@lark-apaas/miaoda-cli 0.1.2-alpha.74c0e23 → 0.1.2-alpha.87ead47

package/dist/api/db/api.js

@@ -4,6 +4,14 @@ exports.execSql = execSql;
 exports.getSchema = getSchema;
 exports.importData = importData;
 exports.exportData = exportData;
+exports.listDDLChangelog = listDDLChangelog;
+exports.getAuditStatus = getAuditStatus;
+exports.setAuditConfig = setAuditConfig;
+exports.listAuditLog = listAuditLog;
+exports.migrationInit = migrationInit;
+exports.migrate = migrate;
+exports.recover = recover;
+exports.getDbQuota = getDbQuota;
 const http_1 = require("../../utils/http");
 const error_1 = require("../../utils/error");
 const http_client_1 = require("@lark-apaas/http-client");
@@ -247,10 +255,14 @@ async function exportData(opts) {
         await mapDbHttpError(err, url, "Failed to export data");
         throw err; // 不可达
     }
-    // 成功路径：响应 body 通常是原始 CSV/JSON 字节，但部分错误场景下网关会返
+    // 成功路径：响应 body 通常是原始 CSV/SQL/JSON 字节，但部分错误场景下网关会返
     // HTTP 200 + JSON envelope（status_code != "0"），需要在这里嗅探兜底。
-    const contentType = response.headers.get("Content-Type") ??
-        (opts.format === "csv" ? "text/csv" : "application/json");
+    const defaultContentType = {
+        csv: "text/csv",
+        sql: "text/plain",
+        json: "application/json",
+    };
+    const contentType = response.headers.get("Content-Type") ?? defaultContentType[opts.format];
     const ab = await response.arrayBuffer();
     const buf = Buffer.from(new Uint8Array(ab));
     if (buf.length === 0) {
@@ -258,8 +270,9 @@ async function exportData(opts) {
     }
     // Envelope sniff：HTTP 200 + Content-Type 为 application/json + body 解析得到
     // InnerEnvelope 且 status_code 非 "0" 时，按业务错误抛出。
-    // 仅 CSV 格式做 sniff —— JSON 格式正常成功响应也是 application/json，会误判。
-    if (opts.format === "csv" && /application\/json/i.test(contentType)) {
+    // CSV / SQL 都是非 JSON 输出，application/json 响应必是错误信封；JSON 格式
+    // 成功响应自身就是 application/json，跳过 sniff 避免误判。
+    if (opts.format !== "json" && /application\/json/i.test(contentType)) {
         try {
             const parsed = JSON.parse(buf.toString("utf8"));
             if (parsed.status_code != null && parsed.status_code !== "0") {
@@ -269,7 +282,7 @@ async function exportData(opts) {
         }
         catch (err) {
             // 已经被 extractData 抛成 AppError → 透传；否则 JSON.parse 失败说明 body
-            // 真的是 CSV 文本，继续按成功流程走
+            // 真的是 CSV / SQL 文本，继续按成功流程走
             if (err instanceof error_1.AppError)
                 throw err;
         }
@@ -286,3 +299,234 @@ async function exportData(opts) {
         recordCount,
     };
 }
+// ── db changelog → InnerAdminListDDLChangelog ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/changelog?table=&since=&until=&limit=&cursor=&dbBranch=
+ *
+ * 时间字段 since/until 由 CLI 端归一化为 ISO 8601 UTC 后透传；后端按 created_at 比较。
+ */
+async function listDDLChangelog(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/changelog", {
+        table: opts.table,
+        since: opts.since,
+        until: opts.until,
+        limit: opts.limit !== undefined ? String(opts.limit) : undefined,
+        cursor: opts.cursor,
+        dbBranch: opts.dbBranch,
+    });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to list DDL changelog");
+        throw err; // 不可达
+    }
+    const body = (await response.json());
+    const data = (0, client_1.extractData)(body);
+    return {
+        items: data.items ?? [],
+        nextCursor: data.nextCursor && data.nextCursor !== "" ? data.nextCursor : null,
+        hasMore: Boolean(data.hasMore),
+    };
+}
+// ── db audit → InnerAdminGetAuditStatus / InnerAdminSetAuditConfig ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/audit/status?table=&dbBranch=
+ * 查表审计开关状态。table 非空 → 单表过滤；空 → 返当前 workspace 全部已配置表。
+ */
+async function getAuditStatus(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/audit/status", {
+        table: opts.table,
+        dbBranch: opts.dbBranch,
+    });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to get audit status");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    const data = (0, client_1.extractData)(respBody);
+    return data.items ?? [];
+}
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/audit/config
+ * 写：enabled=true 开启 / false 关闭。retention 仅 enabled=true 生效。
+ */
+async function setAuditConfig(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/audit/config");
+    const body = {
+        table: opts.table,
+        enabled: opts.enabled,
+    };
+    if (opts.retention !== undefined && opts.retention !== "")
+        body.retention = opts.retention;
+    if (opts.dbBranch !== undefined && opts.dbBranch !== "")
+        body.dbBranch = opts.dbBranch;
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, body);
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to set audit config");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    const data = (0, client_1.extractData)(respBody);
+    if (!data.status) {
+        throw new error_1.AppError("INTERNAL_DB_ERROR", "audit config response missing status field");
+    }
+    return data.status;
+}
+// ── db audit log → InnerAdminListAuditLog ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/audit/log?tables=&since=&until=&limit=&cursor=&dbBranch=
+ *
+ * 走 admin-inner 接口而不是 InnerAdminExecuteSQL 直接 SELECT pg_audit：
+ *   - operator 在 details JSONB 内是 user_id，服务端解析成 username
+ *   - summary 后端按 type + before/after diff 合成（pg_audit 表无此列）
+ *   - before/after JSONB 后端 JSON.stringify 后透传字符串，CLI 按需 parse
+ *
+ * 多表用逗号拼接走 query；后端按 target_table IN (...) 一次查。skipped 字段返
+ * 多表中无记录的表名，便于 CLI 展示 hint。
+ */
+async function listAuditLog(opts) {
+    if (opts.tables.length === 0) {
+        throw new error_1.AppError("ARGS_INVALID", "at least one table is required");
+    }
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/audit/log", {
+        tables: opts.tables.join(","),
+        since: opts.since,
+        until: opts.until,
+        limit: opts.limit !== undefined ? String(opts.limit) : undefined,
+        cursor: opts.cursor,
+        dbBranch: opts.dbBranch,
+    });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to list audit log");
+        throw err; // 不可达
+    }
+    const body = (await response.json());
+    const data = (0, client_1.extractData)(body);
+    return {
+        items: data.items ?? [],
+        nextCursor: data.nextCursor && data.nextCursor !== "" ? data.nextCursor : null,
+        hasMore: Boolean(data.hasMore),
+        skipped: data.skipped ?? [],
+    };
+}
+// ── db migration → InnerAdminMigrationInit / InnerAdminMigrate ──
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/enableMultiEnv
+ * 单库 → dev/online 双库初始化，不可逆。对应公开 API EnableMultiEnvDB 的 admin-inner 通道。
+ */
+async function migrationInit(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/enableMultiEnv");
+    const body = {};
+    if (opts.syncData !== undefined)
+        body.syncData = opts.syncData;
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, body);
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to init migration");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/migration
+ * 合并 diff + apply：dryRun=true 只返 changes 不下发；dryRun=false 才执行。
+ */
+async function migrate(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/migration");
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, { dryRun: opts.dryRun });
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to migrate");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}
+// ── db recovery → InnerAdminRecover ──
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/recovery
+ * 合并 PITR diff + apply：dryRun=true 预览影响；dryRun=false 触发恢复。
+ */
+async function recover(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/recovery");
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, {
+            target: opts.target,
+            dryRun: opts.dryRun,
+        });
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to recover");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}
+// ── db quota → InnerAdminGetDbQuota ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/quota?dbBranch=
+ */
+async function getDbQuota(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/quota", { dbBranch: opts.dbBranch });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to get db quota");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}

package/dist/api/db/client.js

@@ -129,6 +129,42 @@ const BIZ_ERR_MAP = new Map(Object.entries({
     // k_dl_1300015：SELECT 结果超过 1000 行硬拦；多行 hint 由 output.ts 的
     // SERVER_ERROR_HINTS 按语义 code 兜底，这里只做 code 改名
     k_dl_1300015: { code: "RESULT_SET_TOO_LARGE" },
+    // audit
+    k_dl_1310001: {
+        code: "AUDIT_ALREADY_ENABLED",
+        hint: "Use `miaoda db audit status <table>` to confirm current state.",
+    },
+    k_dl_1310002: {
+        code: "AUDIT_NOT_ENABLED",
+        hint: "Run `miaoda db audit enable <table>` first.",
+    },
+    k_dl_1310003: {
+        code: "INVALID_RETENTION",
+        hint: "Allowed values: 7d, 30d, 180d, 360d, forever.",
+    },
+    // migration
+    k_dl_1320001: {
+        code: "MIGRATION_NOT_AVAILABLE",
+        hint: "Migration commands require an expert-mode application.",
+    },
+    k_dl_1320002: { code: "MULTI_ENV_ALREADY_INITIALIZED" },
+    k_dl_1320003: {
+        code: "NO_PENDING_CHANGES",
+        hint: "dev and online schemas are already in sync.",
+    },
+    // recovery
+    k_dl_1330001: {
+        code: "RECOVERY_WINDOW_EXCEEDED",
+        hint: "Pick a timestamp inside the supported recovery window.",
+    },
+    k_dl_1330002: {
+        code: "RECOVERY_IN_PROGRESS",
+        hint: "Wait for the running recovery to finish, or check its status.",
+    },
+    k_dl_1330003: {
+        code: "INVALID_TIMESTAMP",
+        hint: "Use ISO 8601 / yyyy-mm-dd / yyyy-mm-dd HH:MM:SS.",
+    },
 }));
 /** PG SQLSTATE → CLI code（当前 dataloom 不一定透传，预留未来使用） */
 exports.SQLSTATE_MAP = {

package/dist/api/db/index.js

@@ -1,11 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.pickTableDetail = exports.flattenSchemaList = exports.parseSqlResult = exports.SQLSTATE_MAP = exports.ensureInnerSuccess = exports.buildInnerUrl = exports.exportData = exports.importData = exports.getSchema = exports.execSql = void 0;
+exports.pickTableDetail = exports.flattenSchemaList = exports.parseSqlResult = exports.SQLSTATE_MAP = exports.ensureInnerSuccess = exports.buildInnerUrl = exports.getDbQuota = exports.recover = exports.migrate = exports.migrationInit = exports.listAuditLog = exports.setAuditConfig = exports.getAuditStatus = exports.listDDLChangelog = exports.exportData = exports.importData = exports.getSchema = exports.execSql = void 0;
 var api_1 = require("./api");
 Object.defineProperty(exports, "execSql", { enumerable: true, get: function () { return api_1.execSql; } });
 Object.defineProperty(exports, "getSchema", { enumerable: true, get: function () { return api_1.getSchema; } });
 Object.defineProperty(exports, "importData", { enumerable: true, get: function () { return api_1.importData; } });
 Object.defineProperty(exports, "exportData", { enumerable: true, get: function () { return api_1.exportData; } });
+Object.defineProperty(exports, "listDDLChangelog", { enumerable: true, get: function () { return api_1.listDDLChangelog; } });
+Object.defineProperty(exports, "getAuditStatus", { enumerable: true, get: function () { return api_1.getAuditStatus; } });
+Object.defineProperty(exports, "setAuditConfig", { enumerable: true, get: function () { return api_1.setAuditConfig; } });
+Object.defineProperty(exports, "listAuditLog", { enumerable: true, get: function () { return api_1.listAuditLog; } });
+Object.defineProperty(exports, "migrationInit", { enumerable: true, get: function () { return api_1.migrationInit; } });
+Object.defineProperty(exports, "migrate", { enumerable: true, get: function () { return api_1.migrate; } });
+Object.defineProperty(exports, "recover", { enumerable: true, get: function () { return api_1.recover; } });
+Object.defineProperty(exports, "getDbQuota", { enumerable: true, get: function () { return api_1.getDbQuota; } });
 var client_1 = require("./client");
 Object.defineProperty(exports, "buildInnerUrl", { enumerable: true, get: function () { return client_1.buildInnerUrl; } });
 Object.defineProperty(exports, "ensureInnerSuccess", { enumerable: true, get: function () { return client_1.ensureInnerSuccess; } });

package/dist/api/file/api.js

@@ -8,6 +8,7 @@ exports.uploadFile = uploadFile;
 exports.signDownload = signDownload;
 exports.downloadFile = downloadFile;
 exports.deleteFiles = deleteFiles;
+exports.getStorageQuota = getStorageQuota;
 const error_1 = require("../../utils/error");
 const logger_1 = require("../../utils/logger");
 const client_1 = require("./client");
@@ -519,3 +520,17 @@ async function deleteFiles(opts) {
     }
     return { deleted, failed };
 }
+// ── storage quota ──
+/**
+ * 后端：GET /v1/storage/app/{appId}/bucket/{bucketId}/quota
+ * 单 bucket 用量；StorageQuotaBytes 暂未对接，CLI 拿到 0 时按 "—" 渲染。
+ * bucketId 缺省时走默认 bucket（与 ls / stat / cp 等一致）。
+ */
+async function getStorageQuota(opts) {
+    const bucketId = opts.bucketId ?? (await (0, client_1.getDefaultBucketId)(opts.appId));
+    const url = `/v1/storage/app/${encodeURIComponent(opts.appId)}/bucket/${encodeURIComponent(bucketId)}/quota`;
+    const body = await (0, client_1.doGet)(url, {
+        errorContext: `fetch storage quota for app '${opts.appId}' bucket '${bucketId}'`,
+    });
+    return extractEnvelope(body);
+}

package/dist/api/file/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.toAbsolutePath = exports.looksLikePath = exports.resetBucketCache = exports.getDefaultBucketId = exports.parseTimeFilterMs = exports.resolveInputs = exports.deleteFiles = exports.downloadFile = exports.signDownload = exports.uploadFile = exports.statFile = exports.listFiles = void 0;
+exports.toAbsolutePath = exports.looksLikePath = exports.resetBucketCache = exports.getDefaultBucketId = exports.getStorageQuota = exports.parseTimeFilterMs = exports.resolveInputs = exports.deleteFiles = exports.downloadFile = exports.signDownload = exports.uploadFile = exports.statFile = exports.listFiles = void 0;
 var api_1 = require("./api");
 Object.defineProperty(exports, "listFiles", { enumerable: true, get: function () { return api_1.listFiles; } });
 Object.defineProperty(exports, "statFile", { enumerable: true, get: function () { return api_1.statFile; } });
@@ -10,6 +10,7 @@ Object.defineProperty(exports, "downloadFile", { enumerable: true, get: function
 Object.defineProperty(exports, "deleteFiles", { enumerable: true, get: function () { return api_1.deleteFiles; } });
 Object.defineProperty(exports, "resolveInputs", { enumerable: true, get: function () { return api_1.resolveInputs; } });
 Object.defineProperty(exports, "parseTimeFilterMs", { enumerable: true, get: function () { return api_1.parseTimeFilterMs; } });
+Object.defineProperty(exports, "getStorageQuota", { enumerable: true, get: function () { return api_1.getStorageQuota; } });
 var client_1 = require("./client");
 Object.defineProperty(exports, "getDefaultBucketId", { enumerable: true, get: function () { return client_1.getDefaultBucketId; } });
 Object.defineProperty(exports, "resetBucketCache", { enumerable: true, get: function () { return client_1.resetBucketCache; } });

package/dist/api/index.js

@@ -33,16 +33,10 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deploy = exports.app = exports.observability = exports.db = exports.file = exports.plugin = void 0;
+exports.db = exports.file = exports.plugin = void 0;
 const _plugin = __importStar(require("../api/plugin/index"));
 const _file = __importStar(require("../api/file/index"));
 const _db = __importStar(require("../api/db/index"));
-const _observability = __importStar(require("../api/observability/index"));
-const _app = __importStar(require("../api/app/index"));
-const _deploy = __importStar(require("../api/deploy/index"));
 exports.plugin = { ..._plugin };
 exports.file = { ..._file };
 exports.db = { ..._db };
-exports.observability = { ..._observability };
-exports.app = { ..._app };
-exports.deploy = { ..._deploy };

package/dist/cli/commands/db/index.js

@@ -1,7 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerDbCommands = registerDbCommands;
+const error_1 = require("../../../utils/error");
 const index_1 = require("../../../cli/handlers/db/index");
+function parsePositiveInt(raw) {
+    const n = Number(raw);
+    if (!Number.isInteger(n) || n < 1) {
+        throw new error_1.AppError("ARGS_INVALID", `--limit must be a positive integer (got '${raw}')`);
+    }
+    return n;
+}
 function registerDbCommands(program) {
     const dbCmd = program
         .command("db")
@@ -206,4 +214,133 @@ Examples:
   Error: Output file 'users.csv' already exists
     hint: Use -f to specify a different path, or --force to overwrite.
 `);
+    // ── changelog ──
+    dbCmd
+        .command("changelog")
+        .summary("查看 DDL 变更历史")
+        .description("列出 DDL 变更（CREATE / ALTER / DROP），支持按表、时间窗筛选与游标分页。")
+        .usage("[flags]")
+        .option("--table <name>", "只看某张表的 DDL 变更")
+        .option("--since <time>", "起始时间（含），相对 1h/2d / 日期 YYYY-MM-DD / ISO 8601")
+        .option("--until <time>", "结束时间（含），同 --since 格式")
+        .option("--limit <n>", "单次返回上限（默认 20）", parsePositiveInt, 20)
+        .option("--cursor <token>", "分页游标，从上次响应的 next_cursor 取值")
+        .option("--all", "自动翻页直到取完所有记录")
+        .action(async function () {
+        await (0, index_1.handleDbChangelog)(this.optsWithGlobals());
+    });
+    // ── audit ──
+    const auditCmd = dbCmd
+        .command("audit")
+        .summary("表级数据审计开关与查询")
+        .description("配置表的数据审计 (enable/disable/retention)，查询审计状态与日志。")
+        .usage("<command> [flags]");
+    auditCmd.action(() => {
+        auditCmd.outputHelp();
+    });
+    auditCmd
+        .command("status")
+        .summary("查看审计开关状态（不传 table 返列表）")
+        .usage("[table] [flags]")
+        .argument("[table]", "表名；省略时返所有已配置审计的表")
+        .action(async function (table) {
+        await (0, index_1.handleDbAuditStatus)(table, this.optsWithGlobals());
+    });
+    auditCmd
+        .command("enable")
+        .summary("启用表审计")
+        .usage("<table> [flags]")
+        .argument("<table>", "目标表名")
+        .option("--retention <ttl>", "保留时长 7d / 30d / 180d / 360d / forever", "7d")
+        .action(async function (table) {
+        await (0, index_1.handleDbAuditEnable)(table, this.optsWithGlobals());
+    });
+    auditCmd
+        .command("disable")
+        .summary("关闭表审计")
+        .usage("<table> [flags]")
+        .argument("<table>", "目标表名")
+        .action(async function (table) {
+        await (0, index_1.handleDbAuditDisable)(table, this.optsWithGlobals());
+    });
+    auditCmd
+        .command("list")
+        .summary("查询审计日志")
+        .description("按表 + 时间窗查询审计日志（INSERT / UPDATE / DELETE）。")
+        .usage("<table...> [flags]")
+        .argument("<tables...>", "一个或多个表名（多表时空表会汇总到 stderr）")
+        .option("--since <time>", "起始时间")
+        .option("--until <time>", "结束时间")
+        .option("--limit <n>", "单次返回上限（默认 50）", parsePositiveInt, 50)
+        .option("--cursor <ts>", "分页游标，传上一页末条 event_time")
+        .action(async function (tables) {
+        await (0, index_1.handleDbAuditList)(tables, this.optsWithGlobals());
+    });
+    // ── migration ──
+    const migrationCmd = dbCmd
+        .command("migration")
+        .summary("多环境管理（dev / online，仅专家模式应用）")
+        .description("init 拆分双环境，diff 预览待发布变更，apply 把 dev 同步到 online。")
+        .usage("<command> [flags]");
+    migrationCmd.action(() => {
+        migrationCmd.outputHelp();
+    });
+    migrationCmd
+        .command("init")
+        .summary("初始化多环境（不可逆）")
+        .usage("[flags]")
+        .option("--sync-data", "同时把现有数据复制到 dev")
+        .option("--yes", "跳过 TTY 确认")
+        .action(async function () {
+        await (0, index_1.handleDbMigrationInit)(this.optsWithGlobals());
+    });
+    migrationCmd
+        .command("diff")
+        .summary("预览 dev → online 待发布变更")
+        .usage("[flags]")
+        .action(async function () {
+        await (0, index_1.handleDbMigrationDiff)(this.optsWithGlobals());
+    });
+    migrationCmd
+        .command("apply")
+        .summary("应用 dev 变更到 online（多 DDL 单事务原子）")
+        .usage("[flags]")
+        .option("--yes", "跳过 TTY 二次确认")
+        .action(async function () {
+        await (0, index_1.handleDbMigrationApply)(this.optsWithGlobals());
+    });
+    // ── recovery（PITR）──
+    const recoveryCmd = dbCmd
+        .command("recovery")
+        .summary("基于时间点恢复（PITR）")
+        .description("把数据库整体恢复到指定时间点，diff 预览影响范围，apply 不可逆覆盖。")
+        .usage("<command> [flags]");
+    recoveryCmd.action(() => {
+        recoveryCmd.outputHelp();
+    });
+    recoveryCmd
+        .command("diff")
+        .summary("预览恢复到指定时间点的影响范围")
+        .usage("<timestamp> [flags]")
+        .argument("<timestamp>", "目标时间，YYYY-MM-DD / YYYY-MM-DD HH:MM[:SS] / ISO 8601")
+        .action(async function (target) {
+        await (0, index_1.handleDbRecoveryDiff)(target, this.optsWithGlobals());
+    });
+    recoveryCmd
+        .command("apply")
+        .summary("触发恢复到指定时间点（不可逆覆盖）")
+        .usage("<timestamp> [flags]")
+        .argument("<timestamp>", "目标时间，YYYY-MM-DD / YYYY-MM-DD HH:MM[:SS] / ISO 8601")
+        .option("--yes", "跳过 TTY 二次确认")
+        .action(async function (target) {
+        await (0, index_1.handleDbRecoveryApply)(target, this.optsWithGlobals());
+    });
+    // ── quota ──
+    dbCmd
+        .command("quota")
+        .summary("查看数据库用量与限额")
+        .usage("[flags]")
+        .action(async function () {
+        await (0, index_1.handleDbQuota)(this.optsWithGlobals());
+    });
 }

package/dist/cli/commands/file/index.js

@@ -209,4 +209,11 @@ Examples:
   Error: Expires duration '60d' exceeds the maximum of 30d
     hint: Maximum allowed value is 30d. Use \`--expires 30d\` for the longest link.
 `);
+    fileCmd
+        .command("quota")
+        .summary("查看文件存储用量与限额")
+        .usage("[flags]")
+        .action(async function () {
+        await (0, index_1.handleFileQuota)(this.optsWithGlobals());
+    });
 }

package/dist/cli/commands/index.js

@@ -4,14 +4,8 @@ exports.registerCommands = registerCommands;
 const index_1 = require("../../cli/commands/plugin/index");
 const index_2 = require("../../cli/commands/file/index");
 const index_3 = require("../../cli/commands/db/index");
-const index_4 = require("../../cli/commands/observability/index");
-const index_5 = require("../../cli/commands/app/index");
-const index_6 = require("../../cli/commands/deploy/index");
 function registerCommands(program) {
     (0, index_1.registerPluginCommands)(program);
     (0, index_2.registerFileCommands)(program);
     (0, index_3.registerDbCommands)(program);
-    (0, index_4.registerObservabilityCommands)(program);
-    (0, index_5.registerAppCommands)(program);
-    (0, index_6.registerDeployCommands)(program);
 }

package/dist/cli/commands/shared.js

@@ -1,21 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.appIdOption = appIdOption;
-exports.branchOption = branchOption;
 exports.softRequiredOption = softRequiredOption;
 exports.resolveAppId = resolveAppId;
 exports.withHelp = withHelp;
 exports.failArgs = failArgs;
-exports.rejectCliOverride = rejectCliOverride;
 const commander_1 = require("commander");
 const error_1 = require("../../utils/error");
-/** --app-id option，需要应用上下文的命令自行 .addOption(appIdOption()) */
-function appIdOption() {
-    return new commander_1.Option("--app-id <id>", "指定目标应用").env("MIAODA_APP_ID");
-}
-function branchOption() {
-    return new commander_1.Option("--branch <branch>", "分支（优先级：--branch > 当前仓库 HEAD 分支；非 git 目录回退应用默认分支）").env("LOCAL_MOCK_MIAODA_DEPLOY_BRANCH");
-}
 /**
  * soft-required: Commander 类型上 optional，runtime 校验必填。
  */
@@ -37,15 +27,11 @@ function resolveAppId(opts) {
     }
     return id;
 }
-/**
- * 包裹 handler，缺 soft-required 参数 / 自定义校验失败时打 help 并退出。
- *
- * 兼容带位置参数的 action 签名（如 `(arg1: string, opts) => ...`）。
- */
+/** 包裹 handler，缺 soft-required 参数时打 help 并退出 */
 function withHelp(cmd, handler) {
-    return async (...args) => {
+    return async (opts) => {
         try {
-            await handler(...args);
+            await handler(opts);
         }
         catch (err) {
             if (err instanceof error_1.AppError && err.code === "ARGS_INVALID") {
@@ -62,23 +48,3 @@ function withHelp(cmd, handler) {
 function failArgs(message) {
     throw new error_1.AppError("ARGS_INVALID", message);
 }
-/**
- * 拒绝 CLI 显式覆盖：用于 hideHelp() + .env() 的"沙箱注入参数"（如 --app-id / --branch）。
- *
- * Commander 的 getOptionValueSource() 区分来源（cli / env / default / config / undefined）；
- * 用户在 CLI 上显式传时 source === "cli"，此时抛 ARGS_INVALID（exit 2 + help）。
- *
- * 用法：在 action 头部一行调用——
- *   cmd.action(withHelp(cmd, async (rawOpts) => {
- *     rejectCliOverride(cmd, "appId", "branch");
- *     ...
- *   }));
- */
-function rejectCliOverride(cmd, ...optNames) {
-    for (const name of optNames) {
-        if (cmd.getOptionValueSource(name) === "cli") {
-            const flag = "--" + name.replace(/([A-Z])/g, "-$1").toLowerCase();
-            failArgs(`${flag} 由沙箱/本地配置注入，不允许显式传递`);
-        }
-    }
-}