@panguard-ai/panguard 0.1.0

package/dist/cli/auth-guard.d.ts

@@ -0,0 +1,79 @@
+/**
+ * CLI feature gating based on authenticated user tier.
+ * CLI 功能控制 - 基於已驗證用戶的訂閱等級
+ *
+ * @module @panguard-ai/panguard/cli/auth-guard
+ */
+import type { StoredCredentials, Tier } from './credentials.js';
+export type RequiredTier = Tier;
+export interface AuthCheckResult {
+    authenticated: boolean;
+    authorized: boolean;
+    credentials: StoredCredentials | null;
+}
+export declare const FEATURE_TIER: Record<string, Tier>;
+/**
+ * Check if the current CLI user is authenticated and has the required tier.
+ */
+export declare function requireAuth(requiredTier?: RequiredTier): AuthCheckResult;
+/**
+ * Decorator for Commander actions that require authentication.
+ *
+ * Usage:
+ *   .action(withAuth('pro', async (opts, creds) => { ... }))
+ */
+export declare function withAuth<T>(requiredTier: RequiredTier, handler: (options: T, credentials: StoredCredentials) => Promise<void>): (options: T) => Promise<void>;
+/**
+ * Tier badge string for display in menus.
+ */
+export declare function tierBadge(tier: RequiredTier): string;
+/**
+ * Refresh tier from server in background.
+ * Called on CLI startup to ensure local cache is current.
+ */
+export declare function refreshTierInBackground(): void;
+/**
+ * Get current license/tier from stored credentials or license file.
+ * Checks credentials.json first, then falls back to ~/.panguard/license.
+ */
+export declare function getLicense(): {
+    tier: Tier;
+    email?: string;
+};
+/**
+ * Check if current user has access to a given tier level.
+ */
+export declare function checkAccess(requiredTier: Tier): boolean;
+/**
+ * Check if current user has access to a feature by name.
+ * Uses FEATURE_TIER mapping to resolve the required tier.
+ */
+export declare function checkFeatureAccess(feature: string): boolean;
+/**
+ * Display a branded upgrade prompt for a locked feature.
+ * Accepts feature KEY (e.g. 'report', not 'Compliance Report').
+ */
+export declare function showUpgradePrompt(feature: string, lang?: string): void;
+/**
+ * Show a contextual upgrade hint for scan auto-fix.
+ * Used after scan results when fixable issues are found.
+ */
+export declare function showScanUpgradeHint(fixableCount: number, lang?: string): void;
+/**
+ * Show a contextual upgrade hint for Guard AI analysis.
+ * Used when a suspicious event needs AI analysis.
+ */
+export declare function showGuardAIHint(threatType: string, confidence: number, lang?: string): void;
+export declare const PRICING_TIERS: Record<string, {
+    price: number;
+    unit: string;
+    machines: string;
+}>;
+export declare const COMPLIANCE_PRICING: Record<string, {
+    price: number;
+    unit: string;
+    name: Record<string, string>;
+}>;
+/** Business subscribers get 50% off additional reports */
+export declare const BUSINESS_REPORT_DISCOUNT = 0.5;
+//# sourceMappingURL=auth-guard.d.ts.map

package/dist/cli/auth-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-guard.d.ts","sourceRoot":"","sources":["../../src/cli/auth-guard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,OAAO,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAEhE,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC;AAEhC,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACvC;AAID,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAU7C,CAAC;AAEF;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,GAAE,YAA0B,GAAG,eAAe,CAoBrF;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EACxB,YAAY,EAAE,YAAY,EAC1B,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GACrE,CAAC,OAAO,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CA0D/B;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CASpD;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAgE9C;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAsB3D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,IAAI,GAAG,OAAO,CAGvD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG3D;AAgBD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAa,GAAG,IAAI,CAkD5E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE,MAAa,GAAG,IAAI,CAenF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,MAAa,GAAG,IAAI,CA0BjG;AAID,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAK3F,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,MAAM,CACrC,MAAM,EACN;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CA4B9D,CAAC;AAEF,0DAA0D;AAC1D,eAAO,MAAM,wBAAwB,MAAM,CAAC"}

package/dist/cli/auth-guard.js

@@ -0,0 +1,337 @@
+/**
+ * CLI feature gating based on authenticated user tier.
+ * CLI 功能控制 - 基於已驗證用戶的訂閱等級
+ *
+ * @module @panguard-ai/panguard/cli/auth-guard
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { c, symbols, box } from '@panguard-ai/core';
+import { loadCredentials, saveCredentials, isTokenExpired, tierDisplayName, TIER_LEVEL, } from './credentials.js';
+/* ── Feature → Tier mapping ── */
+export const FEATURE_TIER = {
+    setup: 'community',
+    scan: 'community',
+    guard: 'community',
+    'threat-cloud': 'community',
+    demo: 'community',
+    notifications: 'solo',
+    notify: 'solo',
+    trap: 'solo',
+    report: 'business',
+};
+/**
+ * Check if the current CLI user is authenticated and has the required tier.
+ */
+export function requireAuth(requiredTier = 'community') {
+    // Community tier requires no authentication — allow anonymous usage
+    if (requiredTier === 'community') {
+        return { authenticated: true, authorized: true, credentials: null };
+    }
+    const creds = loadCredentials();
+    if (!creds || isTokenExpired(creds)) {
+        return { authenticated: false, authorized: false, credentials: null };
+    }
+    const userLevel = TIER_LEVEL[creds.tier] ?? 0;
+    const requiredLevel = TIER_LEVEL[requiredTier] ?? 0;
+    return {
+        authenticated: true,
+        authorized: userLevel >= requiredLevel,
+        credentials: creds,
+    };
+}
+/**
+ * Decorator for Commander actions that require authentication.
+ *
+ * Usage:
+ *   .action(withAuth('pro', async (opts, creds) => { ... }))
+ */
+export function withAuth(requiredTier, handler) {
+    return async (options) => {
+        // In server mode, require a valid service token from environment.
+        // The server has its own session-based auth for API routes.
+        if (process.env['PANGUARD_SERVER_MODE'] === '1') {
+            const creds = loadCredentials();
+            if (!creds || isTokenExpired(creds)) {
+                console.error('Server mode requires valid credentials. Run `panguard login` first.');
+                process.exitCode = 1;
+                return;
+            }
+            await handler(options, creds);
+            return;
+        }
+        const check = requireAuth(requiredTier);
+        if (!check.authenticated) {
+            console.log('');
+            console.log(box([
+                `${symbols.warn} \u9700\u8981\u767B\u5165 / Authentication required`,
+                '',
+                `  \u8ACB\u57F7\u884C ${c.sage('panguard login')} \u4F86\u9A57\u8B49\u3002`,
+                `  Run ${c.sage('panguard login')} to authenticate.`,
+            ].join('\n'), { borderColor: c.caution, title: 'Panguard AI' }));
+            console.log('');
+            process.exitCode = 1;
+            return;
+        }
+        if (!check.authorized) {
+            const tierName = tierDisplayName(requiredTier);
+            console.log('');
+            console.log(box([
+                `${symbols.fail} \u9700\u8981 ${tierName} \u7B49\u7D1A / ${tierName} tier required`,
+                '',
+                `  \u76EE\u524D\u7B49\u7D1A: ${c.sage(tierDisplayName(check.credentials.tier))}`,
+                `  Current tier: ${c.sage(tierDisplayName(check.credentials.tier))}`,
+                '',
+                `  \u5347\u7D1A\u8ACB\u898B ${c.underline('https://panguard.ai/pricing')}`,
+            ].join('\n'), { borderColor: c.critical, title: '\u9700\u8981\u5347\u7D1A / Upgrade Required' }));
+            console.log('');
+            process.exitCode = 1;
+            return;
+        }
+        await handler(options, check.credentials);
+    };
+}
+/**
+ * Tier badge string for display in menus.
+ */
+export function tierBadge(tier) {
+    if (tier === 'community')
+        return '';
+    const names = {
+        solo: '[SOLO]',
+        pro: '[PRO]',
+        business: '[BIZ]',
+        enterprise: '[ENT]',
+    };
+    return c.dim(names[tier] ?? '');
+}
+/**
+ * Refresh tier from server in background.
+ * Called on CLI startup to ensure local cache is current.
+ */
+export function refreshTierInBackground() {
+    const creds = loadCredentials();
+    if (!creds || isTokenExpired(creds) || !creds.apiUrl)
+        return;
+    // Fire-and-forget: don't block CLI startup
+    fetch(`${creds.apiUrl}/api/auth/me`, {
+        headers: { Authorization: `Bearer ${creds.token}` },
+        signal: AbortSignal.timeout(5000),
+    })
+        .then((res) => res.ok
+        ? res.json()
+        : null)
+        .then((body) => {
+        if (!body?.data?.user?.tier)
+            return;
+        const serverTier = body.data.user.tier;
+        const serverPlanExpires = body.data.user['planExpiresAt'];
+        // Check if plan has expired server-side (tier got downgraded to community)
+        if (serverTier === 'community' && creds.tier !== 'community') {
+            console.log('');
+            console.log(c.caution(`  [!] Your ${tierDisplayName(creds.tier)} plan has expired. Account downgraded to Community tier.`));
+            console.log(c.dim(`      Renew at https://panguard.ai/pricing`));
+            console.log('');
+        }
+        // Warn if plan expiring soon (within 3 days)
+        if (serverPlanExpires) {
+            const expiresDate = new Date(serverPlanExpires);
+            const daysLeft = Math.ceil((expiresDate.getTime() - Date.now()) / (24 * 60 * 60 * 1000));
+            if (daysLeft > 0 && daysLeft <= 3) {
+                console.log('');
+                console.log(c.caution(`  [!] Your ${tierDisplayName(serverTier)} plan expires in ${daysLeft} day(s).`));
+                console.log(c.dim(`      Renew at https://panguard.ai/pricing`));
+                console.log('');
+            }
+        }
+        if (serverTier !== creds.tier || body.data.user.name !== creds.name) {
+            saveCredentials({
+                ...creds,
+                tier: serverTier,
+                name: body.data.user.name ?? creds.name,
+            });
+        }
+    })
+        .catch(() => {
+        /* offline or timeout — keep local cache */
+    });
+}
+/**
+ * Get current license/tier from stored credentials or license file.
+ * Checks credentials.json first, then falls back to ~/.panguard/license.
+ */
+export function getLicense() {
+    // 1. Try credentials.json (logged-in users)
+    const creds = loadCredentials();
+    if (creds && !isTokenExpired(creds)) {
+        return { tier: creds.tier, email: creds.email };
+    }
+    // 2. Fallback: ~/.panguard/license file (offline license keys)
+    const licensePath = join(homedir(), '.panguard', 'license');
+    if (existsSync(licensePath)) {
+        try {
+            const content = readFileSync(licensePath, 'utf-8').trim();
+            const data = JSON.parse(content);
+            if (data.tier && TIER_LEVEL[data.tier] !== undefined) {
+                return { tier: data.tier, email: data.email };
+            }
+        }
+        catch {
+            // Invalid license file — fall through to community
+        }
+    }
+    return { tier: 'community' };
+}
+/**
+ * Check if current user has access to a given tier level.
+ */
+export function checkAccess(requiredTier) {
+    const { tier } = getLicense();
+    return (TIER_LEVEL[tier] ?? 0) >= (TIER_LEVEL[requiredTier] ?? 0);
+}
+/**
+ * Check if current user has access to a feature by name.
+ * Uses FEATURE_TIER mapping to resolve the required tier.
+ */
+export function checkFeatureAccess(feature) {
+    const requiredTier = FEATURE_TIER[feature] ?? 'community';
+    return checkAccess(requiredTier);
+}
+/* ── Feature display names (bilingual) ── */
+const FEATURE_DISPLAY = {
+    scan: { en: 'Security Scan', 'zh-TW': '\u5B89\u5168\u6383\u63CF' },
+    guard: { en: 'Guard Engine', 'zh-TW': '\u5B88\u8B77\u5F15\u64CE' },
+    report: { en: 'Compliance Report', 'zh-TW': '\u5408\u898F\u5831\u544A' },
+    trap: { en: 'Honeypot System', 'zh-TW': '\u871C\u7F50\u7CFB\u7D71' },
+    notifications: { en: 'Notifications', 'zh-TW': '\u901A\u77E5\u7CFB\u7D71' },
+    notify: { en: 'Notifications', 'zh-TW': '\u901A\u77E5\u7CFB\u7D71' },
+    'threat-cloud': { en: 'Threat Intelligence', 'zh-TW': '\u5A01\u8105\u60C5\u5831' },
+    setup: { en: 'Setup Wizard', 'zh-TW': '\u521D\u59CB\u8A2D\u5B9A' },
+    demo: { en: 'Feature Demo', 'zh-TW': '\u529F\u80FD\u5C55\u793A' },
+};
+/**
+ * Display a branded upgrade prompt for a locked feature.
+ * Accepts feature KEY (e.g. 'report', not 'Compliance Report').
+ */
+export function showUpgradePrompt(feature, lang = 'en') {
+    const tier = FEATURE_TIER[feature] ?? 'community';
+    const { tier: userTier } = getLicense();
+    const tierName = tierDisplayName(tier);
+    const userTierName = tierDisplayName(userTier);
+    const pricing = PRICING_TIERS[tier];
+    const priceStr = pricing && pricing.price > 0 ? `$${pricing.price}${pricing.unit}` : '';
+    const machinesStr = pricing ? pricing.machines : '';
+    const featureName = FEATURE_DISPLAY[feature]?.[lang] ?? FEATURE_DISPLAY[feature]?.['en'] ?? feature;
+    const lines = lang === 'zh-TW'
+        ? [
+            `\u300C${featureName}\u300D\u9700\u8981 ${tierName} \u65B9\u6848`,
+            priceStr ? `${priceStr} | ${machinesStr} \u53F0\u6A5F\u5668` : '',
+            '',
+            `\u76EE\u524D\u65B9\u6848:  ${c.sage(userTierName)}`,
+            `\u9700\u8981\u65B9\u6848:  ${c.sage(tierName)}`,
+            '',
+            `\u2192 ${c.underline('https://panguard.ai/pricing')}`,
+            `\u2192 ${c.sage('panguard activate <license-key>')}`,
+            '',
+            c.dim('\u6240\u6709\u4ED8\u8CBB\u65B9\u6848\u4EAB 30 \u5929\u514D\u8CBB\u8A66\u7528\u3002'),
+        ]
+        : [
+            `${featureName} requires ${tierName} plan`,
+            priceStr ? `${priceStr} | ${machinesStr} machine(s)` : '',
+            '',
+            `Current:   ${c.sage(userTierName)}`,
+            `Required:  ${c.sage(tierName)}`,
+            '',
+            `\u2192 ${c.underline('https://panguard.ai/pricing')}`,
+            `\u2192 ${c.sage('panguard activate <license-key>')}`,
+            '',
+            c.dim('All paid plans include 30-day free trial.'),
+        ];
+    const content = lines.filter((l) => l !== '');
+    console.log('');
+    console.log(box(content.join('\n'), {
+        borderColor: c.sage,
+        title: lang === 'zh-TW' ? '\u9700\u8981\u5347\u7D1A' : 'Upgrade Required',
+    }));
+    console.log('');
+}
+/**
+ * Show a contextual upgrade hint for scan auto-fix.
+ * Used after scan results when fixable issues are found.
+ */
+export function showScanUpgradeHint(fixableCount, lang = 'en') {
+    const lines = lang === 'zh-TW'
+        ? [
+            `\u767C\u73FE ${fixableCount} \u500B\u53EF\u81EA\u52D5\u4FEE\u5FA9\u7684\u554F\u984C\u3002`,
+            `\u5347\u7D1A\u5230 Solo ($9/\u6708) \u5373\u53EF\u4E00\u9375\u4FEE\u5FA9\uFF1A`,
+            `$ panguard scan --fix`,
+        ]
+        : [
+            `${fixableCount} issue(s) can be auto-fixed.`,
+            `Upgrade to Solo ($9/mo) for one-click fix:`,
+            `$ panguard scan --fix`,
+        ];
+    console.log('');
+    console.log(box(lines.join('\n'), { borderColor: c.sage }));
+}
+/**
+ * Show a contextual upgrade hint for Guard AI analysis.
+ * Used when a suspicious event needs AI analysis.
+ */
+export function showGuardAIHint(threatType, confidence, lang = 'en') {
+    console.log('');
+    if (lang === 'zh-TW') {
+        console.log(`  ${c.caution('[?]')} \u5075\u6E2C\u5230\u53EF\u7591\u6D3B\u52D5\uFF08\u4FE1\u5FC3\u5EA6 ${confidence}%\uFF09`);
+        console.log(`      \u985E\u578B: ${threatType}`);
+        console.log('');
+        console.log(c.dim(`      \u9700\u8981 AI \u5206\u6790\u624D\u80FD\u5224\u65B7\u662F\u5426\u70BA\u5A01\u8105\u3002`));
+        console.log(c.dim(`      \u5347\u7D1A\u5230 Solo ($9/\u6708) \u89E3\u9396 AI \u6DF1\u5EA6\u5206\u6790\u3002`));
+    }
+    else {
+        console.log(`  ${c.caution('[?]')} Suspicious activity detected (confidence ${confidence}%)`);
+        console.log(`      Type: ${threatType}`);
+        console.log('');
+        console.log(c.dim(`      AI analysis required to determine if this is a threat.`));
+        console.log(c.dim(`      Upgrade to Solo ($9/mo) for AI-powered analysis.`));
+    }
+    console.log('');
+}
+/* ── Pricing Constants ── */
+export const PRICING_TIERS = {
+    community: { price: 0, unit: '', machines: '1' },
+    solo: { price: 9, unit: '/mo', machines: '3' },
+    pro: { price: 29, unit: '/mo', machines: '10' },
+    business: { price: 79, unit: '/mo', machines: '25' },
+};
+export const COMPLIANCE_PRICING = {
+    tw_cyber_security: {
+        price: 299,
+        unit: 'one-time',
+        name: {
+            en: 'TW Cyber Security Act',
+            'zh-TW': '\u8CC7\u5B89\u6CD5\u6E96\u5099\u5EA6\u8A55\u4F30',
+        },
+    },
+    iso27001: {
+        price: 499,
+        unit: 'one-time',
+        name: { en: 'ISO 27001 Readiness', 'zh-TW': 'ISO 27001 \u6E96\u5099\u5EA6\u8A55\u4F30' },
+    },
+    soc2: {
+        price: 699,
+        unit: 'one-time',
+        name: { en: 'SOC 2 Readiness', 'zh-TW': 'SOC 2 \u6E96\u5099\u5EA6\u8A55\u4F30' },
+    },
+    bundle: {
+        price: 999,
+        unit: 'one-time',
+        name: {
+            en: 'Compliance Bundle (All 3)',
+            'zh-TW': '\u5408\u898F\u7D44\u5408\u5305 (3 \u9805\u5168\u542B)',
+        },
+    },
+};
+/** Business subscribers get 50% off additional reports */
+export const BUSINESS_REPORT_DISCOUNT = 0.5;
+//# sourceMappingURL=auth-guard.js.map

package/dist/cli/auth-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-guard.js","sourceRoot":"","sources":["../../src/cli/auth-guard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,eAAe,EACf,eAAe,EACf,cAAc,EACd,eAAe,EACf,UAAU,GACX,MAAM,kBAAkB,CAAC;AAW1B,kCAAkC;AAElC,MAAM,CAAC,MAAM,YAAY,GAAyB;IAChD,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,WAAW;IAClB,cAAc,EAAE,WAAW;IAC3B,IAAI,EAAE,WAAW;IACjB,aAAa,EAAE,MAAM;IACrB,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,eAA6B,WAAW;IAClE,oEAAoE;IACpE,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAEhC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAEpD,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,SAAS,IAAI,aAAa;QACtC,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CACtB,YAA0B,EAC1B,OAAsE;IAEtE,OAAO,KAAK,EAAE,OAAU,EAAE,EAAE;QAC1B,kEAAkE;QAClE,4DAA4D;QAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,KAAK,GAAG,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;gBACrF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QAExC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,GAAG,CACD;gBACE,GAAG,OAAO,CAAC,IAAI,qDAAqD;gBACpE,EAAE;gBACF,wBAAwB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,2BAA2B;gBAC3E,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB;aACrD,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CACjD,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,GAAG,CACD;gBACE,GAAG,OAAO,CAAC,IAAI,iBAAiB,QAAQ,mBAAmB,QAAQ,gBAAgB;gBACnF,EAAE;gBACF,+BAA+B,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAY,CAAC,IAAI,CAAC,CAAC,EAAE;gBACjF,mBAAmB,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAY,CAAC,IAAI,CAAC,CAAC,EAAE;gBACrE,EAAE;gBACF,8BAA8B,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,EAAE;aAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAClF,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,WAAY,CAAC,CAAC;IAC7C,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAkB;IAC1C,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAA2B;QACpC,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,OAAO;QACZ,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,OAAO;KACpB,CAAC;IACF,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAE7D,2CAA2C;IAC3C,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,cAAc,EAAE;QACnC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE;QACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;KAClC,CAAC;SACC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,EAAE;QACJ,CAAC,CAAE,GAAG,CAAC,IAAI,EAGN;QACL,CAAC,CAAC,IAAI,CACT;SACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YAAE,OAAO;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAY,CAAC;QAC/C,MAAM,iBAAiB,GAAI,IAAI,CAAC,IAAI,CAAC,IAAgC,CAAC,eAAe,CAGxE,CAAC;QAEd,2EAA2E;QAC3E,IAAI,UAAU,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,OAAO,CACP,cAAc,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,0DAA0D,CACpG,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,6CAA6C;QAC7C,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YACzF,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,OAAO,CACP,cAAc,eAAe,CAAC,UAAU,CAAC,oBAAoB,QAAQ,UAAU,CAChF,CACF,CAAC;gBACF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,UAAU,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YACpE,eAAe,CAAC;gBACd,GAAG,KAAK;gBACR,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE;QACV,2CAA2C;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,4CAA4C;IAC5C,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,KAAK,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;IAED,+DAA+D;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAY,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAY,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,YAAkB;IAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;IAC9B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC;IAC1D,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC;AACnC,CAAC;AAED,6CAA6C;AAE7C,MAAM,eAAe,GAA2C;IAC9D,IAAI,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClE,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClE,MAAM,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACxE,IAAI,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACpE,aAAa,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAC3E,MAAM,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACpE,cAAc,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClF,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClE,IAAI,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE;CAClE,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,OAAe,IAAI;IACpE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC;IAClD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,MAAM,WAAW,GACf,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;IAElF,MAAM,KAAK,GACT,IAAI,KAAK,OAAO;QACd,CAAC,CAAC;YACE,SAAS,WAAW,sBAAsB,QAAQ,eAAe;YACjE,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,MAAM,WAAW,qBAAqB,CAAC,CAAC,CAAC,EAAE;YACjE,EAAE;YACF,8BAA8B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;YACpD,8BAA8B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAChD,EAAE;YACF,UAAU,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,EAAE;YACtD,UAAU,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,EAAE;YACrD,EAAE;YACF,CAAC,CAAC,GAAG,CACH,oFAAoF,CACrF;SACF;QACH,CAAC,CAAC;YACE,GAAG,WAAW,aAAa,QAAQ,OAAO;YAC1C,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,MAAM,WAAW,aAAa,CAAC,CAAC,CAAC,EAAE;YACzD,EAAE;YACF,cAAc,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;YACpC,cAAc,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAChC,EAAE;YACF,UAAU,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,EAAE;YACtD,UAAU,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,EAAE;YACrD,EAAE;YACF,CAAC,CAAC,GAAG,CAAC,2CAA2C,CAAC;SACnD,CAAC;IAER,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAE9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtB,WAAW,EAAE,CAAC,CAAC,IAAI;QACnB,KAAK,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,kBAAkB;KAC1E,CAAC,CACH,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB,EAAE,OAAe,IAAI;IAC3E,MAAM,KAAK,GACT,IAAI,KAAK,OAAO;QACd,CAAC,CAAC;YACE,gBAAgB,YAAY,+DAA+D;YAC3F,gFAAgF;YAChF,uBAAuB;SACxB;QACH,CAAC,CAAC;YACE,GAAG,YAAY,8BAA8B;YAC7C,4CAA4C;YAC5C,uBAAuB;SACxB,CAAC;IACR,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,UAAkB,EAAE,OAAe,IAAI;IACzF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,uEAAuE,UAAU,SAAS,CAChH,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CACH,gGAAgG,CACjG,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CACH,0FAA0F,CAC3F,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,6CAA6C,UAAU,IAAI,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,6BAA6B;AAE7B,MAAM,CAAC,MAAM,aAAa,GAAsE;IAC9F,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE;IAChD,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE;IAC9C,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC/C,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;CACrD,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAG3B;IACF,iBAAiB,EAAE;QACjB,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE;YACJ,EAAE,EAAE,uBAAuB;YAC3B,OAAO,EAAE,kDAAkD;SAC5D;KACF;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,0CAA0C,EAAE;KACzF;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE,sCAAsC,EAAE;KACjF;IACD,MAAM,EAAE;QACN,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE;YACJ,EAAE,EAAE,2BAA2B;YAC/B,OAAO,EAAE,uDAAuD;SACjE;KACF;CACF,CAAC;AAEF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC"}

package/dist/cli/commands/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/admin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,wBAAgB,YAAY,IAAI,OAAO,CAkItC"}

package/dist/cli/commands/admin.js

@@ -0,0 +1,129 @@
+/**
+ * panguard admin - Admin management commands
+ *
+ * panguard admin init           Create initial admin account
+ * panguard admin create-user    Create a user with specified tier
+ */
+import { Command } from 'commander';
+import { createInterface } from 'node:readline';
+import { join } from 'node:path';
+import { mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { c, banner } from '@panguard-ai/core';
+import { AuthDB, hashPassword } from '@panguard-ai/panguard-auth';
+function prompt(rl, question) {
+    return new Promise((resolve) => {
+        rl.question(question, (answer) => resolve(answer.trim()));
+    });
+}
+export function adminCommand() {
+    const cmd = new Command('admin').description('Admin management commands / 管理員指令');
+    cmd
+        .command('init')
+        .description('Create initial admin account / 建立初始管理員帳號')
+        .option('--db <path>', 'Database path', join(homedir(), '.panguard', 'auth.db'))
+        .action(async (options) => {
+        console.log(banner());
+        console.log(`  ${c.sage('Admin Init')} - Create admin account`);
+        console.log('');
+        // Ensure db directory exists
+        mkdirSync(join(homedir(), '.panguard'), { recursive: true });
+        const db = new AuthDB(options.db);
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        try {
+            const email = await prompt(rl, `  ${c.dim('Email:')} `);
+            if (!email || !email.includes('@')) {
+                console.log(`  ${c.critical('Invalid email')}`);
+                return;
+            }
+            const existing = db.getUserByEmail(email);
+            if (existing) {
+                console.log(`  ${c.caution('User already exists.')} Updating role to admin...`);
+                db.updateUserRole(existing.id, 'admin');
+                console.log(`  ${c.safe('Done.')} ${email} is now an admin.`);
+                return;
+            }
+            const name = await prompt(rl, `  ${c.dim('Name:')} `);
+            const password = await prompt(rl, `  ${c.dim('Password (min 8 chars):')} `);
+            if (password.length < 8) {
+                console.log(`  ${c.critical('Password must be at least 8 characters')}`);
+                return;
+            }
+            const pwHash = await hashPassword(password);
+            const user = db.createUser({ email, name: name || email, password }, pwHash);
+            db.updateUserRole(user.id, 'admin');
+            console.log('');
+            console.log(`  ${c.safe('Admin account created:')}`);
+            console.log(`    Email: ${c.sage(email)}`);
+            console.log(`    Role:  ${c.sage('admin')}`);
+            console.log(`    Tier:  ${c.sage('free')} (change via admin panel)`);
+            console.log('');
+            console.log(`  Start the server: ${c.sage('panguard serve')}`);
+            console.log(`  Admin panel:      ${c.sage('http://localhost:3000/admin')}`);
+            console.log('');
+        }
+        finally {
+            rl.close();
+            db.close();
+        }
+    });
+    cmd
+        .command('create-user')
+        .description('Create a user with specified tier / 建立指定等級的用戶')
+        .option('--db <path>', 'Database path', join(homedir(), '.panguard', 'auth.db'))
+        .option('--email <email>', 'User email')
+        .option('--name <name>', 'User name')
+        .option('--password <password>', 'User password')
+        .option('--tier <tier>', 'User tier (free/solo/pro/enterprise)', 'free')
+        .option('--role <role>', 'User role (user/admin)', 'user')
+        .action(async (options) => {
+        mkdirSync(join(homedir(), '.panguard'), { recursive: true });
+        const db = new AuthDB(options.db);
+        let email = options.email;
+        let name = options.name;
+        let password = options.password;
+        // Interactive mode if options not provided
+        if (!email || !password) {
+            const rl = createInterface({ input: process.stdin, output: process.stdout });
+            try {
+                if (!email)
+                    email = await prompt(rl, `  ${c.dim('Email:')} `);
+                if (!name)
+                    name = await prompt(rl, `  ${c.dim('Name:')} `);
+                if (!password)
+                    password = await prompt(rl, `  ${c.dim('Password:')} `);
+            }
+            finally {
+                rl.close();
+            }
+        }
+        if (!email || !email.includes('@')) {
+            console.log(`  ${c.critical('Invalid email')}`);
+            db.close();
+            return;
+        }
+        if (!password || password.length < 8) {
+            console.log(`  ${c.critical('Password must be at least 8 characters')}`);
+            db.close();
+            return;
+        }
+        const existing = db.getUserByEmail(email);
+        if (existing) {
+            console.log(`  ${c.caution('User already exists with this email')}`);
+            db.close();
+            return;
+        }
+        const pwHash = await hashPassword(password);
+        const user = db.createUser({ email, name: name || email, password }, pwHash);
+        db.updateUserTier(user.id, options.tier);
+        db.updateUserRole(user.id, options.role);
+        console.log(`  ${c.safe('User created:')}`);
+        console.log(`    Email: ${email}`);
+        console.log(`    Tier:  ${options.tier}`);
+        console.log(`    Role:  ${options.role}`);
+        console.log('');
+        db.close();
+    });
+    return cmd;
+}
+//# sourceMappingURL=admin.js.map

package/dist/cli/commands/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../src/cli/commands/admin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAElE,SAAS,MAAM,CAAC,EAAsC,EAAE,QAAgB;IACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,mCAAmC,CAAC,CAAC;IAElF,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;SAC/E,MAAM,CAAC,KAAK,EAAE,OAAuB,EAAE,EAAE;QACxC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,6BAA6B;QAC7B,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,CAAC;gBAChF,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;YAC5E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7E,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAEpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;SAC/E,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAAC;SACvC,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC;SACpC,MAAM,CAAC,uBAAuB,EAAE,eAAe,CAAC;SAChD,MAAM,CAAC,eAAe,EAAE,sCAAsC,EAAE,MAAM,CAAC;SACvE,MAAM,CAAC,eAAe,EAAE,wBAAwB,EAAE,MAAM,CAAC;SACzD,MAAM,CACL,KAAK,EAAE,OAON,EAAE,EAAE;QACH,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAElC,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC1B,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACxB,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAEhC,2CAA2C;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK;oBAAE,KAAK,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC9D,IAAI,CAAC,IAAI;oBAAE,IAAI,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC3D,IAAI,CAAC,QAAQ;oBAAE,QAAQ,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACzE,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAChD,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,CAAC,CAAC;YACzE,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;YACrE,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7E,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAEzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC,CACF,CAAC;IAEJ,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/cli/commands/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/chat.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,WAAW,IAAI,OAAO,CAsErC"}