vercel 58.10.0 → 58.11.0

package/dist/commands-bulk.js

@@ -37,7 +37,7 @@ import {
   runInteractiveEditLoop,
   stripQuotes,
   validateActionFlags
-} from "./chunks/chunk-AZCZV4XI.js";
+} from "./chunks/chunk-57E3RXRP.js";
 import {
   getRouteVersions
 } from "./chunks/chunk-AHU7WNL2.js";
@@ -57,7 +57,7 @@ import {
   requireProjectContext,
   validateRequiredArguments,
   withGlobalFlags as withGlobalFlags2
-} from "./chunks/chunk-BZGIBXY6.js";
+} from "./chunks/chunk-EPETZ7OW.js";
 import {
   canPrompt
 } from "./chunks/chunk-2473DUBR.js";
@@ -96,7 +96,6 @@ import {
   isLinkedToPrBuild,
   listAvailableVersions,
   listInstalledVersions,
-  login,
   parsePrTarget,
   require_tar_fs,
   resolveOpenApiTagForProjectsCli,
@@ -104,12 +103,12 @@ import {
   setAutoUpdate,
   setPinnedVersion,
   tryOpenApiFallback
-} from "./chunks/chunk-H25BISPQ.js";
+} from "./chunks/chunk-74IYXJ5O.js";
 import "./chunks/chunk-FGDKMNEN.js";
 import {
   getUpdateCommand,
   isGlobal
-} from "./chunks/chunk-NDOZRKTB.js";
+} from "./chunks/chunk-UEBYWLPO.js";
 import {
   Now,
   addDomain,
@@ -130,17 +129,19 @@ import {
   require_cjs,
   require_jsonlines,
   setupDomain
-} from "./chunks/chunk-L6BFCLXF.js";
+} from "./chunks/chunk-2XR3IS42.js";
 import {
   require_format
 } from "./chunks/chunk-PRWJUY5U.js";
-import "./chunks/chunk-I2XE3GMB.js";
+import {
+  login
+} from "./chunks/chunk-IM56DJEQ.js";
 import {
   persistAuthConfig,
   readLocalConfig,
   sleep,
   writeToConfigFile
-} from "./chunks/chunk-MAZ2BUBX.js";
+} from "./chunks/chunk-A7HDIKC2.js";
 import {
   getGlobalPathConfig
 } from "./chunks/chunk-JKQWQA2T.js";
@@ -158,7 +159,9 @@ import {
 import {
   formatTable
 } from "./chunks/chunk-JLWQWYKO.js";
-import "./chunks/chunk-RQ7H43CJ.js";
+import {
+  truncateEnd
+} from "./chunks/chunk-RQ7H43CJ.js";
 import "./chunks/chunk-XBN2O34P.js";
 import {
   getPaginationOpts,
@@ -170,7 +173,7 @@ import {
 import {
   formatEnvironment,
   validateLsArgs
-} from "./chunks/chunk-TNKTZDOL.js";
+} from "./chunks/chunk-MX5JRP6N.js";
 import {
   validateJsonOutput
 } from "./chunks/chunk-KXDWXXJH.js";
@@ -233,6 +236,7 @@ import {
   categoriesSubcommand,
   certsCommand,
   checkSubcommand,
+  checkSubcommand2,
   checksAddFlags,
   checksRemoveFlags,
   checksSubcommand,
@@ -431,6 +435,7 @@ import {
   sdkKeysRemoveSubcommand,
   sdkKeysSubcommand,
   searchSubcommand,
+  securityCommand,
   segmentsCreateSubcommand,
   segmentsInspectSubcommand,
   segmentsListSubcommand,
@@ -487,7 +492,7 @@ import {
   webAnalyticsSubcommand,
   webhooksCommand,
   whoamiCommand
-} from "./chunks/chunk-CLUCO4RD.js";
+} from "./chunks/chunk-Z3FO2ZSH.js";
 import {
   addSubcommand as addSubcommand12,
   buildSubcommand,
@@ -573,11 +578,11 @@ import {
   dump,
   load,
   main
-} from "./chunks/chunk-UDHYVIJL.js";
+} from "./chunks/chunk-D7MYUPY7.js";
 import {
   require_semver
 } from "./chunks/chunk-IB5L4LKZ.js";
-import "./chunks/chunk-5MERQE7H.js";
+import "./chunks/chunk-LM5S2YN4.js";
 import {
   require_execa
 } from "./chunks/chunk-R6IGDGX3.js";
@@ -592,10 +597,10 @@ import {
 } from "./chunks/chunk-VXYGCOKL.js";
 import {
   ensureLink
-} from "./chunks/chunk-KUZCVMVA.js";
-import "./chunks/chunk-6SXIT6Q3.js";
-import "./chunks/chunk-MGCBTAA7.js";
-import "./chunks/chunk-2SEBBSKD.js";
+} from "./chunks/chunk-J2WXMIAP.js";
+import "./chunks/chunk-EVB35IJS.js";
+import "./chunks/chunk-COTEMB2F.js";
+import "./chunks/chunk-EN2JH6AK.js";
 import {
   help
 } from "./chunks/chunk-ZX2FSPWV.js";
@@ -654,7 +659,7 @@ import {
   selectOrg,
   toHost,
   ua_default
-} from "./chunks/chunk-IBIZT5M4.js";
+} from "./chunks/chunk-6FUU7WW5.js";
 import {
   TelemetryClient
 } from "./chunks/chunk-ECCWJHC6.js";
@@ -2156,7 +2161,7 @@ async function activity(client) {
         return 0;
       }
       telemetry2.trackCliSubcommandLs(subcommandOriginal);
-      const listFn = (await import("./chunks/list-EOG3TYBE.js")).default;
+      const listFn = (await import("./chunks/list-GPQI2LGO.js")).default;
       return listFn(client, telemetry2);
     }
   }
@@ -9000,17 +9005,17 @@ ${extra}` : helpOutput);
   switch (subcommand) {
     case "inspect": {
       telemetry2.trackCliSubcommandInspect(subcommandOriginal);
-      const inspectFn = (await import("./chunks/inspect-HHSDXTII.js")).default;
+      const inspectFn = (await import("./chunks/inspect-ZKZG7MCO.js")).default;
       return inspectFn(client, rawSubcommandArgs);
     }
     case "rules": {
       telemetry2.trackCliSubcommandRules(args[0] ?? "ls");
-      const rulesFn = (await import("./chunks/rules-J5JM5VFQ.js")).default;
+      const rulesFn = (await import("./chunks/rules-QOZAWHUO.js")).default;
       return rulesFn(client, rawSubcommandArgs);
     }
     default: {
       telemetry2.trackCliSubcommandLs(subcommandOriginal);
-      const listFn = (await import("./chunks/list-A74MGEOB.js")).default;
+      const listFn = (await import("./chunks/list-2PB3N6FM.js")).default;
       return listFn(client, telemetry2);
     }
   }
@@ -14618,43 +14623,43 @@ async function comments(client) {
       if (handleHelp(inspectSubcommand4))
         return 0;
       telemetry2.trackCliSubcommandInspect(subcommandOriginal);
-      return (await import("./chunks/inspect-EM34BOTE.js")).default(client, telemetry2);
+      return (await import("./chunks/inspect-NLWTMJHW.js")).default(client, telemetry2);
     }
     case "open": {
       if (handleHelp(openSubcommand))
         return 0;
       telemetry2.trackCliSubcommandOpen(subcommandOriginal);
-      return (await import("./chunks/open-FHER5QV2.js")).default(client, telemetry2);
+      return (await import("./chunks/open-4XQWNZQD.js")).default(client, telemetry2);
     }
     case "reply": {
       if (handleHelp(replySubcommand))
         return 0;
       telemetry2.trackCliSubcommandReply(subcommandOriginal);
-      return (await import("./chunks/reply-B2XCK5XR.js")).default(client, telemetry2);
+      return (await import("./chunks/reply-4YEXMUWH.js")).default(client, telemetry2);
     }
     case "resolve": {
       if (handleHelp(resolveSubcommand))
         return 0;
       telemetry2.trackCliSubcommandResolve(subcommandOriginal);
-      return (await import("./chunks/resolve-YQP5C2QY.js")).default(client, telemetry2, true);
+      return (await import("./chunks/resolve-GZ4KXDU6.js")).default(client, telemetry2, true);
     }
     case "reopen": {
       if (handleHelp(reopenSubcommand))
         return 0;
       telemetry2.trackCliSubcommandReopen(subcommandOriginal);
-      return (await import("./chunks/resolve-YQP5C2QY.js")).default(client, telemetry2, false);
+      return (await import("./chunks/resolve-GZ4KXDU6.js")).default(client, telemetry2, false);
     }
     case "edit": {
       if (handleHelp(editSubcommand))
         return 0;
       telemetry2.trackCliSubcommandEdit(subcommandOriginal);
-      return (await import("./chunks/edit-TZOCRGG6.js")).default(client, telemetry2);
+      return (await import("./chunks/edit-ABJN6BMR.js")).default(client, telemetry2);
     }
     case "delete": {
       if (handleHelp(deleteSubcommand))
         return 0;
       telemetry2.trackCliSubcommandDelete(subcommandOriginal);
-      return (await import("./chunks/delete-OGP3RVWM.js")).default(client, telemetry2);
+      return (await import("./chunks/delete-NFNYQ7LC.js")).default(client, telemetry2);
     }
     default: {
       if (needHelp) {
@@ -14670,7 +14675,7 @@ async function comments(client) {
       }
       telemetry2.trackCliSubcommandList(subcommandOriginal);
       const defaultInvocation = subcommandOriginal === "default";
-      return (await import("./chunks/list-GQDUIRBU.js")).default(
+      return (await import("./chunks/list-ZUFB2CIS.js")).default(
         client,
         telemetry2,
         defaultInvocation
@@ -54157,7 +54162,7 @@ async function metrics(client) {
         return 0;
       }
       telemetry2.trackCliSubcommandSchema(subcommandOriginal);
-      const schemaFn = (await import("./chunks/schema-OIKSCLDU.js")).default;
+      const schemaFn = (await import("./chunks/schema-YJDZ6EOC.js")).default;
       return schemaFn(client, telemetry2);
     }
     default: {
@@ -54170,7 +54175,7 @@ async function metrics(client) {
         output_manager_default.print(help(metricsCommand, { columns: client.stderr.columns }));
         return 2;
       }
-      const queryFn = (await import("./chunks/query-5GQLF2BR.js")).default;
+      const queryFn = (await import("./chunks/query-HXMR364K.js")).default;
       return queryFn(client, telemetry2);
     }
   }
@@ -64872,7 +64877,7 @@ async function main26(client) {
         return 2;
       }
       telemetry2.trackCliSubcommandEdit(subcommandOriginal);
-      return (await import("./chunks/edit-NXPQFWM6.js")).default(client, args);
+      return (await import("./chunks/edit-RIY7SWIR.js")).default(client, args);
     case "delete":
       if (needHelp) {
         telemetry2.trackCliFlagHelp("routes", subcommandOriginal);
@@ -64880,7 +64885,7 @@ async function main26(client) {
         return 2;
       }
       telemetry2.trackCliSubcommandDelete(subcommandOriginal);
-      return (await import("./chunks/delete-HQMI44SG.js")).default(client, args);
+      return (await import("./chunks/delete-RZ2SVQK6.js")).default(client, args);
     case "enable":
       if (needHelp) {
         telemetry2.trackCliFlagHelp("routes", subcommandOriginal);
@@ -64888,7 +64893,7 @@ async function main26(client) {
         return 2;
       }
       telemetry2.trackCliSubcommandEnable(subcommandOriginal);
-      return (await import("./chunks/enable-OGFRN4CG.js")).default(client, args);
+      return (await import("./chunks/enable-JWPKENHY.js")).default(client, args);
     case "disable":
       if (needHelp) {
         telemetry2.trackCliFlagHelp("routes", subcommandOriginal);
@@ -64896,7 +64901,7 @@ async function main26(client) {
         return 2;
       }
       telemetry2.trackCliSubcommandDisable(subcommandOriginal);
-      return (await import("./chunks/disable-HC266OB7.js")).default(client, args);
+      return (await import("./chunks/disable-DZ7DCWEI.js")).default(client, args);
     case "reorder":
       if (needHelp) {
         telemetry2.trackCliFlagHelp("routes", subcommandOriginal);
@@ -64904,7 +64909,7 @@ async function main26(client) {
         return 2;
       }
       telemetry2.trackCliSubcommandReorder(subcommandOriginal);
-      return (await import("./chunks/reorder-5GCNY75W.js")).default(client, args);
+      return (await import("./chunks/reorder-VE2PRU24.js")).default(client, args);
     case "export":
       if (needHelp) {
         telemetry2.trackCliFlagHelp("routes", subcommandOriginal);
@@ -64912,7 +64917,7 @@ async function main26(client) {
         return 2;
       }
       telemetry2.trackCliSubcommandExport(subcommandOriginal);
-      return (await import("./chunks/export-AEESZFZX.js")).default(client, args);
+      return (await import("./chunks/export-6IDA3TWA.js")).default(client, args);
     case "publish":
       if (needHelp) {
         telemetry2.trackCliFlagHelp("routes", subcommandOriginal);
@@ -64920,7 +64925,7 @@ async function main26(client) {
         return 2;
       }
       telemetry2.trackCliSubcommandPublish(subcommandOriginal);
-      return (await import("./chunks/publish-CM6ZGWIE.js")).default(client, args);
+      return (await import("./chunks/publish-TVZGIZRP.js")).default(client, args);
     case "restore":
       if (needHelp) {
         telemetry2.trackCliFlagHelp("routes", subcommandOriginal);
@@ -64928,7 +64933,7 @@ async function main26(client) {
         return 2;
       }
       telemetry2.trackCliSubcommandRestore(subcommandOriginal);
-      return (await import("./chunks/restore-VHX4JV5J.js")).default(client, args);
+      return (await import("./chunks/restore-ZY3IJ4S3.js")).default(client, args);
     case "discard-staging":
       if (needHelp) {
         telemetry2.trackCliFlagHelp("routes", subcommandOriginal);
@@ -64936,7 +64941,7 @@ async function main26(client) {
         return 2;
       }
       telemetry2.trackCliSubcommandDiscardStaging(subcommandOriginal);
-      return (await import("./chunks/discard-3RFIPLXY.js")).default(client, args);
+      return (await import("./chunks/discard-VZ5QNL7B.js")).default(client, args);
     default:
       output_manager_default.error(getInvalidSubcommand(COMMAND_CONFIG45));
       output_manager_default.print(help(routesCommand, { columns: client.stderr.columns }));
@@ -65006,8 +65011,398 @@ async function sandbox(client) {
   }
 }
 
-// src/commands/skills/index.ts
+// src/util/telemetry/commands/security/index.ts
+var SecurityTelemetryClient = class extends TelemetryClient {
+  trackCliSubcommandCheck(actual) {
+    this.trackCliSubcommand({
+      subcommand: "check",
+      value: actual
+    });
+  }
+};
+
+// src/commands/security/check.ts
 var import_chalk229 = __toESM(require_source(), 1);
+
+// src/util/telemetry/commands/security/check.ts
+var SecurityCheckTelemetryClient = class extends TelemetryClient {
+  trackCliArgumentCheck(checks2) {
+    if (checks2.length > 0) {
+      this.trackCliArgument({
+        arg: "check",
+        value: checks2.join(",")
+      });
+    }
+  }
+  trackCliFlagFindings(findings) {
+    if (findings) {
+      this.trackCliFlag("findings");
+    }
+  }
+  trackCliOptionLimit(limit) {
+    if (limit !== void 0) {
+      this.trackCliOption({
+        option: "limit",
+        value: String(limit)
+      });
+    }
+  }
+  trackCliOptionFormat(format3) {
+    if (format3) {
+      this.trackCliOption({
+        option: "format",
+        value: format3
+      });
+    }
+  }
+  trackCliFlagJson(json) {
+    if (json) {
+      this.trackCliFlag("json");
+    }
+  }
+};
+
+// src/commands/security/catalog.ts
+var SECURITY_CHECKS = [
+  {
+    slug: "members-no-mfa",
+    description: "Team members without multi-factor authentication",
+    risk: "high"
+  },
+  {
+    slug: "members-too-many-owners",
+    description: "Team owners to review",
+    risk: "high"
+  },
+  {
+    slug: "pats-no-expiration",
+    description: "PATs that never expire",
+    risk: "high"
+  },
+  {
+    slug: "env-vars-creds-instead-of-oidc",
+    description: "Long-lived credentials where OIDC is available",
+    risk: "high"
+  },
+  {
+    slug: "depl-no-git-fork-protection",
+    description: "Projects without Git fork deploy prevention",
+    risk: "high"
+  },
+  {
+    slug: "proj-no-preview-depl-protection",
+    description: "Projects without preview deployment protection",
+    risk: "high"
+  },
+  {
+    slug: "env-vars-non-sensitive",
+    description: "Environment variables not marked Sensitive",
+    risk: "medium"
+  },
+  {
+    slug: "env-vars-non-sensitive-stale",
+    description: "Environment variables older than 90 days",
+    risk: "medium"
+  },
+  {
+    slug: "env-vars-exposed-web-app-fwk",
+    description: "Environment variables exposed via web application framework",
+    risk: "medium"
+  }
+];
+function isKnownCheck(slug) {
+  return SECURITY_CHECKS.some((check3) => check3.slug === slug);
+}
+
+// src/commands/security/check.ts
+async function check2(client, argv) {
+  const telemetry2 = new SecurityCheckTelemetryClient({
+    opts: {
+      store: client.telemetryEventStore
+    }
+  });
+  let parsedArgs;
+  const flagsSpecification = getFlagsSpecification(checkSubcommand2.options);
+  try {
+    parsedArgs = parseArguments(argv, flagsSpecification);
+  } catch (error) {
+    printError(error);
+    return 1;
+  }
+  const { args: checks2, flags: opts } = parsedArgs;
+  const unknown = checks2.filter((slug) => !isKnownCheck(slug));
+  if (unknown.length > 0) {
+    const message = `Unknown check${unknown.length === 1 ? "" : "s"}: ${unknown.join(", ")}. Valid slugs: ${SECURITY_CHECKS.map((check3) => check3.slug).join(", ")}`;
+    outputAgentError(client, {
+      status: "error",
+      reason: AGENT_REASON.INVALID_ARGUMENTS,
+      message,
+      next: [
+        {
+          command: buildCommandWithGlobalFlags(
+            client.argv,
+            "security check <slug>"
+          ),
+          when: "Re-run with a valid check slug (replace placeholder)"
+        },
+        {
+          command: buildCommandWithGlobalFlags(
+            client.argv,
+            "security check --help"
+          ),
+          when: "See all flags and examples"
+        }
+      ]
+    });
+    output_manager_default.error(
+      `Unknown check${unknown.length === 1 ? "" : "s"}: ${unknown.join(", ")}. Valid slugs:
+  ${SECURITY_CHECKS.map((check3) => check3.slug).join("\n  ")}`
+    );
+    return 1;
+  }
+  const limit = opts["--limit"];
+  if (limit !== void 0 && (!Number.isInteger(limit) || limit < 1)) {
+    outputAgentError(client, {
+      status: "error",
+      reason: AGENT_REASON.INVALID_ARGUMENTS,
+      message: "`--limit` must be a positive integer.",
+      next: [
+        {
+          command: buildCommandWithGlobalFlags(
+            client.argv,
+            "security check --limit <N>"
+          ),
+          when: "Re-run with a positive integer (replace placeholder)"
+        }
+      ]
+    });
+    output_manager_default.error("`--limit` must be a positive integer.");
+    return 1;
+  }
+  const formatResult = validateJsonOutput(opts);
+  if (!formatResult.valid) {
+    output_manager_default.error(formatResult.error);
+    return 1;
+  }
+  const asJson = formatResult.jsonOutput || client.nonInteractive;
+  telemetry2.trackCliArgumentCheck(checks2);
+  telemetry2.trackCliOptionFormat(opts["--format"]);
+  telemetry2.trackCliFlagFindings(opts["--findings"]);
+  telemetry2.trackCliOptionLimit(limit);
+  telemetry2.trackCliOptionProject(opts["--project"]);
+  telemetry2.trackCliFlagJson(opts["--json"]);
+  const { team, contextName } = await getScope(client);
+  if (!team) {
+    outputAgentError(client, {
+      status: "error",
+      reason: AGENT_REASON.MISSING_SCOPE,
+      message: "Security checks require a team scope. Run `vercel switch` to select a team.",
+      next: [
+        {
+          command: buildCommandWithGlobalFlags(client.argv, "whoami"),
+          when: "See current user and team"
+        },
+        {
+          command: buildCommandWithGlobalFlags(client.argv, "teams switch"),
+          when: "Switch to a team"
+        }
+      ]
+    });
+    output_manager_default.error(
+      `Security checks require a team scope. Run ${getCommandName("switch")} to select a team.`
+    );
+    return 1;
+  }
+  const params = new URLSearchParams({
+    teamId: team.id,
+    maxSamples: String(limit ?? 100)
+  });
+  for (const slug of checks2) {
+    params.append("facets", slug);
+  }
+  const project = opts["--project"];
+  if (project) {
+    params.set("projectIdOrName", project);
+  }
+  const dashStamp = stamp_default();
+  output_manager_default.spinner(
+    checks2.length > 0 ? "Computing security checks\u2026" : "Computing security report\u2026"
+  );
+  let data;
+  try {
+    data = await client.fetch(
+      `/dashboard/security-dashboard?${params}`
+    );
+  } catch (error) {
+    output_manager_default.stopSpinner();
+    const status4 = isAPIError(error) ? error.status : void 0;
+    outputAgentError(client, {
+      status: "error",
+      reason: status4 === 401 || status4 === 403 ? "not_authorized" : status4 === 429 ? "rate_limited" : AGENT_REASON.API_ERROR,
+      message: isAPIError(error) && error.serverMessage || "The security report request failed.",
+      next: [
+        {
+          command: buildCommandWithGlobalFlags(client.argv, "whoami"),
+          when: "Verify the authenticated user and team"
+        }
+      ]
+    });
+    printError(error);
+    return 1;
+  }
+  output_manager_default.stopSpinner();
+  if (asJson) {
+    client.stdout.write(`${JSON.stringify(data, null, 2)}
+`);
+    return 0;
+  }
+  const rows = SECURITY_CHECKS.filter(
+    (check3) => checks2.length === 0 || checks2.includes(check3.slug)
+  ).map((check3) => ({ check: check3, posture: data.report[check3.slug] }));
+  const counts = { failing: 0, passing: 0, muted: 0, unavailable: 0 };
+  for (const { posture } of rows) {
+    counts[statusOf(posture)]++;
+  }
+  const summary = [
+    `${rows.length} ${rows.length === 1 ? "check" : "checks"}`,
+    counts.failing > 0 && import_chalk229.default.red(`${counts.failing} failing`),
+    counts.muted > 0 && import_chalk229.default.yellow(`${counts.muted} muted`),
+    counts.unavailable > 0 && import_chalk229.default.gray(`${counts.unavailable} unavailable`),
+    counts.passing > 0 && import_chalk229.default.green(`${counts.passing} passing`)
+  ].filter(Boolean).join(" \xB7 ");
+  output_manager_default.log(
+    `${summary} under ${import_chalk229.default.bold(contextName)} ${import_chalk229.default.gray(dashStamp())}`
+  );
+  output_manager_default.print(formatSummaryTable(rows).replace(/^(.*)/gm, " $1"));
+  output_manager_default.print("\n");
+  const showFindings = Boolean(opts["--findings"]) || checks2.length > 0;
+  if (showFindings) {
+    for (const { check: check3, posture } of rows) {
+      printFindings(check3.slug, posture, data.mutes);
+    }
+  } else if (counts.failing > 0) {
+    output_manager_default.log("Run with --findings to list individual findings.");
+  }
+  return 0;
+}
+function statusOf(posture) {
+  if (!posture)
+    return "unavailable";
+  if (posture.unavailableReason === "muted")
+    return "muted";
+  if (posture.unavailable)
+    return "unavailable";
+  return posture.violationsCount > 0 ? "failing" : "passing";
+}
+function statusLabel(posture) {
+  const status4 = statusOf(posture);
+  if (status4 === "unavailable" && posture?.unavailableReason) {
+    return posture.unavailableReason === "insufficient-permissions" ? import_chalk229.default.gray("no access") : import_chalk229.default.gray("error");
+  }
+  return {
+    failing: import_chalk229.default.red("failing"),
+    passing: import_chalk229.default.green("passing"),
+    muted: import_chalk229.default.yellow("muted"),
+    unavailable: import_chalk229.default.gray("unavailable")
+  }[status4];
+}
+function violationsLabel(posture) {
+  if (!posture || posture.unavailable)
+    return import_chalk229.default.gray("\u2013");
+  return posture.truncated ? `${posture.violationsCount}+` : String(posture.violationsCount);
+}
+function formatSummaryTable(rows) {
+  return formatTable(
+    ["Check", "Risk", "Status", "Violations", "Muted", "Description"],
+    ["l", "l", "l", "r", "r", "l"],
+    [
+      {
+        rows: rows.map(({ check: check3, posture }) => [
+          import_chalk229.default.bold(check3.slug),
+          check3.risk === "high" ? import_chalk229.default.red("high") : import_chalk229.default.yellow("medium"),
+          statusLabel(posture),
+          violationsLabel(posture),
+          posture?.mutedCount ? String(posture.mutedCount) : import_chalk229.default.gray("\u2013"),
+          import_chalk229.default.gray(truncateEnd(check3.description, 60))
+        ])
+      }
+    ]
+  );
+}
+function flattenSamples(samples) {
+  return samples.flatMap(
+    (sample) => sample.samples ? sample.samples.map((sub) => `${sample.label} / ${sub.label}`) : [sample.label]
+  );
+}
+function printFindings(slug, posture, mutes) {
+  const findings = posture && !posture.unavailable ? flattenSamples(posture.samples) : [];
+  const mutedFindings = (mutes ?? []).filter((mute) => mute.facet === slug && mute.entityId).map((mute) => {
+    const label = mute.labelSnapshot?.label ?? mute.entityId ?? "";
+    const group = mute.labelSnapshot?.groupLabel;
+    return group ? `${group} / ${label}` : label;
+  });
+  if (findings.length === 0 && mutedFindings.length === 0) {
+    return;
+  }
+  output_manager_default.print(`
+ ${import_chalk229.default.bold(slug)}
+`);
+  for (const finding of findings) {
+    output_manager_default.print(`   ${finding}
+`);
+  }
+  for (const finding of mutedFindings.sort()) {
+    output_manager_default.print(`   ${import_chalk229.default.dim(`${finding} (muted)`)}
+`);
+  }
+  if (posture && posture.violationsCount > findings.length) {
+    output_manager_default.print(
+      `   ${import_chalk229.default.gray(`Showing ${findings.length} of ${posture.violationsCount}${posture.truncated ? "+" : ""} findings (raise with --limit)`)}
+`
+    );
+  }
+}
+
+// src/commands/security/index.ts
+var COMMAND_CONFIG46 = {
+  check: ["check"]
+};
+async function security(client) {
+  let parsedArgs;
+  const flagsSpecification = getFlagsSpecification(securityCommand.options);
+  try {
+    parsedArgs = parseArguments(client.argv.slice(2), flagsSpecification, {
+      permissive: true
+    });
+  } catch (error) {
+    printError(error);
+    return 1;
+  }
+  const telemetry2 = new SecurityTelemetryClient({
+    opts: {
+      store: client.telemetryEventStore
+    }
+  });
+  const { args, subcommandOriginal } = getSubcommand5(
+    parsedArgs.args.slice(1),
+    COMMAND_CONFIG46
+  );
+  if (parsedArgs.flags["--help"]) {
+    telemetry2.trackCliFlagHelp("security", subcommandOriginal);
+    output_manager_default.print(
+      help(checkSubcommand2, {
+        parent: securityCommand,
+        columns: client.stderr.columns
+      })
+    );
+    return 2;
+  }
+  telemetry2.trackCliSubcommandCheck(subcommandOriginal);
+  return check2(client, args);
+}
+
+// src/commands/skills/index.ts
+var import_chalk230 = __toESM(require_source(), 1);
 var import_frameworks3 = __toESM(require_frameworks(), 1);
 var import_fs_detectors = __toESM(require_dist3(), 1);
 import { access as access3, readFile as readFile9 } from "fs/promises";
@@ -65220,7 +65615,7 @@ async function autoDetect(client, cwd, asJson, yes) {
       "Could not detect a framework or notable dependencies in this directory."
     );
     output_manager_default.log(
-      `Try searching directly: ${import_chalk229.default.cyan("vercel skills <query>")}`
+      `Try searching directly: ${import_chalk230.default.cyan("vercel skills <query>")}`
     );
     return 0;
   }
@@ -65232,7 +65627,7 @@ async function autoDetect(client, cwd, asJson, yes) {
   if (deps.length > 0)
     detectedParts.push(deps.join(", "));
   output_manager_default.stopSpinner();
-  output_manager_default.log(`Detected: ${import_chalk229.default.bold(detectedParts.join(" + "))}`);
+  output_manager_default.log(`Detected: ${import_chalk230.default.bold(detectedParts.join(" + "))}`);
   output_manager_default.spinner("Searching for relevant skills...");
   const queries = [];
   if (framework) {
@@ -65298,7 +65693,7 @@ async function autoDetect(client, cwd, asJson, yes) {
     return exitCode2;
   const installable = displayedResults.map((s, i) => ({ ...s, installed: installedChecks[i] })).filter((s) => !s.installed);
   if (installable.length === 0) {
-    output_manager_default.log(import_chalk229.default.green("All recommended skills are already installed."));
+    output_manager_default.log(import_chalk230.default.green("All recommended skills are already installed."));
     return 0;
   }
   let toInstall;
@@ -65313,7 +65708,7 @@ async function autoDetect(client, cwd, asJson, yes) {
     const selected = await client.input.checkbox({
       message: "Select skills to install",
       choices: installable.map((s) => ({
-        name: `${s.skillId} ${import_chalk229.default.gray(`(${s.source})`)}`,
+        name: `${s.skillId} ${import_chalk230.default.gray(`(${s.source})`)}`,
         value: s,
         checked: true
       }))
@@ -65369,7 +65764,7 @@ async function displayResults(client, results, asJson, context, cwd) {
   if (results.length === 0) {
     output_manager_default.log("No skills found.");
     output_manager_default.log(
-      `Try searching directly: ${import_chalk229.default.cyan("vercel skills <query>")}`
+      `Try searching directly: ${import_chalk230.default.cyan("vercel skills <query>")}`
     );
     return empty;
   }
@@ -65389,12 +65784,12 @@ async function displayResults(client, results, asJson, context, cwd) {
     return { exitCode: 0, results, installedChecks };
   }
   const tableData = [
-    ["Skill", "Installs", "Source", ""].map((h) => import_chalk229.default.bold(import_chalk229.default.cyan(h))),
+    ["Skill", "Installs", "Source", ""].map((h) => import_chalk230.default.bold(import_chalk230.default.cyan(h))),
     ...results.map((s, i) => [
       s.skillId,
       formatInstalls(s.installs),
-      import_chalk229.default.gray(s.source),
-      installedChecks[i] ? import_chalk229.default.green("installed") : ""
+      import_chalk230.default.gray(s.source),
+      installedChecks[i] ? import_chalk230.default.green("installed") : ""
     ])
   ];
   output_manager_default.log(`
@@ -65413,16 +65808,16 @@ function runCommand(cmd2, args) {
 
 // src/commands/target/list.ts
 var import_ms35 = __toESM(require_ms(), 1);
-var import_chalk230 = __toESM(require_source(), 1);
+var import_chalk231 = __toESM(require_source(), 1);
 function formatBranchMatcher(branchMatcher) {
   if (branchMatcher?.type === "equals") {
     return branchMatcher.pattern;
   } else if (branchMatcher?.type === "startsWith") {
-    return `${branchMatcher.pattern}${import_chalk230.default.dim("*")}`;
+    return `${branchMatcher.pattern}${import_chalk231.default.dim("*")}`;
   } else if (branchMatcher?.type === "endsWith") {
-    return `${import_chalk230.default.dim("*")}${branchMatcher.pattern}`;
+    return `${import_chalk231.default.dim("*")}${branchMatcher.pattern}`;
   }
-  return import_chalk230.default.dim("No branch configuration");
+  return import_chalk231.default.dim("No branch configuration");
 }
 var TYPE_MAP = {
   production: "Production",
@@ -65431,8 +65826,8 @@ var TYPE_MAP = {
 };
 var BRANCH_TRACKING_MAP = {
   production: (project) => project.link?.productionBranch ?? "main",
-  preview: (_, env) => env.slug === "preview" ? import_chalk230.default.dim("All unassigned git branches") : formatBranchMatcher(env.branchMatcher),
-  development: () => import_chalk230.default.dim("Accessible via CLI")
+  preview: (_, env) => env.slug === "preview" ? import_chalk231.default.dim("All unassigned git branches") : formatBranchMatcher(env.branchMatcher),
+  development: () => import_chalk231.default.dim("Accessible via CLI")
 };
 async function list19(client, argv) {
   const { cwd } = client;
@@ -65505,12 +65900,12 @@ async function list19(client, argv) {
 `);
   } else {
     output_manager_default.log(
-      `${result.length} Environment${result.length === 1 ? "" : "s"} found under ${projectSlugLink} ${import_chalk230.default.gray(`[${elapsed2}]`)}`
+      `${result.length} Environment${result.length === 1 ? "" : "s"} found under ${projectSlugLink} ${import_chalk231.default.gray(`[${elapsed2}]`)}`
     );
     const tablePrint = table(
       [
         ["Target Name", "Branch Tracking", "Type", "Updated"].map(
-          (header) => import_chalk230.default.bold(import_chalk230.default.cyan(header))
+          (header) => import_chalk231.default.bold(import_chalk231.default.cyan(header))
         ),
         ...result.flatMap((target) => {
           return [
@@ -65518,7 +65913,7 @@ async function list19(client, argv) {
               formatEnvironment(link2.org.slug, link2.project.name, target),
               BRANCH_TRACKING_MAP[target.type](link2.project, target),
               TYPE_MAP[target.type],
-              import_chalk230.default.gray(
+              import_chalk231.default.gray(
                 target.updatedAt > 0 ? (0, import_ms35.default)(Date.now() - target.updatedAt) : "-"
               )
             ]
@@ -65578,7 +65973,7 @@ var TargetTelemetryClient = class extends TelemetryClient {
 };
 
 // src/commands/target/index.ts
-var COMMAND_CONFIG46 = {
+var COMMAND_CONFIG47 = {
   ls: getCommandAliases(listSubcommand18)
 };
 async function main27(client) {
@@ -65623,14 +66018,14 @@ async function main27(client) {
       telemetry2.trackCliSubcommandList(subcommand);
       return await list19(client, args);
     default:
-      output_manager_default.error(getInvalidSubcommand(COMMAND_CONFIG46));
+      output_manager_default.error(getInvalidSubcommand(COMMAND_CONFIG47));
       output_manager_default.print(help(targetCommand, { columns: client.stderr.columns }));
       return 2;
   }
 }
 
 // src/commands/teams/list.ts
-var import_chalk231 = __toESM(require_source(), 1);
+var import_chalk232 = __toESM(require_source(), 1);
 
 // src/util/telemetry/commands/teams/list.ts
 var TeamsListTelemetryClient = class extends TelemetryClient {
@@ -65790,7 +66185,7 @@ async function list20(client, argv) {
     client.stdout.write("\n");
     const teamTable = table(
       [
-        ["id", "Team name"].map((str) => (0, import_chalk231.gray)(str)),
+        ["id", "Team name"].map((str) => (0, import_chalk232.gray)(str)),
         ...teamList.map((team) => [team.value, team.name])
       ],
       { hsep: 5 }
@@ -65818,10 +66213,10 @@ async function list20(client, argv) {
 }
 
 // src/commands/teams/add.ts
-var import_chalk233 = __toESM(require_source(), 1);
+var import_chalk234 = __toESM(require_source(), 1);
 
 // src/commands/teams/invite.ts
-var import_chalk232 = __toESM(require_source(), 1);
+var import_chalk233 = __toESM(require_source(), 1);
 
 // src/util/input/regexes.ts
 var email = /.+@.+\..+$/;
@@ -65960,7 +66355,7 @@ Please select a team scope using ${getCommandName(
     return 1;
   }
   output_manager_default.log(
-    introMsg || `Inviting team members to ${import_chalk232.default.bold(currentTeam.name)}`
+    introMsg || `Inviting team members to ${import_chalk233.default.bold(currentTeam.name)}`
   );
   telemetry2.trackCliArgumentEmail(emails);
   if (emails.length > 0) {
@@ -66003,10 +66398,10 @@ Please select a team scope using ${getCommandName(
           throw err;
         }
         output_manager_default.log(
-          `${import_chalk232.default.cyan(chars_default.tick)} ${email3}${userInfo2 ? ` (${userInfo2})` : ""} ${elapsed2()}`
+          `${import_chalk233.default.cyan(chars_default.tick)} ${email3}${userInfo2 ? ` (${userInfo2})` : ""} ${elapsed2()}`
         );
       } else {
-        output_manager_default.log(`${import_chalk232.default.red(`\u2716 ${email3}`)} ${import_chalk232.default.gray("[invalid]")}`);
+        output_manager_default.log(`${import_chalk233.default.red(`\u2716 ${email3}`)} ${import_chalk233.default.gray("[invalid]")}`);
       }
     }
     return 0;
@@ -66039,15 +66434,15 @@ Please select a team scope using ${getCommandName(
         );
         email2 = `${email2}${username ? ` (${username})` : ""} ${elapsed2()}`;
         emails.push(email2);
-        output_manager_default.log(`${import_chalk232.default.cyan(chars_default.tick)} ${sentEmailPrefix}${email2}`);
+        output_manager_default.log(`${import_chalk233.default.cyan(chars_default.tick)} ${sentEmailPrefix}${email2}`);
         if (hasError) {
           hasError = false;
           process.stderr.write(eraseLines(emails.length + 2));
           output_manager_default.log(
-            introMsg || `Inviting team members to ${import_chalk232.default.bold(currentTeam.name)}`
+            introMsg || `Inviting team members to ${import_chalk233.default.bold(currentTeam.name)}`
           );
           for (const email3 of emails) {
-            output_manager_default.log(`${import_chalk232.default.cyan(chars_default.tick)} ${inviteUserPrefix}${email3}`);
+            output_manager_default.log(`${import_chalk233.default.cyan(chars_default.tick)} ${inviteUserPrefix}${email3}`);
           }
         }
       } catch (err) {
@@ -66056,7 +66451,7 @@ Please select a team scope using ${getCommandName(
         output_manager_default.error((0, import_error_utils20.errorToString)(err));
         hasError = true;
         for (const email3 of emails) {
-          output_manager_default.log(`${import_chalk232.default.cyan(chars_default.tick)} ${sentEmailPrefix}${email3}`);
+          output_manager_default.log(`${import_chalk233.default.cyan(chars_default.tick)} ${sentEmailPrefix}${email3}`);
         }
       }
     }
@@ -66069,7 +66464,7 @@ Please select a team scope using ${getCommandName(
   } else {
     output_manager_default.success(`Invited ${n} teammate${n > 1 ? "s" : ""}`);
     for (const email3 of emails) {
-      output_manager_default.log(`${import_chalk232.default.cyan(chars_default.tick)} ${inviteUserPrefix}${email3}`);
+      output_manager_default.log(`${import_chalk233.default.cyan(chars_default.tick)} ${inviteUserPrefix}${email3}`);
     }
   }
   return 0;
@@ -66109,7 +66504,7 @@ async function patchTeam(client, teamId, payload) {
 var import_error_utils21 = __toESM(require_dist(), 1);
 var validateSlug = (value) => /^[a-z]+[a-z0-9_-]*$/.test(value);
 var validateName = (value) => /^[ a-zA-Z0-9_-]+$/.test(value);
-var teamUrlPrefix = "Team URL".padEnd(14) + import_chalk233.default.gray("vercel.com/");
+var teamUrlPrefix = "Team URL".padEnd(14) + import_chalk234.default.gray("vercel.com/");
 var teamNamePrefix = "Team Name".padEnd(14);
 var CREATE_TEAM_TIMEOUT_MS = 3e4;
 var TIMEOUT_HINT = "The request took too long and was cancelled. The team URL may already be taken, or the server may be slow. Try a different slug (e.g. your-company-name) or try again later. Run with `--debug` to see where the request is getting stuck.";
@@ -66160,7 +66555,7 @@ function formatCreateTeamError(err, slug) {
   }
   if (isAPIError(err) && err.status === 400) {
     const msg = (err.serverMessage || err.message || "").toLowerCase();
-    const slugHint = msg.includes("slug") || msg.includes("cannot be used") ? `That team URL (${import_chalk233.default.cyan(`vercel.com/${slug}`)}) is not available. It may already be taken. ` : "";
+    const slugHint = msg.includes("slug") || msg.includes("cannot be used") ? `That team URL (${import_chalk234.default.cyan(`vercel.com/${slug}`)}) is not available. It may already be taken. ` : "";
     const paymentHint = msg.includes("payment") ? "A payment method is required to create a team. " : "";
     const prefix = slugHint || paymentHint;
     return prefix ? `${prefix}${prefix.trim() ? "\n" : ""}${err.serverMessage || err.message}` : err.serverMessage || err.message;
@@ -66355,7 +66750,7 @@ async function add12(client, argv = []) {
     client.config.currentTeam = team2.id;
     writeToConfigFile(client.config);
     output_manager_default.success(
-      `Team ${import_chalk233.default.bold(team2.name)} (${import_chalk233.default.cyan(`vercel.com/${slug2}`)}) created.`
+      `Team ${import_chalk234.default.bold(team2.name)} (${import_chalk234.default.cyan(`vercel.com/${slug2}`)}) created.`
     );
     return 0;
   }
@@ -66363,7 +66758,7 @@ async function add12(client, argv = []) {
   let team;
   let elapsed2;
   output_manager_default.log(
-    `Pick a team identifier for its URL (e.g.: ${import_chalk233.default.cyan(
+    `Pick a team identifier for its URL (e.g.: ${import_chalk234.default.cyan(
       "`vercel.com/acme`"
     )})`
   );
@@ -66395,7 +66790,7 @@ async function add12(client, argv = []) {
   output_manager_default.stopSpinner();
   process.stdout.write(eraseLines(2));
   output_manager_default.success(`Team created ${elapsed2()}`);
-  output_manager_default.log(`${import_chalk233.default.cyan(`${chars_default.tick} `) + teamUrlPrefix + slug}
+  output_manager_default.log(`${import_chalk234.default.cyan(`${chars_default.tick} `) + teamUrlPrefix + slug}
 `);
   output_manager_default.log("Pick a display name for your team");
   let name = nameFlag?.trim();
@@ -66419,7 +66814,7 @@ async function add12(client, argv = []) {
   process.stdout.write(eraseLines(2));
   team = Object.assign(team, res);
   output_manager_default.success(`Team name saved ${elapsed2()}`);
-  output_manager_default.log(`${import_chalk233.default.cyan(`${chars_default.tick} `) + teamNamePrefix + team.name}
+  output_manager_default.log(`${import_chalk234.default.cyan(`${chars_default.tick} `) + teamNamePrefix + team.name}
 `);
   output_manager_default.spinner("Saving");
   client.config.currentTeam = team.id;
@@ -66435,7 +66830,7 @@ async function add12(client, argv = []) {
 }
 
 // src/commands/teams/switch.ts
-var import_chalk234 = __toESM(require_source(), 1);
+var import_chalk235 = __toESM(require_source(), 1);
 
 // src/util/telemetry/commands/teams/switch.ts
 var TeamsSwitchTelemetryClient = class extends TelemetryClient {
@@ -66553,7 +66948,7 @@ async function change(client, argv) {
       let title6 = `${team.name} (${team.slug})`;
       const selected = team.id === currentTeam?.id;
       if (selected) {
-        title6 += ` ${import_chalk234.default.bold("(current)")}`;
+        title6 += ` ${import_chalk235.default.bold("(current)")}`;
       }
       if (team.limited) {
         title6 += ` ${emoji("locked")}`;
@@ -66565,7 +66960,7 @@ async function change(client, argv) {
         selected
       };
     });
-    let suffix = personalScopeSelected ? ` ${import_chalk234.default.bold("(current)")}` : "";
+    let suffix = personalScopeSelected ? ` ${import_chalk235.default.bold("(current)")}` : "";
     if (user.limited) {
       suffix += ` ${emoji("locked")}`;
     }
@@ -66655,7 +67050,7 @@ async function change(client, argv) {
     }
     updateCurrentTeam(config);
     output_manager_default.success(
-      `Your account (${import_chalk234.default.bold(user.username)}) is now active!`
+      `Your account (${import_chalk235.default.bold(user.username)}) is now active!`
     );
     await warnIfStaleLinkExists(client, user.id);
     return 0;
@@ -66679,7 +67074,7 @@ async function change(client, argv) {
       );
     }
     output_manager_default.error(
-      `You do not have permission to access scope ${import_chalk234.default.bold(desiredSlug)}.`
+      `You do not have permission to access scope ${import_chalk235.default.bold(desiredSlug)}.`
     );
     return 1;
   }
@@ -66697,7 +67092,7 @@ async function change(client, argv) {
   }
   updateCurrentTeam(config, newTeam);
   output_manager_default.success(
-    `The team ${import_chalk234.default.bold(newTeam.name)} (${newTeam.slug}) is now active!`
+    `The team ${import_chalk235.default.bold(newTeam.name)} (${newTeam.slug}) is now active!`
   );
   await warnIfStaleLinkExists(client, newTeam.id);
   return 0;
@@ -66887,7 +67282,7 @@ async function request(client, argv) {
 }
 
 // src/commands/teams/members.ts
-var import_chalk235 = __toESM(require_source(), 1);
+var import_chalk236 = __toESM(require_source(), 1);
 async function members2(client, argv) {
   let parsedArgs;
   const flagsSpecification = getFlagsSpecification(membersSubcommand2.options);
@@ -66950,7 +67345,7 @@ async function members2(client, argv) {
     return 0;
   }
   const rows = [
-    ["uid", "Identity", "Role"].map((str) => (0, import_chalk235.gray)(str)),
+    ["uid", "Identity", "Role"].map((str) => (0, import_chalk236.gray)(str)),
     ...members3.map((member) => [
       member.uid,
       member.username || member.email || "",
@@ -66968,7 +67363,7 @@ async function members2(client, argv) {
 }
 
 // src/commands/teams/sso.ts
-var import_chalk236 = __toESM(require_source(), 1);
+var import_chalk237 = __toESM(require_source(), 1);
 async function sso(client, argv) {
   let parsedArgs;
   const flagsSpecification = getFlagsSpecification(ssoSubcommand.options);
@@ -67003,14 +67398,14 @@ async function sso(client, argv) {
 `);
       return 0;
     }
-    output_manager_default.log(`${import_chalk236.default.bold("Team")} ${full.name} (${import_chalk236.default.cyan(full.slug)})`);
+    output_manager_default.log(`${import_chalk237.default.bold("Team")} ${full.name} (${import_chalk237.default.cyan(full.slug)})`);
     if (full.saml) {
       output_manager_default.log(
-        `${import_chalk236.default.cyan("SAML enforced:")} ${String(full.saml.enforced)}`
+        `${import_chalk237.default.cyan("SAML enforced:")} ${String(full.saml.enforced)}`
       );
       if (full.saml.connection?.state) {
         output_manager_default.log(
-          `${import_chalk236.default.cyan("Connection state:")} ${full.saml.connection.state}`
+          `${import_chalk237.default.cyan("Connection state:")} ${full.saml.connection.state}`
         );
       }
     } else {
@@ -67089,7 +67484,7 @@ var TeamsTelemetryClient = class extends TelemetryClient {
 };
 
 // src/commands/teams/index.ts
-var COMMAND_CONFIG47 = {
+var COMMAND_CONFIG48 = {
   list: ["ls", "list"],
   switch: ["switch", "change"],
   add: ["create", "add"],
@@ -67130,7 +67525,7 @@ async function teams(client) {
   }
   const { subcommand, args, subcommandOriginal } = getSubcommand5(
     parsedArgs.args.slice(1),
-    COMMAND_CONFIG47
+    COMMAND_CONFIG48
   );
   const needHelp = parsedArgs.flags["--help"];
   if (!subcommand && needHelp) {
@@ -67226,7 +67621,7 @@ async function teams(client) {
 }
 
 // src/commands/tokens/ls.ts
-var import_chalk237 = __toESM(require_source(), 1);
+var import_chalk238 = __toESM(require_source(), 1);
 async function ls8(client, argv) {
   let parsedArgs;
   const flagsSpecification = getFlagsSpecification(listSubcommand20.options);
@@ -67267,7 +67662,7 @@ async function ls8(client, argv) {
     return 0;
   }
   const rows = [
-    ["id", "name", "type", "active"].map((h) => (0, import_chalk237.gray)(h)),
+    ["id", "name", "type", "active"].map((h) => (0, import_chalk238.gray)(h)),
     ...tokens.map((t) => [
       t.id ?? "",
       t.name ?? "",
@@ -67562,7 +67957,7 @@ var TokensTelemetryClient = class extends TelemetryClient {
 };
 
 // src/commands/tokens/index.ts
-var COMMAND_CONFIG48 = {
+var COMMAND_CONFIG49 = {
   add: ["add", "create"],
   remove: ["rm", "remove", "delete"],
   ls: ["ls", "list"]
@@ -67585,7 +67980,7 @@ async function main28(client) {
   });
   const { subcommand, args, subcommandOriginal } = getSubcommand5(
     parsedArgs.args.slice(1),
-    COMMAND_CONFIG48
+    COMMAND_CONFIG49
   );
   const needHelp = parsedArgs.flags["--help"];
   if (!subcommand && needHelp) {
@@ -67625,16 +68020,16 @@ async function main28(client) {
 }
 
 // src/commands/telemetry/status.ts
-var import_chalk238 = __toESM(require_source(), 1);
+var import_chalk239 = __toESM(require_source(), 1);
 async function status2(client) {
   const enabled = client.config.telemetry?.enabled !== false;
-  const status4 = enabled ? import_chalk238.default.green("Enabled") : import_chalk238.default.red("Disabled");
+  const status4 = enabled ? import_chalk239.default.green("Enabled") : import_chalk239.default.red("Disabled");
   output_manager_default.print("\n");
-  output_manager_default.log(`${import_chalk238.default.bold("Telemetry status")}: ${status4}
+  output_manager_default.log(`${import_chalk239.default.bold("Telemetry status")}: ${status4}
 `);
   const learnMoreMessage = `
 
-Learn more: ${import_chalk238.default.cyan("https://vercel.com/docs/cli/about-telemetry")}`;
+Learn more: ${import_chalk239.default.cyan("https://vercel.com/docs/cli/about-telemetry")}`;
   if (enabled) {
     output_manager_default.log(`You have opted in to Vercel CLI telemetry${learnMoreMessage}`);
   } else {
@@ -67728,8 +68123,8 @@ var TelemetryTelemetryClient = class extends TelemetryClient {
 };
 
 // src/commands/telemetry/index.ts
-var import_chalk239 = __toESM(require_source(), 1);
-var COMMAND_CONFIG49 = {
+var import_chalk240 = __toESM(require_source(), 1);
+var COMMAND_CONFIG50 = {
   status: getCommandAliases(statusSubcommand4),
   enable: getCommandAliases(enableSubcommand4),
   disable: getCommandAliases(disableSubcommand4),
@@ -67751,7 +68146,7 @@ async function telemetry(client) {
   }
   const { subcommand, args, subcommandOriginal } = getSubcommand5(
     parsedArguments.args.slice(1),
-    COMMAND_CONFIG49
+    COMMAND_CONFIG50
   );
   const needHelp = parsedArguments.flags["--help"];
   function printHelp(command) {
@@ -67796,7 +68191,7 @@ async function telemetry(client) {
     default: {
       const errorMessage2 = parsedArguments.args.length !== 2 ? "Invalid number of arguments" : "Invalid subcommand";
       output_manager_default.print(
-        `${import_chalk239.default.red("Error")}: ${errorMessage2}. See help instructions for usage:
+        `${import_chalk240.default.red("Error")}: ${errorMessage2}. See help instructions for usage:
 `
       );
       output_manager_default.print(help(telemetryCommand, { columns: client.stderr.columns }));
@@ -68482,7 +68877,7 @@ async function get3(client, telemetry2) {
 }
 
 // src/commands/traces/index.ts
-var COMMAND_CONFIG50 = {
+var COMMAND_CONFIG51 = {
   get: getCommandAliases(getSubcommand2),
   create: getCommandAliases(createSubcommand5)
 };
@@ -68508,7 +68903,7 @@ async function traces(client) {
   }
   const { subcommand, subcommandOriginal } = getSubcommand5(
     parsedArgs.args.slice(1),
-    COMMAND_CONFIG50
+    COMMAND_CONFIG51
   );
   if (parsedArgs.flags["--help"]) {
     telemetry2.trackCliFlagHelp("traces", subcommandOriginal);
@@ -68663,7 +69058,7 @@ async function upgrade(client) {
 }
 
 // src/commands/version/index.ts
-var import_chalk242 = __toESM(require_source(), 1);
+var import_chalk243 = __toESM(require_source(), 1);
 
 // src/commands/version/status.ts
 async function status3(client) {
@@ -68716,7 +69111,7 @@ async function status3(client) {
 }
 
 // src/commands/version/list.ts
-var import_chalk240 = __toESM(require_source(), 1);
+var import_chalk241 = __toESM(require_source(), 1);
 var DEFAULT_COUNT = 20;
 async function list21() {
   output_manager_default.spinner("Fetching available versions\u2026", 0);
@@ -68739,23 +69134,23 @@ async function list21() {
   for (const version2 of shown) {
     const current = version2 === pkg_default.version;
     output_manager_default.print(
-      current ? `${import_chalk240.default.cyan(version2)} ${import_chalk240.default.dim("(current)")}
+      current ? `${import_chalk241.default.cyan(version2)} ${import_chalk241.default.dim("(current)")}
 ` : `${version2}
 `
     );
   }
   if (versions2.length > shown.length) {
-    output_manager_default.print(import_chalk240.default.dim(`\u2026 and ${versions2.length - shown.length} more
+    output_manager_default.print(import_chalk241.default.dim(`\u2026 and ${versions2.length - shown.length} more
 `));
   }
   return 0;
 }
 
 // src/commands/version/installed.ts
-var import_chalk241 = __toESM(require_source(), 1);
+var import_chalk242 = __toESM(require_source(), 1);
 async function installed() {
   if (!await isCurlInstall()) {
-    output_manager_default.print(`${pkg_default.version} ${import_chalk241.default.dim("(current)")}
+    output_manager_default.print(`${pkg_default.version} ${import_chalk242.default.dim("(current)")}
 `);
     output_manager_default.log(
       `This CLI is managed by a package manager, so only the current version is available. The recommended way to manage CLI versions is the installer: ${CURL_INSTALL_COMMAND}`
@@ -68779,7 +69174,7 @@ async function installed() {
     if (version2 === pinned)
       labels.push("pinned");
     output_manager_default.print(
-      active ? `${import_chalk241.default.cyan(version2)} ${import_chalk241.default.dim(`(${labels.join(", ")})`)}
+      active ? `${import_chalk242.default.cyan(version2)} ${import_chalk242.default.dim(`(${labels.join(", ")})`)}
 ` : `${version2}
 `
     );
@@ -68957,7 +69352,7 @@ var VersionTelemetryClient = class extends TelemetryClient {
 };
 
 // src/commands/version/index.ts
-var COMMAND_CONFIG51 = {
+var COMMAND_CONFIG52 = {
   list: getCommandAliases(listSubcommand22),
   installed: getCommandAliases(installedSubcommand),
   use: getCommandAliases(useSubcommand),
@@ -68980,7 +69375,7 @@ async function version(client) {
   }
   const { subcommand, args, subcommandOriginal } = getSubcommand5(
     parsedArguments.args.slice(1),
-    COMMAND_CONFIG51
+    COMMAND_CONFIG52
   );
   const needHelp = parsedArguments.flags["--help"];
   function printHelp(command) {
@@ -69040,7 +69435,7 @@ async function version(client) {
     default: {
       if (parsedArguments.args.length > 1) {
         output_manager_default.print(
-          `${import_chalk242.default.red("Error")}: Invalid subcommand. See help instructions for usage:
+          `${import_chalk243.default.red("Error")}: Invalid subcommand. See help instructions for usage:
 `
         );
         output_manager_default.print(help(versionCommand, { columns: client.stderr.columns }));
@@ -69052,7 +69447,7 @@ async function version(client) {
 }
 
 // src/commands/usage/index.ts
-var import_chalk246 = __toESM(require_source(), 1);
+var import_chalk247 = __toESM(require_source(), 1);
 var import_jsonlines = __toESM(require_jsonlines(), 1);
 
 // src/util/telemetry/commands/usage/index.ts
@@ -69206,19 +69601,19 @@ function isValidGroupByDimension(value) {
 }
 
 // src/commands/usage/output-aggregated.ts
-var import_chalk243 = __toESM(require_source(), 1);
+var import_chalk244 = __toESM(require_source(), 1);
 function outputAggregated({ data, startTime }) {
   const { print, log } = output_manager_default;
   log(
-    `Usage for ${import_chalk243.default.bold(data.contextName)} ${elapsed(Date.now() - startTime)}`
+    `Usage for ${import_chalk244.default.bold(data.contextName)} ${elapsed(Date.now() - startTime)}`
   );
   log("");
   const periodSuffix = data.usingDefaults ? " (current month)" : "";
   log(
-    `${import_chalk243.default.gray("Period:")} ${data.fromDisplay} to ${data.toDisplay}${periodSuffix}`
+    `${import_chalk244.default.gray("Period:")} ${data.fromDisplay} to ${data.toDisplay}${periodSuffix}`
   );
-  log(`${import_chalk243.default.gray("Charges processed:")} ${data.chargeCount}`);
-  log(`${import_chalk243.default.gray("Pricing unit:")} ${data.pricingUnit}`);
+  log(`${import_chalk244.default.gray("Charges processed:")} ${data.chargeCount}`);
+  log(`${import_chalk244.default.gray("Pricing unit:")} ${data.pricingUnit}`);
   log("");
   const sortedServices = [...data.services.entries()].sort(
     (a, b) => b[1].billedCost - a[1].billedCost
@@ -69236,15 +69631,15 @@ function outputAggregated({ data, startTime }) {
     formatCurrency(svc.billedCost)
   ]);
   rows.push([
-    import_chalk243.default.bold("Total"),
-    import_chalk243.default.bold(
+    import_chalk244.default.bold("Total"),
+    import_chalk244.default.bold(
       formatQuantity(data.grandTotals.pricingQuantity, data.pricingUnit)
     ),
-    import_chalk243.default.bold(formatCurrency(data.grandTotals.effectiveCost)),
-    import_chalk243.default.bold(formatCurrency(data.grandTotals.billedCost))
+    import_chalk244.default.bold(formatCurrency(data.grandTotals.effectiveCost)),
+    import_chalk244.default.bold(formatCurrency(data.grandTotals.billedCost))
   ]);
   const tablePrint = table(
-    [headers.map((h) => import_chalk243.default.bold(import_chalk243.default.cyan(h))), ...rows],
+    [headers.map((h) => import_chalk244.default.bold(import_chalk244.default.cyan(h))), ...rows],
     { hsep: 4, align: ["l", "r", "r", "r"] }
   ).replace(/^/gm, "  ");
   print(`
@@ -69252,12 +69647,12 @@ ${tablePrint}
 
 `);
   log(
-    `${import_chalk243.default.gray("Amount due:")} ${import_chalk243.default.bold(formatCurrency(data.grandTotals.billedCost))}`
+    `${import_chalk244.default.gray("Amount due:")} ${import_chalk244.default.bold(formatCurrency(data.grandTotals.billedCost))}`
   );
 }
 
 // src/commands/usage/output-breakdown.ts
-var import_chalk244 = __toESM(require_source(), 1);
+var import_chalk245 = __toESM(require_source(), 1);
 function getPeriodLabel(period) {
   switch (period) {
     case "daily":
@@ -69278,15 +69673,15 @@ function outputBreakdown({
   const { print, log } = output_manager_default;
   const periodLabel = getPeriodLabel(breakdownPeriod);
   log(
-    `${periodLabel} Usage for ${import_chalk244.default.bold(data.contextName)} ${elapsed(Date.now() - startTime)}`
+    `${periodLabel} Usage for ${import_chalk245.default.bold(data.contextName)} ${elapsed(Date.now() - startTime)}`
   );
   log("");
   const periodSuffix = data.usingDefaults ? " (current month)" : "";
   log(
-    `${import_chalk244.default.gray("Period:")} ${data.fromDisplay} to ${data.toDisplay}${periodSuffix}`
+    `${import_chalk245.default.gray("Period:")} ${data.fromDisplay} to ${data.toDisplay}${periodSuffix}`
   );
-  log(`${import_chalk244.default.gray("Charges processed:")} ${data.chargeCount}`);
-  log(`${import_chalk244.default.gray("Pricing unit:")} ${data.pricingUnit}`);
+  log(`${import_chalk245.default.gray("Charges processed:")} ${data.chargeCount}`);
+  log(`${import_chalk245.default.gray("Pricing unit:")} ${data.pricingUnit}`);
   log("");
   const sortedServices = [...data.services.entries()].sort(
     (a, b) => b[1].billedCost - a[1].billedCost
@@ -69303,7 +69698,7 @@ function outputBreakdown({
       (a, b) => b[1].billedCost - a[1].billedCost
     );
     log(
-      `${import_chalk244.default.bold(import_chalk244.default.cyan(periodKey))} (Total: ${formatQuantity(periodData.totalPricingQuantity, data.pricingUnit)}, ${formatCurrency(periodData.totalBilledCost)})`
+      `${import_chalk245.default.bold(import_chalk245.default.cyan(periodKey))} (Total: ${formatQuantity(periodData.totalPricingQuantity, data.pricingUnit)}, ${formatCurrency(periodData.totalBilledCost)})`
     );
     const headers = ["Service", quantityHeader, "Billed Cost"];
     const rows = sortedPeriodServices.map(([name, svc]) => [
@@ -69312,7 +69707,7 @@ function outputBreakdown({
       formatCurrency(svc.billedCost)
     ]);
     const tablePrint = table(
-      [headers.map((h) => import_chalk244.default.bold(import_chalk244.default.gray(h))), ...rows],
+      [headers.map((h) => import_chalk245.default.bold(import_chalk245.default.gray(h))), ...rows],
       { hsep: 4, align: ["l", "r", "r"] }
     ).replace(/^/gm, "  ");
     print(`${tablePrint}
@@ -69321,7 +69716,7 @@ function outputBreakdown({
 }
 
 // src/commands/usage/output-group-by.ts
-var import_chalk245 = __toESM(require_source(), 1);
+var import_chalk246 = __toESM(require_source(), 1);
 function getDimensionLabel(dimension) {
   switch (dimension) {
     case "project":
@@ -69340,15 +69735,15 @@ function outputGroupBy({
   const { print, log } = output_manager_default;
   const dimensionLabel = getDimensionLabel(groupByDimension);
   log(
-    `Usage by ${dimensionLabel} for ${import_chalk245.default.bold(data.contextName)} ${elapsed(Date.now() - startTime)}`
+    `Usage by ${dimensionLabel} for ${import_chalk246.default.bold(data.contextName)} ${elapsed(Date.now() - startTime)}`
   );
   log("");
   const periodSuffix = data.usingDefaults ? " (current month)" : "";
   log(
-    `${import_chalk245.default.gray("Period:")} ${data.fromDisplay} to ${data.toDisplay}${periodSuffix}`
+    `${import_chalk246.default.gray("Period:")} ${data.fromDisplay} to ${data.toDisplay}${periodSuffix}`
   );
-  log(`${import_chalk245.default.gray("Charges processed:")} ${data.chargeCount}`);
-  log(`${import_chalk245.default.gray("Pricing unit:")} ${data.pricingUnit}`);
+  log(`${import_chalk246.default.gray("Charges processed:")} ${data.chargeCount}`);
+  log(`${import_chalk246.default.gray("Pricing unit:")} ${data.pricingUnit}`);
   log("");
   const sortedGroups = [...data.groupByUsage.entries()].sort(
     (a, b) => b[1].totalBilledCost - a[1].totalBilledCost
@@ -69360,7 +69755,7 @@ function outputGroupBy({
   const quantityHeader = data.pricingUnit === "USD" ? "Usage (USD)" : data.pricingUnit;
   for (const [groupName, groupData] of sortedGroups) {
     log(
-      `${import_chalk245.default.bold(import_chalk245.default.cyan(groupName))} (Total: ${formatQuantity(groupData.totalPricingQuantity, data.pricingUnit)}, ${formatCurrency(groupData.totalBilledCost)})`
+      `${import_chalk246.default.bold(import_chalk246.default.cyan(groupName))} (Total: ${formatQuantity(groupData.totalPricingQuantity, data.pricingUnit)}, ${formatCurrency(groupData.totalBilledCost)})`
     );
     const sortedServices = [...groupData.services.entries()].sort(
       (a, b) => b[1].billedCost - a[1].billedCost
@@ -69372,7 +69767,7 @@ function outputGroupBy({
       formatCurrency(svc.billedCost)
     ]);
     const tablePrint = table(
-      [headers.map((h) => import_chalk245.default.bold(import_chalk245.default.gray(h))), ...rows],
+      [headers.map((h) => import_chalk246.default.bold(import_chalk246.default.gray(h))), ...rows],
       { hsep: 4, align: ["l", "r", "r"] }
     ).replace(/^/gm, "  ");
     print(`${tablePrint}
@@ -69380,7 +69775,7 @@ function outputGroupBy({
   }
   log("");
   log(
-    `${import_chalk245.default.gray("Amount due:")} ${import_chalk245.default.bold(formatCurrency(data.grandTotals.billedCost))}`
+    `${import_chalk246.default.gray("Amount due:")} ${import_chalk246.default.bold(formatCurrency(data.grandTotals.billedCost))}`
   );
 }
 
@@ -69577,7 +69972,7 @@ async function usage(client) {
   }
   const start = Date.now();
   if (!asJson) {
-    spinner(`Fetching usage data for ${import_chalk246.default.bold(contextName)}`);
+    spinner(`Fetching usage data for ${import_chalk247.default.bold(contextName)}`);
   }
   debug(`Fetching charges from ${fromDate} to ${toDate}`);
   const query = new URLSearchParams({
@@ -69921,7 +70316,7 @@ var VcrTelemetryClient = class extends TelemetryClient {
 };
 
 // src/commands/vcr/index.ts
-var COMMAND_CONFIG52 = {
+var COMMAND_CONFIG53 = {
   ls: getCommandAliases(listSubcommand21),
   inspect: getCommandAliases(inspectSubcommand10),
   add: getCommandAliases(addSubcommand12),
@@ -69952,7 +70347,7 @@ async function vcr(client) {
   }
   const { subcommand, args, subcommandOriginal } = getSubcommand5(
     parsedArgs.args.slice(1),
-    COMMAND_CONFIG52
+    COMMAND_CONFIG53
   );
   const needHelp = parsedArgs.flags["--help"];
   function printHelp(command) {
@@ -70067,39 +70462,39 @@ async function vcr(client) {
   switch (subcommand) {
     case "ls":
       telemetry2.trackCliSubcommandLs(subcommandOriginal);
-      return (await import("./chunks/ls-D5ESYWG5.js")).default(client, args, telemetry2);
+      return (await import("./chunks/ls-HCVYO3FF.js")).default(client, args, telemetry2);
     case "inspect":
       telemetry2.trackCliSubcommandInspect(subcommandOriginal);
-      return (await import("./chunks/inspect-TTHC6L7Q.js")).default(client, args, telemetry2);
+      return (await import("./chunks/inspect-Z6VNNFFK.js")).default(client, args, telemetry2);
     case "add":
       telemetry2.trackCliSubcommandAdd(subcommandOriginal);
-      return (await import("./chunks/add-NMYLVDBN.js")).default(client, args, telemetry2);
+      return (await import("./chunks/add-LLXXGWJZ.js")).default(client, args, telemetry2);
     case "config":
       telemetry2.trackCliSubcommandConfig(subcommandOriginal);
-      return (await import("./chunks/config-WXQTPQW7.js")).default(client, args, telemetry2);
+      return (await import("./chunks/config-WYUTVPPF.js")).default(client, args, telemetry2);
     case "rm":
       telemetry2.trackCliSubcommandRm(subcommandOriginal);
-      return (await import("./chunks/rm-OILUGCTW.js")).default(client, args, telemetry2);
+      return (await import("./chunks/rm-Y6OROWNK.js")).default(client, args, telemetry2);
     case "login":
       telemetry2.trackCliSubcommandLogin(subcommandOriginal);
-      return (await import("./chunks/login-L4EWZOGH.js")).default(client, args, telemetry2);
+      return (await import("./chunks/login-GTZWDE5T.js")).default(client, args, telemetry2);
     case "build":
       telemetry2.trackCliSubcommandBuild(subcommandOriginal);
-      return (await import("./chunks/build-BCMSG7TU.js")).default(client, telemetry2);
+      return (await import("./chunks/build-6DPTFQKH.js")).default(client, telemetry2);
     case "push":
       telemetry2.trackCliSubcommandPush(subcommandOriginal);
-      return (await import("./chunks/push-5NYG7HIR.js")).default(client, telemetry2);
+      return (await import("./chunks/push-EJZHZC4Z.js")).default(client, telemetry2);
     case "tag":
       telemetry2.trackCliSubcommandTag(subcommandOriginal);
-      return (await import("./chunks/tags-AMTMNRLQ.js")).default(client, args, telemetry2);
+      return (await import("./chunks/tags-67LC7TV4.js")).default(client, args, telemetry2);
     case "image":
       telemetry2.trackCliSubcommandImage(subcommandOriginal);
-      return (await import("./chunks/image-EIAO7LVN.js")).default(client, args, telemetry2);
+      return (await import("./chunks/image-DM4ZNQOL.js")).default(client, args, telemetry2);
     case "permissions":
       telemetry2.trackCliSubcommandPermissions(subcommandOriginal);
-      return (await import("./chunks/permissions-JSXC7BRD.js")).default(client, args, telemetry2);
+      return (await import("./chunks/permissions-BJBEONBS.js")).default(client, args, telemetry2);
     default:
-      output_manager_default.error(getInvalidSubcommand(COMMAND_CONFIG52));
+      output_manager_default.error(getInvalidSubcommand(COMMAND_CONFIG53));
       output_manager_default.print(help(vcrCommand, { columns: client.stderr.columns }));
       return 2;
   }
@@ -70107,7 +70502,7 @@ async function vcr(client) {
 
 // src/commands/webhooks/ls.ts
 var import_ms36 = __toESM(require_ms(), 1);
-var import_chalk247 = __toESM(require_source(), 1);
+var import_chalk248 = __toESM(require_source(), 1);
 var import_pluralize16 = __toESM(require_pluralize(), 1);
 
 // src/util/webhooks/get-webhooks.ts
@@ -70171,7 +70566,7 @@ async function ls9(client, argv) {
   const { contextName } = await getScope(client);
   const lsStamp = stamp_default();
   if (!client.nonInteractive) {
-    output_manager_default.spinner(`Fetching Webhooks under ${import_chalk247.default.bold(contextName)}`);
+    output_manager_default.spinner(`Fetching Webhooks under ${import_chalk248.default.bold(contextName)}`);
   }
   const { webhooks } = await getWebhooks(client);
   if (asJson) {
@@ -70199,9 +70594,9 @@ async function ls9(client, argv) {
 `);
   } else {
     output_manager_default.log(
-      `${(0, import_pluralize16.default)("Webhook", webhooks.length, true)} found under ${import_chalk247.default.bold(
+      `${(0, import_pluralize16.default)("Webhook", webhooks.length, true)} found under ${import_chalk248.default.bold(
         contextName
-      )} ${import_chalk247.default.gray(lsStamp())}`
+      )} ${import_chalk248.default.gray(lsStamp())}`
     );
     if (webhooks.length > 0) {
       output_manager_default.print(
@@ -70217,7 +70612,7 @@ function formatWebhooksTable(webhooks) {
   const rows = webhooks.map((webhook) => {
     const age = webhook.createdAt ? (0, import_ms36.default)(current - webhook.createdAt) : "-";
     const eventsDisplay = webhook.events.length > 2 ? `${webhook.events.slice(0, 2).join(", ")} +${webhook.events.length - 2}` : webhook.events.join(", ");
-    return [webhook.id, webhook.url, eventsDisplay, import_chalk247.default.gray(age)];
+    return [webhook.id, webhook.url, eventsDisplay, import_chalk248.default.gray(age)];
   });
   return formatTable(
     ["ID", "URL", "Events", "Age"],
@@ -70227,7 +70622,7 @@ function formatWebhooksTable(webhooks) {
 }
 
 // src/commands/webhooks/get.ts
-var import_chalk248 = __toESM(require_source(), 1);
+var import_chalk249 = __toESM(require_source(), 1);
 
 // src/util/webhooks/get-webhook.ts
 async function getWebhook(client, webhookId) {
@@ -70308,7 +70703,7 @@ async function get4(client, argv) {
   const asJson = formatResult.jsonOutput || client.nonInteractive;
   if (args.length !== 1) {
     output_manager_default.error(
-      `Invalid number of arguments. Usage: ${import_chalk248.default.cyan(
+      `Invalid number of arguments. Usage: ${import_chalk249.default.cyan(
         `${getCommandName("webhooks get <id>")}`
       )}`
     );
@@ -70318,7 +70713,7 @@ async function get4(client, argv) {
   const { contextName } = await getScope(client);
   if (!client.nonInteractive) {
     output_manager_default.spinner(
-      `Fetching Webhook ${webhookId} under ${import_chalk248.default.bold(contextName)}`
+      `Fetching Webhook ${webhookId} under ${import_chalk249.default.bold(contextName)}`
     );
   }
   let webhook;
@@ -70362,33 +70757,33 @@ async function get4(client, argv) {
 `);
   } else {
     output_manager_default.log(
-      `Webhook ${webhookId} found under ${import_chalk248.default.bold(contextName)} ${import_chalk248.default.gray(
+      `Webhook ${webhookId} found under ${import_chalk249.default.bold(contextName)} ${import_chalk249.default.gray(
         getStamp()
       )}`
     );
     output_manager_default.print("\n");
-    output_manager_default.print(import_chalk248.default.bold("  General\n\n"));
-    output_manager_default.print(`    ${import_chalk248.default.cyan("ID")}			${webhook.id}
+    output_manager_default.print(import_chalk249.default.bold("  General\n\n"));
+    output_manager_default.print(`    ${import_chalk249.default.cyan("ID")}			${webhook.id}
 `);
-    output_manager_default.print(`    ${import_chalk248.default.cyan("URL")}			${webhook.url}
+    output_manager_default.print(`    ${import_chalk249.default.cyan("URL")}			${webhook.url}
 `);
     output_manager_default.print(
-      `    ${import_chalk248.default.cyan("Created At")}		${formatDate(webhook.createdAt)}
+      `    ${import_chalk249.default.cyan("Created At")}		${formatDate(webhook.createdAt)}
 `
     );
     output_manager_default.print(
-      `    ${import_chalk248.default.cyan("Updated At")}		${formatDate(webhook.updatedAt)}
+      `    ${import_chalk249.default.cyan("Updated At")}		${formatDate(webhook.updatedAt)}
 `
     );
     output_manager_default.print("\n");
-    output_manager_default.print(import_chalk248.default.bold("  Events\n\n"));
+    output_manager_default.print(import_chalk249.default.bold("  Events\n\n"));
     for (const event of webhook.events) {
       output_manager_default.print(`    - ${event}
 `);
     }
     if (webhook.projectIds && webhook.projectIds.length > 0) {
       output_manager_default.print("\n");
-      output_manager_default.print(import_chalk248.default.bold("  Projects\n\n"));
+      output_manager_default.print(import_chalk249.default.bold("  Projects\n\n"));
       if (webhook.projectsMetadata && webhook.projectsMetadata.length > 0) {
         for (const project of webhook.projectsMetadata) {
           output_manager_default.print(`    - ${project.name} (${project.id})
@@ -70407,7 +70802,7 @@ async function get4(client, argv) {
 }
 
 // src/commands/webhooks/create.ts
-var import_chalk249 = __toESM(require_source(), 1);
+var import_chalk250 = __toESM(require_source(), 1);
 
 // src/util/webhooks/create-webhook.ts
 async function createWebhook(client, payload) {
@@ -70627,7 +71022,7 @@ async function create5(client, argv) {
   const { contextName } = await getScope(client);
   const createStamp = stamp_default();
   if (!client.nonInteractive) {
-    output_manager_default.spinner(`Creating webhook under ${import_chalk249.default.bold(contextName)}`);
+    output_manager_default.spinner(`Creating webhook under ${import_chalk250.default.bold(contextName)}`);
   }
   try {
     const webhook = await createWebhook(client, {
@@ -70660,27 +71055,27 @@ async function create5(client, argv) {
     }
     output_manager_default.stopSpinner();
     output_manager_default.success(
-      `Webhook created: ${import_chalk249.default.bold(webhook.id)} ${createStamp()}`
+      `Webhook created: ${import_chalk250.default.bold(webhook.id)} ${createStamp()}`
     );
     output_manager_default.print("\n");
-    output_manager_default.print(import_chalk249.default.bold("  Webhook Details\n\n"));
-    output_manager_default.print(`    ${import_chalk249.default.cyan("ID".padEnd(10))}${webhook.id}
+    output_manager_default.print(import_chalk250.default.bold("  Webhook Details\n\n"));
+    output_manager_default.print(`    ${import_chalk250.default.cyan("ID".padEnd(10))}${webhook.id}
 `);
-    output_manager_default.print(`    ${import_chalk249.default.cyan("URL".padEnd(10))}${webhook.url}
+    output_manager_default.print(`    ${import_chalk250.default.cyan("URL".padEnd(10))}${webhook.url}
 `);
     output_manager_default.print(
-      `    ${import_chalk249.default.cyan("Events".padEnd(10))}${webhook.events.join(", ")}
+      `    ${import_chalk250.default.cyan("Events".padEnd(10))}${webhook.events.join(", ")}
 `
     );
     if (webhook.projectIds && webhook.projectIds.length > 0) {
       output_manager_default.print(
-        `    ${import_chalk249.default.cyan("Projects".padEnd(10))}${webhook.projectIds.join(", ")}
+        `    ${import_chalk250.default.cyan("Projects".padEnd(10))}${webhook.projectIds.join(", ")}
 `
       );
     }
     output_manager_default.print("\n");
     output_manager_default.warn(
-      `Save this secret - it will not be shown again: ${import_chalk249.default.bold(webhook.secret)}`
+      `Save this secret - it will not be shown again: ${import_chalk250.default.bold(webhook.secret)}`
     );
     output_manager_default.print("\n");
     return 0;
@@ -70738,7 +71133,7 @@ function buildCreateCommandWithEventPlaceholder(fullArgv, url) {
 }
 
 // src/commands/webhooks/rm.ts
-var import_chalk250 = __toESM(require_source(), 1);
+var import_chalk251 = __toESM(require_source(), 1);
 
 // src/util/webhooks/delete-webhook.ts
 async function deleteWebhook(client, webhookId) {
@@ -70833,7 +71228,7 @@ async function rm10(client, argv) {
   const { contextName } = await getScope(client);
   if (args.length !== 1) {
     output_manager_default.error(
-      `Invalid number of arguments. Usage: ${import_chalk250.default.cyan(
+      `Invalid number of arguments. Usage: ${import_chalk251.default.cyan(
         `${getCommandName("webhooks rm <id>")}`
       )}`
     );
@@ -70884,7 +71279,7 @@ async function rm10(client, argv) {
   }
   const removeStamp = stamp_default();
   if (!client.nonInteractive) {
-    output_manager_default.spinner(`Removing webhook under ${import_chalk250.default.bold(contextName)}`);
+    output_manager_default.spinner(`Removing webhook under ${import_chalk251.default.bold(contextName)}`);
   }
   try {
     await deleteWebhook(client, webhookId);
@@ -70904,7 +71299,7 @@ async function rm10(client, argv) {
       );
       return 0;
     }
-    output_manager_default.success(`Webhook ${import_chalk250.default.bold(webhookId)} removed ${removeStamp()}`);
+    output_manager_default.success(`Webhook ${import_chalk251.default.bold(webhookId)} removed ${removeStamp()}`);
     return 0;
   } catch (err) {
     output_manager_default.stopSpinner();
@@ -70964,7 +71359,7 @@ var WebhooksTelemetryClient = class extends TelemetryClient {
 };
 
 // src/commands/webhooks/index.ts
-var COMMAND_CONFIG53 = {
+var COMMAND_CONFIG54 = {
   create: ["create", "add"],
   get: ["get", "inspect"],
   ls: ["ls", "list"],
@@ -70988,7 +71383,7 @@ async function main29(client) {
   });
   const { subcommand, args, subcommandOriginal } = getSubcommand5(
     parsedArgs.args.slice(1),
-    COMMAND_CONFIG53
+    COMMAND_CONFIG54
   );
   const needHelp = parsedArgs.flags["--help"];
   if (!subcommand && needHelp) {
@@ -71035,7 +71430,7 @@ async function main29(client) {
 }
 
 // src/commands/whoami/index.ts
-var import_chalk251 = __toESM(require_source(), 1);
+var import_chalk252 = __toESM(require_source(), 1);
 
 // src/util/telemetry/commands/whoami/index.ts
 var WhoamiTelemetryClient = class extends TelemetryClient {
@@ -71068,6 +71463,18 @@ async function whoami(client) {
   }
   const asJson = formatResult.jsonOutput;
   telemetry2.trackCliOptionFormat(parsedArgs.flags["--format"]);
+  if (!client.authConfig.token) {
+    if (asJson) {
+      client.stdout.write(`${JSON.stringify({ loggedIn: false }, null, 2)}
+`);
+    } else {
+      output_manager_default.log("Logged out.");
+      output_manager_default.log(
+        `Run ${getCommandName("deploy")} to deploy without an account and claim it later. Alternatively you can login with ${getCommandName("login")}.`
+      );
+    }
+    return 1;
+  }
   const scope = await getScope(client, { resolveLocalScope: true });
   const { user, team, app, globalTeam } = scope;
   const hasLocalOverride = !scope.explicitScopeProvided && ((team?.id ?? null) !== (globalTeam?.id ?? null) || // `team` being null while a local project linked to personal scope
@@ -71092,21 +71499,21 @@ async function whoami(client) {
     client.stdout.write(`${JSON.stringify(jsonOutput, null, 2)}
 `);
   } else if (client.stdout.isTTY) {
-    output_manager_default.log(`Logged in as ${import_chalk251.default.bold(formatUsername(scope))}`);
+    output_manager_default.log(`Logged in as ${import_chalk252.default.bold(formatUsername(scope))}`);
     if (team) {
       output_manager_default.log(
-        `Active team: ${import_chalk251.default.bold(team.slug)}${team.name && team.name !== team.slug ? ` (${team.name})` : ""}`
+        `Active team: ${import_chalk252.default.bold(team.slug)}${team.name && team.name !== team.slug ? ` (${team.name})` : ""}`
       );
     } else {
-      output_manager_default.log(`Active team: ${import_chalk251.default.bold("Personal Account")}`);
+      output_manager_default.log(`Active team: ${import_chalk252.default.bold("Personal Account")}`);
     }
     if (hasLocalOverride) {
       const globalLabel = globalTeam ? globalTeam.slug : "Personal Account";
       const localLabel = team ? team.slug : "Personal Account";
       output_manager_default.log(
-        `${import_chalk251.default.yellow("Local override:")} scope is set to ${import_chalk251.default.bold(
+        `${import_chalk252.default.yellow("Local override:")} scope is set to ${import_chalk252.default.bold(
           localLabel
-        )} by the linked project in this directory (globally selected: ${import_chalk251.default.bold(
+        )} by the linked project in this directory (globally selected: ${import_chalk252.default.bold(
           globalLabel
         )}).`
       );
@@ -71175,6 +71582,7 @@ export {
   rollingRelease,
   main26 as routes,
   sandbox,
+  security,
   skills,
   main27 as target,
   teams,