@lark-apaas/miaoda-cli 0.1.2-alpha.8bc93eb → 0.1.2-alpha.96b37fa

package/dist/api/db/api.js

@@ -7,6 +7,7 @@ exports.exportData = exportData;
 exports.listDDLChangelog = listDDLChangelog;
 exports.getAuditStatus = getAuditStatus;
 exports.setAuditConfig = setAuditConfig;
+exports.listAuditLog = listAuditLog;
 exports.migrationInit = migrationInit;
 exports.migrate = migrate;
 exports.recover = recover;
@@ -392,6 +393,51 @@ async function setAuditConfig(opts) {
     }
     return data.status;
 }
+// ── db audit log → InnerAdminListAuditLog ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/audit/log?tables=&since=&until=&limit=&cursor=&dbBranch=
+ *
+ * 走 admin-inner 接口而不是 InnerAdminExecuteSQL 直接 SELECT pg_audit：
+ *   - operator 在 details JSONB 内是 user_id，服务端解析成 username
+ *   - summary 后端按 type + before/after diff 合成（pg_audit 表无此列）
+ *   - before/after JSONB 后端 JSON.stringify 后透传字符串，CLI 按需 parse
+ *
+ * 多表用逗号拼接走 query；后端按 target_table IN (...) 一次查。skipped 字段返
+ * 多表中无记录的表名，便于 CLI 展示 hint。
+ */
+async function listAuditLog(opts) {
+    if (opts.tables.length === 0) {
+        throw new error_1.AppError("ARGS_INVALID", "at least one table is required");
+    }
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/audit/log", {
+        tables: opts.tables.join(","),
+        since: opts.since,
+        until: opts.until,
+        limit: opts.limit !== undefined ? String(opts.limit) : undefined,
+        cursor: opts.cursor,
+        dbBranch: opts.dbBranch,
+    });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to list audit log");
+        throw err; // 不可达
+    }
+    const body = (await response.json());
+    const data = (0, client_1.extractData)(body);
+    return {
+        items: data.items ?? [],
+        nextCursor: data.nextCursor && data.nextCursor !== "" ? data.nextCursor : null,
+        hasMore: Boolean(data.hasMore),
+        skipped: data.skipped ?? [],
+    };
+}
 // ── db migration → InnerAdminMigrationInit / InnerAdminMigrate ──
 /**
  * 后端：POST /v1/dataloom/app/{appId}/db/enableMultiEnv

package/dist/api/db/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.pickTableDetail = exports.flattenSchemaList = exports.parseSqlResult = exports.SQLSTATE_MAP = exports.ensureInnerSuccess = exports.buildInnerUrl = exports.getDbQuota = exports.recover = exports.migrate = exports.migrationInit = exports.setAuditConfig = exports.getAuditStatus = exports.listDDLChangelog = exports.exportData = exports.importData = exports.getSchema = exports.execSql = void 0;
+exports.pickTableDetail = exports.flattenSchemaList = exports.parseSqlResult = exports.SQLSTATE_MAP = exports.ensureInnerSuccess = exports.buildInnerUrl = exports.getDbQuota = exports.recover = exports.migrate = exports.migrationInit = exports.listAuditLog = exports.setAuditConfig = exports.getAuditStatus = exports.listDDLChangelog = exports.exportData = exports.importData = exports.getSchema = exports.execSql = void 0;
 var api_1 = require("./api");
 Object.defineProperty(exports, "execSql", { enumerable: true, get: function () { return api_1.execSql; } });
 Object.defineProperty(exports, "getSchema", { enumerable: true, get: function () { return api_1.getSchema; } });
@@ -9,6 +9,7 @@ Object.defineProperty(exports, "exportData", { enumerable: true, get: function (
 Object.defineProperty(exports, "listDDLChangelog", { enumerable: true, get: function () { return api_1.listDDLChangelog; } });
 Object.defineProperty(exports, "getAuditStatus", { enumerable: true, get: function () { return api_1.getAuditStatus; } });
 Object.defineProperty(exports, "setAuditConfig", { enumerable: true, get: function () { return api_1.setAuditConfig; } });
+Object.defineProperty(exports, "listAuditLog", { enumerable: true, get: function () { return api_1.listAuditLog; } });
 Object.defineProperty(exports, "migrationInit", { enumerable: true, get: function () { return api_1.migrationInit; } });
 Object.defineProperty(exports, "migrate", { enumerable: true, get: function () { return api_1.migrate; } });
 Object.defineProperty(exports, "recover", { enumerable: true, get: function () { return api_1.recover; } });

package/dist/cli/handlers/db/audit.js

@@ -44,7 +44,6 @@ const colors_1 = require("../../../utils/colors");
 const error_1 = require("../../../utils/error");
 const output_1 = require("../../../utils/output");
 const render_1 = require("../../../utils/render");
-const index_2 = require("../../../api/db/index");
 const VALID_RETENTION = new Set(["7d", "30d", "180d", "360d", "forever"]);
 async function handleDbAuditStatus(table, opts) {
     const appId = (0, shared_1.resolveAppId)(opts);
@@ -169,40 +168,35 @@ async function handleDbAuditList(tables, opts) {
     }
     const appId = (0, shared_1.resolveAppId)(opts);
     const limit = opts.limit ?? 20;
-    // since 优先级：opts.cursor（前一页末条 event_time）> opts.since
-    const sinceRaw = opts.cursor ?? opts.since;
-    const since = normalizeTime(sinceRaw, "--since/--cursor");
+    // 时间字段归一化为 ISO 8601 UTC（服务端按 event_time 字段比较）。cursor 由
+    // 后端管理（本质也是 ISO 时间），CLI 不再混用 cursor/since。
+    const since = normalizeTime(opts.since, "--since");
     const until = normalizeTime(opts.until, "--until");
-    const inList = tables.map((t) => `'${escapeSqlLiteral(t)}'`).join(",");
-    const whereParts = [`target_table IN (${inList})`];
-    if (since !== undefined)
-        whereParts.push(`event_time >= '${since}'`);
-    if (until !== undefined)
-        whereParts.push(`event_time <= '${until}'`);
-    const sql = `SELECT event_id, event_time, target_table, type, operator, summary, details ` +
-        `FROM _dl_audit_log WHERE ${whereParts.join(" AND ")} ORDER BY event_time DESC LIMIT ${String(limit + 1)}`;
-    const results = await api.db.execSql({ appId, sql, dbBranch: opts.env });
-    const allRows = collectSelectRows(results);
-    const hasMore = allRows.length > limit;
-    const visible = hasMore ? allRows.slice(0, limit) : allRows;
-    const nextCursor = hasMore && visible.length > 0 ? asString(visible[visible.length - 1].event_time) : null;
-    // 多表混合时统计哪些表无记录
-    const seen = new Set();
-    for (const r of visible)
-        seen.add(asString(r.target_table));
-    const skipped = tables.filter((t) => !seen.has(t));
+    const result = await api.db.listAuditLog({
+        appId,
+        tables,
+        since,
+        until,
+        limit,
+        cursor: opts.cursor,
+        dbBranch: opts.env,
+    });
+    const visible = result.items;
+    const skipped = result.skipped;
     // PRD JSON：data 是数组，元素是事件对象（snake_case），分页信封 next_cursor / has_more
     if ((0, output_1.isJsonMode)()) {
-        const items = visible.map((r) => ({
-            event_id: asString(r.event_id),
-            event_time: asString(r.event_time),
-            target_table: asString(r.target_table),
-            type: asString(r.type),
-            operator: asString(r.operator),
-            summary: asString(r.summary),
-            details: r.details, // 已经是结构化 JSON，透传
+        const items = visible.map((it) => ({
+            event_id: it.eventId,
+            event_time: it.eventTime,
+            target_table: it.targetTable,
+            type: it.type,
+            operator: it.operator,
+            summary: it.summary,
+            // before/after 服务端是 JSON 字符串，反序列化回结构化对象供下游消费
+            ...(it.before !== undefined ? { before: safeParseJson(it.before) } : {}),
+            ...(it.after !== undefined ? { after: safeParseJson(it.after) } : {}),
         }));
-        (0, output_1.emitPaged)(items, nextCursor, hasMore);
+        (0, output_1.emitPaged)(items, result.nextCursor, result.hasMore);
         if (skipped.length > 0) {
             process.stderr.write(`(${String(skipped.length)} table(s) skipped: ${skipped.join(", ")})\n`);
         }
@@ -225,23 +219,17 @@ async function handleDbAuditList(tables, opts) {
         ? ["target_table", "event_time", "type", "event_id", "operator", "summary"]
         : ["event_time", "type", "event_id", "operator", "summary"];
     const rows = visible.map((it) => {
-        const eventTime = (0, render_1.formatTime)(asString(it.event_time), tty);
-        const eventId = truncateId(asString(it.event_id));
-        const cells = [
-            eventTime,
-            asString(it.type),
-            eventId,
-            asString(it.operator, "—"),
-            asString(it.summary),
-        ];
-        return isMultiTable ? [asString(it.target_table), ...cells] : cells;
+        const eventTime = (0, render_1.formatTime)(it.eventTime, tty);
+        // event_id 完整透传——PRD 截图里的 "..." 只是文档省略写法，不是 CLI 行为
+        const cells = [eventTime, it.type, it.eventId, it.operator || "—", it.summary];
+        return isMultiTable ? [it.targetTable, ...cells] : cells;
     });
     (0, output_1.emit)(tty ? (0, render_1.renderAlignedTable)(headers, rows) : (0, render_1.renderTsv)(headers, rows));
     if (skipped.length > 0) {
         process.stderr.write(`(${String(skipped.length)} table(s) skipped: ${skipped.join(", ")})\n`);
     }
-    if (hasMore && nextCursor) {
-        process.stderr.write(`(more results; use --cursor '${nextCursor}')\n`);
+    if (result.hasMore && result.nextCursor) {
+        process.stderr.write(`(more results; use --cursor '${result.nextCursor}')\n`);
     }
 }
 // ── helpers ──
@@ -255,35 +243,17 @@ function normalizeTime(input, flagName) {
     const ms = (0, index_1.parseTimeFilterMs)(input, flagName);
     return new Date(ms).toISOString();
 }
-function collectSelectRows(results) {
-    const out = [];
-    for (const r of results) {
-        const parsed = (0, index_2.parseSqlResult)(r);
-        if (parsed.kind === "select")
-            out.push(...parsed.rows);
+// 服务端 before/after 是 JSON 字符串透传，CLI JSON 输出再反序列化回对象，
+// 给下游 jq 等工具消费。失败时透传原始字符串避免数据丢失。
+function safeParseJson(s) {
+    try {
+        return JSON.parse(s);
+    }
+    catch {
+        return s;
     }
-    return out;
-}
-// SQL 字面量转义。表名 / 时间戳由调用方控制范围（白名单或严格 ISO 8601 正则）。
-function escapeSqlLiteral(s) {
-    return s.replace(/'/g, "''");
 }
 // PRD 输出 enabled 列用 yes/no 而非 true/false
 function boolToYesNo(b) {
     return b ? "yes" : "no";
 }
-function asString(v, fallback = "") {
-    if (v == null)
-        return fallback;
-    if (typeof v === "string")
-        return v;
-    if (typeof v === "number" || typeof v === "boolean" || typeof v === "bigint")
-        return String(v);
-    return JSON.stringify(v);
-}
-// audit list 的 event_id 在 TTY 视图里截断展示（PRD 示例 "01525416B44F..."）
-function truncateId(id) {
-    if (id.length <= 12)
-        return id;
-    return id.slice(0, 12) + "...";
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/miaoda-cli",
-  "version": "0.1.2-alpha.8bc93eb",
+  "version": "0.1.2-alpha.96b37fa",
   "description": "Miaoda 平台命令行工具，面向 Agent 调用",
   "type": "commonjs",
   "bin": {