@polardbx/pxbaas 0.0.0-stage → 0.1.0-beta.10

package/dist/instance/provision.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Provisioning core logic — claim a Zero PXBaas instance and bind it to a baas
+ * profile. Kept separate from the commander wiring and driven by narrow
+ * interfaces so it is unit-testable with fakes (no keytar / no network).
+ *
+ * Security model: Zero returns plaintext keys over TLS; this module ingests them
+ * into the credential sink (keyring) and NEVER returns plaintext — only
+ * fingerprints. Agents can run this without a human TTY login.
+ */
+import type { BaasProfile } from '../credentials/profile.js';
+import type { StoredCredentials } from '../credentials/credential-store.js';
+import { type ZeroClaimResponse, type ZeroInstance } from '@polardbx/pxbaas-client';
+import type { ZeroStore } from './zero-store.js';
+/** Narrow deps so tests can inject fakes. */
+export interface ZeroApi {
+    claim(whitelistIp?: string): Promise<ZeroClaimResponse>;
+    list(token: string): Promise<ZeroInstance[]>;
+    release(id: string, token: string): Promise<void>;
+}
+export interface ProfileSink {
+    setProfile(p: BaasProfile): Promise<void>;
+    useProfile(name: string): Promise<void>;
+    getCurrentProfile(): Promise<BaasProfile | null>;
+    getProfile(name: string): Promise<BaasProfile | null>;
+    removeProfile(name: string): Promise<boolean>;
+}
+export interface CredSink {
+    setCredentials(name: string, c: StoredCredentials): Promise<void>;
+    getCredentials(name: string): Promise<StoredCredentials | null>;
+    deleteCredentials(name: string): Promise<boolean>;
+}
+export interface ProvisionDeps {
+    zero: ZeroApi;
+    profiles: ProfileSink;
+    creds: CredSink;
+    store: ZeroStore;
+}
+export interface ProvisionOptions {
+    name?: string;
+    whitelistIp?: string;
+    /** Switch current profile to the new instance (default true). */
+    switchProfile?: boolean;
+    /** Overwrite an existing profile of the same name. */
+    force?: boolean;
+    /** Reuse an existing active Zero instance instead of claiming a new one. */
+    reuse?: boolean;
+}
+export interface ProvisionResult {
+    reused: boolean;
+    profileName: string;
+    switchedFrom: string | null;
+    instance: {
+        id: string;
+        endpoint: string;
+        appEndpoint?: string;
+        dashboardUrl?: string;
+        region?: string;
+        whitelistIp?: string;
+        expiresAt?: string;
+        mode: 'single-tenant';
+    };
+    keys: {
+        anon: {
+            fingerprint: string;
+            role: 'anon';
+        };
+        serviceRole: {
+            fingerprint: string;
+            role: 'service_role';
+        };
+    };
+    dashboard: {
+        username: 'supabase';
+        passwordRevealed: boolean;
+    };
+}
+/** Claim (or reuse) a Zero instance and bind it to a profile + credentials. */
+export declare function provisionInstance(deps: ProvisionDeps, options?: ProvisionOptions): Promise<ProvisionResult>;
+export interface ReleaseResult {
+    id: string;
+    released: boolean;
+    profileRemoved: string | null;
+    wasCurrent: boolean;
+}
+/** Release a Zero instance and unbind/remove its local profile. */
+export declare function releaseInstance(deps: ProvisionDeps, id: string, opts?: {
+    removeProfile?: boolean;
+}): Promise<ReleaseResult>;
+//# sourceMappingURL=provision.d.ts.map

package/dist/instance/provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../src/instance/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAc,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,KAAK,EAAE,SAAS,EAAsB,MAAM,iBAAiB,CAAC;AAErE,6CAA6C;AAC7C,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AACD,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,iBAAiB,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACjD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACtD,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/C;AACD,MAAM,WAAW,QAAQ;IACvB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAChE,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,SAAS,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sDAAsD;IACtD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,eAAe,CAAC;KACvB,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,WAAW,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,cAAc,CAAA;SAAE,CAAC;KAC5D,CAAC;IACF,SAAS,EAAE;QAAE,QAAQ,EAAE,UAAU,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;CAChE;AAQD,+EAA+E;AAC/E,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,aAAa,EACnB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CA2G1B;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,mEAAmE;AACnE,wBAAsB,eAAe,CACnC,IAAI,EAAE,aAAa,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,OAAO,CAAC,aAAa,CAAC,CAqBxB"}

package/dist/instance/provision.js

@@ -0,0 +1,139 @@
+/**
+ * Provisioning core logic — claim a Zero PXBaas instance and bind it to a baas
+ * profile. Kept separate from the commander wiring and driven by narrow
+ * interfaces so it is unit-testable with fakes (no keytar / no network).
+ *
+ * Security model: Zero returns plaintext keys over TLS; this module ingests them
+ * into the credential sink (keyring) and NEVER returns plaintext — only
+ * fingerprints. Agents can run this without a human TTY login.
+ */
+import { computeFingerprint } from '../credentials/masker.js';
+import { ZeroDriver } from '@polardbx/pxbaas-client';
+function profileNameFor(id, explicit) {
+    if (explicit)
+        return explicit;
+    const suffix = id.replace(/[^a-zA-Z0-9]/g, '').slice(-6) || id.slice(-6);
+    return `zero-${suffix}`;
+}
+/** Claim (or reuse) a Zero instance and bind it to a profile + credentials. */
+export async function provisionInstance(deps, options = {}) {
+    const switchProfile = options.switchProfile !== false;
+    // Reuse path: bind the most recent active local instance instead of claiming.
+    if (options.reuse) {
+        const active = await deps.store.listActive();
+        const recent = active[active.length - 1];
+        if (recent) {
+            const existing = await deps.creds.getCredentials(recent.profileName);
+            if (existing) {
+                const switchedFrom = switchProfile ? (await deps.profiles.getCurrentProfile())?.name ?? null : null;
+                if (switchProfile)
+                    await deps.profiles.useProfile(recent.profileName);
+                return {
+                    reused: true,
+                    profileName: recent.profileName,
+                    switchedFrom,
+                    instance: {
+                        id: recent.id,
+                        endpoint: recent.endpoint,
+                        appEndpoint: recent.appEndpoint,
+                        dashboardUrl: recent.dashboardUrl,
+                        whitelistIp: recent.whitelistIp,
+                        expiresAt: recent.expiresAt,
+                        mode: 'single-tenant',
+                    },
+                    keys: {
+                        anon: { fingerprint: computeFingerprint(existing.anonKey), role: 'anon' },
+                        serviceRole: { fingerprint: computeFingerprint(existing.serviceRoleKey), role: 'service_role' },
+                    },
+                    dashboard: { username: 'supabase', passwordRevealed: false },
+                };
+            }
+        }
+        // no reusable instance → fall through to claim
+    }
+    const claimed = await deps.zero.claim(options.whitelistIp);
+    const inst = claimed.instance;
+    const endpoint = ZeroDriver.toEndpoint(inst);
+    const name = profileNameFor(inst.id, options.name);
+    // Fail-closed on name collision unless forced.
+    const existingProfile = await deps.profiles.getProfile(name);
+    if (existingProfile && !options.force) {
+        throw new Error(`Profile '${name}' already exists. Choose another with --name, or pass --force to overwrite.`);
+    }
+    const switchedFrom = switchProfile ? (await deps.profiles.getCurrentProfile())?.name ?? null : null;
+    const now = new Date().toISOString();
+    const profile = {
+        name,
+        endpoint,
+        appEndpoint: inst.appEndpoint,
+        mode: 'single-tenant',
+        source: 'zero',
+        zeroInstanceId: inst.id,
+        expiresAt: inst.expiresAt,
+        createdAt: existingProfile?.createdAt ?? now,
+        updatedAt: now,
+    };
+    await deps.profiles.setProfile(profile);
+    await deps.creds.setCredentials(name, {
+        anonKey: inst.apiKey,
+        serviceRoleKey: inst.serviceRoleKey,
+        storedAt: now,
+    });
+    const record = {
+        id: inst.id,
+        endpoint,
+        appEndpoint: inst.appEndpoint,
+        profileName: name,
+        token: claimed.token,
+        expiresAt: inst.expiresAt,
+        dashboardUrl: inst.dashboardUrl,
+        whitelistIp: inst.whitelistIp,
+        dashboardPassword: inst.dashboardPassword,
+        dbPassword: inst.dbPassword,
+        claimedAt: now,
+    };
+    await deps.store.addInstance(record);
+    if (switchProfile)
+        await deps.profiles.useProfile(name);
+    return {
+        reused: false,
+        profileName: name,
+        switchedFrom,
+        instance: {
+            id: inst.id,
+            endpoint,
+            dashboardUrl: inst.dashboardUrl,
+            region: inst.region,
+            whitelistIp: inst.whitelistIp,
+            expiresAt: inst.expiresAt,
+            mode: 'single-tenant',
+        },
+        keys: {
+            anon: { fingerprint: computeFingerprint(inst.apiKey), role: 'anon' },
+            serviceRole: { fingerprint: computeFingerprint(inst.serviceRoleKey), role: 'service_role' },
+        },
+        dashboard: { username: 'supabase', passwordRevealed: false },
+    };
+}
+/** Release a Zero instance and unbind/remove its local profile. */
+export async function releaseInstance(deps, id, opts = {}) {
+    const removeProfile = opts.removeProfile !== false;
+    const rec = await deps.store.getInstance(id);
+    const token = rec?.token ?? (await deps.store.getToken());
+    if (!token) {
+        throw new Error('No Zero ownership token found locally; cannot release. Did you provision from this machine?');
+    }
+    await deps.zero.release(id, token);
+    await deps.store.removeInstance(id);
+    let profileRemoved = null;
+    let wasCurrent = false;
+    if (rec && removeProfile) {
+        const current = await deps.profiles.getCurrentProfile();
+        wasCurrent = current?.name === rec.profileName;
+        await deps.creds.deleteCredentials(rec.profileName);
+        await deps.profiles.removeProfile(rec.profileName);
+        profileRemoved = rec.profileName;
+    }
+    return { id, released: true, profileRemoved, wasCurrent };
+}
+//# sourceMappingURL=provision.js.map

package/dist/instance/provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/instance/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAG9D,OAAO,EAAE,UAAU,EAA6C,MAAM,yBAAyB,CAAC;AA6DhG,SAAS,cAAc,CAAC,EAAU,EAAE,QAAiB;IACnD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,QAAQ,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAmB,EACnB,UAA4B,EAAE;IAE9B,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC;IAEtD,8EAA8E;IAC9E,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACrE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBACpG,IAAI,aAAa;oBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBACtE,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,YAAY;oBACZ,QAAQ,EAAE;wBACR,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,IAAI,EAAE,eAAe;qBACtB;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;wBACzE,WAAW,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE;qBAChG;oBACD,SAAS,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,EAAE;iBAC7D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,+CAA+C;IACjD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnD,+CAA+C;IAC/C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,eAAe,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,6EAA6E,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,OAAO,GAAgB;QAC3B,IAAI;QACJ,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,MAAM;QACd,cAAc,EAAE,IAAI,CAAC,EAAE;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,eAAe,EAAE,SAAS,IAAI,GAAG;QAC5C,SAAS,EAAE,GAAG;KACf,CAAC;IACF,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAExC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE;QACpC,OAAO,EAAE,IAAI,CAAC,MAAM;QACpB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;IAEH,MAAM,MAAM,GAAuB;QACjC,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,GAAG;KACf,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAErC,IAAI,aAAa;QAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAExD,OAAO;QACL,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,IAAI;QACjB,YAAY;QACZ,QAAQ,EAAE;YACR,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ;YACR,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,eAAe;SACtB;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;YACpE,WAAW,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE;SAC5F;QACD,SAAS,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,EAAE;KAC7D,CAAC;AACJ,CAAC;AASD,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAmB,EACnB,EAAU,EACV,OAAoC,EAAE;IAEtC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;IACjH,CAAC;IAED,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAEpC,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACxD,UAAU,GAAG,OAAO,EAAE,IAAI,KAAK,GAAG,CAAC,WAAW,CAAC;QAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACnD,cAAc,GAAG,GAAG,CAAC,WAAW,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;AAC5D,CAAC"}

package/dist/instance/zero-store.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Zero store — persists PolarDB-X Zero ownership token and claimed-instance
+ * bindings under `~/.baas/zero.json` (mode 0600).
+ *
+ * Because PXBaas has NO credentials re-read endpoint (unlike PXFuse), the keys
+ * returned at claim time must be durably stored here (and in the keyring via
+ * CredentialStore). `instance list` cannot fetch keys back from Zero.
+ */
+export interface ZeroInstanceRecord {
+    id: string;
+    endpoint: string;
+    appEndpoint?: string;
+    profileName: string;
+    token: string;
+    expiresAt?: string;
+    dashboardUrl?: string;
+    whitelistIp?: string;
+    /** Sensitive; stored 0600, never printed except via `instance credentials --reveal`. */
+    dashboardPassword?: string;
+    dbPassword?: string;
+    claimedAt: string;
+}
+interface ZeroStoreFile {
+    version: 1;
+    token: string;
+    instances: ZeroInstanceRecord[];
+}
+export declare class ZeroStore {
+    private homeDir;
+    private cache;
+    constructor(homeDir?: string);
+    private filePath;
+    load(): Promise<ZeroStoreFile>;
+    private save;
+    /** Latest ownership token (empty string when never provisioned). */
+    getToken(): Promise<string>;
+    /** Upsert an instance record by id and refresh the top-level token. */
+    addInstance(record: ZeroInstanceRecord): Promise<void>;
+    getInstance(id: string): Promise<ZeroInstanceRecord | null>;
+    findInstanceByProfile(profileName: string): Promise<ZeroInstanceRecord | null>;
+    listInstances(): Promise<ZeroInstanceRecord[]>;
+    /** Instances whose expiresAt is in the future (or unknown). */
+    listActive(now?: Date): Promise<ZeroInstanceRecord[]>;
+    removeInstance(id: string): Promise<boolean>;
+}
+export {};
+//# sourceMappingURL=zero-store.d.ts.map

package/dist/instance/zero-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-store.d.ts","sourceRoot":"","sources":["../../src/instance/zero-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,aAAa;IACrB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,kBAAkB,EAAE,CAAC;CACjC;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAA8B;gBAE/B,OAAO,CAAC,EAAE,MAAM;IAI5B,OAAO,CAAC,QAAQ;IAIV,IAAI,IAAI,OAAO,CAAC,aAAa,CAAC;YAiBtB,IAAI;IAQlB,oEAAoE;IAC9D,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAKjC,uEAAuE;IACjE,WAAW,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAStD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAK3D,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAK9E,aAAa,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAKpD,+DAA+D;IACzD,UAAU,CAAC,GAAG,GAAE,IAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAKjE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAQnD"}

package/dist/instance/zero-store.js

@@ -0,0 +1,91 @@
+/**
+ * Zero store — persists PolarDB-X Zero ownership token and claimed-instance
+ * bindings under `~/.baas/zero.json` (mode 0600).
+ *
+ * Because PXBaas has NO credentials re-read endpoint (unlike PXFuse), the keys
+ * returned at claim time must be durably stored here (and in the keyring via
+ * CredentialStore). `instance list` cannot fetch keys back from Zero.
+ */
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+export class ZeroStore {
+    homeDir;
+    cache = null;
+    constructor(homeDir) {
+        this.homeDir = homeDir ?? join(homedir(), '.baas');
+    }
+    filePath() {
+        return join(this.homeDir, 'zero.json');
+    }
+    async load() {
+        if (this.cache)
+            return this.cache;
+        const p = this.filePath();
+        if (!existsSync(p)) {
+            this.cache = { version: 1, token: '', instances: [] };
+            return this.cache;
+        }
+        try {
+            const data = JSON.parse(await readFile(p, 'utf-8'));
+            if (data.version !== 1)
+                throw new Error(`Unsupported zero.json version: ${data.version}`);
+            this.cache = { version: 1, token: data.token ?? '', instances: data.instances ?? [] };
+            return this.cache;
+        }
+        catch (err) {
+            throw new Error(`Failed to read zero.json: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    async save(state) {
+        if (!existsSync(this.homeDir)) {
+            await mkdir(this.homeDir, { mode: 0o700, recursive: true });
+        }
+        await writeFile(this.filePath(), JSON.stringify(state, null, 2) + '\n', { mode: 0o600 });
+        this.cache = state;
+    }
+    /** Latest ownership token (empty string when never provisioned). */
+    async getToken() {
+        const s = await this.load();
+        return s.token;
+    }
+    /** Upsert an instance record by id and refresh the top-level token. */
+    async addInstance(record) {
+        const s = await this.load();
+        const idx = s.instances.findIndex((i) => i.id === record.id);
+        if (idx >= 0)
+            s.instances[idx] = record;
+        else
+            s.instances.push(record);
+        s.token = record.token || s.token;
+        await this.save(s);
+    }
+    async getInstance(id) {
+        const s = await this.load();
+        return s.instances.find((i) => i.id === id) ?? null;
+    }
+    async findInstanceByProfile(profileName) {
+        const s = await this.load();
+        return s.instances.find((i) => i.profileName === profileName) ?? null;
+    }
+    async listInstances() {
+        const s = await this.load();
+        return [...s.instances];
+    }
+    /** Instances whose expiresAt is in the future (or unknown). */
+    async listActive(now = new Date()) {
+        const s = await this.load();
+        return s.instances.filter((i) => !i.expiresAt || new Date(i.expiresAt).getTime() > now.getTime());
+    }
+    async removeInstance(id) {
+        const s = await this.load();
+        const before = s.instances.length;
+        s.instances = s.instances.filter((i) => i.id !== id);
+        if (s.instances.length === before)
+            return false;
+        await this.save(s);
+        return true;
+    }
+}
+//# sourceMappingURL=zero-store.js.map

package/dist/instance/zero-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-store.js","sourceRoot":"","sources":["../../src/instance/zero-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAuBjC,MAAM,OAAO,SAAS;IACZ,OAAO,CAAS;IAChB,KAAK,GAAyB,IAAI,CAAC;IAE3C,YAAY,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAEO,QAAQ;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAkB,CAAC;YACrE,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1F,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YACtF,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,KAAoB;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,QAAQ;QACZ,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,WAAW,CAAC,MAA0B;QAC1C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,GAAG,IAAI,CAAC;YAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;;YACnC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;QAClC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,WAAmB;QAC7C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,UAAU,CAAC,MAAY,IAAI,IAAI,EAAE;QACrC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;QAClC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/instance/zero-whitelist.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Zero whitelist self-service helpers (CLI side).
+ *
+ * The whitelist API authenticates with a Studio-credential HASH (not the pxz_token
+ * ownership cookie) and addresses the instance by its cloud id (`pxsp-*`), so this
+ * module turns a locally-bound Zero record into the (cloudInstanceId, studioHash)
+ * pair the driver needs — and enforces the "Zero instances only" guard.
+ *
+ * The dashboard password and its derived sha256("supabase:"+password) are NEVER
+ * returned in any printable field; only the opaque `studioHash` is handed to the
+ * driver. See references/provision.md and the pxbaas-cli SKILL safety rules.
+ */
+import { type ZeroInstanceRecord } from './zero-store.js';
+/**
+ * sha256hex("<user>:<password>"), UTF-8, no trailing newline. Equivalent to the
+ * password — never log or persist it. `user` is fixed to `supabase` by the API.
+ */
+export declare function studioCredentialHash(password: string, user?: string): string;
+export interface WhitelistTarget {
+    record: ZeroInstanceRecord;
+    /** Cloud instance id (`pxsp-*`) used in the whitelist API path. */
+    cloudInstanceId: string;
+    /** Opaque Studio-credential sha256; do not print. */
+    studioHash: string;
+}
+/**
+ * Resolve which Zero instance a `whitelist get|add` targets.
+ *
+ * - `opts.id` (an `sbx_*` ownership id) selects explicitly.
+ * - Otherwise the current profile is used and MUST be `source === 'zero'`.
+ *
+ * Throws a plain Error (clear, user-facing) when the target is not a locally-bound
+ * Zero instance or has no stored dashboard password — the whitelist surface is
+ * Zero-only by design.
+ */
+export declare function resolveWhitelistTarget(opts: {
+    id: string | undefined;
+}): Promise<WhitelistTarget>;
+//# sourceMappingURL=zero-whitelist.d.ts.map

package/dist/instance/zero-whitelist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-whitelist.d.ts","sourceRoot":"","sources":["../../src/instance/zero-whitelist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAa,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErE;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,SAAa,GAAG,MAAM,CAEhF;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,mEAAmE;IACnE,eAAe,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IAAE,EAAE,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAkCvG"}

package/dist/instance/zero-whitelist.js

@@ -0,0 +1,67 @@
+/**
+ * Zero whitelist self-service helpers (CLI side).
+ *
+ * The whitelist API authenticates with a Studio-credential HASH (not the pxz_token
+ * ownership cookie) and addresses the instance by its cloud id (`pxsp-*`), so this
+ * module turns a locally-bound Zero record into the (cloudInstanceId, studioHash)
+ * pair the driver needs — and enforces the "Zero instances only" guard.
+ *
+ * The dashboard password and its derived sha256("supabase:"+password) are NEVER
+ * returned in any printable field; only the opaque `studioHash` is handed to the
+ * driver. See references/provision.md and the pxbaas-cli SKILL safety rules.
+ */
+import { createHash } from 'node:crypto';
+import { ZeroDriver } from '@polardbx/pxbaas-client';
+import { ProfileManager } from '../credentials/profile.js';
+import { ZeroStore } from './zero-store.js';
+/**
+ * sha256hex("<user>:<password>"), UTF-8, no trailing newline. Equivalent to the
+ * password — never log or persist it. `user` is fixed to `supabase` by the API.
+ */
+export function studioCredentialHash(password, user = 'supabase') {
+    return createHash('sha256').update(`${user}:${password}`, 'utf8').digest('hex');
+}
+/**
+ * Resolve which Zero instance a `whitelist get|add` targets.
+ *
+ * - `opts.id` (an `sbx_*` ownership id) selects explicitly.
+ * - Otherwise the current profile is used and MUST be `source === 'zero'`.
+ *
+ * Throws a plain Error (clear, user-facing) when the target is not a locally-bound
+ * Zero instance or has no stored dashboard password — the whitelist surface is
+ * Zero-only by design.
+ */
+export async function resolveWhitelistTarget(opts) {
+    const store = new ZeroStore();
+    let record;
+    if (opts.id) {
+        record = await store.getInstance(opts.id);
+        if (!record) {
+            throw new Error(`No Zero instance '${opts.id}' bound on this machine. Whitelist management is only available for Zero-provisioned instances.`);
+        }
+    }
+    else {
+        const current = await new ProfileManager().getCurrentProfile();
+        if (!current) {
+            throw new Error('No active profile. Run `pxbaas provision` to claim a Zero instance first.');
+        }
+        if (current.source !== 'zero') {
+            throw new Error(`Whitelist management is only available for Zero-provisioned instances; current profile '${current.name}' is not a Zero instance (source='${current.source ?? 'login'}').`);
+        }
+        record =
+            (current.zeroInstanceId ? await store.getInstance(current.zeroInstanceId) : null) ??
+                (await store.findInstanceByProfile(current.name));
+        if (!record) {
+            throw new Error(`Zero instance for profile '${current.name}' is not bound locally; cannot authenticate the whitelist API.`);
+        }
+    }
+    if (!record.dashboardPassword) {
+        throw new Error('This Zero instance has no stored dashboard password, so the whitelist API cannot be authenticated. Re-provision from this machine (`pxbaas provision`).');
+    }
+    return {
+        record,
+        cloudInstanceId: ZeroDriver.cloudInstanceId(record.endpoint),
+        studioHash: studioCredentialHash(record.dashboardPassword),
+    };
+}
+//# sourceMappingURL=zero-whitelist.js.map

package/dist/instance/zero-whitelist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-whitelist.js","sourceRoot":"","sources":["../../src/instance/zero-whitelist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAA2B,MAAM,iBAAiB,CAAC;AAErE;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,IAAI,GAAG,UAAU;IACtE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAUD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAgC;IAC3E,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;IAC9B,IAAI,MAAiC,CAAC;IAEtC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,EAAE,iGAAiG,CAAC,CAAC;QACjJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,IAAI,cAAc,EAAE,CAAC,iBAAiB,EAAE,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,2FAA2F,OAAO,CAAC,IAAI,qCAAqC,OAAO,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,CAAC;QAC9L,CAAC;QACD,MAAM;YACJ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjF,CAAC,MAAM,KAAK,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,gEAAgE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,yJAAyJ,CAAC,CAAC;IAC7K,CAAC;IAED,OAAO;QACL,MAAM;QACN,eAAe,EAAE,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC5D,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC;KAC3D,CAAC;AACJ,CAAC"}

package/dist/main.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":""}

package/dist/main.js

@@ -0,0 +1,69 @@
+#!/usr/bin/env node
+import { program } from 'commander';
+import { registerCommands } from './cli/root.js';
+import { TOP_LEVEL_AGENT_GUIDE } from './cli/help-guides.js';
+import { ProfileManager, isProfileCreatingCommand, setCliProfileOverrideGlobal, } from './credentials/profile.js';
+import { resolvePackageVersion } from './version.js';
+// Global options
+program
+    .name('pxbaas')
+    .description('PolarDB-X BaaS CLI')
+    // Read from package.json at runtime: a hardcoded string here reported
+    // `0.0.0-dev` for every build, so `--version` could never identify a release.
+    .version(resolvePackageVersion())
+    .option('--json', 'Output in JSON format')
+    .option('--profile <name>', 'Use specific profile')
+    .option('--debug', 'Enable debug output')
+    // Discoverability for coding agents: the full develop-and-deploy workflow
+    // lives under `pxbaas app --help`; keep this pointer to three lines.
+    .addHelpText('after', TOP_LEVEL_AGENT_GUIDE);
+// Register all commands
+registerCommands(program);
+// `--profile` is a program-level option, so commander only parses it when given
+// BEFORE the subcommand (`pxbaas --profile x app list`). Every command resolves
+// credentials through ProfileManager.getCurrentProfile(), which used to make a
+// trailing `--profile` a silent no-op — the command then ran against whatever
+// profile happened to be current, i.e. a cross-instance write hazard.
+// Declare it on every (sub)command as well so both positions work.
+const declareProfileOption = (cmd) => {
+    if (!cmd.options.some((o) => o.long === '--profile')) {
+        cmd.option('--profile <name>', 'Use specific profile');
+    }
+    cmd.commands.forEach(declareProfileOption);
+};
+declareProfileOption(program);
+/** Full command path of the action command (e.g. ['profile','import']), program name excluded. */
+const commandPathOf = (actionCommand) => {
+    const parts = [];
+    for (let c = actionCommand; c && c !== program; c = c.parent) {
+        if (c.name())
+            parts.unshift(c.name());
+    }
+    return parts;
+};
+// Resolve --profile once, before any command runs: validate it exists (fail loudly
+// instead of silently falling back to the current profile) and publish it as a
+// process-wide override. Never persisted — `profile ls` current marker is untouched.
+program.hook('preAction', async (_thisCommand, actionCommand) => {
+    const requested = (actionCommand.opts().profile ?? program.opts().profile);
+    if (!requested)
+        return;
+    // `login` / `profile import` write the named profile, so an unknown name is their
+    // precondition, not an error. Still publish the override: the command must read and
+    // write that exact profile rather than whatever happens to be current.
+    if (isProfileCreatingCommand(commandPathOf(actionCommand))) {
+        setCliProfileOverrideGlobal(requested);
+        return;
+    }
+    const manager = new ProfileManager();
+    const known = await manager.listProfiles();
+    if (!known.some((p) => p.name === requested)) {
+        const names = known.map((p) => p.name).join(', ') || '(none)';
+        console.error(`✗ Unknown profile: '${requested}'. Available profiles: ${names}`);
+        process.exit(1);
+    }
+    setCliProfileOverrideGlobal(requested);
+});
+// Parse arguments
+program.parse();
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAW,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD,iBAAiB;AACjB,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,oBAAoB,CAAC;IAClC,sEAAsE;IACtE,8EAA8E;KAC7E,OAAO,CAAC,qBAAqB,EAAE,CAAC;KAChC,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;KACzC,MAAM,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;KAClD,MAAM,CAAC,SAAS,EAAE,qBAAqB,CAAC;IACzC,0EAA0E;IAC1E,qEAAqE;KACpE,WAAW,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;AAE/C,wBAAwB;AACxB,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAE1B,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,sEAAsE;AACtE,mEAAmE;AACnE,MAAM,oBAAoB,GAAG,CAAC,GAAY,EAAQ,EAAE;IAClD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;IACzD,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAC7C,CAAC,CAAC;AACF,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAE9B,kGAAkG;AAClG,MAAM,aAAa,GAAG,CAAC,aAAsB,EAAY,EAAE;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAmB,aAAa,EAAE,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7E,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,mFAAmF;AACnF,+EAA+E;AAC/E,qFAAqF;AACrF,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE;IAC9D,MAAM,SAAS,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAE5D,CAAC;IACd,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,kFAAkF;IAClF,oFAAoF;IACpF,uEAAuE;IACvE,IAAI,wBAAwB,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC3D,2BAA2B,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;QAC9D,OAAO,CAAC,KAAK,CACX,uBAAuB,SAAS,0BAA0B,KAAK,EAAE,CAClE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,2BAA2B,CAAC,SAAS,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,kBAAkB;AAClB,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/skill/agents-md.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Managed AGENTS.md block for agents without a SKILL.md convention.
+ *
+ * Cloud agents (Devin, Jules, Copilot coding agent) and guideline-only tools
+ * (Junie, Comate, CodeArts, Windsurf, Kiro steering) read repository-level
+ * AGENTS.md. `pxbaas skill install --scope project --agents-md` writes a small
+ * marker-delimited block pointing at the exported skill directories and
+ * `pxbaas guide`. Everything outside the markers is never touched, and the
+ * block is idempotently replaced on re-install.
+ */
+export declare const AGENTS_MD_FILE = "AGENTS.md";
+export declare const BEGIN_MARKER = "<!-- BEGIN pxbaas-skills (managed by pxbaas skill install; do not edit) -->";
+export declare const END_MARKER = "<!-- END pxbaas-skills -->";
+export declare function renderBlock(lines: string[]): string;
+export declare function upsertAgentsMdBlock(projectRoot: string, lines: string[]): Promise<{
+    path: string;
+    created: boolean;
+}>;
+export declare function removeAgentsMdBlock(projectRoot: string): Promise<{
+    path: string;
+    removed: boolean;
+    deletedFile: boolean;
+}>;
+export declare function agentsMdBlockPresent(projectRoot: string): Promise<boolean>;
+//# sourceMappingURL=agents-md.d.ts.map

package/dist/skill/agents-md.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents-md.d.ts","sourceRoot":"","sources":["../../src/skill/agents-md.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,eAAO,MAAM,cAAc,cAAc,CAAC;AAC1C,eAAO,MAAM,YAAY,gFACsD,CAAC;AAChF,eAAO,MAAM,UAAU,+BAA+B,CAAC;AAUvD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAEnD;AAED,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EAAE,GACd,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAa7C;AAED,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAAC,CAYnE;AAED,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKhF"}