@lark-apaas/miaoda-cli 0.1.2 → 0.1.3-alpha.228c3e0

package/README.md

@@ -14,22 +14,22 @@ pnpm add -g @lark-apaas/miaoda-cli
 # 设置默认应用（需要应用上下文的命令可用 --app-id 覆盖）
 export MIAODA_APP_ID=app_demo_xxx
 
-# 插件管理
-miaoda plugin list-packages
-miaoda plugin install @demo/example-plugin
+# 文件操作
+miaoda file ls
+miaoda file upload ./local/path
 ```
 
 JSON 结构化输出（Agent 推荐）：
 
 ```bash
 # 输出全部字段
-miaoda plugin list --json
+miaoda file ls --json
 
 # 可选字段级选择
-miaoda plugin list --json id,name
+miaoda file ls --json id,name
 
 # 或通过 --output 指定格式
-miaoda plugin list --output json
+miaoda file ls --output json
 ```
 
 ## 命令树
@@ -38,7 +38,8 @@ miaoda plugin list --output json
 
 | 域 | 用途 |
 |---|---|
-| `miaoda plugin ...` | 插件管理：安装、更新、移除、插件实例查询 |
+| `miaoda file ...` | 文件操作：上传、下载、元数据、签名下载、批量删除 |
+| `miaoda db ...` | 数据操作：SQL 执行、表结构查询、数据导入导出 |
 
 完整命令通过 `miaoda --help` 或 `miaoda <domain> --help` 查看。
 

package/dist/api/app/api.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAppInfo = getAppInfo;
+exports.updateAppMeta = updateAppMeta;
+const http_1 = require("../../utils/http");
+const devops_error_1 = require("../../utils/devops-error");
+const DEFAULT_ERR_CODE = "INTERNAL_DEVOPS_ERROR";
+function envelopeOpts(errPrefix) {
+    return {
+        errPrefix,
+        defaultErrCode: DEFAULT_ERR_CODE,
+        mapErr: devops_error_1.mapDevopsError,
+    };
+}
+/** GET /v1/devops/app/:appID — 获取应用详情 */
+async function getAppInfo(appID) {
+    const url = `/v1/devops/app/${encodeURIComponent(appID)}`;
+    return (0, http_1.getInnerApi)(url, envelopeOpts("Failed to get app info"));
+}
+/** POST /v1/devops/app/:appID/meta — 更新应用元数据 */
+async function updateAppMeta(req) {
+    const url = `/v1/devops/app/${encodeURIComponent(req.appID)}/meta`;
+    // 路径已带 appID，body 里也保留以匹配 BAM IDL 的 sensitive:"no" 透传约定
+    return (0, http_1.postInnerApi)(url, req, envelopeOpts("Failed to update app"));
+}

package/dist/api/app/index.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ArchType = exports.Source = exports.BizType = exports.AppType = exports.AppMode = exports.AppStatus = exports.appMetaSchema = exports.updateAppMeta = exports.getAppInfo = void 0;
+var api_1 = require("./api");
+Object.defineProperty(exports, "getAppInfo", { enumerable: true, get: function () { return api_1.getAppInfo; } });
+Object.defineProperty(exports, "updateAppMeta", { enumerable: true, get: function () { return api_1.updateAppMeta; } });
+var schemas_1 = require("./schemas");
+Object.defineProperty(exports, "appMetaSchema", { enumerable: true, get: function () { return schemas_1.appMetaSchema; } });
+var types_1 = require("./types");
+Object.defineProperty(exports, "AppStatus", { enumerable: true, get: function () { return types_1.AppStatus; } });
+Object.defineProperty(exports, "AppMode", { enumerable: true, get: function () { return types_1.AppMode; } });
+Object.defineProperty(exports, "AppType", { enumerable: true, get: function () { return types_1.AppType; } });
+Object.defineProperty(exports, "BizType", { enumerable: true, get: function () { return types_1.BizType; } });
+Object.defineProperty(exports, "Source", { enumerable: true, get: function () { return types_1.Source; } });
+Object.defineProperty(exports, "ArchType", { enumerable: true, get: function () { return types_1.ArchType; } });

package/dist/api/app/schemas.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.appMetaSchema = void 0;
+const output_1 = require("../../utils/output");
+const types_1 = require("./types");
+// Partial<Record<...>>：未来 BAM 加新枚举值时这里没声明也不报错，运行期 lookup 自然得 undefined
+const STATUS_TEXT = {
+    [types_1.AppStatus.UNSPECIFIED]: "unknown",
+    [types_1.AppStatus.PREPARING]: "preparing",
+    [types_1.AppStatus.UNRELEASED]: "unreleased",
+    [types_1.AppStatus.RELEASED]: "released",
+    [types_1.AppStatus.DELETED]: "deleted",
+    [types_1.AppStatus.UPGRADING]: "upgrading",
+};
+const MODE_TEXT = {
+    [types_1.AppMode.UNSPECIFIED]: "unknown",
+    [types_1.AppMode.STANDARD]: "standard",
+    [types_1.AppMode.EXPERT]: "expert",
+};
+const TYPE_TEXT = {
+    [types_1.AppType.UNSPECIFIED]: "unknown",
+    [types_1.AppType.STANDARD]: "standard",
+    [types_1.AppType.PROTOTYPE]: "prototype",
+    [types_1.AppType.APPLICATION]: "application",
+    [types_1.AppType.DESIGN]: "design",
+    [types_1.AppType.OPENCLAW]: "openclaw",
+    [types_1.AppType.CLAW_SUB]: "claw_sub",
+};
+const BIZ_TYPE_TEXT = {
+    [types_1.BizType.UNSPECIFIED]: "unknown",
+    [types_1.BizType.MIAODA]: "miaoda",
+    [types_1.BizType.FORCE]: "force",
+};
+const ARCH_TYPE_TEXT = {
+    [types_1.ArchType.UNSPECIFIED]: "unknown",
+    [types_1.ArchType.FULL_STACK]: "full_stack",
+    [types_1.ArchType.NOT_FULL_STACK]: "not_full_stack",
+};
+const SOURCE_TEXT = {
+    [types_1.Source.UNSPECIFIED]: "unknown",
+    [types_1.Source.CHAT]: "chat",
+    [types_1.Source.TEMPLATE]: "template",
+    [types_1.Source.IMPORT_ZIP]: "import_zip",
+    [types_1.Source.IMPORT_BASE]: "import_base",
+};
+function lookup(table) {
+    return (v) => {
+        if (typeof v !== "number")
+            return undefined;
+        return table[v];
+    };
+}
+/**
+ * AppMeta 的 pretty 渲染契约。
+ *
+ * 注：BAM 没给 createdAt / updatedAt 的单位注解；先按 ms（fmt.ms）渲染，
+ * 待 e2e 真值确认后调整。enum 字段通过 derive 翻译成可读字符串，JSON 模式
+ * 仍是 BAM 原值（数字枚举），与 BAM 接口契约保持一致。
+ */
+exports.appMetaSchema = {
+    columns: [
+        { key: "appID", label: "app-id" },
+        { key: "name" },
+        { key: "description" },
+        { key: "status_text", label: "status", derive: (row) => lookup(STATUS_TEXT)(row.status) },
+        { key: "appType_text", label: "type", derive: (row) => lookup(TYPE_TEXT)(row.appType) },
+        { key: "appMode_text", label: "mode", derive: (row) => lookup(MODE_TEXT)(row.appMode) },
+        { key: "bizType_text", label: "biz-type", derive: (row) => lookup(BIZ_TYPE_TEXT)(row.bizType) },
+        { key: "archType_text", label: "arch", derive: (row) => lookup(ARCH_TYPE_TEXT)(row.archType) },
+        { key: "source_text", label: "source", derive: (row) => lookup(SOURCE_TEXT)(row.source) },
+        { key: "ownedBy", label: "owner" },
+        { key: "createdBy", label: "creator" },
+        { key: "dataBranchID", label: "branch" },
+        { key: "parentAppID", label: "parent-app" },
+        { key: "createdAt", label: "created-at", format: output_1.fmt.ms() },
+        { key: "updatedAt", label: "updated-at", format: output_1.fmt.ms() },
+    ],
+    strict: true,
+};

package/dist/api/app/types.js

@@ -0,0 +1,58 @@
+"use strict";
+// 与 BAM lark.apaas.devops v1.0.326 对齐：
+//   - CLIGetAppInfo (4070322)  → AppInfo / AppMeta
+//   - CLIUpdateAppMeta (4070323) → 入参 name? / description?
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ArchType = exports.Source = exports.BizType = exports.AppType = exports.AppMode = exports.AppStatus = void 0;
+/** 应用状态 */
+var AppStatus;
+(function (AppStatus) {
+    AppStatus[AppStatus["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    AppStatus[AppStatus["PREPARING"] = 1] = "PREPARING";
+    AppStatus[AppStatus["UNRELEASED"] = 2] = "UNRELEASED";
+    AppStatus[AppStatus["RELEASED"] = 3] = "RELEASED";
+    /** BAM 注释为 Deprecated；保留枚举以兼容历史响应数据 */
+    AppStatus[AppStatus["DELETED"] = 4] = "DELETED";
+    AppStatus[AppStatus["UPGRADING"] = 5] = "UPGRADING";
+})(AppStatus || (exports.AppStatus = AppStatus = {}));
+/** 应用模式 */
+var AppMode;
+(function (AppMode) {
+    AppMode[AppMode["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    AppMode[AppMode["STANDARD"] = 1] = "STANDARD";
+    AppMode[AppMode["EXPERT"] = 2] = "EXPERT";
+})(AppMode || (exports.AppMode = AppMode = {}));
+/** 应用类型 */
+var AppType;
+(function (AppType) {
+    AppType[AppType["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    AppType[AppType["STANDARD"] = 1] = "STANDARD";
+    AppType[AppType["PROTOTYPE"] = 2] = "PROTOTYPE";
+    AppType[AppType["APPLICATION"] = 3] = "APPLICATION";
+    AppType[AppType["DESIGN"] = 4] = "DESIGN";
+    AppType[AppType["OPENCLAW"] = 5] = "OPENCLAW";
+    AppType[AppType["CLAW_SUB"] = 6] = "CLAW_SUB";
+})(AppType || (exports.AppType = AppType = {}));
+/** 业务线 */
+var BizType;
+(function (BizType) {
+    BizType[BizType["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    BizType[BizType["MIAODA"] = 1] = "MIAODA";
+    BizType[BizType["FORCE"] = 2] = "FORCE";
+})(BizType || (exports.BizType = BizType = {}));
+/** 应用来源 */
+var Source;
+(function (Source) {
+    Source[Source["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    Source[Source["CHAT"] = 1] = "CHAT";
+    Source[Source["TEMPLATE"] = 2] = "TEMPLATE";
+    Source[Source["IMPORT_ZIP"] = 3] = "IMPORT_ZIP";
+    Source[Source["IMPORT_BASE"] = 4] = "IMPORT_BASE";
+})(Source || (exports.Source = Source = {}));
+/** 架构类型 */
+var ArchType;
+(function (ArchType) {
+    ArchType[ArchType["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    ArchType[ArchType["FULL_STACK"] = 1] = "FULL_STACK";
+    ArchType[ArchType["NOT_FULL_STACK"] = 2] = "NOT_FULL_STACK";
+})(ArchType || (exports.ArchType = ArchType = {}));

package/dist/api/db/api.js

@@ -4,27 +4,39 @@ exports.execSql = execSql;
 exports.getSchema = getSchema;
 exports.importData = importData;
 exports.exportData = exportData;
+exports.listDDLChangelog = listDDLChangelog;
+exports.getAuditStatus = getAuditStatus;
+exports.setAuditConfig = setAuditConfig;
+exports.listAuditLog = listAuditLog;
+exports.migrationInit = migrationInit;
+exports.migrate = migrate;
+exports.getMigrationStatus = getMigrationStatus;
+exports.recover = recover;
+exports.getRecoveryPreview = getRecoveryPreview;
+exports.getDbQuota = getDbQuota;
 const http_1 = require("../../utils/http");
 const error_1 = require("../../utils/error");
 const http_client_1 = require("@lark-apaas/http-client");
 const client_1 = require("./client");
-/**
- * 把 SDK 抛出的 HttpError 统一映射成 CLI 层错误：
- *   1. 先尝试从 response body 解 envelope，命中 dataloom 业务 code → AppError
- *   2. 兜底返 HttpError，保留真实 status 码与上下文
- *
- * 配合调用点的 try/catch + traceHttp，让 --verbose 在错误路径上也能拿到
- * x-tt-logid 与 status，方便定位线上问题。
- */
-async function mapDbHttpError(err, url, ctx, 
-/**
- * 可选 hook：解析到响应 body 后，如果 envelope 命中业务错误并抛出 AppError，
- * 调用方可以借此把 body 里的额外字段（如 multi-statement 的 partial results）
- * 挂到 AppError 上。
- */
-onErrorBody) {
+const DEFAULT_TIMEOUT_HINT = "The server may still be processing your request. Retry the command if needed.";
+async function mapDbHttpError(err, url, ctx, opts) {
     if (err instanceof error_1.AppError)
         throw err;
+    // 客户端超时 / abort：SdkHttpError 时 response 通常缺失（status=0），落到 throw 时
+    // message 形如 'Failed to recover: 0' 让用户看不懂。识别 abort / timeout 关键字后
+    // 单独抛专用 AppError（带领域可定制的 message + hint），不再包成通用 "Failed to X"。
+    if (err instanceof Error) {
+        const lower = err.message.toLowerCase();
+        if (lower.includes("aborted") ||
+            lower.includes("timeout") ||
+            err.name === "AbortError" ||
+            err.name === "TimeoutError") {
+            const code = opts?.timeout?.code ?? "REQUEST_TIMEOUT";
+            const message = opts?.timeout?.message ?? "Request timed out after 30s";
+            const hint = opts?.timeout?.hint ?? DEFAULT_TIMEOUT_HINT;
+            throw new error_1.AppError(code, message, { next_actions: [hint] });
+        }
+    }
     if (err instanceof http_client_1.HttpError) {
         const status = err.response?.status ?? 0;
         const statusText = err.response?.statusText ?? "";
@@ -35,8 +47,8 @@ onErrorBody) {
                     (0, client_1.extractData)(body); // 业务 code 命中 → 抛 AppError；不命中走兜底
                 }
                 catch (appErr) {
-                    if (appErr instanceof error_1.AppError && onErrorBody) {
-                        onErrorBody(body, appErr);
+                    if (appErr instanceof error_1.AppError && opts?.onErrorBody) {
+                        opts.onErrorBody(body, appErr);
                     }
                     throw appErr;
                 }
@@ -90,7 +102,17 @@ async function execSql(opts) {
     }
     catch (err) {
         (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
-        await mapDbHttpError(err, url, "Failed to execute SQL", attachSqlPartialResults);
+        await mapDbHttpError(err, url, "Failed to execute SQL", {
+            onErrorBody: attachSqlPartialResults,
+            // SQL 路径单独的超时文案：PG 的 statement_timeout 会回滚整条事务，所以这里
+            // 明示「事务已回滚、没有改动落地」，并把 hint 引导到「简化 SQL / 加 LIMIT / 拆条」。
+            timeout: {
+                code: "SQL_EXECUTION_TIMEOUT",
+                message: "SQL execution timed out after 30s",
+                hint: "The transaction was rolled back; no changes were applied. " +
+                    "Simplify the SQL, add filters or LIMIT for queries, or split it into smaller statements.",
+            },
+        });
         throw err; // 不可达
     }
     const body = (await response.json());
@@ -247,10 +269,14 @@ async function exportData(opts) {
         await mapDbHttpError(err, url, "Failed to export data");
         throw err; // 不可达
     }
-    // 成功路径：响应 body 通常是原始 CSV/JSON 字节，但部分错误场景下网关会返
+    // 成功路径：响应 body 通常是原始 CSV/SQL/JSON 字节，但部分错误场景下网关会返
     // HTTP 200 + JSON envelope（status_code != "0"），需要在这里嗅探兜底。
-    const contentType = response.headers.get("Content-Type") ??
-        (opts.format === "csv" ? "text/csv" : "application/json");
+    const defaultContentType = {
+        csv: "text/csv",
+        sql: "text/plain",
+        json: "application/json",
+    };
+    const contentType = response.headers.get("Content-Type") ?? defaultContentType[opts.format];
     const ab = await response.arrayBuffer();
     const buf = Buffer.from(new Uint8Array(ab));
     if (buf.length === 0) {
@@ -258,8 +284,9 @@ async function exportData(opts) {
     }
     // Envelope sniff：HTTP 200 + Content-Type 为 application/json + body 解析得到
     // InnerEnvelope 且 status_code 非 "0" 时，按业务错误抛出。
-    // 仅 CSV 格式做 sniff —— JSON 格式正常成功响应也是 application/json，会误判。
-    if (opts.format === "csv" && /application\/json/i.test(contentType)) {
+    // CSV / SQL 都是非 JSON 输出，application/json 响应必是错误信封；JSON 格式
+    // 成功响应自身就是 application/json，跳过 sniff 避免误判。
+    if (opts.format !== "json" && /application\/json/i.test(contentType)) {
         try {
             const parsed = JSON.parse(buf.toString("utf8"));
             if (parsed.status_code != null && parsed.status_code !== "0") {
@@ -269,7 +296,7 @@ async function exportData(opts) {
         }
         catch (err) {
             // 已经被 extractData 抛成 AppError → 透传；否则 JSON.parse 失败说明 body
-            // 真的是 CSV 文本，继续按成功流程走
+            // 真的是 CSV / SQL 文本，继续按成功流程走
             if (err instanceof error_1.AppError)
                 throw err;
         }
@@ -286,3 +313,283 @@ async function exportData(opts) {
         recordCount,
     };
 }
+// ── db changelog → InnerAdminListDDLChangelog ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/changelog?table=&since=&until=&limit=&cursor=&dbBranch=
+ *
+ * 时间字段 since/until 由 CLI 端归一化为 ISO 8601 UTC 后透传；后端按 created_at 比较。
+ */
+async function listDDLChangelog(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/changelog", {
+        table: opts.table,
+        since: opts.since,
+        until: opts.until,
+        limit: opts.limit !== undefined ? String(opts.limit) : undefined,
+        cursor: opts.cursor,
+        dbBranch: opts.dbBranch,
+    });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to list DDL changelog");
+        throw err; // 不可达
+    }
+    const body = (await response.json());
+    const data = (0, client_1.extractData)(body);
+    return {
+        items: data.items ?? [],
+        nextCursor: data.nextCursor && data.nextCursor !== "" ? data.nextCursor : null,
+        hasMore: Boolean(data.hasMore),
+    };
+}
+// ── db audit → InnerAdminGetAuditStatus / InnerAdminSetAuditConfig ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/audit/status?table=&dbBranch=
+ * 查表审计开关状态。table 非空 → 单表过滤；空 → 返当前 workspace 全部已配置表。
+ */
+async function getAuditStatus(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/audit/status", {
+        table: opts.table,
+        dbBranch: opts.dbBranch,
+    });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to get audit status");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    const data = (0, client_1.extractData)(respBody);
+    return data.items ?? [];
+}
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/audit/config
+ * 写：enabled=true 开启 / false 关闭。retention 仅 enabled=true 生效。
+ */
+async function setAuditConfig(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/audit/config");
+    const body = {
+        table: opts.table,
+        enabled: opts.enabled,
+    };
+    if (opts.retention !== undefined && opts.retention !== "")
+        body.retention = opts.retention;
+    if (opts.dbBranch !== undefined && opts.dbBranch !== "")
+        body.dbBranch = opts.dbBranch;
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, body);
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to set audit config");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    const data = (0, client_1.extractData)(respBody);
+    if (!data.status) {
+        throw new error_1.AppError("INTERNAL_DB_ERROR", "audit config response missing status field");
+    }
+    return data.status;
+}
+// ── db audit log → InnerAdminListAuditLog ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/audit/log?tables=&since=&until=&limit=&cursor=&dbBranch=
+ *
+ * 走 admin-inner 接口而不是 InnerAdminExecuteSQL 直接 SELECT pg_audit：
+ *   - operator 在 details JSONB 内是 user_id，服务端解析成 username
+ *   - summary 后端按 type + before/after diff 合成（pg_audit 表无此列）
+ *   - before/after JSONB 后端 JSON.stringify 后透传字符串，CLI 按需 parse
+ *
+ * 多表用逗号拼接走 query；后端按 target_table IN (...) 一次查。skipped 字段返
+ * 多表中无记录的表名，便于 CLI 展示 hint。
+ */
+async function listAuditLog(opts) {
+    if (opts.tables.length === 0) {
+        throw new error_1.AppError("ARGS_INVALID", "at least one table is required");
+    }
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/audit/log", {
+        tables: opts.tables.join(","),
+        since: opts.since,
+        until: opts.until,
+        limit: opts.limit !== undefined ? String(opts.limit) : undefined,
+        cursor: opts.cursor,
+        dbBranch: opts.dbBranch,
+    });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to list audit log");
+        throw err; // 不可达
+    }
+    const body = (await response.json());
+    const data = (0, client_1.extractData)(body);
+    return {
+        items: data.items ?? [],
+        nextCursor: data.nextCursor && data.nextCursor !== "" ? data.nextCursor : null,
+        hasMore: Boolean(data.hasMore),
+        skipped: data.skipped ?? [],
+    };
+}
+// ── db migration → InnerAdminMigrationInit / InnerAdminMigrate ──
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/enableMultiEnv
+ * 单库 → dev/online 双库初始化，不可逆。对应公开 API EnableMultiEnvDB 的 admin-inner 通道。
+ */
+async function migrationInit(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/enableMultiEnv");
+    const body = {};
+    if (opts.syncData !== undefined)
+        body.syncData = opts.syncData;
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, body);
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to init migration");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/migration
+ * 合并 diff + apply：dryRun=true 只返 changes 不下发；dryRun=false 才执行。
+ */
+async function migrate(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/migration");
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, { dryRun: opts.dryRun });
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to migrate");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/migration/status?taskId=...
+ * CLI 拿到 migration apply 的 taskId 后定时调本接口，直到 status=success/failed。
+ * 网络层超时仍走 mapDbHttpError → 单次 30s；轮询节奏由 CLI handler 自行控制。
+ */
+async function getMigrationStatus(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/migration/status", {
+        taskId: opts.taskId,
+        dbBranch: opts.dbBranch,
+    });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to get migration status");
+        throw err; // 不可达
+    }
+    const body = (await response.json());
+    return (0, client_1.extractData)(body);
+}
+// ── db recovery → InnerAdminRecover ──
+/**
+ * 后端：POST /v1/dataloom/app/{appId}/db/recovery
+ * 合并 PITR diff + apply：dryRun=true 预览影响；dryRun=false 触发恢复。
+ */
+async function recover(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/recovery");
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.post(url, {
+            target: opts.target,
+            dryRun: opts.dryRun,
+        });
+        (0, client_1.traceHttp)("POST", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("POST", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to recover");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/recovery/preview?previewRequestId=...
+ * CLI 拿到 recovery diff 的 previewRequestId 后定时调本接口直到 previewStatus=success/failed。
+ */
+async function getRecoveryPreview(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/recovery/preview", {
+        previewRequestId: opts.previewRequestId,
+        dbBranch: opts.dbBranch,
+    });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to get recovery preview");
+        throw err; // 不可达
+    }
+    const body = (await response.json());
+    return (0, client_1.extractData)(body);
+}
+// ── db quota → InnerAdminGetDbQuota ──
+/**
+ * 后端：GET /v1/dataloom/app/{appId}/db/quota?dbBranch=
+ */
+async function getDbQuota(opts) {
+    const client = (0, http_1.getHttpClient)();
+    const url = (0, client_1.buildInnerUrl)(opts.appId, "/db/quota", { dbBranch: opts.dbBranch });
+    const start = Date.now();
+    let response;
+    try {
+        response = await client.get(url);
+        (0, client_1.traceHttp)("GET", url, start, response);
+    }
+    catch (err) {
+        (0, client_1.traceHttp)("GET", url, start, err instanceof http_client_1.HttpError ? err.response : undefined, err);
+        await mapDbHttpError(err, url, "Failed to get db quota");
+        throw err; // 不可达
+    }
+    const respBody = (await response.json());
+    return (0, client_1.extractData)(respBody);
+}

package/dist/api/db/client.js

@@ -129,6 +129,42 @@ const BIZ_ERR_MAP = new Map(Object.entries({
     // k_dl_1300015：SELECT 结果超过 1000 行硬拦；多行 hint 由 output.ts 的
     // SERVER_ERROR_HINTS 按语义 code 兜底，这里只做 code 改名
     k_dl_1300015: { code: "RESULT_SET_TOO_LARGE" },
+    // audit
+    k_dl_1310001: {
+        code: "AUDIT_ALREADY_ENABLED",
+        hint: "Use `miaoda db audit status <table>` to confirm current state.",
+    },
+    k_dl_1310002: {
+        code: "AUDIT_NOT_ENABLED",
+        hint: "Run `miaoda db audit enable <table>` first.",
+    },
+    k_dl_1310003: {
+        code: "INVALID_RETENTION",
+        hint: "Allowed values: 7d, 30d, 180d, 360d, forever.",
+    },
+    // migration
+    k_dl_1320001: {
+        code: "MIGRATION_NOT_AVAILABLE",
+        hint: "Migration commands require an expert-mode application.",
+    },
+    k_dl_1320002: { code: "MULTI_ENV_ALREADY_INITIALIZED" },
+    k_dl_1320003: {
+        code: "NO_PENDING_CHANGES",
+        hint: "dev and online schemas are already in sync.",
+    },
+    // recovery
+    k_dl_1330001: {
+        code: "RECOVERY_WINDOW_EXCEEDED",
+        hint: "Pick a timestamp inside the supported recovery window.",
+    },
+    k_dl_1330002: {
+        code: "RECOVERY_IN_PROGRESS",
+        hint: "Wait for the running recovery to finish, or check its status.",
+    },
+    k_dl_1330003: {
+        code: "INVALID_TIMESTAMP",
+        hint: "Use ISO 8601 / yyyy-mm-dd / yyyy-mm-dd HH:MM:SS.",
+    },
 }));
 /** PG SQLSTATE → CLI code（当前 dataloom 不一定透传，预留未来使用） */
 exports.SQLSTATE_MAP = {