleText2(["inverse", "hidden"], "_"), a2 = this.userInput ? this.userInputWithCursor : m2, l2 = this.value ?? "", c51 = e.showSubmit ? `
+  ${styleText2(this.focused === "submit" ? "cyan" : "dim", "[ submit ]")}` : "";
     switch (this.state) {
+      case "error": {
+        const n3 = `${styleText2("yellow", S_BAR)}  `, r2 = i2 ? wrapTextWithPrefix(e.output, a2, n3, void 0) : a2, u4 = styleText2("yellow", S_BAR_END);
+        return `${o2}${r2}
+${u4}  ${styleText2("yellow", this.error)}${c51}
+`;
+      }
       case "submit": {
-        const a = this.options.filter(({ value: d2 }) => o.includes(d2)).map((d2) => r(d2, "submitted")).join(e("dim", ", ")) || e("dim", "none"), l = W(t.output, a, i ? `${e("gray", $)}  ` : "");
-        return `${n}${l}`;
+        const n3 = `${styleText2("gray", S_BAR)}  `, r2 = i2 ? wrapTextWithPrefix(
+          e.output,
+          l2,
+          n3,
+          void 0,
+          void 0,
+          (u4) => styleText2("dim", u4)
+        ) : l2 ? styleText2("dim", l2) : "";
+        return `${o2}${r2}`;
       }
       case "cancel": {
-        const a = this.options.filter(({ value: d2 }) => o.includes(d2)).map((d2) => r(d2, "cancelled")).join(e("dim", ", "));
-        if (a.trim() === "") return `${n}${e("gray", $)}`;
-        const l = W(t.output, a, i ? `${e("gray", $)}  ` : "");
-        return `${n}${l}${i ? `
-${e("gray", $)}` : ""}`;
-      }
-      case "error": {
-        const a = i ? `${e("yellow", $)}  ` : "", l = this.error.split(`
-`).map((p2, m) => m === 0 ? `${i ? `${e("yellow", E2)}  ` : ""}${e("yellow", p2)}` : `   ${p2}`).join(`
-`), d2 = n.split(`
-`).length, y = l.split(`
-`).length + 1;
-        return `${n}${a}${Y2({ output: t.output, options: this.options, cursor: this.cursor, maxItems: t.maxItems, columnPadding: a.length, rowPadding: d2 + y, style: c51 }).join(`
-${a}`)}
-${l}
-`;
+        const n3 = `${styleText2("gray", S_BAR)}  `, r2 = i2 ? wrapTextWithPrefix(
+          e.output,
+          l2,
+          n3,
+          void 0,
+          void 0,
+          (u4) => styleText2(["strikethrough", "dim"], u4)
+        ) : l2 ? styleText2(["strikethrough", "dim"], l2) : "";
+        return `${o2}${r2}`;
       }
       default: {
-        const a = i ? `${e("cyan", $)}  ` : "", l = n.split(`
-`).length, d2 = i ? 2 : 1;
-        return `${n}${a}${Y2({ output: t.output, options: this.options, cursor: this.cursor, maxItems: t.maxItems, columnPadding: a.length, rowPadding: l + d2, style: c51 }).join(`
-${a}`)}
-${i ? e("cyan", E2) : ""}
+        const n3 = i2 ? `${styleText2("cyan", S_BAR)}  ` : "", r2 = i2 ? styleText2("cyan", S_BAR_END) : "", u4 = i2 ? wrapTextWithPrefix(e.output, a2, n3) : a2;
+        return `${o2}${u4}
+${r2}${c51}
 `;
       }
     }
-  } }).prompt();
-};
-var Ce = (t) => new ot({ validate: t.validate, mask: t.mask ?? Gt, signal: t.signal, input: t.input, output: t.output, render() {
-  const r = t.withGuide ?? h.withGuide, s = `${r ? `${e("gray", $)}
-` : ""}${M(this.state)}  ${t.message}
-`, i = this.userInputWithCursor, u = this.masked;
-  switch (this.state) {
-    case "error": {
-      const n = r ? `${e("yellow", $)}  ` : "", o = r ? `${e("yellow", E2)}  ` : "", c51 = u ?? "";
-      return t.clearOnError && this.clear(), `${s.trim()}
-${n}${c51}
-${o}${e("yellow", this.error)}
+  }
+}).prompt();
+var password = (r2) => new u$1({
+  validate: r2.validate,
+  mask: r2.mask ?? S_PASSWORD_MASK,
+  signal: r2.signal,
+  input: r2.input,
+  output: r2.output,
+  render() {
+    const e = r2.withGuide ?? settings.withGuide, o2 = `${e ? `${styleText2("gray", S_BAR)}
+` : ""}${symbol2(this.state)}  ${r2.message}
+`, c51 = this.userInputWithCursor, i2 = this.masked;
+    switch (this.state) {
+      case "error": {
+        const s = e ? `${styleText2("yellow", S_BAR)}  ` : "", n3 = e ? `${styleText2("yellow", S_BAR_END)}  ` : "", l2 = i2 ?? "";
+        return r2.clearOnError && this.clear(), `${o2.trim()}
+${s}${l2}
+${n3}${styleText2("yellow", this.error)}
 `;
-    }
-    case "submit": {
-      const n = r ? `${e("gray", $)}  ` : "", o = u ? e("dim", u) : "";
-      return `${s}${n}${o}`;
-    }
-    case "cancel": {
-      const n = r ? `${e("gray", $)}  ` : "", o = u ? e(["strikethrough", "dim"], u) : "";
-      return `${s}${n}${o}${u && r ? `
-${e("gray", $)}` : ""}`;
-    }
-    default: {
-      const n = r ? `${e("cyan", $)}  ` : "", o = r ? e("cyan", E2) : "";
-      return `${s}${n}${i}
-${o}
+      }
+      case "submit": {
+        const s = e ? `${styleText2("gray", S_BAR)}  ` : "", n3 = i2 ? styleText2("dim", i2) : "";
+        return `${o2}${s}${n3}`;
+      }
+      case "cancel": {
+        const s = e ? `${styleText2("gray", S_BAR)}  ` : "", n3 = i2 ? styleText2(["strikethrough", "dim"], i2) : "";
+        return `${o2}${s}${n3}${i2 && e ? `
+${styleText2("gray", S_BAR)}` : ""}`;
+      }
+      default: {
+        const s = e ? `${styleText2("cyan", S_BAR)}  ` : "", n3 = e ? styleText2("cyan", S_BAR_END) : "";
+        return `${o2}${s}${c51}
+${n3}
 `;
+      }
     }
   }
-} }).prompt();
-var Vt = { light: w2("\u2500", "-"), heavy: w2("\u2501", "="), block: w2("\u2588", "#") };
-var it2 = (t, r) => t.includes(`
-`) ? t.split(`
-`).map((s) => r(s)).join(`
-`) : r(t);
-var Ee = (t) => {
-  const r = (s, i) => {
-    const u = s.label ?? String(s.value);
-    switch (i) {
+}).prompt();
+var u3 = {
+  light: unicodeOr("\u2500", "-"),
+  heavy: unicodeOr("\u2501", "="),
+  block: unicodeOr("\u2588", "#")
+};
+var SELECT_INSTRUCTIONS = [
+  `${styleText2("dim", "\u2191/\u2193")} to navigate`,
+  `${styleText2("dim", "Enter:")} confirm`
+];
+var c50 = (t2, o2) => t2.includes(`
+`) ? t2.split(`
+`).map((d) => o2(d)).join(`
+`) : o2(t2);
+var select = (t2) => {
+  const o2 = (n3, m2) => {
+    if (n3 === void 0)
+      return "";
+    const s = n3.label ?? String(n3.value);
+    switch (m2) {
       case "disabled":
-        return `${e("gray", H)} ${it2(u, (n) => e("gray", n))}${s.hint ? ` ${e("dim", `(${s.hint ?? "disabled"})`)}` : ""}`;
+        return `${styleText2("gray", S_RADIO_INACTIVE)} ${c50(s, (i2) => styleText2("gray", i2))}${n3.hint ? ` ${styleText2("dim", `(${n3.hint ?? "disabled"})`)}` : ""}`;
       case "selected":
-        return `${it2(u, (n) => e("dim", n))}`;
+        return `${c50(s, (i2) => styleText2("dim", i2))}`;
       case "active":
-        return `${e("green", z4)} ${u}${s.hint ? ` ${e("dim", `(${s.hint})`)}` : ""}`;
+        return `${styleText2("green", S_RADIO_ACTIVE)} ${s}${n3.hint ? ` ${styleText2("dim", `(${n3.hint})`)}` : ""}`;
       case "cancelled":
-        return `${it2(u, (n) => e(["strikethrough", "dim"], n))}`;
+        return `${c50(s, (i2) => styleText2(["strikethrough", "dim"], i2))}`;
       default:
-        return `${e("dim", H)} ${it2(u, (n) => e("dim", n))}`;
-    }
-  };
-  return new ut({ options: t.options, signal: t.signal, input: t.input, output: t.output, initialValue: t.initialValue, render() {
-    const s = t.withGuide ?? h.withGuide, i = `${M(this.state)}  `, u = `${yt(this.state)}  `, n = W(t.output, t.message, u, i), o = `${s ? `${e("gray", $)}
-` : ""}${n}
+        return `${styleText2("dim", S_RADIO_INACTIVE)} ${c50(s, (i2) => styleText2("dim", i2))}`;
+    }
+  }, d = t2.showInstructions ?? true;
+  return new n$1({
+    options: t2.options,
+    signal: t2.signal,
+    input: t2.input,
+    output: t2.output,
+    initialValue: t2.initialValue,
+    render() {
+      const n3 = t2.withGuide ?? settings.withGuide, m2 = `${symbol2(this.state)}  `, s = `${symbolBar(this.state)}  `, i2 = wrapTextWithPrefix(
+        t2.output,
+        t2.message,
+        s,
+        m2
+      ), u4 = `${n3 ? `${styleText2("gray", S_BAR)}
+` : ""}${i2}
 `;
-    switch (this.state) {
-      case "submit": {
-        const c51 = s ? `${e("gray", $)}  ` : "", a = W(t.output, r(this.options[this.cursor], "selected"), c51);
-        return `${o}${a}`;
-      }
-      case "cancel": {
-        const c51 = s ? `${e("gray", $)}  ` : "", a = W(t.output, r(this.options[this.cursor], "cancelled"), c51);
-        return `${o}${a}${s ? `
-${e("gray", $)}` : ""}`;
-      }
-      default: {
-        const c51 = s ? `${e("cyan", $)}  ` : "", a = s ? e("cyan", E2) : "", l = o.split(`
-`).length, d2 = s ? 2 : 1;
-        return `${o}${c51}${Y2({ output: t.output, cursor: this.cursor, options: this.options, maxItems: t.maxItems, columnPadding: c51.length, rowPadding: l + d2, style: (y, p2) => r(y, y.disabled ? "disabled" : p2 ? "active" : "inactive") }).join(`
-${c51}`)}
-${a}
+      switch (this.state) {
+        case "submit": {
+          const r2 = n3 ? `${styleText2("gray", S_BAR)}  ` : "", a2 = wrapTextWithPrefix(
+            t2.output,
+            o2(this.options[this.cursor], "selected"),
+            r2
+          );
+          return `${u4}${a2}`;
+        }
+        case "cancel": {
+          const r2 = n3 ? `${styleText2("gray", S_BAR)}  ` : "", a2 = wrapTextWithPrefix(
+            t2.output,
+            o2(this.options[this.cursor], "cancelled"),
+            r2
+          );
+          return `${u4}${a2}${n3 ? `
+${styleText2("gray", S_BAR)}` : ""}`;
+        }
+        default: {
+          const r2 = n3 ? `${styleText2("cyan", S_BAR)}  ` : "", a2 = u4.split(`
+`).length, p = d ? formatInstructionFooter(SELECT_INSTRUCTIONS, n3) : n3 ? [styleText2("cyan", S_BAR_END)] : [], b = p.join(`
+`), f = p.length + 1;
+          return `${u4}${r2}${limitOptions({
+            output: t2.output,
+            cursor: this.cursor,
+            options: this.options,
+            maxItems: t2.maxItems,
+            columnPadding: r2.length,
+            rowPadding: a2 + f,
+            style: (g, x) => o2(g, g.disabled ? "disabled" : x ? "active" : "inactive")
+          }).join(`
+${r2}`)}
+${b}
 `;
+        }
       }
     }
-  } }).prompt();
+  }).prompt();
 };
-var jt = `${e("gray", $)}  `;
+var i = `${styleText2("gray", S_BAR)}  `;
 
 // src/auth/commands.ts
 function getClientId() {
@@ -38526,12 +39174,12 @@ async function promptForOrganizationSelection(organizations, activeOrganizationI
       hint: organization.organizationId
     };
   });
-  const selected = await Ee({
+  const selected = await select({
     message: "Switch organization",
     options: choices,
     initialValue: activeIndex >= 0 ? organizations[activeIndex]?.organizationId : void 0
   });
-  if (q(selected)) {
+  if (isCancel(selected)) {
     return null;
   }
   const selectedOrganization = organizations.find(
@@ -38747,15 +39395,15 @@ function createOrgListCommand() {
   return new Command("list").description("List organizations available to your account").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option(
     "-L, --limit <n>",
     `Max organizations to display, max ${ORG_LIST_MAX_LIMIT} (default: all)`,
-    (v2) => {
-      const n = Number.parseInt(v2, 10);
-      if (Number.isNaN(n) || n < 1) {
+    (v) => {
+      const n3 = Number.parseInt(v, 10);
+      if (Number.isNaN(n3) || n3 < 1) {
         throw new Error("--limit must be a positive integer");
       }
-      if (n > ORG_LIST_MAX_LIMIT) {
+      if (n3 > ORG_LIST_MAX_LIMIT) {
         throw new Error(`--limit cannot exceed ${ORG_LIST_MAX_LIMIT}`);
       }
-      return n;
+      return n3;
     }
   ).option(
     "-f, --filter <expression>",
@@ -38839,17 +39487,17 @@ Examples:
         ];
       });
       const colWidths = headers.map(
-        (h2, i) => Math.max(h2.length, ...rows.map((r) => (r[i] ?? "").length))
+        (h2, i2) => Math.max(h2.length, ...rows.map((r2) => (r2[i2] ?? "").length))
       );
-      const pad = (s, w3) => s.padEnd(w3);
-      const headerLine = headers.map((h2, i) => pad(h2, colWidths[i] ?? h2.length)).join("  ");
+      const pad = (s, w) => s.padEnd(w);
+      const headerLine = headers.map((h2, i2) => pad(h2, colWidths[i2] ?? h2.length)).join("  ");
       const rowLines = rows.map(
-        (row) => row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  ")
+        (row) => row.map((cell, i2) => pad(cell, colWidths[i2] ?? 0)).join("  ")
       );
       await runInteractivePager({
         items,
         header: headerLine,
-        renderItem: (_item, i) => [rowLines[i] ?? ""],
+        renderItem: (_item, i2) => [rowLines[i2] ?? ""],
         disabled: options.pager === false
       });
       if (organizationContext.staleSelectionDetected) {
@@ -39044,14 +39692,14 @@ function repoDisplayName(repositoryUrl) {
   }
 }
 function countedRows(totals) {
-  const b2 = totals.buckets;
+  const b = totals.buckets;
   return [
-    { label: "Billable code", value: b2.code.code },
-    { label: "Blank & comment lines in billable files", value: b2.code.lines - b2.code.code },
-    { label: "Tests", value: b2.tests.lines },
-    { label: "Documentation", value: b2.docs.lines },
-    { label: "Configuration & data", value: b2.config_data.lines },
-    { label: "Vendored & generated", value: b2.vendored_generated.lines }
+    { label: "Billable code", value: b.code.code },
+    { label: "Blank & comment lines in billable files", value: b.code.lines - b.code.code },
+    { label: "Tests", value: b.tests.lines },
+    { label: "Documentation", value: b.docs.lines },
+    { label: "Configuration & data", value: b.config_data.lines },
+    { label: "Vendored & generated", value: b.vendored_generated.lines }
   ];
 }
 function countedTotal(totals) {
@@ -39062,7 +39710,7 @@ function padValues(rows) {
   const labelWidth = Math.max(...rows.map((row) => row.label.length));
   const valueWidth = Math.max(...formatted.map((value) => value.length));
   return rows.map(
-    (row, i) => `  ${row.label.padEnd(labelWidth)}  ${(formatted[i] ?? "").padStart(valueWidth)}`
+    (row, i2) => `  ${row.label.padEnd(labelWidth)}  ${(formatted[i2] ?? "").padStart(valueWidth)}`
   );
 }
 function renderCodeSizeTable(codeSize, options) {
@@ -39222,12 +39870,12 @@ Examples:
 // src/completion/index.ts
 function extractCommandTree(cmd) {
   const BUILTIN_FLAGS = /* @__PURE__ */ new Set(["--help", "-h", "--version", "-V"]);
-  const options = cmd.options.filter((o) => !o.hidden).filter((o) => !BUILTIN_FLAGS.has(o.long ?? "") && !BUILTIN_FLAGS.has(o.short ?? "")).map((o) => ({
-    flags: o.flags,
-    long: o.long ?? "",
-    short: o.short ?? null,
-    description: o.description,
-    takesValue: o.required || o.optional
+  const options = cmd.options.filter((o2) => !o2.hidden).filter((o2) => !BUILTIN_FLAGS.has(o2.long ?? "") && !BUILTIN_FLAGS.has(o2.short ?? "")).map((o2) => ({
+    flags: o2.flags,
+    long: o2.long ?? "",
+    short: o2.short ?? null,
+    description: o2.description,
+    takesValue: o2.required || o2.optional
   }));
   const subcommands = cmd.commands.filter((c51) => !c51._hidden).map((c51) => extractCommandTree(c51));
   return {
@@ -39296,15 +39944,15 @@ function generateBashCompletion(tree, binName) {
 function collectBashCases(tree, prefix) {
   const cases = /* @__PURE__ */ new Map();
   const subcommandNames = tree.subcommands.map((c51) => c51.name);
-  const optionNames = tree.options.flatMap((o) => o.short ? [o.long, o.short] : [o.long]);
+  const optionNames = tree.options.flatMap((o2) => o2.short ? [o2.long, o2.short] : [o2.long]);
   const extraOptions = prefix === "" ? ["--help", "--version"] : ["--help"];
   const allOptions = [.../* @__PURE__ */ new Set([...optionNames, ...extraOptions])];
   cases.set(prefix, { subcommands: subcommandNames, options: allOptions });
   for (const sub of tree.subcommands) {
     const subPath = prefix ? `${prefix} ${sub.name}` : sub.name;
     const subCases = collectBashCases(sub, subPath);
-    for (const [k2, v2] of subCases) {
-      cases.set(k2, v2);
+    for (const [k, v] of subCases) {
+      cases.set(k, v);
     }
   }
   return cases;
@@ -39464,7 +40112,7 @@ function buildFishCondition(binName, parentPath) {
   if (parentPath.length === 1) {
     return `-n '__fish_seen_subcommand_from ${parentPath[0]}'`;
   }
-  const conditions = parentPath.map((p2) => `__fish_seen_subcommand_from ${p2}`);
+  const conditions = parentPath.map((p) => `__fish_seen_subcommand_from ${p}`);
   return `-n '${conditions.join("; and ")}'`;
 }
 function generateCompletion(program3, shell, binName) {
@@ -39481,9 +40129,9 @@ function generateCompletion(program3, shell, binName) {
 }
 
 // src/completion/install.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 var TRACE_DIR = ".trace";
 function completionFileName(shell) {
   switch (shell) {
@@ -39496,14 +40144,14 @@ function completionFileName(shell) {
   }
 }
 function getTraceDir2() {
-  return join3(homedir2(), TRACE_DIR);
+  return join4(homedir2(), TRACE_DIR);
 }
 function getCompletionFilePath(shell) {
-  return join3(getTraceDir2(), completionFileName(shell));
+  return join4(getTraceDir2(), completionFileName(shell));
 }
 function writeCompletionFile(shell, script) {
   const dir = getTraceDir2();
-  if (!existsSync2(dir)) {
+  if (!existsSync3(dir)) {
     mkdirSync2(dir, { recursive: true });
   }
   const filePath = getCompletionFilePath(shell);
@@ -39774,7 +40422,7 @@ async function runList2(options) {
   await runInteractivePager({
     items: inboxes,
     header,
-    renderItem: (_inbox, i) => [rows[i] ?? ""],
+    renderItem: (_inbox, i2) => [rows[i2] ?? ""],
     disabled: options.pager === false
   });
   console.log(formatInboxQuota(quota));
@@ -39895,8 +40543,8 @@ async function resolveSecret(label, flagBase, opts, readStdin = defaultReadStdin
       `No source for ${label}. Use --${flagBase}-stdin, --${flagBase}-file, or --${flagBase}-env (or run interactively to be prompted).`
     );
   }
-  const entered = await Ce({ message: `Enter ${label}:` });
-  if (q(entered) || typeof entered !== "string" || entered.length === 0) {
+  const entered = await password({ message: `Enter ${label}:` });
+  if (isCancel(entered) || typeof entered !== "string" || entered.length === 0) {
     throw new SecretInputError(`${label} entry was cancelled or empty.`);
   }
   return entered;
@@ -40197,6 +40845,16 @@ function authConfigDisplay(authConfig) {
   }
   return sanitizeDisplay(JSON.stringify(authConfig));
 }
+function mfaDisplay(mfa) {
+  if (!mfa) return "(none)";
+  const parts = [mfa.kind];
+  if (mfa.issuer) parts.push(`issuer=${sanitizeDisplay(mfa.issuer)}`);
+  if (mfa.accountName) parts.push(`account=${sanitizeDisplay(mfa.accountName)}`);
+  if (mfa.digits !== 6) parts.push(`${mfa.digits} digits`);
+  if (mfa.periodSeconds !== 30) parts.push(`${mfa.periodSeconds}s`);
+  if (mfa.algorithm !== "SHA1") parts.push(mfa.algorithm);
+  return parts.join(" \xB7 ");
+}
 function renderCredentialDetail(cred) {
   const pad = 13;
   return [
@@ -40205,11 +40863,14 @@ function renderCredentialDetail(cred) {
     `${"Type:".padEnd(pad)} ${cred.credentialType}`,
     `${"Environment:".padEnd(pad)} ${cred.environmentId}`,
     `${"Auth config:".padEnd(pad)} ${authConfigDisplay(cred.authConfig)}`,
+    `${"MFA:".padEnd(pad)} ${mfaDisplay(cred.mfa)}`,
     `${"Created:".padEnd(pad)} ${formatDate(cred.createdAt)}`
   ].join("\n");
 }
 function printCredentialsTsv(creds) {
-  console.log(["credentialId", "label", "credentialType", "authConfig", "createdAt"].join("	"));
+  console.log(
+    ["credentialId", "label", "credentialType", "authConfig", "mfa", "createdAt"].join("	")
+  );
   for (const cred of creds) {
     console.log(
       [
@@ -40217,6 +40878,9 @@ function printCredentialsTsv(creds) {
         tsvSafe(sanitizeDisplay(cred.label)),
         tsvSafe(cred.credentialType),
         tsvSafe(authConfigDisplay(cred.authConfig)),
+        // Kind only in TSV — the column is for scripting "which accounts have a
+        // second factor", and the parameters would make the row unreadable.
+        tsvSafe(cred.mfa ? cred.mfa.kind : ""),
         tsvSafe(toIso(cred.createdAt))
       ].join("	")
     );
@@ -40384,12 +41048,12 @@ async function buildCreateBody(type, label, options) {
       const ac = buildUsernamePasswordAuthConfig(options);
       if ("error" in ac) failAuthBuild(ac);
       const username = await resolveSecret("username", "username", usernameOpts(options));
-      const password = await resolveSecret("password", "password", passwordOpts(options));
+      const password2 = await resolveSecret("password", "password", passwordOpts(options));
       return {
         credentialType: "USERNAME_PASSWORD",
         ...labelFields,
         username,
-        password,
+        password: password2,
         ...ac.value ? { authConfig: ac.value } : {}
       };
     }
@@ -40422,7 +41086,7 @@ async function runList3(options) {
   await runInteractivePager({
     items: creds,
     header,
-    renderItem: (_c, i) => [rows[i] ?? ""],
+    renderItem: (_c, i2) => [rows[i2] ?? ""],
     disabled: options.pager === false
   });
 }
@@ -40511,6 +41175,112 @@ async function runUpdate2(credentialId, options) {
   }
   outputCredential(result.body, output);
 }
+function failMfaOp(action, status, body, credentialId) {
+  const { message, errorCode } = readErrorFields(body);
+  if (status === UNAUTHORIZED_STATUS2) {
+    exitAuthFailed();
+  }
+  if (status === 403) {
+    console.error(colorError(`Only Trace staff can ${action} a credential's second factor.`));
+    process.exit(1);
+  }
+  if (status === 404) {
+    console.error(colorError(message ?? `Not found: ${credentialId}.`));
+    process.exit(1);
+  }
+  if (status === 422 && errorCode === "CREDENTIAL_MFA_UNSUPPORTED_TYPE") {
+    console.error(colorError(message ?? "This credential type cannot carry a second factor."));
+    process.exit(1);
+  }
+  if (status === 422 && errorCode === "CREDENTIAL_MFA_NOT_ENROLLED") {
+    console.error(colorError(message ?? "This credential has no second factor enrolled."));
+    process.exit(1);
+  }
+  if (status === 400) {
+    console.error(colorError(message ?? "Invalid setup key (status 400)."));
+    process.exit(1);
+  }
+  console.error(
+    colorError(
+      `Failed to ${action} the second factor (status ${status})${message ? `: ${message}` : "."}`
+    )
+  );
+  process.exit(1);
+}
+async function runSetMfa(credentialId, options) {
+  const output = parseOutput(options.output);
+  requireEnvId(options.env);
+  requireCredId(credentialId);
+  const sourceOpts = {
+    stdin: options.setupKeyStdin,
+    file: options.setupKeyFile,
+    env: options.setupKeyEnv
+  };
+  let setupKey;
+  try {
+    setupKey = await resolveSecret("TOTP setup key", "setup-key", sourceOpts);
+  } catch (error48) {
+    if (error48 instanceof SecretInputError) {
+      console.error(colorError(error48.message));
+      process.exit(1);
+    }
+    throw error48;
+  }
+  const organizationId = await resolveOrganizationId();
+  const result = await authenticatedRequest(
+    (client) => client.credential.setCredentialMfa({
+      params: { organizationId, environmentId: options.env, credentialId },
+      body: { kind: "TOTP", setupKey }
+    })
+  );
+  if (result.status !== SUCCESS_STATUS) {
+    failMfaOp("enrol", result.status, result.body, credentialId);
+  }
+  if (output === "table") {
+    console.log(
+      colorSuccess(`Enrolled a TOTP second factor on ${sanitizeDisplay(result.body.label)}`)
+    );
+    console.log("Verify it with: tracecli credential mfa-code <id> --env <envId>");
+  }
+  outputCredential(result.body, output);
+}
+async function runClearMfa(credentialId, options) {
+  requireEnvId(options.env);
+  requireCredId(credentialId);
+  const organizationId = await resolveOrganizationId();
+  const result = await authenticatedRequest(
+    (client) => client.credential.clearCredentialMfa({
+      params: { organizationId, environmentId: options.env, credentialId }
+    })
+  );
+  if (result.status !== SUCCESS_STATUS) {
+    failMfaOp("clear", result.status, result.body, credentialId);
+  }
+  console.log(colorSuccess(`Removed the second factor from ${credentialId}`));
+}
+async function runMfaCode(credentialId, options) {
+  const output = parseOutput(options.output);
+  requireEnvId(options.env);
+  requireCredId(credentialId);
+  const organizationId = await resolveOrganizationId();
+  const result = await authenticatedRequest(
+    (client) => client.credential.generateCredentialMfaCode({
+      params: { organizationId, environmentId: options.env, credentialId }
+    })
+  );
+  if (result.status !== SUCCESS_STATUS) {
+    failMfaOp("generate a code for", result.status, result.body, credentialId);
+  }
+  if (output === "json") {
+    console.log(JSON.stringify(result.body, null, 2));
+    return;
+  }
+  if (output === "tsv") {
+    console.log(result.body.code);
+    return;
+  }
+  console.log(`${result.body.code}  (valid for ${result.body.expiresInSeconds}s)`);
+}
 async function runDelete3(credentialId, options) {
   requireEnvId(options.env);
   requireCredId(credentialId);
@@ -40595,6 +41365,46 @@ function createDeleteCommand3() {
     await runDelete3(credentialId, options);
   });
 }
+function createSetMfaCommand() {
+  return new Command("set-mfa").description("Attach or replace an account credential's TOTP second factor").argument("<credentialId>", "Credential UUID (a username-password or magic-auth credential)").requiredOption("--env <environmentId>", "Parent environment UUID").option("--setup-key-stdin", "Read the TOTP setup key from stdin").option("--setup-key-file <path>", "Read the TOTP setup key from a file").option("--setup-key-env <name>", "Read the TOTP setup key from an env var").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").addHelpText(
+    "after",
+    `
+The setup key is either a full otpauth:// URI or the bare base32 key a setup
+page shows under "can't scan the QR code?" \u2014 NOT a 6-digit code. Like every
+secret here it is read from stdin/file/env (or a no-echo prompt), never an
+inline flag, so it stays out of shell history and CI logs.
+
+Where to find it: whatever you saved when the account's MFA was first set up.
+In a password manager it is the one-time-password field's underlying secret
+(the app shows the live code; you want the key behind it). If you no longer
+have it, turn MFA off and back on in the target app and capture the key then.
+
+Examples:
+  tracecli credential set-mfa <id> --env <envId> --setup-key-stdin      # paste, no echo
+  tracecli credential set-mfa <id> --env <envId> --setup-key-env TOTP_SETUP_KEY
+  tracecli credential set-mfa <id> --env <envId> --setup-key-file ./key.txt
+  tracecli credential mfa-code <id> --env <envId>   # confirm the paste took`
+  ).action(async (credentialId, options) => {
+    await runSetMfa(credentialId, options);
+  });
+}
+function createClearMfaCommand() {
+  return new Command("clear-mfa").description("Remove an account credential's second factor").argument("<credentialId>", "Credential UUID").requiredOption("--env <environmentId>", "Parent environment UUID").action(async (credentialId, options) => {
+    await runClearMfa(credentialId, options);
+  });
+}
+function createMfaCodeCommand() {
+  return new Command("mfa-code").description("Print the account's current TOTP code (the seed is never shown)").argument("<credentialId>", "Credential UUID").requiredOption("--env <environmentId>", "Parent environment UUID").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").addHelpText(
+    "after",
+    `
+Use this to confirm an enrolment took. The code always has a few seconds of life
+left \u2014 if the current window is nearly over, the API waits for the next one.
+
+  -o tsv prints the bare code, for piping into a form filler.`
+  ).action(async (credentialId, options) => {
+    await runMfaCode(credentialId, options);
+  });
+}
 function createCredentialCommand() {
   const credential = new Command("credential").alias("cred").description("Manage environment credentials");
   credential.addCommand(createCreateCommand3());
@@ -40602,6 +41412,9 @@ function createCredentialCommand() {
   credential.addCommand(createGetCommand2());
   credential.addCommand(createUpdateCommand2());
   credential.addCommand(createDeleteCommand3());
+  credential.addCommand(createSetMfaCommand());
+  credential.addCommand(createClearMfaCommand());
+  credential.addCommand(createMfaCodeCommand());
   credential.addCommand(createInboxCommand());
   return credential;
 }
@@ -40750,7 +41563,7 @@ function printEnvironmentsTsv(envs) {
 }
 function sortOrgEnvironments(envs) {
   return [...envs].sort(
-    (a, b2) => a.applicationName.localeCompare(b2.applicationName) || a.name.localeCompare(b2.name) || a.applicationId.localeCompare(b2.applicationId) || a.environmentId.localeCompare(b2.environmentId)
+    (a2, b) => a2.applicationName.localeCompare(b.applicationName) || a2.name.localeCompare(b.name) || a2.applicationId.localeCompare(b.applicationId) || a2.environmentId.localeCompare(b.environmentId)
   );
 }
 function printOrgEnvironmentsTsv(envs) {
@@ -40780,17 +41593,17 @@ function printOrgEnvironmentsTsv(envs) {
   }
 }
 function buildEnvironmentTable(envs, leading) {
-  const cells = envs.map((e2) => ({
-    leading: leading.map((column) => sanitizeDisplay(column.value(e2))),
-    name: sanitizeDisplay(e2.name),
-    prod: e2.isProduction ? "yes" : "no",
-    url: e2.primaryUrl != null ? sanitizeDisplay(e2.primaryUrl) : "\u2014"
+  const cells = envs.map((e) => ({
+    leading: leading.map((column) => sanitizeDisplay(column.value(e))),
+    name: sanitizeDisplay(e.name),
+    prod: e.isProduction ? "yes" : "no",
+    url: e.primaryUrl != null ? sanitizeDisplay(e.primaryUrl) : "\u2014"
   }));
   const leadingWidths = leading.map(
-    (column, i) => Math.max(column.header.length, ...cells.map((c51) => c51.leading[i]?.length ?? 0))
+    (column, i2) => Math.max(column.header.length, ...cells.map((c51) => c51.leading[i2]?.length ?? 0))
   );
   const nameWidth = Math.max(4, ...cells.map((c51) => c51.name.length));
-  const padLeading = (values) => values.map((v2, i) => v2.padEnd(leadingWidths[i] ?? 0)).join("  ");
+  const padLeading = (values) => values.map((v, i2) => v.padEnd(leadingWidths[i2] ?? 0)).join("  ");
   return {
     header: `${padLeading(leading.map((c51) => c51.header))}  ${"NAME".padEnd(nameWidth)}  PROD  URL`,
     rows: cells.map(
@@ -40800,12 +41613,12 @@ function buildEnvironmentTable(envs, leading) {
 }
 var ENVIRONMENT_ID_COLUMN = {
   header: "ID",
-  value: (e2) => e2.environmentId
+  value: (e) => e.environmentId
 };
 function buildOrgEnvironmentsTable(envs) {
   return buildEnvironmentTable(envs, [
     ENVIRONMENT_ID_COLUMN,
-    { header: "APPLICATION", value: (e2) => e2.applicationName }
+    { header: "APPLICATION", value: (e) => e.applicationName }
   ]);
 }
 function buildEnvironmentsTable(envs) {
@@ -40887,8 +41700,8 @@ async function collectOrgEnvironments(requests) {
   }
   const apps = appsResult.data;
   const environments = [];
-  for (let i = 0; i < apps.length; i += ORG_LIST_CONCURRENCY) {
-    const batch = apps.slice(i, i + ORG_LIST_CONCURRENCY);
+  for (let i2 = 0; i2 < apps.length; i2 += ORG_LIST_CONCURRENCY) {
+    const batch = apps.slice(i2, i2 + ORG_LIST_CONCURRENCY);
     const results = await Promise.all(
       // Catch per request, not around the batch: a rejected fetch (ECONNRESET,
       // DNS failure) would otherwise reject the whole `Promise.all` and crash
@@ -40951,7 +41764,7 @@ async function runListAcrossOrganization(output, pager) {
   await runInteractivePager({
     items: envs,
     header,
-    renderItem: (_env, i) => [rows[i] ?? ""],
+    renderItem: (_env, i2) => [rows[i2] ?? ""],
     disabled: pager === false
   });
 }
@@ -40989,7 +41802,7 @@ async function runList4(options) {
   await runInteractivePager({
     items: envs,
     header,
-    renderItem: (_env, i) => [rows[i] ?? ""],
+    renderItem: (_env, i2) => [rows[i2] ?? ""],
     disabled: options.pager === false
   });
 }
@@ -41131,13 +41944,13 @@ function createEnvironmentCommand() {
 
 // src/metadata.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { dirname, join as join4 } from "path";
+import { dirname as dirname2, join as join5 } from "path";
 import { fileURLToPath } from "url";
 var DEFAULT_PACKAGE_NAME = "securewithtrace";
 var DEFAULT_VERSION = "0.0.1";
 function readPackageMetadata() {
   const currentFilePath = fileURLToPath(import.meta.url);
-  const packageJsonPath = join4(dirname(currentFilePath), "..", "package.json");
+  const packageJsonPath = join5(dirname2(currentFilePath), "..", "package.json");
   try {
     const rawPackageJson = readFileSync3(packageJsonPath, "utf-8");
     const parsed = JSON.parse(rawPackageJson);
@@ -41190,7 +42003,7 @@ async function resolvePentestId(organizationId, identifier) {
     console.error(`Failed to list pentests (status ${result.status}).`);
     process.exit(1);
   }
-  const pentest = result.body.find((p2) => p2.displayId === displayId);
+  const pentest = result.body.find((p) => p.displayId === displayId);
   if (!pentest) {
     console.error(
       `Pentest with display ID ${displayId} not found.
@@ -41425,10 +42238,10 @@ function applyMultiSelectIntakeAnswer(current, key, selected) {
   };
 }
 function formatIssueClasses(values) {
-  return values.map((v2) => INTAKE_ISSUE_CLASS_LABELS[v2]).join(", ");
+  return values.map((v) => INTAKE_ISSUE_CLASS_LABELS[v]).join(", ");
 }
 function formatSurfaces(values) {
-  return values.map((v2) => INTAKE_SURFACE_LABELS[v2]).join(", ");
+  return values.map((v) => INTAKE_SURFACE_LABELS[v]).join(", ");
 }
 function formatAnswerValue(key, answers) {
   switch (key) {
@@ -41489,8 +42302,8 @@ function surfaceSelectOptions() {
 // src/pentest/commands.ts
 var DEFAULT_LIMIT2 = 30;
 var MAX_LIMIT2 = 100;
-function displayPentestStatus(pt2) {
-  return pt2.status ?? pt2.customerStatus ?? "UNKNOWN";
+function displayPentestStatus(pt) {
+  return pt.status ?? pt.customerStatus ?? "UNKNOWN";
 }
 function tsvSafe2(value) {
   return value.replace(/[\t\n\r]/g, " ");
@@ -41499,8 +42312,8 @@ function formatDate2(date5) {
   if (!date5) {
     return "\u2014";
   }
-  const d2 = typeof date5 === "string" ? new Date(date5) : date5;
-  return d2.toLocaleDateString("en-US", { year: "numeric", month: "short", day: "numeric" });
+  const d = typeof date5 === "string" ? new Date(date5) : date5;
+  return d.toLocaleDateString("en-US", { year: "numeric", month: "short", day: "numeric" });
 }
 function formatFindingSeverity(severity) {
   switch (severity) {
@@ -41526,12 +42339,12 @@ function createListCommand6() {
   ).option(
     "-L, --limit <n>",
     `Max results to return (default: ${DEFAULT_LIMIT2}, max: ${MAX_LIMIT2})`,
-    (v2) => {
-      const n = Number.parseInt(v2, 10);
-      if (Number.isNaN(n) || n < 1) {
+    (v) => {
+      const n3 = Number.parseInt(v, 10);
+      if (Number.isNaN(n3) || n3 < 1) {
         throw new Error("--limit must be a positive integer");
       }
-      return Math.min(n, MAX_LIMIT2);
+      return Math.min(n3, MAX_LIMIT2);
     }
   ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the pentests dashboard in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output").addHelpText(
     "after",
@@ -41573,7 +42386,7 @@ Examples:
       let filteredPentests = allPentests;
       if (options.status) {
         filteredPentests = filteredPentests.filter(
-          (p2) => displayPentestStatus(p2) === options.status
+          (p) => displayPentestStatus(p) === options.status
         );
       }
       const limit = options.limit ?? DEFAULT_LIMIT2;
@@ -41596,14 +42409,14 @@ Examples:
       }
       if (isTsv) {
         console.log("displayId	title	status	startedAt	endedAt	findingsTotal");
-        for (const pt2 of pentests) {
+        for (const pt of pentests) {
           const cols = [
-            `PT-${pt2.displayId}`,
-            tsvSafe2(pt2.title),
-            displayPentestStatus(pt2),
-            pt2.startedAt ? String(pt2.startedAt) : "",
-            pt2.endedAt ? String(pt2.endedAt) : "",
-            String(pt2.findingCounts.total)
+            `PT-${pt.displayId}`,
+            tsvSafe2(pt.title),
+            displayPentestStatus(pt),
+            pt.startedAt ? String(pt.startedAt) : "",
+            pt.endedAt ? String(pt.endedAt) : "",
+            String(pt.findingCounts.total)
           ];
           console.log(cols.join("	"));
         }
@@ -41613,24 +42426,24 @@ Examples:
       await runInteractivePager({
         items: pentests,
         header,
-        renderItem: (pt2) => renderPentestLines(pt2),
+        renderItem: (pt) => renderPentestLines(pt),
         disabled: options.pager === false
       });
     }
   );
 }
-function renderPentestLines(pt2) {
-  const status = formatStatus(displayPentestStatus(pt2));
-  const started = formatDate2(pt2.startedAt);
-  const ended = formatDate2(pt2.endedAt);
-  const dateRange = pt2.startedAt ? `${started} \u2013 ${ended}` : "Not started";
-  const findings = pt2.findingCounts.total;
+function renderPentestLines(pt) {
+  const status = formatStatus(displayPentestStatus(pt));
+  const started = formatDate2(pt.startedAt);
+  const ended = formatDate2(pt.endedAt);
+  const dateRange = pt.startedAt ? `${started} \u2013 ${ended}` : "Not started";
+  const findings = pt.findingCounts.total;
   const lines = [
-    `  [PT-${pt2.displayId}] ${pt2.title}`,
+    `  [PT-${pt.displayId}] ${pt.title}`,
     `          Status: ${status} | Findings: ${findings} | ${dateRange}`
   ];
-  if (pt2.description) {
-    lines.push(`          ${pt2.description}`);
+  if (pt.description) {
+    lines.push(`          ${pt.description}`);
   }
   lines.push("");
   return lines;
@@ -41647,12 +42460,12 @@ function createFindingsListCommand() {
   ).option(
     "-L, --limit <n>",
     `Max results to return (default: ${DEFAULT_LIMIT2}, max: ${MAX_LIMIT2})`,
-    (v2) => {
-      const n = Number.parseInt(v2, 10);
-      if (Number.isNaN(n) || n < 1) {
+    (v) => {
+      const n3 = Number.parseInt(v, 10);
+      if (Number.isNaN(n3) || n3 < 1) {
         throw new Error("--limit must be a positive integer");
       }
-      return Math.min(n, MAX_LIMIT2);
+      return Math.min(n3, MAX_LIMIT2);
     }
   ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-w, --web", "Open the pentest detail page in a browser").option("--no-pager", "Disable the interactive arrow-key pager for table output").addHelpText(
     "after",
@@ -41703,7 +42516,7 @@ Examples:
         (f) => (!options.severity || f.severity === options.severity) && (!options.status || f.status === options.status)
       );
       filteredFindings.sort(
-        (a, b2) => (SEVERITY_ORDER[a.severity] ?? 99) - (SEVERITY_ORDER[b2.severity] ?? 99)
+        (a2, b) => (SEVERITY_ORDER[a2.severity] ?? 99) - (SEVERITY_ORDER[b.severity] ?? 99)
       );
       const limit = options.limit ?? DEFAULT_LIMIT2;
       const findings = filteredFindings.slice(0, limit);
@@ -41872,46 +42685,46 @@ function truncateForDisplay(value, max = 120) {
   }
   return `${value.slice(0, max - 1)}\u2026`;
 }
-function printPentestUpdateDetail(pt2) {
+function printPentestUpdateDetail(pt) {
   const pad = 14;
   console.log(
     [
-      `${"ID:".padEnd(pad)} PT-${pt2.displayId}`,
-      `${"Title:".padEnd(pad)} ${sanitizeDisplay(pt2.title)}`,
-      `${"Status:".padEnd(pad)} ${sanitizeDisplay(pt2.status)}`,
-      `${"Stage:".padEnd(pad)} ${sanitizeDisplay(pt2.currentStage)}`,
-      `${"Description:".padEnd(pad)} ${pt2.description ? sanitizeDisplay(truncateForDisplay(pt2.description)) : "\u2014"}`,
-      `${"Priorities:".padEnd(pad)} ${sanitizeDisplay(formatPriorities(pt2.customerPriorityCategories))}`,
-      `${"Concerns:".padEnd(pad)} ${pt2.customerConcernsContext ? sanitizeDisplay(truncateForDisplay(pt2.customerConcernsContext)) : "\u2014"}`,
-      `${"Updated:".padEnd(pad)} ${toIso(pt2.updatedAt)}`
+      `${"ID:".padEnd(pad)} PT-${pt.displayId}`,
+      `${"Title:".padEnd(pad)} ${sanitizeDisplay(pt.title)}`,
+      `${"Status:".padEnd(pad)} ${sanitizeDisplay(pt.status)}`,
+      `${"Stage:".padEnd(pad)} ${sanitizeDisplay(pt.currentStage)}`,
+      `${"Description:".padEnd(pad)} ${pt.description ? sanitizeDisplay(truncateForDisplay(pt.description)) : "\u2014"}`,
+      `${"Priorities:".padEnd(pad)} ${sanitizeDisplay(formatPriorities(pt.customerPriorityCategories))}`,
+      `${"Concerns:".padEnd(pad)} ${pt.customerConcernsContext ? sanitizeDisplay(truncateForDisplay(pt.customerConcernsContext)) : "\u2014"}`,
+      `${"Updated:".padEnd(pad)} ${toIso(pt.updatedAt)}`
     ].join("\n")
   );
 }
-function printPentestUpdateTsv(pt2) {
+function printPentestUpdateTsv(pt) {
   console.log("displayId	title	status	stage	description	priorities	concerns	updatedAt");
   console.log(
     [
-      `PT-${pt2.displayId}`,
-      tsvSafe2(sanitizeDisplay(pt2.title)),
-      tsvSafe2(sanitizeDisplay(pt2.status)),
-      tsvSafe2(sanitizeDisplay(pt2.currentStage)),
-      tsvSafe2(sanitizeDisplay(pt2.description ?? "")),
-      tsvSafe2(sanitizeDisplay(pt2.customerPriorityCategories.join(","))),
-      tsvSafe2(sanitizeDisplay(pt2.customerConcernsContext ?? "")),
-      toIso(pt2.updatedAt)
+      `PT-${pt.displayId}`,
+      tsvSafe2(sanitizeDisplay(pt.title)),
+      tsvSafe2(sanitizeDisplay(pt.status)),
+      tsvSafe2(sanitizeDisplay(pt.currentStage)),
+      tsvSafe2(sanitizeDisplay(pt.description ?? "")),
+      tsvSafe2(sanitizeDisplay(pt.customerPriorityCategories.join(","))),
+      tsvSafe2(sanitizeDisplay(pt.customerConcernsContext ?? "")),
+      toIso(pt.updatedAt)
     ].join("	")
   );
 }
-function outputPentestUpdate(pt2, output) {
+function outputPentestUpdate(pt, output) {
   if (output === "json") {
-    console.log(JSON.stringify(pt2, null, 2));
+    console.log(JSON.stringify(pt, null, 2));
     return;
   }
   if (output === "tsv") {
-    printPentestUpdateTsv(pt2);
+    printPentestUpdateTsv(pt);
     return;
   }
-  printPentestUpdateDetail(pt2);
+  printPentestUpdateDetail(pt);
 }
 async function runUpdate4(pentestIdentifier, options) {
   const output = parseOutput(options.output);
@@ -42083,19 +42896,19 @@ function questionnaireShowInput(body) {
   };
 }
 function exitCancelled() {
-  me("Cancelled.");
+  cancel("Cancelled.");
   process.exit(1);
 }
 async function promptQuestionnaireAnswers(existing) {
   let working = { ...existing ?? {} };
   const textPrompt = async (key, question) => {
     const previous = existing?.[key];
-    const value = await fe({
-      message: `${question} (empty keeps previous)`,
+    const value = await multiline({
+      message: `${question} (Enter for a new line, Enter twice to continue \u2014 empty keeps previous)`,
       initialValue: previous ?? "",
-      ...previous ? {} : { placeholder: "Optional, press Enter to skip" }
+      ...previous ? {} : { placeholder: "Optional, press Enter twice to skip" }
     });
-    if (q(value)) {
+    if (isCancel(value)) {
       exitCancelled();
     }
     working = applyTextIntakeAnswer(working, key, value);
@@ -42107,35 +42920,35 @@ async function promptQuestionnaireAnswers(existing) {
     }
     const message = `${entry.question} (empty keeps previous)`;
     if (entry.key === "issueClasses") {
-      const selected = await ve({
+      const selected = await multiselect({
         message,
         options: issueClassSelectOptions(),
         required: false,
         ...existing?.issueClasses !== void 0 ? { initialValues: existing.issueClasses } : {}
       });
-      if (q(selected)) {
+      if (isCancel(selected)) {
         exitCancelled();
       }
       working = applyMultiSelectIntakeAnswer(working, "issueClasses", selected);
     } else {
-      const selected = await ve({
+      const selected = await multiselect({
         message,
         options: surfaceSelectOptions(),
         required: false,
         ...existing?.surfaces !== void 0 ? { initialValues: existing.surfaces } : {}
       });
-      if (q(selected)) {
+      if (isCancel(selected)) {
         exitCancelled();
       }
       working = applyMultiSelectIntakeAnswer(working, "surfaces", selected);
     }
     await textPrompt(entry.notesKey, entry.notesQuestion);
   }
-  const confirmed = await ue({
+  const confirmed = await confirm({
     message: "Save questionnaire answers?",
     initialValue: true
   });
-  if (q(confirmed) || !confirmed) {
+  if (isCancel(confirmed) || !confirmed) {
     exitCancelled();
   }
   if (Object.keys(working).length === 0) {
@@ -42258,8 +43071,8 @@ function createPentestCommand() {
 }
 
 // src/update/commands.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
-import { dirname as dirname2, join as join5 } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
+import { dirname as dirname3, join as join6 } from "path";
 import { createInterface as createInterface4 } from "readline/promises";
 var UPDATE_CACHE_FILE = "update-check.json";
 var UPDATE_CHECK_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -42268,11 +43081,11 @@ var DISABLE_UPDATE_NOTIFIER_ENV = "TRACECLI_DISABLE_UPDATE_NOTIFIER";
 var REGISTRY_URL_ENV = "TRACECLI_NPM_REGISTRY_URL";
 var noticePrinted = false;
 function getUpdateCheckCachePath() {
-  return join5(getTraceDir(), UPDATE_CACHE_FILE);
+  return join6(getTraceDir(), UPDATE_CACHE_FILE);
 }
 function readUpdateCheckCache() {
   const cachePath = getUpdateCheckCachePath();
-  if (!existsSync3(cachePath)) {
+  if (!existsSync4(cachePath)) {
     return null;
   }
   try {
@@ -42295,7 +43108,7 @@ function readUpdateCheckCache() {
 }
 function writeUpdateCheckCache(cache) {
   const cachePath = getUpdateCheckCachePath();
-  mkdirSync3(dirname2(cachePath), { recursive: true, mode: 448 });
+  mkdirSync3(dirname3(cachePath), { recursive: true, mode: 448 });
   writeFileSync4(cachePath, `${JSON.stringify(cache, null, 2)}
 `, {
     encoding: "utf-8",
@@ -42319,11 +43132,11 @@ function parseSemver(version2) {
   const prerelease = match[4] ? match[4].split(".") : [];
   return { major, minor, patch, prerelease };
 }
-function comparePrerelease(a, b2) {
-  const maxLength = Math.max(a.length, b2.length);
+function comparePrerelease(a2, b) {
+  const maxLength = Math.max(a2.length, b.length);
   for (let index = 0; index < maxLength; index += 1) {
-    const aPart = a[index];
-    const bPart = b2[index];
+    const aPart = a2[index];
+    const bPart = b[index];
     if (aPart === void 0 && bPart === void 0) {
       return 0;
     }
@@ -42355,9 +43168,9 @@ function comparePrerelease(a, b2) {
   }
   return 0;
 }
-function compareSemver(a, b2) {
-  const aSemver = parseSemver(a);
-  const bSemver = parseSemver(b2);
+function compareSemver(a2, b) {
+  const aSemver = parseSemver(a2);
+  const bSemver = parseSemver(b);
   if (!aSemver || !bSemver) {
     return null;
   }
@@ -42541,11 +43354,11 @@ async function maybeNotifyUpdateAvailable(commandName) {
     `A new tracecli version is available: ${availability.currentVersion} -> ${availability.latestVersion}`,
     "Run `tracecli upgrade` to install the latest version."
   ];
-  const maxLen = Math.max(...lines.map((l) => l.length));
+  const maxLen = Math.max(...lines.map((l2) => l2.length));
   const pad = (s) => s + " ".repeat(maxLen - s.length);
   const top = `\u256D${"\u2500".repeat(maxLen + 2)}\u256E`;
   const bottom = `\u2570${"\u2500".repeat(maxLen + 2)}\u256F`;
-  const boxed = [top, ...lines.map((l) => `\u2502 ${pad(l)} \u2502`), bottom].join("\n");
+  const boxed = [top, ...lines.map((l2) => `\u2502 ${pad(l2)} \u2502`), bottom].join("\n");
   console.log("");
   console.log(colorMuted(boxed));
   console.log("");
@@ -42684,8 +43497,8 @@ async function resolveRepositoryIdAuthenticated(organizationId, repoIdentifier)
   const repos = result.body;
   const isBareNameOnly = !repoIdentifier.includes("/") && !repoIdentifier.startsWith("http");
   if (!isBareNameOnly) {
-    const match = repos.find((r) => {
-      const url2 = r.repositoryUrl;
+    const match = repos.find((r2) => {
+      const url2 = r2.repositoryUrl;
       if (url2.endsWith(`/${repoIdentifier}`)) return true;
       if (url2.endsWith(`/${repoIdentifier}.git`)) return true;
       if (url2 === repoIdentifier) return true;
@@ -42695,8 +43508,8 @@ async function resolveRepositoryIdAuthenticated(organizationId, repoIdentifier)
       return match.repositoryId;
     }
   }
-  const byName = repos.filter((r) => {
-    const segments = r.repositoryUrl.replace(/\.git$/, "").split("/");
+  const byName = repos.filter((r2) => {
+    const segments = r2.repositoryUrl.replace(/\.git$/, "").split("/");
     const name = segments[segments.length - 1];
     return name === repoIdentifier;
   });
@@ -42706,7 +43519,7 @@ async function resolveRepositoryIdAuthenticated(organizationId, repoIdentifier)
   if (byName.length > 1) {
     console.error(
       `Ambiguous repository name '${repoIdentifier}'. Multiple matches found:
-${byName.map((r) => `  - ${r.repositoryUrl}`).join("\n")}
+${byName.map((r2) => `  - ${r2.repositoryUrl}`).join("\n")}
 Please use the full owner/repo format.`
     );
     process.exit(1);
@@ -42747,7 +43560,7 @@ function renderVulnerabilityLines(vuln) {
 }
 function sortVulnerabilitiesBySeverity(vulnerabilities) {
   return [...vulnerabilities].sort(
-    (a, b2) => (SEVERITY_ORDER[a.severity] ?? 99) - (SEVERITY_ORDER[b2.severity] ?? 99)
+    (a2, b) => (SEVERITY_ORDER[a2.severity] ?? 99) - (SEVERITY_ORDER[b.severity] ?? 99)
   );
 }
 function sanitizeTsvField(value) {
@@ -42755,7 +43568,7 @@ function sanitizeTsvField(value) {
 }
 function printVulnerabilitiesTsv(vulnerabilities) {
   const sorted = [...vulnerabilities].sort(
-    (a, b2) => (SEVERITY_ORDER[a.severity] ?? 99) - (SEVERITY_ORDER[b2.severity] ?? 99)
+    (a2, b) => (SEVERITY_ORDER[a2.severity] ?? 99) - (SEVERITY_ORDER[b.severity] ?? 99)
   );
   console.log("severity	status	repository	file	line	traceId	title");
   for (const vuln of sorted) {
@@ -42887,12 +43700,12 @@ function createListCommand7() {
   ).option(
     "-L, --limit <n>",
     `Max results to return (default: ${DEFAULT_LIMIT3}, max: ${MAX_LIMIT3})`,
-    (v2) => {
-      const n = Number.parseInt(v2, 10);
-      if (Number.isNaN(n) || n < 1) {
+    (v) => {
+      const n3 = Number.parseInt(v, 10);
+      if (Number.isNaN(n3) || n3 < 1) {
         throw new Error("--limit must be a positive integer");
       }
-      return Math.min(n, MAX_LIMIT3);
+      return Math.min(n3, MAX_LIMIT3);
     }
   ).option(
     "-f, --filter <expression>",