@lark-apaas/miaoda-cli 0.1.1-beta.1f766b6 → 0.1.2-alpha.4d0ff57

package/dist/api/db/api.js

@@ -4,6 +4,12 @@ exports.execSql = execSql;
 exports.getSchema = getSchema;
 exports.importData = importData;
 exports.exportData = exportData;
+exports.listDDLChangelog = listDDLChangelog;
+exports.setAuditConfig = setAuditConfig;
+exports.migrationInit = migrationInit;
+exports.migrate = migrate;
+exports.recover = recover;
+exports.getDbQuota = getDbQuota;
 const http_1 = require("../../utils/http");
 const error_1 = require("../../utils/error");
 const http_client_1 = require("@lark-apaas/http-client");
@@ -247,10 +253,14 @@ async function exportData(opts) {
         await mapDbHttpError(err, url, "Failed to export data");
         throw err; // 不可达
     }
-    // 成功路径：响应 body 通常是原始 CSV/JSON 字节，但部分错误场景下网关会返
+    // 成功路径：响应 body 通常是原始 CSV/SQL/JSON 字节，但部分错误场景下网关会返
     // HTTP 200 + JSON envelope（status_code != "0"），需要在这里嗅探兜底。
-    const contentType = response.headers.get("Content-Type") ??
-        (opts.format === "csv" ? "text/csv" : "application/json");
+    const defaultContentType = {
+        csv: "text/csv",
+        sql: "text/plain",
+        json: "application/json",
+    };
+    const contentType = response.headers.get("Content-Type") ?? defaultContentType[opts.format];
     const ab = await response.arrayBuffer();
     const buf = Buffer.from(new Uint8Array(ab));
     if (buf.length === 0) {
@@ -258,8 +268,9 @@ async function exportData(opts) {
     }
     // Envelope sniff：HTTP 200 + Content-Type 为 application/json + body 解析得到
     // InnerEnvelope 且 status_code 非 "0" 时，按业务错误抛出。
-    // 仅 CSV 格式做 sniff —— JSON 格式正常成功响应也是 application/json，会误判。
-    if (opts.format === "csv" && /application\/json/i.test(contentType)) {
+    // CSV / SQL 都是非 JSON 输出，application/json 响应必是错误信封；JSON 格式
+    // 成功响应自身就是 application/json，跳过 sniff 避免误判。
+    if (opts.format !== "json" && /application\/json/i.test(contentType)) {
         try {
             const parsed = JSON.parse(buf.toString("utf8"));
             if (parsed.status_code != null && parsed.status_code !== "0") {
@@ -269,7 +280,7 @@ async function exportData(opts) {
         }
         catch (err) {
             // 已经被 extractData 抛成 AppError → 透传；否则 JSON.parse 失败说明 body
-            // 真的是 CSV 文本，继续按成功流程走
+            // 真的是 CSV / SQL 文本，继续按成功流程走
             if (err instanceof error_1.AppError)
                 throw err;
         }
@@ -286,3 +297,167 @@ async function exportData(opts) {
         recordCount,
     };
 }
+// ── db changelog → InnerAdminListDDLChangelog ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/changelog?table=&since=&until=&limit=&cursor=&dbBranch=
+ *
+ * 时间字段 since/until 由 CLI 端归一化为 ISO 8601 UTC 后透传；后端按 created_at 比较。
+ */
+async function listDDLChangelog(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/changelog", {
+        table: opts.table,
+        since: opts.since,
+        until: opts.until,
+        limit: opts.limit !== undefined ? String(opts.limit) : undefined,
+        cursor: opts.cursor,
+        dbBranch: opts.dbBranch,
+    });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to list DDL changelog");
+        throw err; // 不可达
+    }
+    const body = (await response.json());
+    const data = (0, client_1.extractData)(body);
+    return {
+        items: data.items ?? [],
+        nextCursor: data.nextCursor && data.nextCursor !== "" ? data.nextCursor : null,
+        hasMore: Boolean(data.hasMore),
+    };
+}
+// ── db audit → InnerAdminSetAuditConfig ──
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/audit/config
+ * 写：enabled=true 开启 / false 关闭。retention 仅 enabled=true 生效。
+ *
+ * 读路径（status / log）不在此模块——CLI handler 走 execSql 直接 SELECT
+ * `_dl_audit_config` / `_dl_audit_log` 元数据表。
+ */
+async function setAuditConfig(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/audit/config");
+    const body = {
+        table: opts.table,
+        enabled: opts.enabled,
+    };
+    if (opts.retention !== undefined && opts.retention !== "")
+        body.retention = opts.retention;
+    if (opts.dbBranch !== undefined && opts.dbBranch !== "")
+        body.dbBranch = opts.dbBranch;
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, body);
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to set audit config");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    const data = (0, client_1.extractData)(respBody);
+    if (!data.status) {
+        throw new error_1.AppError("INTERNAL_DB_ERROR", "audit config response missing status field");
+    }
+    return data.status;
+}
+// ── db migration → InnerAdminMigrationInit / InnerAdminMigrate ──
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/enableMultiEnv
+ * 单库 → dev/online 双库初始化，不可逆。对应公开 API EnableMultiEnvDB 的 admin-inner 通道。
+ */
+async function migrationInit(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/enableMultiEnv");
+    const body = {};
+    if (opts.syncData !== undefined)
+        body.syncData = opts.syncData;
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, body);
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to init migration");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/migration
+ * 合并 diff + apply：dryRun=true 只返 changes 不下发；dryRun=false 才执行。
+ */
+async function migrate(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/migration");
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, { dryRun: opts.dryRun });
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to migrate");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}
+// ── db recovery → InnerAdminRecover ──
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/recovery
+ * 合并 PITR diff + apply：dryRun=true 预览影响；dryRun=false 触发恢复。
+ */
+async function recover(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/recovery");
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, {
+            target: opts.target,
+            dryRun: opts.dryRun,
+        });
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to recover");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}
+// ── db quota → InnerAdminGetDbQuota ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/quota?dbBranch=
+ */
+async function getDbQuota(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/quota", { dbBranch: opts.dbBranch });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to get db quota");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}

package/dist/api/db/client.js

@@ -129,6 +129,42 @@ const BIZ_ERR_MAP = new Map(Object.entries({
     // k_dl_1300015：SELECT 结果超过 1000 行硬拦；多行 hint 由 output.ts 的
     // SERVER_ERROR_HINTS 按语义 code 兜底，这里只做 code 改名
     k_dl_1300015: { code: "RESULT_SET_TOO_LARGE" },
+    // audit
+    k_dl_1310001: {
+        code: "AUDIT_ALREADY_ENABLED",
+        hint: "Use `miaoda db audit status <table>` to confirm current state.",
+    },
+    k_dl_1310002: {
+        code: "AUDIT_NOT_ENABLED",
+        hint: "Run `miaoda db audit enable <table>` first.",
+    },
+    k_dl_1310003: {
+        code: "INVALID_RETENTION",
+        hint: "Allowed values: 7d / 30d / 180d / 360d.",
+    },
+    // migration
+    k_dl_1320001: {
+        code: "MIGRATION_NOT_AVAILABLE",
+        hint: "Migration commands require an expert-mode application.",
+    },
+    k_dl_1320002: { code: "MULTI_ENV_ALREADY_INITIALIZED" },
+    k_dl_1320003: {
+        code: "NO_PENDING_CHANGES",
+        hint: "dev and online schemas are already in sync.",
+    },
+    // recovery
+    k_dl_1330001: {
+        code: "RECOVERY_WINDOW_EXCEEDED",
+        hint: "Pick a timestamp inside the supported recovery window.",
+    },
+    k_dl_1330002: {
+        code: "RECOVERY_IN_PROGRESS",
+        hint: "Wait for the running recovery to finish, or check its status.",
+    },
+    k_dl_1330003: {
+        code: "INVALID_TIMESTAMP",
+        hint: "Use ISO 8601 / yyyy-mm-dd / yyyy-mm-dd HH:MM:SS.",
+    },
 }));
 /** PG SQLSTATE → CLI code（当前 dataloom 不一定透传，预留未来使用） */
 exports.SQLSTATE_MAP = {

package/dist/api/db/index.js

@@ -1,11 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.pickTableDetail = exports.flattenSchemaList = exports.parseSqlResult = exports.SQLSTATE_MAP = exports.ensureInnerSuccess = exports.buildInnerUrl = exports.exportData = exports.importData = exports.getSchema = exports.execSql = void 0;
+exports.pickTableDetail = exports.flattenSchemaList = exports.parseSqlResult = exports.SQLSTATE_MAP = exports.ensureInnerSuccess = exports.buildInnerUrl = exports.getDbQuota = exports.recover = exports.migrate = exports.migrationInit = exports.setAuditConfig = exports.listDDLChangelog = exports.exportData = exports.importData = exports.getSchema = exports.execSql = void 0;
 var api_1 = require("./api");
 Object.defineProperty(exports, "execSql", { enumerable: true, get: function () { return api_1.execSql; } });
 Object.defineProperty(exports, "getSchema", { enumerable: true, get: function () { return api_1.getSchema; } });
 Object.defineProperty(exports, "importData", { enumerable: true, get: function () { return api_1.importData; } });
 Object.defineProperty(exports, "exportData", { enumerable: true, get: function () { return api_1.exportData; } });
+Object.defineProperty(exports, "listDDLChangelog", { enumerable: true, get: function () { return api_1.listDDLChangelog; } });
+Object.defineProperty(exports, "setAuditConfig", { enumerable: true, get: function () { return api_1.setAuditConfig; } });
+Object.defineProperty(exports, "migrationInit", { enumerable: true, get: function () { return api_1.migrationInit; } });
+Object.defineProperty(exports, "migrate", { enumerable: true, get: function () { return api_1.migrate; } });
+Object.defineProperty(exports, "recover", { enumerable: true, get: function () { return api_1.recover; } });
+Object.defineProperty(exports, "getDbQuota", { enumerable: true, get: function () { return api_1.getDbQuota; } });
 var client_1 = require("./client");
 Object.defineProperty(exports, "buildInnerUrl", { enumerable: true, get: function () { return client_1.buildInnerUrl; } });
 Object.defineProperty(exports, "ensureInnerSuccess", { enumerable: true, get: function () { return client_1.ensureInnerSuccess; } });

package/dist/api/file/api.js

@@ -8,6 +8,7 @@ exports.uploadFile = uploadFile;
 exports.signDownload = signDownload;
 exports.downloadFile = downloadFile;
 exports.deleteFiles = deleteFiles;
+exports.getStorageQuota = getStorageQuota;
 const error_1 = require("../../utils/error");
 const logger_1 = require("../../utils/logger");
 const client_1 = require("./client");
@@ -519,3 +520,17 @@ async function deleteFiles(opts) {
     }
     return { deleted, failed };
 }
+// ── storage quota ──
+/**
+ * 后端：GET /v1/storage/app/{appId}/bucket/{bucketId}/quota
+ * 单 bucket 用量；StorageQuotaBytes 暂未对接，CLI 拿到 0 时按 "—" 渲染。
+ * bucketId 缺省时走默认 bucket（与 ls / stat / cp 等一致）。
+ */
+async function getStorageQuota(opts) {
+    const bucketId = opts.bucketId ?? (await (0, client_1.getDefaultBucketId)(opts.appId));
+    const url = `/v1/storage/app/${encodeURIComponent(opts.appId)}/bucket/${encodeURIComponent(bucketId)}/quota`;
+    const body = await (0, client_1.doGet)(url, {
+        errorContext: `fetch storage quota for app '${opts.appId}' bucket '${bucketId}'`,
+    });
+    return extractEnvelope(body);
+}

package/dist/api/file/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.toAbsolutePath = exports.looksLikePath = exports.resetBucketCache = exports.getDefaultBucketId = exports.parseTimeFilterMs = exports.resolveInputs = exports.deleteFiles = exports.downloadFile = exports.signDownload = exports.uploadFile = exports.statFile = exports.listFiles = void 0;
+exports.toAbsolutePath = exports.looksLikePath = exports.resetBucketCache = exports.getDefaultBucketId = exports.getStorageQuota = exports.parseTimeFilterMs = exports.resolveInputs = exports.deleteFiles = exports.downloadFile = exports.signDownload = exports.uploadFile = exports.statFile = exports.listFiles = void 0;
 var api_1 = require("./api");
 Object.defineProperty(exports, "listFiles", { enumerable: true, get: function () { return api_1.listFiles; } });
 Object.defineProperty(exports, "statFile", { enumerable: true, get: function () { return api_1.statFile; } });
@@ -10,6 +10,7 @@ Object.defineProperty(exports, "downloadFile", { enumerable: true, get: function
 Object.defineProperty(exports, "deleteFiles", { enumerable: true, get: function () { return api_1.deleteFiles; } });
 Object.defineProperty(exports, "resolveInputs", { enumerable: true, get: function () { return api_1.resolveInputs; } });
 Object.defineProperty(exports, "parseTimeFilterMs", { enumerable: true, get: function () { return api_1.parseTimeFilterMs; } });
+Object.defineProperty(exports, "getStorageQuota", { enumerable: true, get: function () { return api_1.getStorageQuota; } });
 var client_1 = require("./client");
 Object.defineProperty(exports, "getDefaultBucketId", { enumerable: true, get: function () { return client_1.getDefaultBucketId; } });
 Object.defineProperty(exports, "resetBucketCache", { enumerable: true, get: function () { return client_1.resetBucketCache; } });

package/dist/cli/commands/db/index.js

@@ -1,7 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerDbCommands = registerDbCommands;
+const error_1 = require("../../../utils/error");
 const index_1 = require("../../../cli/handlers/db/index");
+function parsePositiveInt(raw) {
+    const n = Number(raw);
+    if (!Number.isInteger(n) || n < 1) {
+        throw new error_1.AppError("ARGS_INVALID", `--limit must be a positive integer (got '${raw}')`);
+    }
+    return n;
+}
 function registerDbCommands(program) {
     const dbCmd = program
         .command("db")
@@ -206,4 +214,133 @@ Examples:
   Error: Output file 'users.csv' already exists
     hint: Use -f to specify a different path, or --force to overwrite.
 `);
+    // ── changelog ──
+    dbCmd
+        .command("changelog")
+        .summary("查看 DDL 变更历史")
+        .description("列出 DDL 变更（CREATE / ALTER / DROP），支持按表、时间窗筛选与游标分页。")
+        .usage("[flags]")
+        .option("--table <name>", "只看某张表的 DDL 变更")
+        .option("--since <time>", "起始时间（含），相对 1h/2d / 日期 YYYY-MM-DD / ISO 8601")
+        .option("--until <time>", "结束时间（含），同 --since 格式")
+        .option("--limit <n>", "单次返回上限（默认 20）", parsePositiveInt, 20)
+        .option("--cursor <token>", "分页游标，从上次响应的 next_cursor 取值")
+        .option("--all", "自动翻页直到取完所有记录")
+        .action(async function () {
+        await (0, index_1.handleDbChangelog)(this.optsWithGlobals());
+    });
+    // ── audit ──
+    const auditCmd = dbCmd
+        .command("audit")
+        .summary("表级数据审计开关与查询")
+        .description("配置表的数据审计 (enable/disable/retention)，查询审计状态与日志。")
+        .usage("<command> [flags]");
+    auditCmd.action(() => {
+        auditCmd.outputHelp();
+    });
+    auditCmd
+        .command("status")
+        .summary("查看审计开关状态（不传 table 返列表）")
+        .usage("[table] [flags]")
+        .argument("[table]", "表名；省略时返所有已配置审计的表")
+        .action(async function (table) {
+        await (0, index_1.handleDbAuditStatus)(table, this.optsWithGlobals());
+    });
+    auditCmd
+        .command("enable")
+        .summary("启用表审计")
+        .usage("<table> [flags]")
+        .argument("<table>", "目标表名")
+        .option("--retention <ttl>", "保留时长 7d / 30d / 180d / 360d", "7d")
+        .action(async function (table) {
+        await (0, index_1.handleDbAuditEnable)(table, this.optsWithGlobals());
+    });
+    auditCmd
+        .command("disable")
+        .summary("关闭表审计")
+        .usage("<table> [flags]")
+        .argument("<table>", "目标表名")
+        .action(async function (table) {
+        await (0, index_1.handleDbAuditDisable)(table, this.optsWithGlobals());
+    });
+    auditCmd
+        .command("list")
+        .summary("查询审计日志")
+        .description("按表 + 时间窗查询审计日志（INSERT / UPDATE / DELETE）。")
+        .usage("<table...> [flags]")
+        .argument("<tables...>", "一个或多个表名（多表时空表会汇总到 stderr）")
+        .option("--since <time>", "起始时间")
+        .option("--until <time>", "结束时间")
+        .option("--limit <n>", "单次返回上限（默认 50）", parsePositiveInt, 50)
+        .option("--cursor <ts>", "分页游标，传上一页末条 event_time")
+        .action(async function (tables) {
+        await (0, index_1.handleDbAuditList)(tables, this.optsWithGlobals());
+    });
+    // ── migration ──
+    const migrationCmd = dbCmd
+        .command("migration")
+        .summary("多环境管理（dev / online，仅专家模式应用）")
+        .description("init 拆分双环境，diff 预览待发布变更，apply 把 dev 同步到 online。")
+        .usage("<command> [flags]");
+    migrationCmd.action(() => {
+        migrationCmd.outputHelp();
+    });
+    migrationCmd
+        .command("init")
+        .summary("初始化多环境（不可逆）")
+        .usage("[flags]")
+        .option("--sync-data", "同时把现有数据复制到 dev")
+        .option("--yes", "跳过 TTY 确认")
+        .action(async function () {
+        await (0, index_1.handleDbMigrationInit)(this.optsWithGlobals());
+    });
+    migrationCmd
+        .command("diff")
+        .summary("预览 dev → online 待发布变更")
+        .usage("[flags]")
+        .action(async function () {
+        await (0, index_1.handleDbMigrationDiff)(this.optsWithGlobals());
+    });
+    migrationCmd
+        .command("apply")
+        .summary("应用 dev 变更到 online（多 DDL 单事务原子）")
+        .usage("[flags]")
+        .option("--yes", "跳过 TTY 二次确认")
+        .action(async function () {
+        await (0, index_1.handleDbMigrationApply)(this.optsWithGlobals());
+    });
+    // ── recovery（PITR）──
+    const recoveryCmd = dbCmd
+        .command("recovery")
+        .summary("基于时间点恢复（PITR）")
+        .description("把数据库整体恢复到指定时间点，diff 预览影响范围，apply 不可逆覆盖。")
+        .usage("<command> [flags]");
+    recoveryCmd.action(() => {
+        recoveryCmd.outputHelp();
+    });
+    recoveryCmd
+        .command("diff")
+        .summary("预览恢复到指定时间点的影响范围")
+        .usage("<timestamp> [flags]")
+        .argument("<timestamp>", "目标时间，YYYY-MM-DD / YYYY-MM-DD HH:MM[:SS] / ISO 8601")
+        .action(async function (target) {
+        await (0, index_1.handleDbRecoveryDiff)(target, this.optsWithGlobals());
+    });
+    recoveryCmd
+        .command("apply")
+        .summary("触发恢复到指定时间点（不可逆覆盖）")
+        .usage("<timestamp> [flags]")
+        .argument("<timestamp>", "目标时间，YYYY-MM-DD / YYYY-MM-DD HH:MM[:SS] / ISO 8601")
+        .option("--yes", "跳过 TTY 二次确认")
+        .action(async function (target) {
+        await (0, index_1.handleDbRecoveryApply)(target, this.optsWithGlobals());
+    });
+    // ── quota ──
+    dbCmd
+        .command("quota")
+        .summary("查看数据库用量与限额")
+        .usage("[flags]")
+        .action(async function () {
+        await (0, index_1.handleDbQuota)(this.optsWithGlobals());
+    });
 }

package/dist/cli/commands/file/index.js

@@ -209,4 +209,11 @@ Examples:
   Error: Expires duration '60d' exceeds the maximum of 30d
     hint: Maximum allowed value is 30d. Use \`--expires 30d\` for the longest link.
 `);
+    fileCmd
+        .command("quota")
+        .summary("查看文件存储用量与限额")
+        .usage("[flags]")
+        .action(async function () {
+        await (0, index_1.handleFileQuota)(this.optsWithGlobals());
+    });
 }

package/dist/cli/handlers/db/audit.js

@@ -0,0 +1,250 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleDbAuditStatus = handleDbAuditStatus;
+exports.handleDbAuditEnable = handleDbAuditEnable;
+exports.handleDbAuditDisable = handleDbAuditDisable;
+exports.handleDbAuditList = handleDbAuditList;
+const api = __importStar(require("../../../api/index"));
+const index_1 = require("../../../api/file/index");
+const shared_1 = require("../../../cli/commands/shared");
+const error_1 = require("../../../utils/error");
+const output_1 = require("../../../utils/output");
+const render_1 = require("../../../utils/render");
+const index_2 = require("../../../api/db/index");
+// "forever" 不在后端支持范围（pg_audit ValidDay 只接 int64 天数），CLI 提前拦截
+const VALID_RETENTION = new Set(["7d", "30d", "180d", "360d"]);
+async function handleDbAuditStatus(table, opts) {
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const sql = table !== undefined && table !== ""
+        ? `SELECT "table", enabled, enabled_at, retention FROM _dl_audit_config WHERE "table" = '${escapeSqlLiteral(table)}'`
+        : `SELECT "table", enabled, enabled_at, retention FROM _dl_audit_config ORDER BY "table"`;
+    const results = await api.db.execSql({ appId, sql, dbBranch: opts.env });
+    const rows = collectSelectRows(results);
+    // 单表查询：表未配置时给个 enabled=false 占位项，让 CLI 输出语义统一
+    if (table !== undefined && table !== "" && rows.length === 0) {
+        rows.push({ table, enabled: false });
+    }
+    const items = rows.map(toAuditStatus);
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitOk)({ items });
+        return;
+    }
+    if (items.length === 0) {
+        (0, output_1.emit)("No audit configuration found.");
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    // 单表显式查询（rows.length=1 且对应输入 table）走 key/value 形态，更可读
+    if (table !== undefined && items.length === 1) {
+        const it = items[0];
+        (0, output_1.emit)((0, render_1.renderKeyValue)([
+            ["table", it.table],
+            ["enabled", String(it.enabled)],
+            ["enabled_at", it.enabled_at ? (0, render_1.formatTime)(it.enabled_at, tty) : "—"],
+            ["retention", it.retention ?? "—"],
+        ], tty));
+        return;
+    }
+    const headers = ["table", "enabled", "enabled_at", "retention"];
+    const out = items.map((it) => [
+        it.table,
+        String(it.enabled),
+        it.enabled_at ? (0, render_1.formatTime)(it.enabled_at, tty) : "—",
+        it.retention ?? "—",
+    ]);
+    (0, output_1.emit)(tty ? (0, render_1.renderAlignedTable)(headers, out) : (0, render_1.renderTsv)(headers, out));
+}
+function toAuditStatus(row) {
+    return {
+        table: asString(row.table),
+        enabled: Boolean(row.enabled),
+        enabled_at: row.enabled_at == null ? null : asString(row.enabled_at),
+        retention: row.retention == null ? null : asString(row.retention),
+    };
+}
+// asString 把 SELECT 结果里的列值（unknown）安全地转成字符串。SQL 返回值通常是
+// string / number / boolean / null，但极端情况下也可能是 JSON 反序列化出的对象。
+// 直接 String(obj) 会得到 "[object Object]"，这里改用 typeof 分类避免。
+function asString(v, fallback = "") {
+    if (v == null)
+        return fallback;
+    if (typeof v === "string")
+        return v;
+    if (typeof v === "number" || typeof v === "boolean" || typeof v === "bigint")
+        return String(v);
+    return JSON.stringify(v);
+}
+async function handleDbAuditEnable(table, opts) {
+    if (!table) {
+        throw new error_1.AppError("ARGS_INVALID", "table name is required", {
+            next_actions: ["Usage: miaoda db audit enable <table> [--retention 7d|30d|180d|360d]"],
+        });
+    }
+    const retention = opts.retention ?? "7d";
+    if (!VALID_RETENTION.has(retention)) {
+        throw new error_1.AppError("INVALID_RETENTION", `invalid retention: ${retention}`, {
+            next_actions: ["Allowed values: 7d / 30d / 180d / 360d."],
+        });
+    }
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const status = await api.db.setAuditConfig({
+        appId,
+        table,
+        enabled: true,
+        retention,
+        dbBranch: opts.env,
+    });
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitOk)({ status });
+        return;
+    }
+    (0, output_1.emit)(`✓ Audit enabled for '${status.table}' (retention=${status.retention ?? retention})`);
+}
+async function handleDbAuditDisable(table, opts) {
+    if (!table) {
+        throw new error_1.AppError("ARGS_INVALID", "table name is required", {
+            next_actions: ["Usage: miaoda db audit disable <table>"],
+        });
+    }
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const status = await api.db.setAuditConfig({
+        appId,
+        table,
+        enabled: false,
+        dbBranch: opts.env,
+    });
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitOk)({ status });
+        return;
+    }
+    (0, output_1.emit)(`✓ Audit disabled for '${status.table}'`);
+}
+async function handleDbAuditList(tables, opts) {
+    if (tables.length === 0) {
+        throw new error_1.AppError("ARGS_INVALID", "at least one table is required", {
+            next_actions: [
+                "Usage: miaoda db audit list <table> [<table>...] [--since ...] [--until ...]",
+            ],
+        });
+    }
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const limit = opts.limit ?? 50;
+    // since 优先级：opts.cursor（前一页末条 event_time）> opts.since
+    const sinceRaw = opts.cursor ?? opts.since;
+    const since = normalizeTime(sinceRaw, "--since/--cursor");
+    const until = normalizeTime(opts.until, "--until");
+    const inList = tables.map((t) => `'${escapeSqlLiteral(t)}'`).join(",");
+    const whereParts = [`target_table IN (${inList})`];
+    if (since !== undefined)
+        whereParts.push(`event_time >= '${since}'`);
+    if (until !== undefined)
+        whereParts.push(`event_time <= '${until}'`);
+    const sql = `SELECT event_id, event_time, target_table, type, operator, summary, details ` +
+        `FROM _dl_audit_log WHERE ${whereParts.join(" AND ")} ORDER BY event_time DESC LIMIT ${String(limit + 1)}`;
+    const results = await api.db.execSql({ appId, sql, dbBranch: opts.env });
+    const allRows = collectSelectRows(results);
+    // 多取一条用于判断 hasMore；最终只展示 limit 行
+    const hasMore = allRows.length > limit;
+    const visible = hasMore ? allRows.slice(0, limit) : allRows;
+    const nextCursor = hasMore && visible.length > 0 ? asString(visible[visible.length - 1].event_time) : null;
+    // 多表混合时统计哪些表无记录，PRD 要求末尾汇总
+    const seen = new Set();
+    for (const r of visible)
+        seen.add(asString(r.target_table));
+    const skipped = tables.filter((t) => !seen.has(t));
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitPaged)(visible, nextCursor, hasMore);
+        if (skipped.length > 0) {
+            process.stderr.write(`(${String(skipped.length)} table(s) skipped: ${skipped.join(", ")})\n`);
+        }
+        // 退出码：任一表有数据 → 0；全空 → 1（PRD 约定）
+        if (visible.length === 0)
+            process.exitCode = 1;
+        return;
+    }
+    if (visible.length === 0) {
+        (0, output_1.emit)("No audit log entries found.");
+        if (skipped.length > 0) {
+            process.stderr.write(`(${String(skipped.length)} table(s) skipped: ${skipped.join(", ")})\n`);
+        }
+        process.exitCode = 1;
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    const headers = ["event_time", "target_table", "type", "operator", "summary"];
+    const rows = visible.map((it) => [
+        (0, render_1.formatTime)(asString(it.event_time), tty),
+        asString(it.target_table),
+        asString(it.type),
+        asString(it.operator, "—"),
+        asString(it.summary),
+    ]);
+    (0, output_1.emit)(tty ? (0, render_1.renderAlignedTable)(headers, rows) : (0, render_1.renderTsv)(headers, rows));
+    if (skipped.length > 0) {
+        process.stderr.write(`(${String(skipped.length)} table(s) skipped: ${skipped.join(", ")})\n`);
+    }
+    if (hasMore && nextCursor) {
+        process.stderr.write(`(more results; use --cursor '${nextCursor}')\n`);
+    }
+}
+// ── helpers ──
+function normalizeTime(input, flagName) {
+    if (input === undefined || input === "")
+        return undefined;
+    // ISO 8601 形如 2026-05-07T08:00:00Z 直接透传，避免 parseTimeFilterMs 在
+    // 严格 ISO 上重做一次会损精度
+    if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:?\d{2})$/.test(input)) {
+        return new Date(input).toISOString();
+    }
+    const ms = (0, index_1.parseTimeFilterMs)(input, flagName);
+    return new Date(ms).toISOString();
+}
+function collectSelectRows(results) {
+    const out = [];
+    for (const r of results) {
+        const parsed = (0, index_2.parseSqlResult)(r);
+        if (parsed.kind === "select")
+            out.push(...parsed.rows);
+    }
+    return out;
+}
+/**
+ * SQL 字符串字面量转义。仅处理单引号；表名 / 时间戳由调用方控制范围（白名单或
+ * 严格 ISO 8601 正则），不在此函数内做。
+ */
+function escapeSqlLiteral(s) {
+    return s.replace(/'/g, "''");
+}

package/dist/cli/handlers/db/changelog.js

@@ -0,0 +1,104 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleDbChangelog = handleDbChangelog;
+const api = __importStar(require("../../../api/index"));
+const index_1 = require("../../../api/file/index");
+const shared_1 = require("../../../cli/commands/shared");
+const output_1 = require("../../../utils/output");
+const render_1 = require("../../../utils/render");
+/** 把用户传入的 since/until 归一成 ISO 8601 UTC 字符串；空串返 undefined。 */
+function normalizeTime(input, flagName) {
+    if (input === undefined || input === "")
+        return undefined;
+    const ms = (0, index_1.parseTimeFilterMs)(input, flagName);
+    return new Date(ms).toISOString();
+}
+async function handleDbChangelog(opts) {
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const since = normalizeTime(opts.since, "--since");
+    const until = normalizeTime(opts.until, "--until");
+    const allItems = [];
+    let cursor = opts.cursor;
+    let lastCursor = null;
+    let lastHasMore = false;
+    // --all：循环到 hasMore=false；否则只拉一页
+    // 没传 --all 时翻页由调用方自己用 --cursor 串
+    for (;;) {
+        const page = await api.db.listDDLChangelog({
+            appId,
+            table: opts.table,
+            since,
+            until,
+            limit: opts.limit,
+            cursor,
+            dbBranch: opts.env,
+        });
+        allItems.push(...page.items);
+        lastCursor = page.nextCursor;
+        lastHasMore = page.hasMore;
+        if (!opts.all || !page.hasMore || !page.nextCursor)
+            break;
+        cursor = page.nextCursor;
+    }
+    if ((0, output_1.isJsonMode)()) {
+        // --all 时已经把所有页合一起返，has_more=false / next_cursor=null
+        if (opts.all) {
+            (0, output_1.emitPaged)(allItems, null, false);
+        }
+        else {
+            (0, output_1.emitPaged)(allItems, lastCursor, lastHasMore);
+        }
+        return;
+    }
+    if (allItems.length === 0) {
+        (0, output_1.emit)("No DDL changes found.");
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    const headers = ["change_id", "changed_at", "operator", "target_table", "type", "summary"];
+    const rows = allItems.map((it) => [
+        it.changeId,
+        (0, render_1.formatTime)(it.changedAt, tty),
+        it.operator || "—",
+        it.targetTable || "—",
+        it.changeType,
+        it.summary || "—",
+    ]);
+    (0, output_1.emit)(tty ? (0, render_1.renderAlignedTable)(headers, rows) : (0, render_1.renderTsv)(headers, rows));
+    if (!opts.all && lastHasMore && lastCursor) {
+        process.stderr.write(`(more results; use --cursor ${lastCursor} or --all)\n`);
+    }
+}

package/dist/cli/handlers/db/data.js

@@ -42,7 +42,7 @@ const error_1 = require("../../../utils/error");
 const output_1 = require("../../../utils/output");
 const shared_1 = require("../../../cli/commands/shared");
 const render_1 = require("../../../utils/render");
-// P0 规格（对齐技术方案关键决策 2）
+// import / export 体积上限
 const MAX_SIZE_BYTES = 1 * 1024 * 1024; // 1 MB
 const MAX_ROWS = 5000;
 async function handleDbDataImport(file, opts) {

package/dist/cli/handlers/db/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleDbDataExport = exports.handleDbDataImport = exports.handleDbSchemaGet = exports.handleDbSchemaList = exports.handleDbSql = void 0;
+exports.handleDbQuota = exports.handleDbRecoveryApply = exports.handleDbRecoveryDiff = exports.handleDbMigrationApply = exports.handleDbMigrationDiff = exports.handleDbMigrationInit = exports.handleDbAuditList = exports.handleDbAuditDisable = exports.handleDbAuditEnable = exports.handleDbAuditStatus = exports.handleDbChangelog = exports.handleDbDataExport = exports.handleDbDataImport = exports.handleDbSchemaGet = exports.handleDbSchemaList = exports.handleDbSql = void 0;
 var sql_1 = require("./sql");
 Object.defineProperty(exports, "handleDbSql", { enumerable: true, get: function () { return sql_1.handleDbSql; } });
 var schema_1 = require("./schema");
@@ -9,3 +9,19 @@ Object.defineProperty(exports, "handleDbSchemaGet", { enumerable: true, get: fun
 var data_1 = require("./data");
 Object.defineProperty(exports, "handleDbDataImport", { enumerable: true, get: function () { return data_1.handleDbDataImport; } });
 Object.defineProperty(exports, "handleDbDataExport", { enumerable: true, get: function () { return data_1.handleDbDataExport; } });
+var changelog_1 = require("./changelog");
+Object.defineProperty(exports, "handleDbChangelog", { enumerable: true, get: function () { return changelog_1.handleDbChangelog; } });
+var audit_1 = require("./audit");
+Object.defineProperty(exports, "handleDbAuditStatus", { enumerable: true, get: function () { return audit_1.handleDbAuditStatus; } });
+Object.defineProperty(exports, "handleDbAuditEnable", { enumerable: true, get: function () { return audit_1.handleDbAuditEnable; } });
+Object.defineProperty(exports, "handleDbAuditDisable", { enumerable: true, get: function () { return audit_1.handleDbAuditDisable; } });
+Object.defineProperty(exports, "handleDbAuditList", { enumerable: true, get: function () { return audit_1.handleDbAuditList; } });
+var migration_1 = require("./migration");
+Object.defineProperty(exports, "handleDbMigrationInit", { enumerable: true, get: function () { return migration_1.handleDbMigrationInit; } });
+Object.defineProperty(exports, "handleDbMigrationDiff", { enumerable: true, get: function () { return migration_1.handleDbMigrationDiff; } });
+Object.defineProperty(exports, "handleDbMigrationApply", { enumerable: true, get: function () { return migration_1.handleDbMigrationApply; } });
+var recovery_1 = require("./recovery");
+Object.defineProperty(exports, "handleDbRecoveryDiff", { enumerable: true, get: function () { return recovery_1.handleDbRecoveryDiff; } });
+Object.defineProperty(exports, "handleDbRecoveryApply", { enumerable: true, get: function () { return recovery_1.handleDbRecoveryApply; } });
+var quota_1 = require("./quota");
+Object.defineProperty(exports, "handleDbQuota", { enumerable: true, get: function () { return quota_1.handleDbQuota; } });

package/dist/cli/handlers/db/migration.js

@@ -0,0 +1,127 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleDbMigrationInit = handleDbMigrationInit;
+exports.handleDbMigrationDiff = handleDbMigrationDiff;
+exports.handleDbMigrationApply = handleDbMigrationApply;
+const node_readline_1 = __importDefault(require("node:readline"));
+const api = __importStar(require("../../../api/index"));
+const shared_1 = require("../../../cli/commands/shared");
+const output_1 = require("../../../utils/output");
+const render_1 = require("../../../utils/render");
+async function handleDbMigrationInit(opts) {
+    const appId = (0, shared_1.resolveAppId)(opts);
+    // PRD：不可逆操作，TTY 默认要求 y/N；--yes 跳过
+    if (!opts.yes && !(0, output_1.isJsonMode)()) {
+        const ok = await confirm(`? Initialize multi-env (single → dev/online), this is IRREVERSIBLE${opts.syncData ? " and will copy existing data to dev" : ""}? (y/N) `);
+        if (!ok) {
+            (0, output_1.emit)("Aborted.");
+            return;
+        }
+    }
+    const result = await api.db.migrationInit({ appId, syncData: opts.syncData });
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitOk)(result);
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    (0, output_1.emit)((0, render_1.renderKeyValue)([
+        ["status", result.status],
+        ["environments", result.environments.join(", ")],
+        ["data_synced", String(result.dataSynced)],
+    ], tty));
+}
+async function handleDbMigrationDiff(opts) {
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const result = await api.db.migrate({ appId, dryRun: true });
+    renderMigrate(result);
+}
+async function handleDbMigrationApply(opts) {
+    const appId = (0, shared_1.resolveAppId)(opts);
+    // 先 diff 一次给用户确认
+    const preview = await api.db.migrate({ appId, dryRun: true });
+    if (preview.changes.length === 0) {
+        if ((0, output_1.isJsonMode)()) {
+            (0, output_1.emitOk)({ ...preview, status: "no_pending_changes" });
+        }
+        else {
+            (0, output_1.emit)("No pending changes from dev to online.");
+        }
+        return;
+    }
+    if (!opts.yes && !(0, output_1.isJsonMode)()) {
+        renderMigrate(preview);
+        const ok = await confirm(`? Apply ${String(preview.changes.length)} change(s) from ${preview.from} to ${preview.to}? (y/N) `);
+        if (!ok) {
+            (0, output_1.emit)("Aborted.");
+            return;
+        }
+    }
+    const result = await api.db.migrate({ appId, dryRun: false });
+    renderMigrate(result);
+}
+function renderMigrate(result) {
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitOk)(result);
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    if (result.changes.length === 0) {
+        (0, output_1.emit)(`No pending changes from ${result.from} to ${result.to}.`);
+        return;
+    }
+    const headers = ["type", "table", "statement"];
+    const rows = result.changes.map((c) => [c.type, c.table, c.statement]);
+    (0, output_1.emit)(tty ? (0, render_1.renderAlignedTable)(headers, rows) : (0, render_1.renderTsv)(headers, rows));
+    if (result.dryRun) {
+        (0, output_1.emit)(`(dry-run: ${String(result.changes.length)} change(s) preview, run \`db migration apply\` to commit)`);
+    }
+    else {
+        (0, output_1.emit)(`✓ Applied ${String(result.changesApplied ?? result.changes.length)} change(s) from ${result.from} to ${result.to}`);
+    }
+}
+// ── confirm ──
+async function confirm(prompt) {
+    const rl = node_readline_1.default.createInterface({ input: process.stdin, output: process.stderr });
+    return new Promise((resolve) => {
+        rl.question(prompt, (answer) => {
+            rl.close();
+            resolve(answer.trim().toLowerCase() === "y");
+        });
+    });
+}

package/dist/cli/handlers/db/quota.js

@@ -0,0 +1,60 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleDbQuota = handleDbQuota;
+const api = __importStar(require("../../../api/index"));
+const shared_1 = require("../../../cli/commands/shared");
+const output_1 = require("../../../utils/output");
+const render_1 = require("../../../utils/render");
+async function handleDbQuota(opts) {
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const data = await api.db.getDbQuota({ appId, dbBranch: opts.env });
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitOk)(data);
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    // quota=0 表示后端未对接配额上限，按 PRD 渲染 "—"
+    const used = (0, render_1.formatSize)(data.storageUsedBytes);
+    const total = data.storageQuotaBytes > 0 ? (0, render_1.formatSize)(data.storageQuotaBytes) : "—";
+    const pct = data.storageQuotaBytes > 0 ? `${data.usagePercent.toFixed(1)}%` : "—";
+    (0, output_1.emit)((0, render_1.renderKeyValue)([
+        ["used", used],
+        ["quota", total],
+        ["usage", pct],
+        ["tables", String(data.tables)],
+        ["views", String(data.views)],
+    ], tty));
+}

package/dist/cli/handlers/db/recovery.js

@@ -0,0 +1,141 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleDbRecoveryDiff = handleDbRecoveryDiff;
+exports.handleDbRecoveryApply = handleDbRecoveryApply;
+const node_readline_1 = __importDefault(require("node:readline"));
+const api = __importStar(require("../../../api/index"));
+const shared_1 = require("../../../cli/commands/shared");
+const error_1 = require("../../../utils/error");
+const output_1 = require("../../../utils/output");
+const render_1 = require("../../../utils/render");
+// ── recovery diff ──
+async function handleDbRecoveryDiff(target, opts) {
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const ts = normalizeTimestamp(target);
+    const result = await api.db.recover({ appId, target: ts, dryRun: true });
+    renderRecover(result);
+}
+async function handleDbRecoveryApply(target, opts) {
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const ts = normalizeTimestamp(target);
+    // PITR 高危：apply 之前先强制 diff 给用户审；--yes 才能跳过
+    const preview = await api.db.recover({ appId, target: ts, dryRun: true });
+    if (!opts.yes && !(0, output_1.isJsonMode)()) {
+        renderRecover(preview);
+        const ok = await confirm(`? Restore ${String(preview.tablesAffected)} table(s) to ${preview.target}? This is IRREVERSIBLE. (y/N) `);
+        if (!ok) {
+            (0, output_1.emit)("Aborted.");
+            return;
+        }
+    }
+    const result = await api.db.recover({ appId, target: ts, dryRun: false });
+    renderRecover(result);
+}
+// ── helpers ──
+/**
+ * 把用户传入的时间统一成 ISO 8601 UTC。
+ * 接受：`YYYY-MM-DD` / `YYYY-MM-DD HH:MM:SS` / 完整 ISO 8601。
+ */
+function normalizeTimestamp(input) {
+    const FORMAT_HINT = "Use ISO 8601 / yyyy-mm-dd / yyyy-mm-dd HH:MM:SS.";
+    if (input === "") {
+        throw new error_1.AppError("ARGS_INVALID", "target timestamp is required", {
+            next_actions: ["Usage: miaoda db recovery diff|apply <timestamp>"],
+        });
+    }
+    // YYYY-MM-DD：按 UTC 00:00:00
+    if (/^\d{4}-\d{2}-\d{2}$/.test(input)) {
+        return new Date(`${input}T00:00:00Z`).toISOString();
+    }
+    // YYYY-MM-DD HH:MM[:SS]：本地时间，让 Date 自己解析
+    if (/^\d{4}-\d{2}-\d{2} \d{2}:\d{2}(:\d{2})?$/.test(input)) {
+        const d = new Date(input.replace(" ", "T"));
+        if (Number.isNaN(d.getTime())) {
+            throw new error_1.AppError("INVALID_TIMESTAMP", `invalid timestamp: ${input}`, {
+                next_actions: [FORMAT_HINT],
+            });
+        }
+        return d.toISOString();
+    }
+    // 完整 ISO 8601
+    const d = new Date(input);
+    if (Number.isNaN(d.getTime())) {
+        throw new error_1.AppError("INVALID_TIMESTAMP", `invalid timestamp: ${input}`, {
+            next_actions: [FORMAT_HINT],
+        });
+    }
+    return d.toISOString();
+}
+function renderRecover(result) {
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitOk)(result);
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    if (result.changes.length === 0) {
+        (0, output_1.emit)(`No tables affected at ${result.target}.`);
+        return;
+    }
+    const headers = ["table", "action", "inserted", "deleted", "modified", "dropped_at"];
+    const rows = result.changes.map((c) => [
+        c.table,
+        c.action ?? "—",
+        c.inserted !== undefined ? String(c.inserted) : "—",
+        c.deleted !== undefined ? String(c.deleted) : "—",
+        c.modified !== undefined ? String(c.modified) : "—",
+        c.droppedAt ?? "—",
+    ]);
+    (0, output_1.emit)(tty ? (0, render_1.renderAlignedTable)(headers, rows) : (0, render_1.renderTsv)(headers, rows));
+    if (result.dryRun) {
+        const eta = result.estimatedSeconds !== undefined ? `, eta ~${String(result.estimatedSeconds)}s` : "";
+        (0, output_1.emit)(`(dry-run: ${String(result.tablesAffected)} table(s) affected${eta}; run \`db recovery apply\` to commit)`);
+    }
+    else {
+        (0, output_1.emit)(`✓ Restored ${String(result.tablesAffected)} table(s) to ${result.target} in ${String(result.elapsedSeconds ?? 0)}s`);
+    }
+}
+async function confirm(prompt) {
+    const rl = node_readline_1.default.createInterface({ input: process.stdin, output: process.stderr });
+    return new Promise((resolve) => {
+        rl.question(prompt, (answer) => {
+            rl.close();
+            resolve(answer.trim().toLowerCase() === "y");
+        });
+    });
+}

package/dist/cli/handlers/file/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleFileSign = exports.handleFileRm = exports.handleFileCp = exports.handleFileStat = exports.handleFileLs = void 0;
+exports.handleFileQuota = exports.handleFileSign = exports.handleFileRm = exports.handleFileCp = exports.handleFileStat = exports.handleFileLs = void 0;
 var ls_1 = require("./ls");
 Object.defineProperty(exports, "handleFileLs", { enumerable: true, get: function () { return ls_1.handleFileLs; } });
 var stat_1 = require("./stat");
@@ -11,3 +11,5 @@ var rm_1 = require("./rm");
 Object.defineProperty(exports, "handleFileRm", { enumerable: true, get: function () { return rm_1.handleFileRm; } });
 var sign_1 = require("./sign");
 Object.defineProperty(exports, "handleFileSign", { enumerable: true, get: function () { return sign_1.handleFileSign; } });
+var quota_1 = require("./quota");
+Object.defineProperty(exports, "handleFileQuota", { enumerable: true, get: function () { return quota_1.handleFileQuota; } });

package/dist/cli/handlers/file/quota.js

@@ -0,0 +1,58 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleFileQuota = handleFileQuota;
+const api = __importStar(require("../../../api/index"));
+const shared_1 = require("../../../cli/commands/shared");
+const output_1 = require("../../../utils/output");
+const render_1 = require("../../../utils/render");
+async function handleFileQuota(opts) {
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const data = await api.file.getStorageQuota({ appId });
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitOk)(data);
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    const used = (0, render_1.formatSize)(data.storageUsedBytes);
+    const total = data.storageQuotaBytes > 0 ? (0, render_1.formatSize)(data.storageQuotaBytes) : "—";
+    const pct = data.storageQuotaBytes > 0 ? `${data.usagePercent.toFixed(1)}%` : "—";
+    (0, output_1.emit)((0, render_1.renderKeyValue)([
+        ["used", used],
+        ["quota", total],
+        ["usage", pct],
+        ["files", String(data.files)],
+    ], tty));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/miaoda-cli",
-  "version": "0.1.1-beta.1f766b6",
+  "version": "0.1.2-alpha.4d0ff57",
   "description": "Miaoda 平台命令行工具，面向 Agent 调用",
   "type": "commonjs",
   "bin": {