@numa-tech/numa 1.26.15 → 1.26.17

package/dist/data-resources/responses.d.ts

@@ -0,0 +1,263 @@
+import { z } from "zod";
+export declare const responses: {
+    instances: z.ZodObject<{
+        items: z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        total: z.ZodNumber;
+        page: z.ZodNumber;
+        size: z.ZodNumber;
+    }, z.core.$strip>;
+    candidates: z.ZodArray<z.ZodObject<{
+        id: z.ZodNumber;
+        name: z.ZodString;
+        code: z.ZodString;
+        kind: z.ZodEnum<{
+            RDS: "RDS";
+            REDIS: "REDIS";
+        }>;
+        engine: z.ZodString;
+        endpoint: z.ZodNullable<z.ZodString>;
+        port: z.ZodNullable<z.ZodNumber>;
+        mode: z.ZodString;
+        credentialConfigured: z.ZodBoolean;
+        version: z.ZodNumber;
+        instanceVersion: z.ZodNumber;
+        credentialVersion: z.ZodNumber;
+        cloudAccountId: z.ZodNullable<z.ZodNumber>;
+        region: z.ZodNullable<z.ZodString>;
+        cloudInstanceId: z.ZodNullable<z.ZodString>;
+        assumeRoleId: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+    bindings: z.ZodObject<{
+        items: z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        total: z.ZodNumber;
+        page: z.ZodNumber;
+        size: z.ZodNumber;
+    }, z.core.$strip>;
+    environments: z.ZodObject<{
+        items: z.ZodArray<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        total: z.ZodNumber;
+        page: z.ZodNumber;
+        size: z.ZodNumber;
+    }, z.core.$strip>;
+    policy: z.ZodObject<{
+        version: z.ZodNumber;
+        defaultRdsInstanceId: z.ZodNullable<z.ZodNumber>;
+        defaultRedisInstanceId: z.ZodNullable<z.ZodNumber>;
+        environmentDatabase: z.ZodNullable<z.ZodString>;
+        mysqlAccountHost: z.ZodNullable<z.ZodString>;
+        redisMode: z.ZodString;
+        redisDb: z.ZodNullable<z.ZodNumber>;
+        requirePrefixCompatibility: z.ZodBoolean;
+        mode: z.ZodEnum<{
+            AUTO: "AUTO";
+            MANUAL: "MANUAL";
+        }>;
+        redisIsolationMode: z.ZodEnum<{
+            ACL_PREFIX: "ACL_PREFIX";
+            INSTANCE_ACCOUNT: "INSTANCE_ACCOUNT";
+        }>;
+    }, z.core.$strip>;
+    scopes: z.ZodObject<{
+        version: z.ZodNumber;
+        entries: z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                APPLICATION_ENVIRONMENT: "APPLICATION_ENVIRONMENT";
+                CLUSTER: "CLUSTER";
+                ENVIRONMENT: "ENVIRONMENT";
+            }>;
+            clusterId: z.ZodNullable<z.ZodNumber>;
+            environmentId: z.ZodNullable<z.ZodNumber>;
+            appId: z.ZodNullable<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    settings: z.ZodObject<{
+        version: z.ZodNumber;
+        mode: z.ZodString;
+        persistentAcl: z.ZodBoolean;
+        defaultClusterId: z.ZodNullable<z.ZodNumber>;
+        tls: z.ZodNullable<z.ZodObject<{
+            mode: z.ZodEnum<{
+                DISABLED: "DISABLED";
+                REQUIRE: "REQUIRE";
+                VERIFY_IDENTITY: "VERIFY_IDENTITY";
+            }>;
+            caRef: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    "cloud-binding": z.ZodObject<{
+        id: z.ZodNumber;
+        name: z.ZodString;
+        code: z.ZodString;
+        kind: z.ZodEnum<{
+            RDS: "RDS";
+            REDIS: "REDIS";
+        }>;
+        engine: z.ZodString;
+        endpoint: z.ZodNullable<z.ZodString>;
+        port: z.ZodNullable<z.ZodNumber>;
+        mode: z.ZodString;
+        credentialConfigured: z.ZodBoolean;
+        version: z.ZodNumber;
+        instanceVersion: z.ZodNumber;
+        credentialVersion: z.ZodNumber;
+        cloudAccountId: z.ZodNullable<z.ZodNumber>;
+        region: z.ZodNullable<z.ZodString>;
+        cloudInstanceId: z.ZodNullable<z.ZodString>;
+        assumeRoleId: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+    connection: z.ZodObject<{
+        id: z.ZodNumber;
+        name: z.ZodString;
+        code: z.ZodString;
+        kind: z.ZodEnum<{
+            RDS: "RDS";
+            REDIS: "REDIS";
+        }>;
+        engine: z.ZodString;
+        endpoint: z.ZodNullable<z.ZodString>;
+        port: z.ZodNullable<z.ZodNumber>;
+        mode: z.ZodString;
+        credentialConfigured: z.ZodBoolean;
+        version: z.ZodNumber;
+        instanceVersion: z.ZodNumber;
+        credentialVersion: z.ZodNumber;
+        cloudAccountId: z.ZodNullable<z.ZodNumber>;
+        region: z.ZodNullable<z.ZodString>;
+        cloudInstanceId: z.ZodNullable<z.ZodString>;
+        assumeRoleId: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+    run: z.ZodObject<{
+        id: z.ZodString;
+        planId: z.ZodString;
+        bindingId: z.ZodString;
+        status: z.ZodString;
+        errorCode: z.ZodNullable<z.ZodString>;
+        deliveryStatus: z.ZodNullable<z.ZodString>;
+        version: z.ZodNumber;
+        idempotencyKey: z.ZodNullable<z.ZodString>;
+        accountRecoveries: z.ZodArray<z.ZodObject<{
+            accountId: z.ZodString;
+            username: z.ZodString;
+            stepKey: z.ZodString;
+            phase: z.ZodString;
+            abandonedCredentialVersion: z.ZodNumber;
+            resetOperationId: z.ZodNullable<z.ZodString>;
+            resetStatus: z.ZodNullable<z.ZodString>;
+            resetIdempotencyKey: z.ZodNullable<z.ZodString>;
+            confirmedCredentialVersion: z.ZodNullable<z.ZodNumber>;
+            errorCode: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+        providerCode: z.ZodNullable<z.ZodString>;
+        requestId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    plan: z.ZodObject<{
+        id: z.ZodString;
+        status: z.ZodString;
+        target: z.ZodObject<{
+            operationId: z.ZodString;
+            appId: z.ZodNumber;
+            environmentId: z.ZodNumber;
+            kind: z.ZodEnum<{
+                RDS: "RDS";
+                REDIS: "REDIS";
+            }>;
+            purpose: z.ZodString;
+            mode: z.ZodEnum<{
+                CREATE: "CREATE";
+                LEGACY: "LEGACY";
+            }>;
+            instanceId: z.ZodNumber;
+            engine: z.ZodString;
+            endpoint: z.ZodNullable<z.ZodString>;
+            port: z.ZodNumber;
+            topology: z.ZodString;
+            databaseName: z.ZodNullable<z.ZodString>;
+            schemaName: z.ZodNullable<z.ZodString>;
+            redisDb: z.ZodNumber;
+            keyPrefix: z.ZodNullable<z.ZodString>;
+            mysqlAccountHost: z.ZodNullable<z.ZodString>;
+            runtimeAccount: z.ZodNullable<z.ZodString>;
+            migrationAccount: z.ZodNullable<z.ZodString>;
+            prefixCompatible: z.ZodBoolean;
+            persistentAcl: z.ZodBoolean;
+            clusterId: z.ZodNullable<z.ZodNumber>;
+            namespaceId: z.ZodNullable<z.ZodNumber>;
+            namespace: z.ZodNullable<z.ZodString>;
+            clusterVersion: z.ZodNumber;
+            namespaceVersion: z.ZodNumber;
+            tls: z.ZodNullable<z.ZodObject<{
+                mode: z.ZodEnum<{
+                    DISABLED: "DISABLED";
+                    REQUIRE: "REQUIRE";
+                    VERIFY_IDENTITY: "VERIFY_IDENTITY";
+                }>;
+                caRef: z.ZodNullable<z.ZodString>;
+            }, z.core.$strip>>;
+            isolationMode: z.ZodEnum<{
+                ACL_PREFIX: "ACL_PREFIX";
+                DATABASE: "DATABASE";
+                INSTANCE_ACCOUNT: "INSTANCE_ACCOUNT";
+                SCHEMA: "SCHEMA";
+            }>;
+            cloud: z.ZodNullable<z.ZodObject<{
+                kind: z.ZodEnum<{
+                    RDS: "RDS";
+                    REDIS: "REDIS";
+                }>;
+                instanceId: z.ZodNumber;
+                cloudAccountId: z.ZodNumber;
+                region: z.ZodString;
+                cloudInstanceId: z.ZodString;
+                assumeRoleId: z.ZodNullable<z.ZodNumber>;
+                configurationVersion: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        instanceVersion: z.ZodNumber;
+        configurationVersion: z.ZodNumber;
+        credentialVersion: z.ZodNumber;
+        policyVersion: z.ZodNumber;
+        environmentVersion: z.ZodNumber;
+        applicationVersion: z.ZodNumber;
+        operations: z.ZodArray<z.ZodString>;
+        warnings: z.ZodArray<z.ZodString>;
+        selectedAccountProfile: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    delivery: z.ZodObject<{
+        bindingId: z.ZodString;
+        desiredVersions: z.ZodNullable<z.ZodObject<{
+            runtime: z.ZodNullable<z.ZodObject<{
+                accountId: z.ZodString;
+                version: z.ZodNumber;
+            }, z.core.$strip>>;
+            migration: z.ZodNullable<z.ZodObject<{
+                accountId: z.ZodString;
+                version: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        deliveredVersions: z.ZodNullable<z.ZodObject<{
+            runtime: z.ZodNullable<z.ZodObject<{
+                accountId: z.ZodString;
+                version: z.ZodNumber;
+            }, z.core.$strip>>;
+            migration: z.ZodNullable<z.ZodObject<{
+                accountId: z.ZodString;
+                version: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        attemptVersions: z.ZodNullable<z.ZodObject<{
+            runtime: z.ZodNullable<z.ZodObject<{
+                accountId: z.ZodString;
+                version: z.ZodNumber;
+            }, z.core.$strip>>;
+            migration: z.ZodNullable<z.ZodObject<{
+                accountId: z.ZodString;
+                version: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        attemptId: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        version: z.ZodNumber;
+        errorCode: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+};
+export declare function boundedJson(response: Response): Promise<unknown>;

package/dist/data-resources/responses.js

@@ -0,0 +1,49 @@
+import { z } from "zod";
+const id = z.number().int().positive().safe();
+const version = z.number().int().nonnegative().safe();
+const uuid = z.string().uuid();
+const str = z.string().max(2000);
+const status = z.string().regex(/^[A-Z][A-Z0-9_]{0,100}$/u);
+const kind = z.enum(["RDS", "REDIS"]);
+const tls = z.object({ mode: z.enum(["DISABLED", "REQUIRE", "VERIFY_IDENTITY"]), caRef: str.nullable() });
+const cloud = z.object({ kind, instanceId: id, cloudAccountId: id, region: str, cloudInstanceId: str, assumeRoleId: id.nullable(), configurationVersion: version });
+const target = z.object({ operationId: uuid, appId: id, environmentId: id, kind, purpose: str, mode: z.enum(["CREATE", "LEGACY"]), instanceId: id, engine: str, endpoint: str.nullable(), port: id.max(65535), topology: str, databaseName: str.nullable(), schemaName: str.nullable(), redisDb: version, keyPrefix: str.nullable(), mysqlAccountHost: str.nullable(), runtimeAccount: str.nullable(), migrationAccount: str.nullable(), prefixCompatible: z.boolean(), persistentAcl: z.boolean(), clusterId: id.nullable(), namespaceId: id.nullable(), namespace: str.nullable(), clusterVersion: version, namespaceVersion: version, tls: tls.nullable(), isolationMode: z.enum(["DATABASE", "SCHEMA", "ACL_PREFIX", "INSTANCE_ACCOUNT"]), cloud: cloud.nullable() });
+const instance = z.object({ id, name: str, code: str, kind, engine: str, endpoint: str.nullable(), port: id.max(65535).nullable(), mode: str, credentialConfigured: z.boolean(), version, instanceVersion: version, credentialVersion: version, cloudAccountId: id.nullable(), region: str.nullable(), cloudInstanceId: str.nullable(), assumeRoleId: id.nullable() });
+const policy = z.object({ version, defaultRdsInstanceId: id.nullable(), defaultRedisInstanceId: id.nullable(), environmentDatabase: str.nullable(), mysqlAccountHost: str.nullable(), redisMode: str, redisDb: version.nullable(), requirePrefixCompatibility: z.boolean(), mode: z.enum(["MANUAL", "AUTO"]), redisIsolationMode: z.enum(["ACL_PREFIX", "INSTANCE_ACCOUNT"]) });
+const scopes = z.object({ version, entries: z.array(z.object({ type: z.enum(["CLUSTER", "ENVIRONMENT", "APPLICATION_ENVIRONMENT"]), clusterId: id.nullable(), environmentId: id.nullable(), appId: id.nullable() })).max(500) });
+const settings = z.object({ version, mode: str, persistentAcl: z.boolean(), defaultClusterId: id.nullable(), tls: tls.nullable() });
+const credentialRef = z.object({ accountId: uuid, version });
+const credentialSet = z.object({ runtime: credentialRef.nullable(), migration: credentialRef.nullable() }).nullable();
+const delivery = z.object({ bindingId: uuid, desiredVersions: credentialSet, deliveredVersions: credentialSet, attemptVersions: credentialSet, attemptId: uuid.nullable(), status, version, errorCode: status.nullable() });
+const recovery = z.object({ accountId: uuid, username: str, stepKey: str, phase: str, abandonedCredentialVersion: version, resetOperationId: uuid.nullable(), resetStatus: status.nullable(), resetIdempotencyKey: str.nullable(), confirmedCredentialVersion: version.nullable(), errorCode: status.nullable() });
+const run = z.object({ id: uuid, planId: uuid, bindingId: uuid, status, errorCode: status.nullable(), deliveryStatus: status.nullable(), version, idempotencyKey: str.nullable(), accountRecoveries: z.array(recovery), providerCode: str.nullable(), requestId: str.nullable() });
+const plan = z.object({ id: uuid, status, target, instanceVersion: version, configurationVersion: version, credentialVersion: version, policyVersion: version, environmentVersion: version, applicationVersion: version, operations: z.array(str), warnings: z.array(str), selectedAccountProfile: status.nullable() });
+const binding = z.object({ id: uuid, appId: id, environmentId: id, kind, purpose: str, resourceId: uuid, instanceId: id, businessDatabaseId: id.nullable(), status, version, target, runId: uuid.nullable(), resourceStatus: status, deliveryStatus: status.nullable(), runtimeAccountId: uuid.nullable(), migrationAccountId: uuid.nullable() });
+const page = (item) => z.object({ items: z.array(item), total: version, page: id, size: id });
+// Object schemas deliberately strip unknown fields at every level. Never forward raw API objects.
+export const responses = { instances: page(instance), candidates: z.array(instance), bindings: page(binding), environments: page(z.object({ id, code: str, name: str })), policy, scopes, settings, "cloud-binding": instance, connection: instance, run, plan, delivery };
+export async function boundedJson(response) {
+    const reader = response.body?.getReader();
+    if (!reader)
+        throw new Error("Empty response");
+    const chunks = [];
+    let length = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            length += value.byteLength;
+            if (length > 1024 * 1024) {
+                await reader.cancel();
+                throw new Error("Response too large");
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+}
+//# sourceMappingURL=responses.js.map

package/dist/data-resources/responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.js","sourceRoot":"","sources":["../../src/data-resources/responses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;AAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACtD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAC5D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACtC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AACxG,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAC,CAAC,CAAC;AAClK,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AACxuB,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AACrW,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,sBAAsB,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,mBAAmB,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,0BAA0B,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,EAAC,CAAC,CAAC;AAC9W,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,CAAC,CAAC;AAC7N,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AAClI,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;AAC3D,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACpH,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AAC1N,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,0BAA0B,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,mBAAmB,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,0BAA0B,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AACjT,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AACjR,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,sBAAsB,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AACtT,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AAChV,MAAM,IAAI,GAAG,CAAC,IAAe,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAC,CAAC,CAAC;AACvG,kGAAkG;AAClG,MAAM,CAAC,MAAM,SAAS,GAAG,EAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;AAEvQ,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAkB;IAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAC,IAAI,EAAE,KAAK,EAAC,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;YAC3B,IAAI,MAAM,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;gBAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAAC,CAAC;YAC3F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAAC,CAAC;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/interactive/entry.js

@@ -30,6 +30,7 @@ export async function interactiveEntry(args, ui = terminalUi, tty) {
         (await ui.choose("Numa · 选择要做的事", [
             { value: "mcp", label: "安装 MCP 工具到 Agent" },
             { value: "skills", label: "安装或更新 Skills" },
+            { value: "provider", label: "切换模型提供商（Codex / Claude Code）" },
             { value: "modules", label: "按用途检索模块" },
             { value: "help", label: "查看命令帮助" },
         ], "mcp"));
@@ -74,6 +75,8 @@ export async function interactiveEntry(args, ui = terminalUi, tty) {
     }
     if (choice === "help")
         return [...globals, "--help"];
+    if (choice === "provider")
+        return [...globals, "provider"];
     const source = await ui.choose("安装哪类 MCP？", [
         {
             value: "local",

package/dist/interactive/entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"entry.js","sourceRoot":"","sources":["../../src/interactive/entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,cAAc,EACd,YAAY,GAEb,MAAM,cAAc,CAAC;AACtB,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAc,EACd,EAAE,GAAc,UAAU,EAC1B,GAAa;IAEb,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CACtB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;QACC,QAAQ;QACR,IAAI;QACJ,SAAS;QACT,kBAAkB;QAClB,eAAe;KAChB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAChB,CAAC;IACF,MAAM,KAAK,GACT,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC9D,IACE,CAAC,KAAK;QACN,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC;IACd,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;IAC5C,IACE,CAAC,cAAc,CACb;QACE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC5C,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC9B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,SAAS;KAChB,EACD,IAAI,EACJ,IAAI,EACJ,GAAG,CACJ,EACD,CAAC;QACD,YAAY,CACV,KAAK,EACL,wGAAwG,CACzG,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACpD,IAAI,MAAM,GACR,IAAI,CAAC,CAAC,CAAC;QACP,CAAC,MAAM,EAAE,CAAC,MAAM,CACd,eAAe,EACf;YACE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE;YAC3C,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;YAC1C,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;YACtC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;SACnC,EACD,KAAK,CACN,CAAC,CAAC;IACL,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,MAAM,CACxB,qBAAqB,EACrB,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG;YAC7B,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SACjD,CAAC,CAAC,CACJ,CAAC;QACF,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAE,CAAC;QACxD,EAAE,CAAC,IAAI,CACL,GAAG,MAAM,CAAC,WAAW,YAAY,MAAM,CAAC,KAAK,CAAC,MAAM,iBAAiB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC/F,MAAM,CAAC,KAAK,CACb,CAAC;QACF,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;YAC9B,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE;YACrC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE;YAC3C,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;SACnC,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,KAAK;YAClB,OAAO;gBACL,GAAG,OAAO;gBACV,KAAK;gBACL,aAAa;gBACb,WAAW;gBACX,MAAM,CAAC,EAAE;gBACT,eAAe;aAChB,CAAC;QACJ,IAAI,MAAM,KAAK,QAAQ;YACrB,OAAO;gBACL,GAAG,OAAO;gBACV,QAAQ;gBACR,SAAS;gBACT,GAAG,MAAM,EAAE,CAAC,QAAQ,CAClB,kBAAkB,EAClB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CACxD;gBACD,eAAe;aAChB,CAAC;QACJ,OAAO,CAAC,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE;YAC9C,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE;YACjE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,wBAAwB,EAAE;SAC3E,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,GAAG,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAC5B,WAAW,EACX;QACE;YACE,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,mBAAmB;SAC1B;QACD;YACE,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,+BAA+B;SACtC;KACF,EACD,OAAO,CACR,CAAC;IACF,OAAO;QACL,GAAG,OAAO;QACV,KAAK;QACL,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAC9C,eAAe;KAChB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"entry.js","sourceRoot":"","sources":["../../src/interactive/entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,cAAc,EACd,YAAY,GAEb,MAAM,cAAc,CAAC;AACtB,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAc,EACd,EAAE,GAAc,UAAU,EAC1B,GAAa;IAEb,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CACtB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;QACC,QAAQ;QACR,IAAI;QACJ,SAAS;QACT,kBAAkB;QAClB,eAAe;KAChB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAChB,CAAC;IACF,MAAM,KAAK,GACT,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC9D,IACE,CAAC,KAAK;QACN,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC;IACd,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;IAC5C,IACE,CAAC,cAAc,CACb;QACE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC5C,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC9B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,SAAS;KAChB,EACD,IAAI,EACJ,IAAI,EACJ,GAAG,CACJ,EACD,CAAC;QACD,YAAY,CACV,KAAK,EACL,wGAAwG,CACzG,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACpD,IAAI,MAAM,GACR,IAAI,CAAC,CAAC,CAAC;QACP,CAAC,MAAM,EAAE,CAAC,MAAM,CACd,eAAe,EACf;YACE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE;YAC3C,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;YAC1C,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE;YAC5D,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;YACtC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;SACnC,EACD,KAAK,CACN,CAAC,CAAC;IACL,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,MAAM,CACxB,qBAAqB,EACrB,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG;YAC7B,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SACjD,CAAC,CAAC,CACJ,CAAC;QACF,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAE,CAAC;QACxD,EAAE,CAAC,IAAI,CACL,GAAG,MAAM,CAAC,WAAW,YAAY,MAAM,CAAC,KAAK,CAAC,MAAM,iBAAiB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC/F,MAAM,CAAC,KAAK,CACb,CAAC;QACF,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;YAC9B,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE;YACrC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE;YAC3C,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;SACnC,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,KAAK;YAClB,OAAO;gBACL,GAAG,OAAO;gBACV,KAAK;gBACL,aAAa;gBACb,WAAW;gBACX,MAAM,CAAC,EAAE;gBACT,eAAe;aAChB,CAAC;QACJ,IAAI,MAAM,KAAK,QAAQ;YACrB,OAAO;gBACL,GAAG,OAAO;gBACV,QAAQ;gBACR,SAAS;gBACT,GAAG,MAAM,EAAE,CAAC,QAAQ,CAClB,kBAAkB,EAClB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CACxD;gBACD,eAAe;aAChB,CAAC;QACJ,OAAO,CAAC,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE;YAC9C,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE;YACjE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,wBAAwB,EAAE;SAC3E,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,GAAG,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,CAAC,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAC5B,WAAW,EACX;QACE;YACE,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,mBAAmB;SAC1B;QACD;YACE,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,+BAA+B;SACtC;KACF,EACD,OAAO,CACR,CAAC;IACF,OAAO;QACL,GAAG,OAAO;QACV,KAAK;QACL,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAC9C,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/docs/data-resources.md

@@ -0,0 +1,72 @@
+# Data resource CLI
+
+`numa data-resource` uses the current platform identity and `/api/v1/data-resources`.
+Instance, policy, scope and settings reads require the platform ops-admin role;
+application reads and mutations retain server-side VIEWER/MAINTAINER checks.
+
+```sh
+numa data-resource instances --kind RDS --json
+numa data-resource instances --kind REDIS --json
+numa data-resource policy 2 --json
+numa data-resource scopes 1 --kind REDIS --json
+numa data-resource candidates --app 8 --environment 2 --kind RDS --purpose main --json
+numa data-resource bindings --app 8 --environment 2 --json
+```
+
+Names and IDs must come from the target platform. A catalog instance alone does
+not prove cloud identity, application access or usable credentials. An empty
+candidate list is not permission to select another environment's instance.
+
+Administrators can use `cloud-bind`, `set-scopes`, `set-settings`, `set-connection`, and `set-policy`
+with `--file` and `--yes`. Each takes the backend's complete, credential-free
+configuration DTO including its current `version`. Instance commands also require
+`--kind RDS|REDIS`; policy targets an environment ID. These PUT requests are sent
+once. Review cloud identity, environment scope, TLS and Redis instance-wide access
+before applying; existing bindings do not follow changed defaults automatically.
+
+`set-connection` additionally requires `instanceVersion`, `endpoint` (hostname/IP,
+not a URL), and `port`. It requires the backend connection-correction upgrade and
+rejects instances with existing resources or unresolved operations.
+
+Allocation uses a credential-free JSON PlanInput matching the platform contract:
+
+```json
+{
+  "appId": 8,
+  "environmentId": 2,
+  "kind": "RDS",
+  "purpose": "main",
+  "mode": "CREATE",
+  "instanceId": 4,
+  "isolationMode": "DATABASE"
+}
+```
+
+These IDs are illustrative, not existing-resource evidence. Save the input to a
+file and call `numa data-resource plan --file plan.json --yes --json`. Review the
+returned immutable target, account profile, operations and warnings before
+`apply <plan-id> --idempotency-key <original-key> --yes`. Production requires the
+server's accepted `--production-reason`. Redis `INSTANCE_ACCOUNT` grants access
+to the whole instance; DB 0 is not dataset isolation.
+
+`run <run-id>` reads the saved request. `reconcile <run-id> --yes` observes cloud
+state and updates its ledger; it does not repeat a cloud mutation. Transport
+loss, uncertain HTTP 5xx, and malformed successful write responses return
+`DATA_RESOURCE_RESULT_UNKNOWN`. Writes, including 401 responses, are never
+automatically replayed. Never replace a key to recover an unknown operation.
+Plan creation has no resolve-by-key API: an unknown preview must be inspected
+through existing bindings/platform records before considering a new plan.
+
+Secret delivery is separate: `delivery <binding-id>` reads its CAS version and
+`deliver <binding-id> --version <version> --idempotency-key <key> --yes` submits
+the versioned delivery/reconciliation request. A valid receipt does not prove
+application connectivity, migration success or restarted Pods. Credentials,
+reveal, rotations, arbitrary cloud calls and inventory creation are deliberately
+outside this initial command family.
+
+The CLI preserves backend field names under `data`. Unknown response fields are dropped using explicit DTO schemas. Sensitive fields,
+credential assignments and URL userinfo are redacted; provider error bodies and headers are not printed.
+
+If an onboarding application is PROVISIONING and data-resource reads return
+NOT_FOUND, check the platform's ACTIVE-only application gate. Do not silently
+mark onboarding complete just to obtain database access.

package/docs/model-providers.md

@@ -0,0 +1,100 @@
+# 模型提供商切换
+
+运行 `numa provider`，自动打开本机 Web 配置页；也可从 `numa` 主菜单选择“切换模型提供商”。在网页里选择 Codex CLI / 桌面端或 Claude Code，完成模式、URL、Key 和模型选择。终端需保持运行，浏览器与 CLI 在同一台电脑。
+
+```sh
+numa provider                  # 网页选择客户端与模式
+numa provider codex            # 直接打开 Codex 配置网页
+numa provider claude           # 直接打开 Claude Code 配置网页
+numa provider --browser-config # 输出管理员需追加的 New API 聊天预设
+numa provider codex --status --json
+numa provider codex --status --check --json # 在线查询中转 Key 信息，不改配置
+numa codex run                 # 显示模式告示板，再启动 CLI
+numa codex app .               # 显示模式告示板，再启动现有桌面端
+numa codex run --provider      # 终端选择官方 / 中转，切换后立即启动
+numa codex app . --provider    # 同上，启动桌面端
+numa claude run                # 显示模式告示板，再启动已安装的 Claude Code
+```
+
+`numa codex run/app --provider`只在终端选择“官方账号”或“中转模式”。已保存的 URL、Key、模型直接复用，不打开编辑页；不带选项则按当前模式启动。首次没有中转配置时才打开一次网页，保存后继续启动，取消则不启动。选择会写入当前客户端配置，之后启动沿用该模式；不是实例级隔离。切换前仍执行现有的会话占用检查、受管凭据归还及必要确认；尚未完成的切换需先通过 `numa provider codex` 恢复。
+
+快速选择需要交互式终端，不支持 `--json`。`-s/--select-account` 用来选择官方账号，与 `--provider` 的模式选择不同；选中中转时不能同时传 `-a/-s`。`-p <profile>` 保留原生 Codex 用法，例如 `numa codex run -p work` 会原样透传；也可以放在 `--` 后。模式选择发生在远程账号配置加载之前，切回官方会加载正确的平台配置；不需要释放受管凭据的中转启动不访问官方账号服务。
+
+目前支持官方账号和自定义模型提供商两种模式。自定义配置页将平台 URL、隐藏的 API Key 和常用模型选项放在同一张表单。Key 旁的“从 LLM 平台获取”按钮打开聊天登录入口，回调后自动填入 Key；也可直接手动填写。默认 URL 为 `https://llm-api.mcisaas.com`，仅作为预填值，可修改为任意兼容平台。Codex 的根地址自动补 `/v1`；自定义 URL 已带路径时使用该路径。Claude 使用 Anthropic 兼容接口的基地址。中转平台必须分别支持 Responses API / Anthropic Messages API。
+
+再次打开表单会预填已保存的 URL；Key 隐藏保留，无需重新输入。更改 URL 后必须重新填写或获取 Key，不把旧 Key 自动发送给另一个平台。模式菜单只提供“官方账号登录”和“自定义模型提供商”。URL、Key 和模型都在同一配置页编辑，不再单列修改 URL / Key、追加模型或选择启动模型入口。常用模型预设完整展示五家目录，不因当前 Key 的平台列表缺项而隐藏；它不是可用性清单。
+
+Codex 中仅有自定义名称、启用官方认证且未覆盖地址或 API 凭据的 provider 仍按官方账号处理，可直接切换并恢复原配置。
+
+首次接入 Claude 时，如果 `settings.json` 已有同一平台的 URL 和 API Key / Auth Token，Numa 可直接接管，无需先删除配置。原文件内容备份在仅当前用户可读的 `.numa-provider.json` 的 `importedConfig` 中；切回官方时清除自定义平台认证及模型覆盖，保留其他设置和客户端登录凭据。其他平台、认证脚本或云提供商配置仍需先处理冲突，不会静默接管。此接管规则不限定默认平台域名。
+
+在同一配置页直接勾选常用模型，也可点击“读取模型”检查 Key 并更新平台匹配 ID。Codex 和 Claude 都使用多选框追加模型，最后统一“保存配置”；也可不勾选，首次配置的首个勾选模型作为初始模型，编辑时保留已有启动模型。对于 Claude Code，Numa 将勾选的模型写入 `settings.json` 的 `modelPicker`，并关闭客户端再次自动发现未筛选的网关模型；平台支持 Anthropic 兼容接口的 ChatGPT、DeepSeek、GLM、Kimi 模型也可勾选。Codex 将所选模型写入独立的 JSON 模型目录，通过原生 `model_catalog_json` 加载；重启后可在 `/model` 中选择，切回官方时恢复原目录设置。目录使用官方 Codex 的默认指令和保守的自定义模型能力元数据，不据此推断模型的实际上下文或推理能力。完整自定义菜单需要 **Claude Code 2.1.242+**，见 [Claude 模型菜单配置](https://code.claude.com/docs/en/settings-reference#modelpicker)。旧版（例如 2.1.81）不会从平台自动获取模型列表，只能通过 `ANTHROPIC_CUSTOM_MODEL_OPTION` 显示一个自定义项：使用 `numa provider claude` 选择其他模型后重启 Claude，或自行升级客户端。平台可见列表不代表已经验证模型生成、effort 或上下文长度，Numa 不伪造这些能力。切回官方会恢复原来的模型及菜单配置。
+
+常用预设在进入配置页时即可选择，填写 URL、Key 或等待平台回调时保持可见和勾选。已有菜单项保留，不勾选则不追加模型。页面统一提醒“预设不代表平台已支持，也不保证当前 Key 分组有可用渠道”，不附加逐项可用性标签，不发起生成请求。追加不会改变 Claude 当前启动模型，也不会删除此前保存的模型。
+
+模型精选目录核对于 **2026-10-11**：Claude Opus / Sonnet / Haiku 5.5；ChatGPT 对应 OpenAI GPT-6 Astra、GPT-6.1 Sol、GPT-6 Luna；DeepSeek Flash / V4 Pro；GLM-5.3 / 5.3 Flash；Kimi K3。配置页提供完整的 11 项常用预设；平台返回匹配的模型时优先保留其大小写、部署前缀及快照 ID，缺少的条目仍显示目录中的预设 ID。查询结果和 `--status` 仍仅记录实际返回且通过接口类型、Key 限制筛选的模型，不把预设当成 API 返回结果。目录维护于 `packages/codex/src/provider-catalog.ts`，需随版本更新；它不是实时抓取厂商官网，也不证明分组渠道可用。官方来源：[Claude](https://www.anthropic.com/system-cards)、[OpenAI](https://developers.openai.com/api/docs/models)、[DeepSeek](https://api-docs.deepseek.com/quick_start/pricing/)、[GLM](https://docs.z.ai/llms.txt)、[Kimi](https://platform.kimi.ai/docs/guide/kimi-k3-quickstart)。
+
+配置网页仅监听 `127.0.0.1` 的随机端口，使用一次性连接地址和同源校验，10 分钟超时。Key 输入使用密码框，下方显示前 4 位和后 4 位方便核对，中间遮盖；长度不超过 12 位时全部遮盖。已保存 Key 只向页面提供遮盖后的摘要，不提供完整值。Key 不写入浏览器存储或配置记录；接收后仍由 CLI 按原有权限保存。页面不会自动重放保存请求。关闭标签页不撤销已提交操作；未完成时可重新打开终端地址，或在终端 Ctrl+C 结束。切换受管 Codex 凭据时，原有释放和进程关闭确认也在网页完成。
+
+启动选择写入 `model`，不通过 `ANTHROPIC_MODEL` 固定，之后在 Claude `/model` 中保存其他模型，后续启动会使用该选择。已有 Key 自动复用，追加的模型在切回自定义模式后继续保留。重启后直接运行 `claude` 即可读取菜单，无需每次从 Numa 启动。
+
+网页切换 Codex 官方账号到中转时，受管凭据的 release 全程使用当前配置页：展示账号和设备、待退出进程及待清理位置，在页面选择重新检查、关闭进程或取消，必要时另行确认强制结束。凭据同步、服务端准备、本地清理和释放登记的进度也显示在页面中，服务端确认后才继续写入中转配置。取消和失败沿用原有恢复记录，不自动重放释放请求。若 Numa 登录已失效，页面提示先运行 `numa login` 后重新进入配置，不会隐藏等待终端输入。独立 `numa codex release` 仍使用原有终端交互。
+
+启动告示板显示模式和中转平台地址，不展示 API Key。自定义模式启动时统一提醒“模型列表不代表当前 Key 所在分组可调用”，遇到无可用渠道时提示更换模型或联系平台管理员检查分组渠道。它输出到 stderr；只读 `--status --json` 不输出任何凭据。直接运行原生 `codex`、`claude` 或点击桌面应用仍读取客户端配置，但不会显示 Numa 的告示板。
+
+## Key 校验与平台信息
+
+配置中转时，先通过 New API 的 `GET /v1/models` 检查鉴权，并通过 `GET /api/usage/token/` 查询 Key 名称、剩余/已用额度、到期时间和模型限制。两个请求并行，默认各超时 4 秒，不发起模型生成请求。识别到 New API 且鉴权通过后，额外通过 `GET /api/log/token` 查询当前 Key 的近期用量，最多等待 1.5 秒；接口不可用不影响原列表。只提取近 7 天、当前候选模型、与目标客户端相同接口的用量记录：Claude 对应 `/v1/messages`，Codex 对应 `/v1/responses`。这些候选优先排序，并保存模型 ID 和最后调用时间，不保存日志内容、用户信息或请求正文。历史用量不保证当前仍可用，也不会把历史分组推断为当前分组。Codex 根 URL 自动补 `/v1/models`；带 `/v1` 的地址用于模型查询，查询用量时去掉末尾 `/v1`，保留此前的部署路径。Claude 的基地址统一追加 `/v1/models`，例如 `/gateway` 对应 `/gateway/v1/models`。
+
+明确鉴权失败、Key 到期或额度耗尽时，不发起新的切换或官方凭据释放。恢复未完成切换时也会重新查询；已经开始释放的事务允许完成恢复，Key 无效时仍禁止启动，之后可修改 Key。网络故障、服务异常或接口不兼容显示“暂时无法验证”，网页可选择取消或仍然保存。用量接口能查到 Key 不代表它通过模型接口的鉴权；鉴权通过也不保证上游模型生成正常。模型列表成功时，JSON 明确标记 `modelAvailability: "unverified"`。若返回 `supported_endpoint_types`，Claude 只保留支持 `anthropic` 的条目，Codex 只保留支持 `openai-response` 的条目；已启用且返回了 Key 模型限制时进一步按精确 ID 取交集。缺失接口类型时保留为未验证候选。列表可能与实时分组渠道不一致，出现 503 `model_not_found` 时应检查该 Key 的分组和渠道，不应仅凭模型在列表中就认定可调用。
+
+如果尚未开始释放的切换中断，恢复菜单提供“取消尚未开始的切换，保留官方模式”，之后可以修改已保存的 Key。取消会检查客户端配置没有变化；已经开始的释放事务不能通过此入口取消。
+
+通过 Numa 启动中转客户端前，会重新查询并在告示板显示这些信息、候选模型和检查时间。明确校验失败则停止启动；无法验证时显示提示并继续交给客户端处理。`--status` 展示配置时保存的结果及检查时间；加 `--check` 获取实时结果，仅返回查询结果，不更新本地配置。完整模型列表保留在 JSON 输出中，告示板中的长列表会省略部分条目。
+
+额度按平台原始 quota 单位显示，不推测人民币或美元。Key 的“无限额度”不代表用户账户余额无限。上游 New API 用量接口未返回分组，因此默认显示“未知（接口未返回）”；平台扩展返回 `data.group` 时自动展示，`auto` 显示“自动分组”，不会推测实际请求最终使用哪个分组。
+
+## 未提供 Key 时的登录
+
+无需修改 New API 源码。复用平台现有的 OIDC 登录、Key 列表和创建页面，通过 New API 的聊天预设把用户选中的 Key 交给本机 CLI。
+
+**平台管理员一次性配置：** 在 New API 的系统设置中找到聊天预设配置，在已有列表中追加下面这个对象，保留其他预设。也可通过 `numa provider --browser-config` 获取同一配置。
+
+```json
+{"Numa CLI":"http://127.0.0.1:17653/import#base_url={address}&api_key={key}"}
+```
+
+需要部署版本支持自定义聊天预设、`{address}` / `{key}` 变量，以及 Key 行的聊天入口。相关配置与入口见 [New API 聊天应用说明](https://docs.newapi.pro/zh/docs/guide/feature-guide/user/chat-apps)。本次代码改动未修改线上平台配置。没有预设时仍可直接粘贴 Key。
+
+用户流程：
+
+1. 运行 `numa provider`，进入自定义提供商配置页，确认平台 URL，点击 Key 旁的“从 LLM 平台获取”。
+2. 新窗口先连接本机接收器，再进入平台 `/chat/<序号>`。Numa 从公开 `/api/status` 找到匹配预设，支持当前 `/chat/0`，不固定编号。登录仍由平台及 Keycloak 完成，不复用固定 OIDC state，不修改平台 OAuth 回调。
+3. 登录成功后，聊天页把平台自动选择的 Key 传给本机 iframe。iframe 与原配置窗口校验来源和本次任务后，Key 自动填入密码框，同时只读查询模型；这一步不保存客户端配置。成功页提供“返回配置页”按钮：通过本次任务的窗口消息让原配置页关闭它打开的登录弹窗，并请求切回配置页；原表单不刷新，未保存输入保留。返回消息校验来源、接收 iframe 和任务 ID，不依赖跨域 `focus()` 单独完成切换。
+4. 在原配置页勾选常用模型，点击“保存配置”，CLI 才执行切换并保存。获取期间若修改 URL 或 Key，旧回调不会覆盖新输入。
+
+聊天入口使用的 Key 由平台选择；若要指定或创建其他 Key，请使用平台 API 密钥列表中对应行的“⋯ → 聊天 → Numa CLI”，或手动粘贴到配置表单。没有匹配预设时会提示手动填写。浏览器若因登录页隔离策略断开新窗口与配置页的关系，则退回独立确认页；确认后原配置页自动接收并填入 Key。本机 `/import` 仅允许本次平台源嵌入，其余页面禁止嵌入。浏览器若询问本地网络访问或拦截弹窗，需要允许平台打开本机接收页。
+
+浏览器与 CLI 必须在同一台电脑。推荐使用同一个浏览器配置文件打开引导页和平台页面。如果换了浏览器、用户配置，或直接进入 `/chat/<序号>` 跳过引导页，导入页会显示“连接当前终端”：粘贴 CLI 打印的完整本机连接地址（包含 `#session=…`），验证后继续确认已收到的 Key，无需再次复制 API Key。该地址是本次任务的临时凭据，请勿分享。恢复期间 Key 只保留在页面内存中，不要刷新；本地存储被禁用时也可使用此恢复操作。终端已结束或超时则需重新运行 provider。远程 SSH 使用手动输入 Key。接收器只监听 `127.0.0.1:17653`，10 分钟后关闭，Ctrl+C 可取消；端口被占用时停止，不把 Key 发给另一个进程。
+
+Key 放在 URL fragment 中传递，不进入 HTTP 查询字符串；本机页面读取后立即清除地址栏片段，保存前仅暂存在内存。自动回填通过限定来源的窗口消息，并核对打开窗口、当前任务及平台地址；不会使用通配来源发送 Key。临时连接标识保存在本机页面的 localStorage，用于同一浏览器的新标签页确认；它不是 API Key 或 OIDC token。接收 API 校验临时标识、Host 和请求来源，检查平台地址并只接受一次选取。Numa 不读取网页登录 Cookie 或 OIDC token。新 Key 由用户在 New API 页面创建，CLI 不代替用户创建，也不自动重放结果未知的写请求。
+
+列表中的分组信息在 New API 网页上查看；CLI 后续能显示哪些字段仍取决于 Key 用量接口的返回，不会因为导入成功而推断分组。
+
+## 凭据处理
+
+Numa 受管 Codex 账号切到中转时，先退出客户端、确认释放，随后上报最新完整 Token Set、清理本地受管凭据并完成服务端释放确认。复用 `numa codex release` 的既有事务；未完成时不应用中转配置，也不启动客户端。重新执行 `numa provider` 可继续上次切换。释放后保留原用户、原设备的再次领取资格，不自动回公共池。切回官方后，`numa codex run/app` 重新领取。
+
+个人登录凭据保留在客户端原来的文件或钥匙串中，不上传 Numa。中转启动不领取或刷新官方凭据；`use`、`auth-agent` 等凭据操作在中转模式下被阻止。运行中的 Numa 会话阻止模式切换，多个同模式会话仍可并行启动。
+
+## 本地配置与恢复
+
+Codex 使用 `CODEX_HOME`（默认 `~/.codex`），Claude 使用 `CLAUDE_CONFIG_DIR`（默认 `~/.claude`）。各自的 `.numa-provider.json` 保存模式、中转信息和配置恢复记录；原生配置分别为 `config.toml` 和 `settings.json`。两端使用同一 Codex 目录时，CLI 和桌面端共用提供商配置，切换后需重启桌面端。
+
+API Key 以明文保存在本机私有文件中；POSIX 系统文件权限为 `0600`。Codex 使用专用 provider 的 bearer token，`requires_openai_auth=false`，确保不会将缓存的官方登录 token 发送给中转。请勿将这些配置文件提交到仓库。
+
+切回官方会恢复原来的提供商相关设置，并保留中转期间修改的其他设置。无其他修改时恢复原文件；有修改时重新序列化，注释与格式可能变化。遇到损坏配置、并发修改或未完成释放时保留现场并停止，不假装切换成功。已有其他第三方提供商配置须先恢复为官方配置；Numa 不静默接管它们。
+
+通过 Numa 启动时，覆盖提供商的参数、环境变量或 Claude 项目设置会导致明确错误，避免显示错误的启动模式。组织管理策略仍由原生客户端执行。
+
+独立包也支持 `tokensrc-codex provider`、`tokensrc-codex run` 和 `tokensrc-codex app`。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@numa-tech/numa",
-  "version": "1.26.15",
+  "version": "1.26.17",
   "description": "Cross-platform CLI for the Numa internal developer platform with Keycloak authentication and MCP support.",
   "author": "numa-tech",
   "keywords": [
@@ -31,6 +31,7 @@
     "THIRD_PARTY_NOTICES.md",
     "docs/kb-access.md",
     "docs/gitops-configuration.md",
+    "docs/model-providers.md",
     "docs/design/kb-cli.md",
     "docs/design/kb-web-workspace.md",
     "scripts/export-kb-contract.py",
@@ -39,7 +40,8 @@
     "docs/oss-policy-client-governance.md",
     "docs/environment-configuration-publication.md",
     "docs/keycloak-managed-import.md",
-    "docs/design/kb-capability-upgrade.md"
+    "docs/design/kb-capability-upgrade.md",
+    "docs/data-resources.md"
   ],
   "scripts": {
     "clean": "node scripts/clean.mjs",
@@ -51,7 +53,7 @@
     "dev:oss-web": "tsx src/cli.ts oss web",
     "test:oss-web": "node --import tsx --test src/oss/web.test.ts src/oss/web-session.test.ts src/oss/web-transfers.test.ts src/oss/web-command.test.ts src/oss/local-picker.test.ts src/oss/transfer-paths.test.ts src/oss/transfer-worker.test.ts src/oss/transfer-queue.test.ts src/oss/web-page.test.ts src/oss/file-operations.test.ts src/oss/download-links.test.ts src/local-web/context-menu.test.ts",
     "test:oss-auth-code": "node scripts/test-oss-auth-code.mjs",
-    "root:test": "node --import tsx --test --test-concurrency=4 src/mcp-gateway/profile.test.ts src/mcp-gateway/runtime.test.ts src/mcp-gateway/install.test.ts src/branding.test.ts src/app-config.test.ts src/platform-profile.test.ts src/profile-migration.test.ts src/identity.test.ts src/backend.test.ts src/cert/client.test.ts src/cert/commands.test.ts src/oauth.test.ts src/web-console.test.ts src/cli-options.test.ts src/mail/client.test.ts src/wecom/client.test.ts src/wecom/commands.test.ts src/wecom/tools.test.ts src/ai-registry/client.test.ts src/ai-registry/bootstrap.test.ts src/ai-registry/install-defaults.test.ts src/ai-registry/workspace.test.ts src/ai-registry/namespace.test.ts src/compatibility/registry-instance.test.ts src/ai-registry/sync.test.ts src/ai-registry/bridge.test.ts src/ai-registry/skill-installer.test.ts src/ai-registry/skill-uninstaller.test.ts src/ai-registry/skill-dependencies.test.ts src/ai-registry/updates.test.ts src/maintenance/scheduler.test.ts src/maintenance/codex.test.ts src/ai-registry/mcp-installer.test.ts src/media/client.test.ts src/media/commands.test.ts src/media/transfers.test.ts src/oss/client.test.ts src/oss/governance.test.ts src/oss/commands.test.ts src/oss/auth-code.test.ts src/oss/clipboard.test.ts src/oss/web.test.ts src/oss/web-session.test.ts src/oss/web-transfers.test.ts src/oss/web-command.test.ts src/oss/local-picker.test.ts src/oss/transfer-paths.test.ts src/oss/transfer-worker.test.ts src/oss/transfer-queue.test.ts src/oss/web-page.test.ts src/oss/file-operations.test.ts src/oss/download-links.test.ts src/oss/bootstrap.test.ts src/oss/transfers.test.ts src/oss/search.test.ts src/oss/tools.test.ts src/mcp/install.test.ts src/mcp/catalog.test.ts src/tasks/runtime.test.ts src/tasks/stdio.test.ts src/tasks/wecom-notify.test.ts src/tasks/oss-query.test.ts src/interactive/wizard.test.ts src/pipeline/client.test.ts src/pipeline/commands.test.ts src/gitops/client.test.ts src/gitops/commands.test.ts src/gitops/workload-input.test.ts src/gitops/workload-client.test.ts src/gitops/workload-commands.test.ts src/repositories/client.test.ts src/repositories/commands.test.ts src/publications/scanner.test.ts src/publications/client.test.ts src/publications/commands.test.ts src/jenkins-jobs/client.test.ts src/jenkins-jobs/commands.test.ts src/clusters/client.test.ts src/clusters/commands.test.ts src/clusters/kubeconfig-discovery.test.ts src/teams/client.test.ts src/teams/commands.test.ts src/authorization/bootstrap-client.test.ts src/authorization/commands.test.ts src/authorization/access-request-client.test.ts src/authorization/access-request-commands.test.ts src/application-candidates/client.test.ts src/application-candidates/commands.test.ts src/application-onboarding/client.test.ts src/application-onboarding/commands.test.ts src/application-onboarding/tui.test.ts src/chatgpt-desktop.test.ts src/codex-integration.test.ts scripts/release-all.test.mjs src/authorization/application-commands.test.ts src/authorization/application-client.test.ts src/authorization/application-schemas.test.ts src/notion/client.test.ts src/notion/commands.test.ts src/notion/tools.test.ts src/notion/machine-cli.test.ts src/cloud/accounts.test.ts src/cloud/bootstrap.test.ts src/cloud/business-bootstrap.test.ts src/cloud/maintenance.test.ts src/cloud/wizard.test.ts src/cloud/oss-bootstrap.test.ts src/business-issuer.test.ts src/login-configuration.test.ts src/login-recovery.test.ts src/ai-registry/mcp-management.test.ts src/ai-registry/mcp-runtime.test.ts src/ai-registry/mcp-stdio.test.ts src/kb/client.test.ts src/kb/config.test.ts src/kb/commands.test.ts src/kb/login.test.ts src/kb/transfers.test.ts src/kb/contract.test.ts src/authorization/environment-governance-client.test.ts src/authorization/environment-governance-commands.test.ts src/authorization/environment-publication.test.ts src/authorization/managed-keycloak.test.ts src/authorization/managed-keycloak-producer.test.ts src/kb/web.test.ts src/kb/web-queue.test.ts src/local-web/context-menu.test.ts src/kb/web-login.test.ts src/kb/capabilities.test.ts src/jev/input.test.ts src/jev/profile.test.ts src/jev/client.test.ts src/jev/commands.test.ts scripts/check-default-profile.test.mjs",
+    "root:test": "node --import tsx --test --test-concurrency=4 src/mcp-gateway/profile.test.ts src/mcp-gateway/runtime.test.ts src/mcp-gateway/install.test.ts src/branding.test.ts src/app-config.test.ts src/platform-profile.test.ts src/profile-migration.test.ts src/identity.test.ts src/backend.test.ts src/cert/client.test.ts src/cert/commands.test.ts src/oauth.test.ts src/web-console.test.ts src/cli-options.test.ts src/mail/client.test.ts src/wecom/client.test.ts src/wecom/commands.test.ts src/wecom/tools.test.ts src/ai-registry/client.test.ts src/ai-registry/bootstrap.test.ts src/ai-registry/install-defaults.test.ts src/ai-registry/workspace.test.ts src/ai-registry/namespace.test.ts src/compatibility/registry-instance.test.ts src/ai-registry/sync.test.ts src/ai-registry/bridge.test.ts src/ai-registry/skill-installer.test.ts src/ai-registry/skill-uninstaller.test.ts src/ai-registry/skill-dependencies.test.ts src/ai-registry/updates.test.ts src/maintenance/scheduler.test.ts src/maintenance/codex.test.ts src/ai-registry/mcp-installer.test.ts src/media/client.test.ts src/media/commands.test.ts src/media/transfers.test.ts src/oss/client.test.ts src/oss/governance.test.ts src/oss/commands.test.ts src/oss/auth-code.test.ts src/oss/clipboard.test.ts src/oss/web.test.ts src/oss/web-session.test.ts src/oss/web-transfers.test.ts src/oss/web-command.test.ts src/oss/local-picker.test.ts src/oss/transfer-paths.test.ts src/oss/transfer-worker.test.ts src/oss/transfer-queue.test.ts src/oss/web-page.test.ts src/oss/file-operations.test.ts src/oss/download-links.test.ts src/oss/bootstrap.test.ts src/oss/transfers.test.ts src/oss/search.test.ts src/oss/tools.test.ts src/mcp/install.test.ts src/mcp/catalog.test.ts src/tasks/runtime.test.ts src/tasks/stdio.test.ts src/tasks/wecom-notify.test.ts src/tasks/oss-query.test.ts src/interactive/wizard.test.ts src/pipeline/client.test.ts src/pipeline/commands.test.ts src/gitops/client.test.ts src/gitops/commands.test.ts src/gitops/workload-input.test.ts src/gitops/workload-client.test.ts src/gitops/workload-commands.test.ts src/repositories/client.test.ts src/repositories/commands.test.ts src/publications/scanner.test.ts src/publications/client.test.ts src/publications/commands.test.ts src/jenkins-jobs/client.test.ts src/jenkins-jobs/commands.test.ts src/clusters/client.test.ts src/clusters/commands.test.ts src/clusters/kubeconfig-discovery.test.ts src/teams/client.test.ts src/teams/commands.test.ts src/authorization/bootstrap-client.test.ts src/authorization/commands.test.ts src/authorization/access-request-client.test.ts src/authorization/access-request-commands.test.ts src/application-candidates/client.test.ts src/application-candidates/commands.test.ts src/application-onboarding/client.test.ts src/application-onboarding/commands.test.ts src/application-onboarding/tui.test.ts src/chatgpt-desktop.test.ts src/codex-integration.test.ts scripts/release-all.test.mjs src/authorization/application-commands.test.ts src/authorization/application-client.test.ts src/authorization/application-schemas.test.ts src/notion/client.test.ts src/notion/commands.test.ts src/notion/tools.test.ts src/notion/machine-cli.test.ts src/cloud/accounts.test.ts src/cloud/bootstrap.test.ts src/cloud/business-bootstrap.test.ts src/cloud/maintenance.test.ts src/cloud/wizard.test.ts src/cloud/oss-bootstrap.test.ts src/business-issuer.test.ts src/login-configuration.test.ts src/login-recovery.test.ts src/ai-registry/mcp-management.test.ts src/ai-registry/mcp-runtime.test.ts src/ai-registry/mcp-stdio.test.ts src/kb/client.test.ts src/kb/config.test.ts src/kb/commands.test.ts src/kb/login.test.ts src/kb/transfers.test.ts src/kb/contract.test.ts src/authorization/environment-governance-client.test.ts src/authorization/environment-governance-commands.test.ts src/authorization/environment-publication.test.ts src/authorization/managed-keycloak.test.ts src/authorization/managed-keycloak-producer.test.ts src/kb/web.test.ts src/kb/web-queue.test.ts src/local-web/context-menu.test.ts src/kb/web-login.test.ts src/kb/capabilities.test.ts src/jev/input.test.ts src/jev/profile.test.ts src/jev/client.test.ts src/jev/commands.test.ts scripts/check-default-profile.test.mjs src/data-resources/client.test.ts src/data-resources/commands.test.ts",
     "pack:check": "turbo run pack:check root:pack:check",
     "root:pack:check": "node scripts/check-root-package.mjs",
     "boundaries": "node scripts/check-workspace-boundaries.mjs",
@@ -78,8 +80,8 @@
   "dependencies": {
     "@clack/prompts": "^1.7.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@numa-tech/cli-auth": "1.26.15",
-    "@tokensrc/codex": "1.26.15",
+    "@numa-tech/cli-auth": "1.26.17",
+    "@tokensrc/codex": "1.26.17",
     "ali-oss": "^6.23.0",
     "commander": "^14.0.3",
     "ink": "^6.8.0",
@@ -103,7 +105,7 @@
     "fast-uri": "4.1.2",
     "hono": "4.13.0",
     "ip-address": "10.4.0",
-    "undici": "6.28.0"
+    "undici": "6.29.0"
   },
   "publishConfig": {
     "access": "public"