@lark-apaas/miaoda-cli 0.1.2-alpha.ccfdc05 → 0.1.2-alpha.d5d1878

package/dist/cli/commands/db/index.js

@@ -1,7 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerDbCommands = registerDbCommands;
+const error_1 = require("../../../utils/error");
 const index_1 = require("../../../cli/handlers/db/index");
+function parsePositiveInt(raw) {
+    const n = Number(raw);
+    if (!Number.isInteger(n) || n < 1) {
+        throw new error_1.AppError("ARGS_INVALID", `--limit must be a positive integer (got '${raw}')`);
+    }
+    return n;
+}
 function registerDbCommands(program) {
     const dbCmd = program
         .command("db")
@@ -206,4 +214,133 @@ Examples:
   Error: Output file 'users.csv' already exists
     hint: Use -f to specify a different path, or --force to overwrite.
 `);
+    // ── changelog ──
+    dbCmd
+        .command("changelog")
+        .summary("查看 DDL 变更历史")
+        .description("列出 DDL 变更（CREATE / ALTER / DROP），支持按表、时间窗筛选与游标分页。")
+        .usage("[flags]")
+        .option("--table <name>", "只看某张表的 DDL 变更")
+        .option("--since <time>", "起始时间（含），相对 1h/2d / 日期 YYYY-MM-DD / ISO 8601")
+        .option("--until <time>", "结束时间（含），同 --since 格式")
+        .option("--limit <n>", "单次返回上限（默认 20）", parsePositiveInt, 20)
+        .option("--cursor <token>", "分页游标，从上次响应的 next_cursor 取值")
+        .option("--all", "自动翻页直到取完所有记录")
+        .action(async function () {
+        await (0, index_1.handleDbChangelog)(this.optsWithGlobals());
+    });
+    // ── audit ──
+    const auditCmd = dbCmd
+        .command("audit")
+        .summary("表级数据审计开关与查询")
+        .description("配置表的数据审计 (enable/disable/retention)，查询审计状态与日志。")
+        .usage("<command> [flags]");
+    auditCmd.action(() => {
+        auditCmd.outputHelp();
+    });
+    auditCmd
+        .command("status")
+        .summary("查看审计开关状态（不传 table 返列表）")
+        .usage("[table] [flags]")
+        .argument("[table]", "表名；省略时返所有已配置审计的表")
+        .action(async function (table) {
+        await (0, index_1.handleDbAuditStatus)(table, this.optsWithGlobals());
+    });
+    auditCmd
+        .command("enable")
+        .summary("启用表审计")
+        .usage("<table> [flags]")
+        .argument("<table>", "目标表名")
+        .option("--retention <ttl>", "保留时长 7d / 30d / 180d / 360d / forever", "7d")
+        .action(async function (table) {
+        await (0, index_1.handleDbAuditEnable)(table, this.optsWithGlobals());
+    });
+    auditCmd
+        .command("disable")
+        .summary("关闭表审计")
+        .usage("<table> [flags]")
+        .argument("<table>", "目标表名")
+        .action(async function (table) {
+        await (0, index_1.handleDbAuditDisable)(table, this.optsWithGlobals());
+    });
+    auditCmd
+        .command("list")
+        .summary("查询审计日志")
+        .description("按表 + 时间窗查询审计日志（INSERT / UPDATE / DELETE）。")
+        .usage("<table...> [flags]")
+        .argument("<tables...>", "一个或多个表名（多表时空表会汇总到 stderr）")
+        .option("--since <time>", "起始时间")
+        .option("--until <time>", "结束时间")
+        .option("--limit <n>", "单次返回上限（默认 50）", parsePositiveInt, 50)
+        .option("--cursor <ts>", "分页游标，传上一页末条 event_time")
+        .action(async function (tables) {
+        await (0, index_1.handleDbAuditList)(tables, this.optsWithGlobals());
+    });
+    // ── migration ──
+    const migrationCmd = dbCmd
+        .command("migration")
+        .summary("多环境管理（dev / online，仅专家模式应用）")
+        .description("init 拆分双环境，diff 预览待发布变更，apply 把 dev 同步到 online。")
+        .usage("<command> [flags]");
+    migrationCmd.action(() => {
+        migrationCmd.outputHelp();
+    });
+    migrationCmd
+        .command("init")
+        .summary("初始化多环境（不可逆）")
+        .usage("[flags]")
+        .option("--sync-data", "同时把现有数据复制到 dev")
+        .option("--yes", "跳过 TTY 确认")
+        .action(async function () {
+        await (0, index_1.handleDbMigrationInit)(this.optsWithGlobals());
+    });
+    migrationCmd
+        .command("diff")
+        .summary("预览 dev → online 待发布变更")
+        .usage("[flags]")
+        .action(async function () {
+        await (0, index_1.handleDbMigrationDiff)(this.optsWithGlobals());
+    });
+    migrationCmd
+        .command("apply")
+        .summary("应用 dev 变更到 online（多 DDL 单事务原子）")
+        .usage("[flags]")
+        .option("--yes", "跳过 TTY 二次确认")
+        .action(async function () {
+        await (0, index_1.handleDbMigrationApply)(this.optsWithGlobals());
+    });
+    // ── recovery（PITR）──
+    const recoveryCmd = dbCmd
+        .command("recovery")
+        .summary("基于时间点恢复（PITR）")
+        .description("把数据库整体恢复到指定时间点，diff 预览影响范围，apply 不可逆覆盖。")
+        .usage("<command> [flags]");
+    recoveryCmd.action(() => {
+        recoveryCmd.outputHelp();
+    });
+    recoveryCmd
+        .command("diff")
+        .summary("预览恢复到指定时间点的影响范围")
+        .usage("<timestamp> [flags]")
+        .argument("<timestamp>", "目标时间，YYYY-MM-DD / YYYY-MM-DD HH:MM[:SS] / ISO 8601")
+        .action(async function (target) {
+        await (0, index_1.handleDbRecoveryDiff)(target, this.optsWithGlobals());
+    });
+    recoveryCmd
+        .command("apply")
+        .summary("触发恢复到指定时间点（不可逆覆盖）")
+        .usage("<timestamp> [flags]")
+        .argument("<timestamp>", "目标时间，YYYY-MM-DD / YYYY-MM-DD HH:MM[:SS] / ISO 8601")
+        .option("--yes", "跳过 TTY 二次确认")
+        .action(async function (target) {
+        await (0, index_1.handleDbRecoveryApply)(target, this.optsWithGlobals());
+    });
+    // ── quota ──
+    dbCmd
+        .command("quota")
+        .summary("查看数据库用量与限额")
+        .usage("[flags]")
+        .action(async function () {
+        await (0, index_1.handleDbQuota)(this.optsWithGlobals());
+    });
 }

package/dist/cli/commands/file/index.js

@@ -209,4 +209,11 @@ Examples:
   Error: Expires duration '60d' exceeds the maximum of 30d
     hint: Maximum allowed value is 30d. Use \`--expires 30d\` for the longest link.
 `);
+    fileCmd
+        .command("quota")
+        .summary("查看文件存储用量与限额")
+        .usage("[flags]")
+        .action(async function () {
+        await (0, index_1.handleFileQuota)(this.optsWithGlobals());
+    });
 }

package/dist/cli/commands/index.js

@@ -1,15 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerCommands = registerCommands;
-const index_1 = require("../../cli/commands/file/index");
-const index_2 = require("../../cli/commands/db/index");
-const index_3 = require("../../cli/commands/observability/index");
-const index_4 = require("../../cli/commands/app/index");
-const index_5 = require("../../cli/commands/deploy/index");
+const index_1 = require("../../cli/commands/plugin/index");
+const index_2 = require("../../cli/commands/file/index");
+const index_3 = require("../../cli/commands/db/index");
 function registerCommands(program) {
-    (0, index_1.registerFileCommands)(program);
-    (0, index_2.registerDbCommands)(program);
-    (0, index_3.registerObservabilityCommands)(program);
-    (0, index_4.registerAppCommands)(program);
-    (0, index_5.registerDeployCommands)(program);
+    (0, index_1.registerPluginCommands)(program);
+    (0, index_2.registerFileCommands)(program);
+    (0, index_3.registerDbCommands)(program);
 }

package/dist/cli/commands/shared.js

@@ -1,24 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.appIdOption = appIdOption;
-exports.branchOption = branchOption;
 exports.softRequiredOption = softRequiredOption;
 exports.resolveAppId = resolveAppId;
 exports.withHelp = withHelp;
 exports.failArgs = failArgs;
-exports.caseInsensitiveChoice = caseInsensitiveChoice;
-exports.validateTimeOptions = validateTimeOptions;
-exports.rejectCliOverride = rejectCliOverride;
 const commander_1 = require("commander");
 const error_1 = require("../../utils/error");
-const time_1 = require("../../utils/time");
-/** --app-id option，需要应用上下文的命令自行 .addOption(appIdOption()) */
-function appIdOption() {
-    return new commander_1.Option("--app-id <id>", "指定目标应用").env("MIAODA_APP_ID");
-}
-function branchOption() {
-    return new commander_1.Option("--branch <branch>", "分支（优先级：--branch > 当前仓库 HEAD 分支；非 git 目录回退应用默认分支）").env("LOCAL_MOCK_MIAODA_DEPLOY_BRANCH");
-}
 /**
  * soft-required: Commander 类型上 optional，runtime 校验必填。
  */
@@ -40,15 +27,11 @@ function resolveAppId(opts) {
     }
     return id;
 }
-/**
- * 包裹 handler，缺 soft-required 参数 / 自定义校验失败时打 help 并退出。
- *
- * 兼容带位置参数的 action 签名（如 `(arg1: string, opts) => ...`）。
- */
+/** 包裹 handler，缺 soft-required 参数时打 help 并退出 */
 function withHelp(cmd, handler) {
-    return async (...args) => {
+    return async (opts) => {
         try {
-            await handler(...args);
+            await handler(opts);
         }
         catch (err) {
             if (err instanceof error_1.AppError && err.code === "ARGS_INVALID") {
@@ -65,64 +48,3 @@ function withHelp(cmd, handler) {
 function failArgs(message) {
     throw new error_1.AppError("ARGS_INVALID", message);
 }
-/**
- * 大小写不敏感的 choice argParser：把用户输入按 lowerCase 匹配回 canonical 数组里
- * 的同名值（保留 canonical 大小写），未命中抛 Commander 的 InvalidArgumentError
- * （exit code 1，自带友好错误）。
- *
- * 必须先 .choices(canonical)、再 .argParser()——Commander 内部 .choices() 会
- * 重置 parseArg，反过来调会让 argParser 失效。.choices() 仅留给 help 渲染
- * "choices: A, B, C"，实际白名单校验由 argParser 接管。
- *
- *   new Option("--level <level>", "日志级别（不区分大小写）")
- *     .choices(["DEBUG", "INFO", "WARN", "ERROR"])
- *     .argParser(caseInsensitiveChoice(["DEBUG", "INFO", "WARN", "ERROR"]));
- */
-function caseInsensitiveChoice(canonical) {
-    const map = new Map(canonical.map((v) => [v.toLowerCase(), v]));
-    return (raw) => {
-        const hit = map.get(raw.toLowerCase());
-        if (hit === undefined) {
-            throw new commander_1.InvalidArgumentError(`Allowed choices are ${canonical.join(", ")} (case-insensitive).`);
-        }
-        return hit;
-    };
-}
-/**
- * --since / --until 等时间参数的 action 阶段校验。
- *
- * Commander 的 argParser 会在 action 前直接按 parser error 退出（exit 1），
- * 绕过 withHelp 的 ARGS_INVALID → exit 2 路径；所以时间参数在 action 内先
- * 校验一遍，再把原始字符串交给 handler 解析成接口需要的单位。
- */
-function validateTimeOptions(opts, ...names) {
-    for (const name of names) {
-        const value = opts[name];
-        if (value === undefined)
-            continue;
-        if (typeof value !== "string") {
-            failArgs(`--${name.replace(/([A-Z])/g, "-$1").toLowerCase()} 必须是时间字符串`);
-        }
-        (0, time_1.parseTimeToMs)(value);
-    }
-}
-/**
- * 拒绝 CLI 显式覆盖：用于 hideHelp() + .env() 的"沙箱注入参数"（如 --app-id / --branch）。
- *
- * Commander 的 getOptionValueSource() 区分来源（cli / env / default / config / undefined）；
- * 用户在 CLI 上显式传时 source === "cli"，此时抛 ARGS_INVALID（exit 2 + help）。
- *
- * 用法：在 action 头部一行调用——
- *   cmd.action(withHelp(cmd, async (rawOpts) => {
- *     rejectCliOverride(cmd, "appId", "branch");
- *     ...
- *   }));
- */
-function rejectCliOverride(cmd, ...optNames) {
-    for (const name of optNames) {
-        if (cmd.getOptionValueSource(name) === "cli") {
-            const flag = "--" + name.replace(/([A-Z])/g, "-$1").toLowerCase();
-            failArgs(`${flag} 由沙箱/本地配置注入，不允许显式传递`);
-        }
-    }
-}

package/dist/cli/handlers/db/audit.js

@@ -0,0 +1,285 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleDbAuditStatus = handleDbAuditStatus;
+exports.handleDbAuditEnable = handleDbAuditEnable;
+exports.handleDbAuditDisable = handleDbAuditDisable;
+exports.handleDbAuditList = handleDbAuditList;
+const api = __importStar(require("../../../api/index"));
+const index_1 = require("../../../api/file/index");
+const shared_1 = require("../../../cli/commands/shared");
+const colors_1 = require("../../../utils/colors");
+const error_1 = require("../../../utils/error");
+const output_1 = require("../../../utils/output");
+const render_1 = require("../../../utils/render");
+const VALID_RETENTION = new Set(["7d", "30d", "180d", "360d", "forever"]);
+async function handleDbAuditStatus(table, opts) {
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const items = await api.db.getAuditStatus({ appId, table, dbBranch: opts.env });
+    const rows = items.map(toAuditStatus);
+    // 单表查询但后端没记录 → 占位 enabled=false
+    if (table !== undefined && table !== "" && rows.length === 0) {
+        rows.push({ table, enabled: false, enabled_at: null, retention: null });
+    }
+    // PRD JSON：单表返 object，多表返 array
+    if ((0, output_1.isJsonMode)()) {
+        if (table !== undefined && rows.length === 1) {
+            (0, output_1.emitOk)((0, output_1.snakeCaseKeys)(rows[0]));
+        }
+        else {
+            (0, output_1.emitOk)((0, output_1.snakeCaseKeys)(rows));
+        }
+        return;
+    }
+    if (rows.length === 0) {
+        (0, output_1.emit)("No audit configuration found.");
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    // 单表 → key:value 形态
+    if (table !== undefined && rows.length === 1) {
+        const it = rows[0];
+        (0, output_1.emit)((0, render_1.renderKeyValue)([
+            ["Table", it.table],
+            ["Enabled", boolToYesNo(it.enabled)],
+            ["Enabled at", it.enabled_at ? (0, render_1.formatTime)(it.enabled_at, tty) : "—"],
+            ["Retention", it.retention ?? "—"],
+        ], tty));
+        return;
+    }
+    // 列表 → table 形态
+    const headers = ["table", "enabled", "enabled_at", "retention"];
+    const out = rows.map((it) => [
+        it.table,
+        boolToYesNo(it.enabled),
+        it.enabled_at ? (0, render_1.formatTime)(it.enabled_at, tty) : "—",
+        it.retention ?? "—",
+    ]);
+    (0, output_1.emit)(tty ? (0, render_1.renderAlignedTable)(headers, out) : (0, render_1.renderTsv)(headers, out));
+}
+function toAuditStatus(s) {
+    return {
+        table: s.table,
+        enabled: s.enabled,
+        enabled_at: s.enabledAt ?? null,
+        retention: s.retention ?? null,
+    };
+}
+async function handleDbAuditEnable(table, opts) {
+    if (!table) {
+        throw new error_1.AppError("ARGS_INVALID", "table name is required", {
+            next_actions: [
+                "Usage: miaoda db audit enable <table> [--retention 7d|30d|180d|360d|forever]",
+            ],
+        });
+    }
+    const retention = opts.retention ?? "7d";
+    if (!VALID_RETENTION.has(retention)) {
+        throw new error_1.AppError("INVALID_RETENTION", `Invalid retention '${retention}'`, {
+            next_actions: ["Allowed values: 7d, 30d, 180d, 360d, forever."],
+        });
+    }
+    const appId = (0, shared_1.resolveAppId)(opts);
+    let status;
+    try {
+        status = await api.db.setAuditConfig({
+            appId,
+            table,
+            enabled: true,
+            retention,
+            dbBranch: opts.env,
+        });
+    }
+    catch (err) {
+        // PRD: 重复 enable 报错时附带 hint，引导用户去 status 看 retention 或换值更新
+        if (err instanceof error_1.AppError && err.code === "DB_API_k_dl_1300030") {
+            throw new error_1.AppError(err.code, err.message, {
+                next_actions: [
+                    `Use \`miaoda db audit status ${table}\` to check current retention, or run this command with a different --retention to update.`,
+                ],
+            });
+        }
+        throw err;
+    }
+    // PRD JSON：{"data": {"table": "...", "enabled": true, "retention": "..."}}
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitOk)((0, output_1.snakeCaseKeys)({
+            table: status.table,
+            enabled: status.enabled,
+            retention: status.retention ?? retention,
+        }));
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    const prefix = tty ? "✓" : "OK";
+    // c.highlight 内部按 TTY/NO_COLOR/FORCE_COLOR 自动决定是否染色，无需再判 tty
+    const tableLabel = colors_1.c.highlight(`'${status.table}'`);
+    (0, output_1.emit)(`${prefix} Audit enabled for table ${tableLabel} (retention: ${status.retention ?? retention})`);
+}
+async function handleDbAuditDisable(table, opts) {
+    if (!table) {
+        throw new error_1.AppError("ARGS_INVALID", "table name is required", {
+            next_actions: ["Usage: miaoda db audit disable <table>"],
+        });
+    }
+    const appId = (0, shared_1.resolveAppId)(opts);
+    let status;
+    try {
+        status = await api.db.setAuditConfig({
+            appId,
+            table,
+            enabled: false,
+            dbBranch: opts.env,
+        });
+    }
+    catch (err) {
+        // PRD: 重复 disable / 未启用就 disable 报错时附带 hint，引导用户去看哪些表已开启
+        if (err instanceof error_1.AppError && err.code === "DB_API_k_dl_1300031") {
+            throw new error_1.AppError(err.code, err.message, {
+                next_actions: ["Use `miaoda db audit status` to see which tables have audit enabled."],
+            });
+        }
+        throw err;
+    }
+    if ((0, output_1.isJsonMode)()) {
+        (0, output_1.emitOk)((0, output_1.snakeCaseKeys)({
+            table: status.table,
+            enabled: status.enabled,
+        }));
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    const prefix = tty ? "✓" : "OK";
+    (0, output_1.emit)(`${prefix} Audit disabled for table ${colors_1.c.highlight(`'${status.table}'`)}`);
+}
+async function handleDbAuditList(tables, opts) {
+    if (tables.length === 0) {
+        throw new error_1.AppError("ARGS_INVALID", "at least one table is required", {
+            next_actions: [
+                "Usage: miaoda db audit list <table> [<table>...] [--since ...] [--until ...]",
+            ],
+        });
+    }
+    const appId = (0, shared_1.resolveAppId)(opts);
+    const limit = opts.limit ?? 20;
+    // 时间字段归一化为 ISO 8601 UTC（服务端按 event_time 字段比较）。cursor 由
+    // 后端管理（本质也是 ISO 时间），CLI 不再混用 cursor/since。
+    const since = normalizeTime(opts.since, "--since");
+    const until = normalizeTime(opts.until, "--until");
+    const result = await api.db.listAuditLog({
+        appId,
+        tables,
+        since,
+        until,
+        limit,
+        cursor: opts.cursor,
+        dbBranch: opts.env,
+    });
+    const visible = result.items;
+    const skipped = result.skipped;
+    // PRD JSON：data 是数组，元素是事件对象（snake_case），分页信封 next_cursor / has_more
+    if ((0, output_1.isJsonMode)()) {
+        const items = visible.map((it) => ({
+            event_id: it.eventId,
+            event_time: it.eventTime,
+            target_table: it.targetTable,
+            type: it.type,
+            operator: it.operator,
+            summary: it.summary,
+            // before/after 服务端是 JSON 字符串，反序列化回结构化对象供下游消费
+            ...(it.before !== undefined ? { before: safeParseJson(it.before) } : {}),
+            ...(it.after !== undefined ? { after: safeParseJson(it.after) } : {}),
+        }));
+        (0, output_1.emitPaged)(items, result.nextCursor, result.hasMore);
+        if (skipped.length > 0) {
+            process.stderr.write(`(${String(skipped.length)} table(s) skipped: ${skipped.join(", ")})\n`);
+        }
+        if (visible.length === 0)
+            process.exitCode = 1;
+        return;
+    }
+    if (visible.length === 0) {
+        (0, output_1.emit)("No audit log entries found.");
+        if (skipped.length > 0) {
+            process.stderr.write(`(${String(skipped.length)} table(s) skipped: ${skipped.join(", ")})\n`);
+        }
+        process.exitCode = 1;
+        return;
+    }
+    const tty = (0, render_1.isStdoutTty)();
+    // PRD：多表渲染时第一列是 target_table，单表时去掉这一列
+    const isMultiTable = tables.length > 1;
+    const headers = isMultiTable
+        ? ["target_table", "event_time", "type", "event_id", "operator", "summary"]
+        : ["event_time", "type", "event_id", "operator", "summary"];
+    const rows = visible.map((it) => {
+        const eventTime = (0, render_1.formatTime)(it.eventTime, tty);
+        // event_id 完整透传——PRD 截图里的 "..." 只是文档省略写法，不是 CLI 行为
+        const cells = [eventTime, it.type, it.eventId, it.operator || "—", it.summary];
+        return isMultiTable ? [it.targetTable, ...cells] : cells;
+    });
+    (0, output_1.emit)(tty ? (0, render_1.renderAlignedTable)(headers, rows) : (0, render_1.renderTsv)(headers, rows));
+    if (skipped.length > 0) {
+        process.stderr.write(`(${String(skipped.length)} table(s) skipped: ${skipped.join(", ")})\n`);
+    }
+    if (result.hasMore && result.nextCursor) {
+        process.stderr.write(`(more results; use --cursor '${result.nextCursor}')\n`);
+    }
+}
+// ── helpers ──
+function normalizeTime(input, flagName) {
+    if (input === undefined || input === "")
+        return undefined;
+    // ISO 8601 直接透传，避免 parseTimeFilterMs 在严格 ISO 上重做一次损精度
+    if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:?\d{2})$/.test(input)) {
+        return new Date(input).toISOString();
+    }
+    const ms = (0, index_1.parseTimeFilterMs)(input, flagName);
+    return new Date(ms).toISOString();
+}
+// 服务端 before/after 是 JSON 字符串透传，CLI JSON 输出再反序列化回对象，
+// 给下游 jq 等工具消费。失败时透传原始字符串避免数据丢失。
+function safeParseJson(s) {
+    try {
+        return JSON.parse(s);
+    }
+    catch {
+        return s;
+    }
+}
+// PRD 输出 enabled 列用 yes/no 而非 true/false
+function boolToYesNo(b) {
+    return b ? "yes" : "no";
+}