@polardbx/pxbaas 0.0.0-stage → 0.1.0-beta.10

package/dist/credentials/credential-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.js","sourceRoot":"","sources":["../../src/credentials/credential-store.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAyBjC,MAAM,cAAc,GAAG,YAAY,CAAC;AACpC,MAAM,yBAAyB,GAAG,cAAc,CAAC;AACjD,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAStC;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,UAAU;IACvB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAuE,CAAC;IAC3G,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAwB,CAAC;IAC9D,MAAM,QAAQ,GAA4B,CAAC,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IAC9G,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,uDAAuD,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,SAAuB,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,CAAS;IAChB,eAAe,GAAmB,IAAI,CAAC;IAE/C,YAAY,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;YAClC,2BAA2B;YAC3B,MAAM,MAAM,CAAC,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QACvG,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,sBAAsB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,mBAAmB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAE/C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;YAEpD,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,IAAqB;QACtD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE9C,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,eAAe,WAAW,EAAE,CAAC,CAAC;gBAEtF,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsB,CAAC;gBACjD,CAAC;gBACD,mCAAmC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzH,CAAC;QACH,CAAC;QAED,UAAU;QACV,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,WAA8B;QACtE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBAC3C,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,eAAe,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC/E,OAAO;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,uDAAuD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1H,CAAC;QACH,CAAC;QAED,UAAU;QACV,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC;QAC5C,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QACzC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,EAAE,eAAe,WAAW,EAAE,CAAC,CAAC;YACtF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QAED,YAAY;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,OAAO;YACL,kBAAkB,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC;YAC7D,YAAY,EAAE,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB;QACtB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QAEnC,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;gBAEjE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;wBACvD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;wBACzE,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QAED,YAAY;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,oBAAoB,GAAG,WAAW,EAAE,CAAC,CAAC;gBAEjG,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAA2B,CAAC;gBACtD,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,4DAA4D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/H,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED,4BAA4B;IAC5B,KAAK,CAAC,mBAAmB,CAAC,WAAmB,EAAE,WAAmC;QAChF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,oBAAoB,GAAG,WAAW,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC/G,OAAO;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,6DAA6D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChI,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;QACrE,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,4BAA4B;IAC5B,KAAK,CAAC,sBAAsB,CAAC,WAAmB;QAC9C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,EAAE,GAAG,oBAAoB,GAAG,WAAW,EAAE,CAAC,CAAC;YACjG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAChC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/credentials/env-file.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Env-file 解析 - 从 Supabase/BaaS 惯例的 .env 文件里提取登录所需字段
+ *
+ * 单租户实例取 SUPABASE_ANON_KEY / SUPABASE_SERVICE_ROLE_KEY；多租户实例
+ * （MULTI_TENANT_MODE=true）取 DEFAULT_TENANT_ID + TENANT_ANON_KEY /
+ * TENANT_SERVICE_ROLE_KEY —— 离线包 gen-client-env.sh 产出的多租户 client.env
+ * 同时带全局键与租户级键，而全局键访问租户资源会被 Kong 的全局凭证护栏挡掉，
+ * 所以落库的一律是租户级凭据；文件里的 GLOBAL_* 只报告存在、不导入。
+ *
+ * 不引入 dotenv 依赖：项目内的 env 文件均为简单 KEY=VALUE 格式。
+ */
+import type { ProfileMode } from './profile.js';
+export interface ParsedEnv {
+    [key: string]: string;
+}
+/**
+ * 多租户 env 文件缺少租户级凭据时抛出。
+ *
+ * 单独成类是为了让调用方（profile import 的失败分支）能**判别**这种情况并给出
+ * 分流指引，而不是只对着一段自然语言做字符串匹配。
+ */
+export declare class TenantCredentialGapError extends Error {
+    readonly missing: string[];
+    constructor(message: string, missing: string[]);
+}
+/**
+ * 解析 env 文件文本为键值对。
+ *
+ * 支持：`#` / `//` 行注释、空行、`export KEY=VALUE` 前缀、
+ * 单/双引号包裹的值（双引号内不解析转义，按字面保留）、行内 `#` 注释（仅未加引号时）。
+ */
+export declare function parseEnvText(text: string): ParsedEnv;
+export interface EnvLoginFields {
+    endpoint: string;
+    anonKey: string;
+    serviceRoleKey: string;
+    /** 多租户为 DEFAULT_TENANT_ID；单租户恒为 undefined。 */
+    tenantId?: string;
+    mode: ProfileMode;
+    /** 命中的来源变量名，便于诊断/输出。 */
+    sources: {
+        endpoint: string;
+        anonKey: string;
+        serviceRoleKey: string;
+        tenantId?: string;
+    };
+    /**
+     * env 文件里存在、但按设计不导入的全局键名（多租户 client.env 才有）。
+     * profile 只存租户级凭据，故这里只回报「见到了但没存」，避免用户误以为全局键可用。
+     */
+    skippedGlobalKeys?: string[];
+    /**
+     * env 文件里存在、但**默认不导入**的实例管理凭据名。它们是平台管理面入口，
+     * 不属于任何租户的数据面，静默吸进钥匙串会造成实例级凭据扩散；只有显式
+     * `--with-admin` 才会落库。
+     */
+    skippedAdminKeys?: string[];
+}
+/**
+ * 从解析后的 env 中提取登录字段（单租户或多租户）。
+ *
+ * @param env       parseEnvText 的结果
+ * @param options.intranet  为 true 时优先使用内网入口 SUPABASE_INTRANET_URL
+ * @throws Error    缺少必需字段（多租户即缺租户级凭据）时抛出可直接展示的错误
+ */
+export declare function resolveLoginFromEnv(env: ParsedEnv, options?: {
+    intranet?: boolean;
+}): EnvLoginFields;
+export interface AdminEnvFields {
+    username: string;
+    password: string;
+    sources: {
+        username: string;
+        password: string;
+    };
+}
+/**
+ * 从 env 中提取实例管理凭据（dashboard Basic Auth）。
+ *
+ * 返回 undefined 表示文件里没有成对的管理凭据 —— 调用方**不应**因此报错：
+ * 它们只在管理员显式 `--with-admin` 或临时能力探测时才被读取。
+ * 只出现一半（有 user 无 password）视为不可用，避免半套凭据落库。
+ */
+export declare function resolveAdminFromEnv(env: ParsedEnv): AdminEnvFields | undefined;
+//# sourceMappingURL=env-file.d.ts.map

package/dist/credentials/env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.d.ts","sourceRoot":"","sources":["../../src/credentials/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,WAAW,SAAS;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;CAK/C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAyCpD;AAOD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;IAClB,wBAAwB;IACxB,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AA+BD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,SAAS,EACd,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GACnC,cAAc,CAmFhB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CACjD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,cAAc,GAAG,SAAS,CAS9E"}

package/dist/credentials/env-file.js

@@ -0,0 +1,193 @@
+/**
+ * Env-file 解析 - 从 Supabase/BaaS 惯例的 .env 文件里提取登录所需字段
+ *
+ * 单租户实例取 SUPABASE_ANON_KEY / SUPABASE_SERVICE_ROLE_KEY；多租户实例
+ * （MULTI_TENANT_MODE=true）取 DEFAULT_TENANT_ID + TENANT_ANON_KEY /
+ * TENANT_SERVICE_ROLE_KEY —— 离线包 gen-client-env.sh 产出的多租户 client.env
+ * 同时带全局键与租户级键，而全局键访问租户资源会被 Kong 的全局凭证护栏挡掉，
+ * 所以落库的一律是租户级凭据；文件里的 GLOBAL_* 只报告存在、不导入。
+ *
+ * 不引入 dotenv 依赖：项目内的 env 文件均为简单 KEY=VALUE 格式。
+ */
+/**
+ * 多租户 env 文件缺少租户级凭据时抛出。
+ *
+ * 单独成类是为了让调用方（profile import 的失败分支）能**判别**这种情况并给出
+ * 分流指引，而不是只对着一段自然语言做字符串匹配。
+ */
+export class TenantCredentialGapError extends Error {
+    missing;
+    constructor(message, missing) {
+        super(message);
+        this.name = 'TenantCredentialGapError';
+        this.missing = missing;
+    }
+}
+/**
+ * 解析 env 文件文本为键值对。
+ *
+ * 支持：`#` / `//` 行注释、空行、`export KEY=VALUE` 前缀、
+ * 单/双引号包裹的值（双引号内不解析转义，按字面保留）、行内 `#` 注释（仅未加引号时）。
+ */
+export function parseEnvText(text) {
+    const env = {};
+    for (const rawLine of text.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith('#') || line.startsWith('//')) {
+            continue;
+        }
+        // 去掉可选的 `export ` 前缀
+        const withoutExport = line.replace(/^export\s+/, '');
+        const eq = withoutExport.indexOf('=');
+        if (eq === -1) {
+            continue; // 不是 KEY=VALUE 行，跳过
+        }
+        const key = withoutExport.slice(0, eq).trim();
+        if (!key) {
+            continue;
+        }
+        let value = withoutExport.slice(eq + 1).trim();
+        // 引号包裹：剥掉成对引号，值内内容原样保留（不处理行内注释）
+        const quoted = (value.startsWith('"') && value.endsWith('"') && value.length >= 2) ||
+            (value.startsWith("'") && value.endsWith("'") && value.length >= 2);
+        if (quoted) {
+            value = value.slice(1, -1);
+        }
+        else {
+            // 未加引号：截断行内注释（前面有空白的 # 才视为注释起点）
+            const commentIdx = value.search(/\s+#/);
+            if (commentIdx !== -1) {
+                value = value.slice(0, commentIdx).trim();
+            }
+        }
+        env[key] = value;
+    }
+    return env;
+}
+/** 去掉 URL 尾部斜杠，避免拼接出 //rest/v1 之类的路径。 */
+function stripTrailingSlash(url) {
+    return url.replace(/\/+$/, '');
+}
+const ENDPOINT_VARS = ['SUPABASE_URL', 'SUPABASE_PUBLIC_URL', 'SUPABASE_INTRANET_URL'];
+const ENDPOINT_VARS_INTRANET = ['SUPABASE_INTRANET_URL', 'SUPABASE_URL', 'SUPABASE_PUBLIC_URL'];
+const ANON_VARS = ['SUPABASE_ANON_KEY', 'ANON_KEY', 'GLOBAL_ANON_KEY'];
+const SERVICE_VARS = [
+    'SUPABASE_SERVICE_ROLE_KEY',
+    'SERVICE_ROLE_KEY',
+    'GLOBAL_SERVICE_ROLE_KEY',
+];
+const TENANT_ID_VARS = ['DEFAULT_TENANT_ID'];
+const TENANT_ANON_VARS = ['TENANT_ANON_KEY'];
+const TENANT_SERVICE_VARS = ['TENANT_SERVICE_ROLE_KEY'];
+const GLOBAL_KEY_VARS = ['GLOBAL_ANON_KEY', 'GLOBAL_SERVICE_ROLE_KEY'];
+/** 实例管理面凭据：默认不导入，见 EnvLoginFields.skippedAdminKeys。 */
+const ADMIN_USERNAME_VARS = ['DASHBOARD_USERNAME'];
+const ADMIN_PASSWORD_VARS = ['DASHBOARD_PASSWORD'];
+function pickWithSource(env, keys) {
+    for (const k of keys) {
+        const v = env[k];
+        if (v !== undefined && v.trim() !== '') {
+            return { value: v.trim(), source: k };
+        }
+    }
+    return undefined;
+}
+/**
+ * 从解析后的 env 中提取登录字段（单租户或多租户）。
+ *
+ * @param env       parseEnvText 的结果
+ * @param options.intranet  为 true 时优先使用内网入口 SUPABASE_INTRANET_URL
+ * @throws Error    缺少必需字段（多租户即缺租户级凭据）时抛出可直接展示的错误
+ */
+export function resolveLoginFromEnv(env, options = {}) {
+    const mtRaw = (env.MULTI_TENANT_MODE ?? '').trim().toLowerCase();
+    const isMultiTenant = mtRaw === 'true' || mtRaw === '1' || mtRaw === 'yes';
+    // 多租户：只有租户级凭据能访问租户资源（全局键会命中 Kong 的全局凭证护栏 403），
+    // 因此改写取值来源；全局键仅记录「存在但未导入」。
+    let anonVars = ANON_VARS;
+    let serviceVars = SERVICE_VARS;
+    let tenantId;
+    let tenantIdSource;
+    let skippedGlobalKeys;
+    if (isMultiTenant) {
+        const tenantIdHit = pickWithSource(env, TENANT_ID_VARS);
+        const tenantAnonHit = pickWithSource(env, TENANT_ANON_VARS);
+        const tenantServiceHit = pickWithSource(env, TENANT_SERVICE_VARS);
+        const missingTenant = [];
+        if (!tenantIdHit)
+            missingTenant.push(`tenant id (${TENANT_ID_VARS.join(' | ')})`);
+        if (!tenantAnonHit)
+            missingTenant.push(`tenant anon key (${TENANT_ANON_VARS.join(' | ')})`);
+        if (!tenantServiceHit) {
+            missingTenant.push(`tenant service role key (${TENANT_SERVICE_VARS.join(' | ')})`);
+        }
+        if (missingTenant.length > 0) {
+            throw new TenantCredentialGapError('Multi-tenant instances are not supported by `profile import` unless the env file ' +
+                `carries tenant-level credentials. This file is missing: ${missingTenant.join('; ')}. ` +
+                'Regenerate client.env with tenant keys, or use `pxbaas login --tenant-id <id> ' +
+                '--anon-key-stdin --service-key-stdin` with per-tenant keys instead.', missingTenant);
+        }
+        tenantId = tenantIdHit.value;
+        tenantIdSource = tenantIdHit.source;
+        anonVars = TENANT_ANON_VARS;
+        serviceVars = TENANT_SERVICE_VARS;
+        const presentGlobal = GLOBAL_KEY_VARS.filter((k) => (env[k] ?? '').trim() !== '');
+        if (presentGlobal.length > 0) {
+            skippedGlobalKeys = presentGlobal;
+        }
+    }
+    const endpointVars = options.intranet ? ENDPOINT_VARS_INTRANET : ENDPOINT_VARS;
+    const endpointHit = pickWithSource(env, endpointVars);
+    const anonHit = pickWithSource(env, anonVars);
+    const serviceHit = pickWithSource(env, serviceVars);
+    const missing = [];
+    if (!endpointHit)
+        missing.push(`endpoint (${endpointVars.join(' | ')})`);
+    if (!anonHit)
+        missing.push(`anon key (${anonVars.join(' | ')})`);
+    if (!serviceHit)
+        missing.push(`service role key (${serviceVars.join(' | ')})`);
+    if (missing.length > 0) {
+        throw new Error(`Env file is missing required variable(s): ${missing.join('; ')}`);
+    }
+    const endpoint = stripTrailingSlash(endpointHit.value);
+    if (!/^https?:\/\//.test(endpoint)) {
+        throw new Error(`Endpoint from ${endpointHit.source} must start with http:// or https:// (got: ${endpoint})`);
+    }
+    // 管理凭据默认不外吸：只报告"存在"，由调用方决定是否显式导入（--with-admin）。
+    const presentAdmin = [...ADMIN_USERNAME_VARS, ...ADMIN_PASSWORD_VARS].filter((k) => (env[k] ?? '').trim() !== '');
+    return {
+        endpoint,
+        anonKey: anonHit.value,
+        serviceRoleKey: serviceHit.value,
+        tenantId,
+        mode: isMultiTenant ? 'multi-tenant' : 'single-tenant',
+        sources: {
+            endpoint: endpointHit.source,
+            anonKey: anonHit.source,
+            serviceRoleKey: serviceHit.source,
+            tenantId: tenantIdSource,
+        },
+        skippedGlobalKeys,
+        skippedAdminKeys: presentAdmin.length > 0 ? presentAdmin : undefined,
+    };
+}
+/**
+ * 从 env 中提取实例管理凭据（dashboard Basic Auth）。
+ *
+ * 返回 undefined 表示文件里没有成对的管理凭据 —— 调用方**不应**因此报错：
+ * 它们只在管理员显式 `--with-admin` 或临时能力探测时才被读取。
+ * 只出现一半（有 user 无 password）视为不可用，避免半套凭据落库。
+ */
+export function resolveAdminFromEnv(env) {
+    const username = pickWithSource(env, ADMIN_USERNAME_VARS);
+    const password = pickWithSource(env, ADMIN_PASSWORD_VARS);
+    if (!username || !password)
+        return undefined;
+    return {
+        username: username.value,
+        password: password.value,
+        sources: { username: username.source, password: password.source },
+    };
+}
+//# sourceMappingURL=env-file.js.map

package/dist/credentials/env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../../src/credentials/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH;;;;;GAKG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,OAAO,CAAW;IAE3B,YAAY,OAAe,EAAE,OAAiB;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAc,EAAE,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QAED,qBAAqB;QACrB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACd,SAAS,CAAC,oBAAoB;QAChC,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,SAAS;QACX,CAAC;QAED,IAAI,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE/C,gCAAgC;QAChC,MAAM,MAAM,GACV,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YACnE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yCAAyC;AACzC,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AA6BD,MAAM,aAAa,GAAG,CAAC,cAAc,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;AACvF,MAAM,sBAAsB,GAAG,CAAC,uBAAuB,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;AAChG,MAAM,SAAS,GAAG,CAAC,mBAAmB,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;AACvE,MAAM,YAAY,GAAG;IACnB,2BAA2B;IAC3B,kBAAkB;IAClB,yBAAyB;CAC1B,CAAC;AACF,MAAM,cAAc,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAC7C,MAAM,gBAAgB,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC7C,MAAM,mBAAmB,GAAG,CAAC,yBAAyB,CAAC,CAAC;AACxD,MAAM,eAAe,GAAG,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;AACvE,uDAAuD;AACvD,MAAM,mBAAmB,GAAG,CAAC,oBAAoB,CAAC,CAAC;AACnD,MAAM,mBAAmB,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAEnD,SAAS,cAAc,CACrB,GAAc,EACd,IAAc;IAEd,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAc,EACd,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,aAAa,GAAG,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,CAAC;IAE3E,+CAA+C;IAC/C,2BAA2B;IAC3B,IAAI,QAAQ,GAAG,SAAS,CAAC;IACzB,IAAI,WAAW,GAAG,YAAY,CAAC;IAC/B,IAAI,QAA4B,CAAC;IACjC,IAAI,cAAkC,CAAC;IACvC,IAAI,iBAAuC,CAAC;IAE5C,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACxD,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC5D,MAAM,gBAAgB,GAAG,cAAc,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAElE,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,IAAI,CAAC,WAAW;YAAE,aAAa,CAAC,IAAI,CAAC,cAAc,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClF,IAAI,CAAC,aAAa;YAAE,aAAa,CAAC,IAAI,CAAC,oBAAoB,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5F,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,4BAA4B,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,wBAAwB,CAChC,mFAAmF;gBACjF,2DAA2D,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACvF,gFAAgF;gBAChF,qEAAqE,EACvE,aAAa,CACd,CAAC;QACJ,CAAC;QAED,QAAQ,GAAG,WAAY,CAAC,KAAK,CAAC;QAC9B,cAAc,GAAG,WAAY,CAAC,MAAM,CAAC;QACrC,QAAQ,GAAG,gBAAgB,CAAC;QAC5B,WAAW,GAAG,mBAAmB,CAAC;QAClC,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,iBAAiB,GAAG,aAAa,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC;IAC/E,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAY,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,iBAAiB,WAAY,CAAC,MAAM,8CAA8C,QAAQ,GAAG,CAC9F,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,MAAM,YAAY,GAAG,CAAC,GAAG,mBAAmB,EAAE,GAAG,mBAAmB,CAAC,CAAC,MAAM,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CACpC,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,OAAQ,CAAC,KAAK;QACvB,cAAc,EAAE,UAAW,CAAC,KAAK;QACjC,QAAQ;QACR,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe;QACtD,OAAO,EAAE;YACP,QAAQ,EAAE,WAAY,CAAC,MAAM;YAC7B,OAAO,EAAE,OAAQ,CAAC,MAAM;YACxB,cAAc,EAAE,UAAW,CAAC,MAAM;YAClC,QAAQ,EAAE,cAAc;SACzB;QACD,iBAAiB;QACjB,gBAAgB,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;KACrE,CAAC;AACJ,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAc;IAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,KAAK;QACxB,QAAQ,EAAE,QAAQ,CAAC,KAAK;QACxB,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE;KAClE,CAAC;AACJ,CAAC"}

package/dist/credentials/formatter.d.ts

@@ -0,0 +1,39 @@
+/**
+ * 输出格式化器 - text/json 双模式
+ */
+export interface FormatOptions {
+    json: boolean;
+}
+/**
+ * 格式化输出
+ * - JSON 模式：直接 stringify
+ * - Text 模式：使用 chalk + cli-table3 渲染
+ */
+export declare function formatOutput(data: Record<string, unknown>, options: FormatOptions): string;
+/**
+ * 格式化键值对（text 模式）
+ */
+export declare function formatKeyValue(pairs: Record<string, string>): string;
+/**
+ * 格式化表格
+ */
+export declare function formatTable(headers: string[], rows: string[][], options?: {
+    head?: string[];
+}): string;
+/**
+ * 格式化状态标记
+ */
+export declare function formatStatus(status: 'pass' | 'warn' | 'fail' | 'skip'): string;
+/**
+ * 格式化成功消息
+ */
+export declare function formatSuccess(message: string): string;
+/**
+ * 格式化错误消息
+ */
+export declare function formatError(message: string): string;
+/**
+ * 格式化警告消息
+ */
+export declare function formatWarning(message: string): string;
+//# sourceMappingURL=formatter.d.ts.map

package/dist/credentials/formatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatter.d.ts","sourceRoot":"","sources":["../../src/credentials/formatter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,aAAa,GACrB,MAAM,CAOR;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAUpE;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,MAAM,EAAE,EAAE,EAChB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC5B,MAAM,CAcR;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAW9E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/dist/credentials/formatter.js

@@ -0,0 +1,79 @@
+/**
+ * 输出格式化器 - text/json 双模式
+ */
+import chalk from 'chalk';
+import Table from 'cli-table3';
+/**
+ * 格式化输出
+ * - JSON 模式：直接 stringify
+ * - Text 模式：使用 chalk + cli-table3 渲染
+ */
+export function formatOutput(data, options) {
+    if (options.json) {
+        return JSON.stringify(data, null, 2);
+    }
+    // Text 模式：键值对展示
+    return formatKeyValue(data);
+}
+/**
+ * 格式化键值对（text 模式）
+ */
+export function formatKeyValue(pairs) {
+    const lines = [];
+    const maxKeyLength = Math.max(...Object.keys(pairs).map(k => k.length));
+    for (const [key, value] of Object.entries(pairs)) {
+        const paddedKey = key.padEnd(maxKeyLength, ' ');
+        lines.push(`${chalk.gray(paddedKey)}  ${value}`);
+    }
+    return lines.join('\n');
+}
+/**
+ * 格式化表格
+ */
+export function formatTable(headers, rows, options) {
+    const table = new Table({
+        head: options?.head ?? headers.map(h => chalk.cyan(h)),
+        style: {
+            head: [],
+            border: [],
+        },
+    });
+    for (const row of rows) {
+        table.push(row);
+    }
+    return table.toString();
+}
+/**
+ * 格式化状态标记
+ */
+export function formatStatus(status) {
+    switch (status) {
+        case 'pass':
+            return chalk.green('✓ PASS');
+        case 'warn':
+            return chalk.yellow('⚠ WARN');
+        case 'fail':
+            return chalk.red('✗ FAIL');
+        case 'skip':
+            return chalk.gray('- SKIP');
+    }
+}
+/**
+ * 格式化成功消息
+ */
+export function formatSuccess(message) {
+    return chalk.green('✓') + ' ' + message;
+}
+/**
+ * 格式化错误消息
+ */
+export function formatError(message) {
+    return chalk.red('✗') + ' ' + message;
+}
+/**
+ * 格式化警告消息
+ */
+export function formatWarning(message) {
+    return chalk.yellow('⚠') + ' ' + message;
+}
+//# sourceMappingURL=formatter.js.map

package/dist/credentials/formatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatter.js","sourceRoot":"","sources":["../../src/credentials/formatter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,YAAY,CAAC;AAM/B;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,IAA6B,EAC7B,OAAsB;IAEtB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,gBAAgB;IAChB,OAAO,cAAc,CAAC,IAA8B,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAA6B;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAExE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,OAAiB,EACjB,IAAgB,EAChB,OAA6B;IAE7B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtD,KAAK,EAAE;YACL,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,EAAE;SACX;KACF,CAAC,CAAC;IAEH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAyC;IACpE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC;AAC3C,CAAC"}

package/dist/credentials/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Credentials 模块 - 凭据管理、JWT 解析、守卫工具
+ */
+export * from './credential-store.js';
+export * from './profile.js';
+export * from './jwt-introspect.js';
+export * from './masker.js';
+export * from './tty-guard.js';
+export * from './tenant-guard.js';
+export * from './env-file.js';
+export * from './commit.js';
+export * from './formatter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/credentials/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/credentials/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/credentials/index.js

@@ -0,0 +1,13 @@
+/**
+ * Credentials 模块 - 凭据管理、JWT 解析、守卫工具
+ */
+export * from './credential-store.js';
+export * from './profile.js';
+export * from './jwt-introspect.js';
+export * from './masker.js';
+export * from './tty-guard.js';
+export * from './tenant-guard.js';
+export * from './env-file.js';
+export * from './commit.js';
+export * from './formatter.js';
+//# sourceMappingURL=index.js.map

package/dist/credentials/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/credentials/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/credentials/jwt-introspect.d.ts

@@ -0,0 +1,39 @@
+/**
+ * JWT 解析工具 - 无需密钥验证，仅解码 payload
+ * 用于从 JWT 中提取角色、租户ID、过期时间等信息
+ */
+export interface JwtPayload {
+    role: 'anon' | 'service_role';
+    tenant_id?: string;
+    iss: string;
+    iat: number;
+    exp: number;
+    [key: string]: unknown;
+}
+export interface IntrospectedJwt {
+    payload: JwtPayload;
+    isExpired: boolean;
+    expiresIn: number;
+    /**
+     * 裸指纹：sha256 前8 + 后4，形如 `6ee48f23...a477`，**不带** `sha256:` 前缀。
+     *
+     * 契约（分层，勿在其中一层"顺手"补前缀，否则展示层会变成 `sha256:sha256:`）：
+     * 内层解析只产出裸值；展示层 `computeFingerprint()`（./masker.ts，whoami /
+     * instance / provision 用它）统一加 `sha256:` 前缀。
+     */
+    fingerprint: string;
+}
+/**
+ * 解码 JWT payload（不验证签名）
+ * @throws Error 如果 JWT 格式无效
+ */
+export declare function decodeJwt(token: string): JwtPayload;
+/**
+ * 解析 JWT 并计算指纹
+ */
+export declare function introspectJwt(token: string): Promise<IntrospectedJwt>;
+/**
+ * 格式化过期时间为人类可读字符串
+ */
+export declare function formatExpiry(expiresIn: number): string;
+//# sourceMappingURL=jwt-introspect.d.ts.map

package/dist/credentials/jwt-introspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-introspect.d.ts","sourceRoot":"","sources":["../../src/credentials/jwt-introspect.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,GAAG,cAAc,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,UAAU,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAanD;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAkB3E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAatD"}

package/dist/credentials/jwt-introspect.js

@@ -0,0 +1,64 @@
+/**
+ * JWT 解析工具 - 无需密钥验证，仅解码 payload
+ * 用于从 JWT 中提取角色、租户ID、过期时间等信息
+ */
+/**
+ * 解码 JWT payload（不验证签名）
+ * @throws Error 如果 JWT 格式无效
+ */
+export function decodeJwt(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3) {
+        throw new Error('Invalid JWT format: expected 3 parts');
+    }
+    const payloadBase64 = parts[1];
+    try {
+        const payloadJson = Buffer.from(payloadBase64, 'base64url').toString('utf-8');
+        return JSON.parse(payloadJson);
+    }
+    catch (err) {
+        throw new Error(`Failed to decode JWT payload: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/**
+ * 解析 JWT 并计算指纹
+ */
+export async function introspectJwt(token) {
+    const { createHash } = await import('node:crypto');
+    const payload = decodeJwt(token);
+    const now = Math.floor(Date.now() / 1000);
+    const expiresIn = payload.exp - now;
+    const isExpired = expiresIn <= 0;
+    // 计算指纹：sha256 前8字符 + 后4字符
+    const hash = createHash('sha256').update(token).digest('hex');
+    const fingerprint = `${hash.slice(0, 8)}...${hash.slice(-4)}`;
+    return {
+        payload,
+        isExpired,
+        expiresIn,
+        fingerprint,
+    };
+}
+/**
+ * 格式化过期时间为人类可读字符串
+ */
+export function formatExpiry(expiresIn) {
+    if (expiresIn <= 0) {
+        const ago = Math.abs(expiresIn);
+        if (ago < 60)
+            return `expired ${ago}s ago`;
+        if (ago < 3600)
+            return `expired ${Math.floor(ago / 60)}m ago`;
+        if (ago < 86400)
+            return `expired ${Math.floor(ago / 3600)}h ago`;
+        return `expired ${Math.floor(ago / 86400)}d ago`;
+    }
+    if (expiresIn < 60)
+        return `expires in ${expiresIn}s`;
+    if (expiresIn < 3600)
+        return `expires in ${Math.floor(expiresIn / 60)}m`;
+    if (expiresIn < 86400)
+        return `expires in ${Math.floor(expiresIn / 3600)}h`;
+    return `expires in ${Math.floor(expiresIn / 86400)}d`;
+}
+//# sourceMappingURL=jwt-introspect.js.map

package/dist/credentials/jwt-introspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-introspect.js","sourceRoot":"","sources":["../../src/credentials/jwt-introspect.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAyBH;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAe,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEnD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;IACpC,MAAM,SAAS,GAAG,SAAS,IAAI,CAAC,CAAC;IAEjC,0BAA0B;IAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9D,OAAO;QACL,OAAO;QACP,SAAS;QACT,SAAS;QACT,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,GAAG,GAAG,EAAE;YAAE,OAAO,WAAW,GAAG,OAAO,CAAC;QAC3C,IAAI,GAAG,GAAG,IAAI;YAAE,OAAO,WAAW,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;QAC9D,IAAI,GAAG,GAAG,KAAK;YAAE,OAAO,WAAW,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QACjE,OAAO,WAAW,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;IACnD,CAAC;IAED,IAAI,SAAS,GAAG,EAAE;QAAE,OAAO,cAAc,SAAS,GAAG,CAAC;IACtD,IAAI,SAAS,GAAG,IAAI;QAAE,OAAO,cAAc,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,CAAC;IACzE,IAAI,SAAS,GAAG,KAAK;QAAE,OAAO,cAAc,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;IAC5E,OAAO,cAAc,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC;AACxD,CAAC"}

package/dist/credentials/masker.d.ts

@@ -0,0 +1,23 @@
+/**
+ * 密钥脱敏工具 - 只显示指纹，不暴露完整密钥
+ */
+/**
+ * 计算密钥指纹：sha256 前8字符 + 后4字符
+ * 格式：sha256:abcd1234...ef56
+ *
+ * 这是**展示层**的唯一加前缀处（whoami / instance / provision 直接输出它）。
+ * `introspectJwt().fingerprint` 返回的是同一指纹的裸值，前缀只在这里加一次。
+ */
+export declare function computeFingerprint(key: string): string;
+/**
+ * 脱敏 Authorization header
+ * 输入: "Bearer eyJhbGc..."
+ * 输出: "Bearer sha256:abcd1234...ef56"
+ */
+export declare function maskAuthorizationHeader(header: string): string;
+/**
+ * 脱敏任意字符串（如果看起来像 JWT）
+ * JWT 特征：包含两个点，三段 base64
+ */
+export declare function maskIfJwt(value: string): string;
+//# sourceMappingURL=masker.d.ts.map

package/dist/credentials/masker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"masker.d.ts","sourceRoot":"","sources":["../../src/credentials/masker.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAQ9D;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM/C"}