@polardbx/pxbaas 0.0.0-stage → 0.1.0-beta.10

package/dist/skill/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/skill/installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAmBH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9C,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAAC;AAC9F,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,eAAe,GAAG,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAAC;AACjG,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,eAAe,GAAG,SAAS,CAAC;AAEnE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,GAAG,YAAY,GAAG,UAAU,CAAC;IAClD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,qFAAqF;AACrF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,WAAW,CAAyB;gBAEhC,OAAO,GAAE,mBAAwB;IAO7C,qEAAqE;WACxD,MAAM,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,YAAY,CAAC;IAK7E,sCAAsC;IAChC,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAO1B,cAAc;IAU5B;;;;;;;;OAQG;IACH,cAAc,CAAC,IAAI,EAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,OAAO,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,YAAY,CAAC;KACtB,GAAG,cAAc,EAAE;IA8CpB,+EAA+E;IACzE,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAmBhF,UAAU;IAiExB,6EAA6E;IACvE,IAAI,CAAC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAYvE,8EAA8E;IACxE,WAAW,CAAC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAiBhE,OAAO;IAerB;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAa9E,SAAS;CAsBxB"}

package/dist/skill/installer.js

@@ -0,0 +1,241 @@
+/**
+ * SkillManager — install/list/remove ALL bundled Agent Skills (e.g. `pxbaas-cli`,
+ * `pxbaas-app-spec`) into supported Agent hosts.
+ *
+ * Purely local and offline: never touches credentials, profiles, or the network,
+ * so agents can run it without `pxbaas login`. `homeDir` and `skillsRoot` are
+ * injectable for testing.
+ *
+ * Layout: each host has a skills root (`~/.<host>/skills`); every bundled skill is
+ * installed into `<skillsRoot>/<skillName>/` with its own fail-closed owner marker.
+ */
+import { copyFile, mkdir, rm, rename } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { listBundledSkillsIn, listSkillFiles, readCliVersion, resolveSkillsRoot } from './assets.js';
+import { ALL_EXCLUDED_HOSTS, detectInstalledHosts, hostSkillsRoot, projectSkillsRoot, PROJECT_HOSTS, } from './hosts.js';
+import { classifyTarget, readMarker, sha256File, writeMarker } from './ownership.js';
+export class SkillManager {
+    homeDir;
+    skillsRoot;
+    cliVersion;
+    projectRoot;
+    skillsCache = null;
+    constructor(options = {}) {
+        this.homeDir = options.homeDir ?? homedir();
+        this.skillsRoot = options.skillsRoot ?? resolveSkillsRoot();
+        this.cliVersion = options.cliVersion ?? 'unknown';
+        this.projectRoot = options.projectRoot ?? process.cwd();
+    }
+    /** Async factory that resolves the CLI version from package.json. */
+    static async create(options = {}) {
+        const cliVersion = options.cliVersion ?? (await readCliVersion());
+        return new SkillManager({ ...options, cliVersion });
+    }
+    /** Bundled skill names (memoized). */
+    async bundledSkills() {
+        if (!this.skillsCache) {
+            this.skillsCache = await listBundledSkillsIn(this.skillsRoot);
+        }
+        return this.skillsCache;
+    }
+    async selectedSkills(filter) {
+        const all = await this.bundledSkills();
+        if (!filter || filter.length === 0)
+            return all;
+        const unknown = filter.filter((s) => !all.includes(s));
+        if (unknown.length > 0) {
+            throw new Error(`Unknown skill(s): ${unknown.join(', ')}. Bundled: ${all.join(', ')}.`);
+        }
+        return filter;
+    }
+    /**
+     * Resolve which host skills-roots to act on.
+     * - `--dir` wins (single custom skills-root, host label "custom")
+     * - `--scope project` requires `--host` (a ProjectHost) or `--dir`; `--all` is
+     *   user-scope only because writing every vendor repo directory is spammy
+     * - `--all` (user scope) → every detected host except ALL_EXCLUDED_HOSTS
+     * - `--host <h>` → that host
+     * - none → auto-detect: exactly one detected host is used; 0 or >1 is an error
+     */
+    resolveTargets(opts) {
+        const scope = opts.scope ?? 'user';
+        if (scope === 'project') {
+            if (opts.all) {
+                throw new Error(`--all is user-scope only. For --scope project pass --host <${PROJECT_HOSTS.join('|')}> or --dir <path>.`);
+            }
+            if (opts.dir) {
+                return [{ host: 'custom', destRoot: opts.dir, scope }];
+            }
+            if (!opts.host || !PROJECT_HOSTS.includes(opts.host)) {
+                throw new Error(`--scope project requires --host <${PROJECT_HOSTS.join('|')}> (or --dir <path>).`);
+            }
+            const host = opts.host;
+            return [{ host, destRoot: projectSkillsRoot(host, this.projectRoot), scope }];
+        }
+        if (opts.dir) {
+            return [{ host: 'custom', destRoot: opts.dir, scope }];
+        }
+        if (opts.all) {
+            const detected = detectInstalledHosts(this.homeDir).filter((h) => !ALL_EXCLUDED_HOSTS.includes(h));
+            if (detected.length === 0) {
+                throw new Error(`No supported host directory found under ${this.homeDir}. Pass --host <name> or --dir <path>.`);
+            }
+            return detected.map((host) => ({ host, destRoot: hostSkillsRoot(host, this.homeDir), scope }));
+        }
+        if (opts.host) {
+            return [{ host: opts.host, destRoot: hostSkillsRoot(opts.host, this.homeDir), scope }];
+        }
+        const detected = detectInstalledHosts(this.homeDir);
+        if (detected.length === 1) {
+            return [{ host: detected[0], destRoot: hostSkillsRoot(detected[0], this.homeDir), scope }];
+        }
+        if (detected.length === 0) {
+            throw new Error(`No supported host directory found under ${this.homeDir}. Pass --host <name> or --dir <path>.`);
+        }
+        throw new Error(`Multiple hosts detected (${detected.join(', ')}). Pass --host <name> to pick one, or --all for every detected host.`);
+    }
+    /** Install all (or selected) bundled skills into each target's skills root. */
+    async install(targets, options = {}) {
+        const skills = await this.selectedSkills(options.skills);
+        const filesBySkill = new Map();
+        for (const s of skills) {
+            filesBySkill.set(s, await listSkillFiles(join(this.skillsRoot, s)));
+        }
+        const results = [];
+        for (const target of targets) {
+            for (const skill of skills) {
+                const destDir = join(target.destRoot, skill);
+                results.push(await this.installOne(target.host, skill, destDir, filesBySkill.get(skill) ?? [], options, target.scope));
+            }
+        }
+        return results;
+    }
+    async installOne(host, skill, targetDir, files, options, scope = 'user') {
+        const assetDir = join(this.skillsRoot, skill);
+        const state = await classifyTarget(targetDir);
+        if (state === 'foreign' && !options.force) {
+            return {
+                host,
+                skill,
+                targetDir,
+                status: 'skipped-foreign',
+                scope,
+                reason: 'Directory exists but is not managed by pxbaas-cli. Re-run with --force to back it up and overwrite.',
+            };
+        }
+        const plannedStatus = state === 'owned' ? 'updated' : 'installed';
+        if (options.dryRun) {
+            const verb = state === 'owned' ? 'update' : 'install';
+            return { host, skill, targetDir, status: 'dry-run', scope, filesWritten: files, reason: `would ${verb}` };
+        }
+        try {
+            if (state === 'foreign' && options.force) {
+                await rename(targetDir, `${targetDir}.bak.${Date.now()}`);
+            }
+            await mkdir(targetDir, { recursive: true });
+            const hashes = {};
+            for (const rel of files) {
+                const src = join(assetDir, rel);
+                const dst = join(targetDir, rel);
+                await mkdir(dirname(dst), { recursive: true });
+                await copyFile(src, dst);
+                hashes[rel] = await sha256File(dst);
+            }
+            const marker = {
+                owner: 'pxbaas-cli',
+                skillName: skill,
+                skillVersion: this.cliVersion,
+                cliVersion: this.cliVersion,
+                host,
+                installedAt: new Date().toISOString(),
+                files: hashes,
+            };
+            await writeMarker(targetDir, marker);
+            for (const rel of files) {
+                if (!existsSync(join(targetDir, rel))) {
+                    throw new Error(`Verification failed: missing ${rel} after copy`);
+                }
+            }
+            return { host, skill, targetDir, status: plannedStatus, scope, filesWritten: files, skillVersion: this.cliVersion };
+        }
+        catch (err) {
+            return { host, skill, targetDir, status: 'error', scope, reason: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    /** Report install state of every bundled skill across all detected hosts. */
+    async list(options = {}) {
+        const skills = await this.selectedSkills(options.skills);
+        const results = [];
+        for (const host of detectInstalledHosts(this.homeDir)) {
+            const destRoot = hostSkillsRoot(host, this.homeDir);
+            for (const skill of skills) {
+                results.push(await this.listOne(host, skill, join(destRoot, skill), 'user'));
+            }
+        }
+        return results;
+    }
+    /** Report install state of bundled skills in repository-level directories. */
+    async listProject(options = {}) {
+        const skills = await this.selectedSkills(options.skills);
+        const results = [];
+        const seenRoots = new Set();
+        for (const host of PROJECT_HOSTS) {
+            const destRoot = projectSkillsRoot(host, this.projectRoot);
+            // codex and the neutral `agents` key share .agents/skills: report once.
+            if (seenRoots.has(destRoot))
+                continue;
+            seenRoots.add(destRoot);
+            if (!existsSync(destRoot))
+                continue;
+            for (const skill of skills) {
+                results.push(await this.listOne(host, skill, join(destRoot, skill), 'project'));
+            }
+        }
+        return results;
+    }
+    async listOne(host, skill, targetDir, scope = 'user') {
+        const state = await classifyTarget(targetDir);
+        if (state === 'absent')
+            return { host, skill, targetDir, status: 'not-installed', scope };
+        if (state === 'foreign') {
+            return { host, skill, targetDir, status: 'foreign', scope, reason: 'directory exists but is not managed by pxbaas-cli' };
+        }
+        const marker = await readMarker(targetDir);
+        return { host, skill, targetDir, status: 'installed', scope, skillVersion: marker?.skillVersion, installedAt: marker?.installedAt };
+    }
+    /**
+     * Remove bundled skills from each target. Only removes directories owned by
+     * pxbaas-cli. Two-phase: without `confirm` (or with `dryRun`) it only previews.
+     */
+    async remove(targets, options = {}) {
+        const skills = await this.selectedSkills(options.skills);
+        const results = [];
+        for (const target of targets) {
+            for (const skill of skills) {
+                results.push(await this.removeOne(target.host, skill, join(target.destRoot, skill), options, target.scope));
+            }
+        }
+        return results;
+    }
+    async removeOne(host, skill, targetDir, options, scope = 'user') {
+        const state = await classifyTarget(targetDir);
+        if (state === 'absent')
+            return { host, skill, targetDir, status: 'not-installed', scope };
+        if (state === 'foreign') {
+            return { host, skill, targetDir, status: 'skipped-foreign', scope, reason: 'Directory is not managed by pxbaas-cli; refusing to delete.' };
+        }
+        if (options.dryRun || !options.confirm) {
+            return { host, skill, targetDir, status: 'dry-run', scope, reason: options.dryRun ? 'would remove' : 'pass --confirm to remove' };
+        }
+        try {
+            await rm(targetDir, { recursive: true, force: true });
+            return { host, skill, targetDir, status: 'removed', scope };
+        }
+        catch (err) {
+            return { host, skill, targetDir, status: 'error', scope, reason: err instanceof Error ? err.message : String(err) };
+        }
+    }
+}
+//# sourceMappingURL=installer.js.map

package/dist/skill/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/skill/installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,iBAAiB,EACjB,aAAa,GAGd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAoB,MAAM,gBAAgB,CAAC;AAkDvG,MAAM,OAAO,YAAY;IACN,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,UAAU,CAAS;IACnB,WAAW,CAAS;IAC7B,WAAW,GAAoB,IAAI,CAAC;IAE5C,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1D,CAAC;IAED,qEAAqE;IACrE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAA+B,EAAE;QACnD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;QAClE,OAAO,IAAI,YAAY,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAAiB;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACH,cAAc,CAAC,IAKd;QACC,MAAM,KAAK,GAAiB,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,8DAA8D,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAC1G,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAmB,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CACb,oCAAoC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAClF,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAmB,CAAC;YACtC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CACvC,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,OAAO,uCAAuC,CAAC,CAAC;YAClH,CAAC;YACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,IAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,OAAO,uCAAuC,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4BAA4B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,sEAAsE,CACtH,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,OAAO,CAAC,OAAyB,EAAE,UAA0B,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC7C,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CACzG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,IAAY,EACZ,KAAa,EACb,SAAiB,EACjB,KAAe,EACf,OAAuB,EACvB,QAAsB,MAAM;QAE5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAE9C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI;gBACJ,KAAK;gBACL,SAAS;gBACT,MAAM,EAAE,iBAAiB;gBACzB,KAAK;gBACL,MAAM,EAAE,qGAAqG;aAC9G,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAkB,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QACjF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QAC5G,CAAC;QAED,IAAI,CAAC;YACH,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,MAAM,CAAC,SAAS,EAAE,GAAG,SAAS,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE5C,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAChC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBACjC,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACzB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,MAAM,GAAgB;gBAC1B,KAAK,EAAE,YAAY;gBACnB,SAAS,EAAE,KAAK;gBAChB,YAAY,EAAE,IAAI,CAAC,UAAU;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,IAAI;gBACJ,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,KAAK,EAAE,MAAM;aACd,CAAC;YACF,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAErC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,aAAa,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACtH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACtH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,IAAI,CAAC,UAAiC,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACpD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,WAAW,CAAC,UAAiC,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3D,wEAAwE;YACxE,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACtC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,KAAa,EACb,SAAiB,EACjB,QAAsB,MAAM;QAE5B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC1F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;QAC3H,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtI,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAyB,EAAE,UAAyB,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,IAAY,EACZ,KAAa,EACb,SAAiB,EACjB,OAAsB,EACtB,QAAsB,MAAM;QAE5B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC1F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QAC7I,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC;QACpI,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACtH,CAAC;IACH,CAAC;CACF"}

package/dist/skill/ownership.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Fail-closed ownership tracking for installed skills (lightweight, per-dir).
+ *
+ * Each installed skill directory carries a `.baas-skill-owner.json` marker
+ * recording the owner, versions, timestamp, and a sha256 per file. This lets
+ * `install` update its own assets idempotently, refuse to clobber foreign
+ * directories (unless `--force`), and lets `remove` delete only what it owns.
+ *
+ * This is the M1 lightweight model; a ctxdb0-style central manifest
+ * (`~/.baas/skill-installations.json`) is deferred to M2.
+ */
+export declare const MARKER_FILE = ".baas-skill-owner.json";
+export declare const OWNER_ID = "pxbaas-cli";
+export interface OwnerMarker {
+    owner: typeof OWNER_ID;
+    skillName: string;
+    skillVersion: string;
+    cliVersion: string;
+    host: string;
+    installedAt: string;
+    files: Record<string, string>;
+}
+export type TargetState = 'absent' | 'owned' | 'foreign';
+export declare function sha256File(path: string): Promise<string>;
+/** Read and validate the owner marker in a directory; null when absent/invalid. */
+export declare function readMarker(dir: string): Promise<OwnerMarker | null>;
+export declare function writeMarker(dir: string, marker: OwnerMarker): Promise<void>;
+/**
+ * Classify a target skill directory:
+ * - `absent`  : directory does not exist
+ * - `owned`   : exists and carries a valid pxbaas-cli marker (safe to update)
+ * - `foreign` : exists without our marker (must NOT be overwritten unless forced)
+ */
+export declare function classifyTarget(dir: string): Promise<TargetState>;
+//# sourceMappingURL=ownership.d.ts.map

package/dist/skill/ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.d.ts","sourceRoot":"","sources":["../../src/skill/ownership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,eAAO,MAAM,WAAW,2BAA2B,CAAC;AACpD,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,QAAQ,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;AAEzD,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG9D;AAED,mFAAmF;AACnF,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAUzE;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjF;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAItE"}

package/dist/skill/ownership.js

@@ -0,0 +1,52 @@
+/**
+ * Fail-closed ownership tracking for installed skills (lightweight, per-dir).
+ *
+ * Each installed skill directory carries a `.baas-skill-owner.json` marker
+ * recording the owner, versions, timestamp, and a sha256 per file. This lets
+ * `install` update its own assets idempotently, refuse to clobber foreign
+ * directories (unless `--force`), and lets `remove` delete only what it owns.
+ *
+ * This is the M1 lightweight model; a ctxdb0-style central manifest
+ * (`~/.baas/skill-installations.json`) is deferred to M2.
+ */
+import { createHash } from 'node:crypto';
+import { readFile, writeFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+export const MARKER_FILE = '.baas-skill-owner.json';
+export const OWNER_ID = 'pxbaas-cli';
+export async function sha256File(path) {
+    const buf = await readFile(path);
+    return createHash('sha256').update(buf).digest('hex');
+}
+/** Read and validate the owner marker in a directory; null when absent/invalid. */
+export async function readMarker(dir) {
+    const markerPath = join(dir, MARKER_FILE);
+    if (!existsSync(markerPath))
+        return null;
+    try {
+        const parsed = JSON.parse(await readFile(markerPath, 'utf8'));
+        if (parsed?.owner !== OWNER_ID || typeof parsed.skillName !== 'string')
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+export async function writeMarker(dir, marker) {
+    await writeFile(join(dir, MARKER_FILE), JSON.stringify(marker, null, 2) + '\n', 'utf8');
+}
+/**
+ * Classify a target skill directory:
+ * - `absent`  : directory does not exist
+ * - `owned`   : exists and carries a valid pxbaas-cli marker (safe to update)
+ * - `foreign` : exists without our marker (must NOT be overwritten unless forced)
+ */
+export async function classifyTarget(dir) {
+    if (!existsSync(dir))
+        return 'absent';
+    const marker = await readMarker(dir);
+    return marker ? 'owned' : 'foreign';
+}
+//# sourceMappingURL=ownership.js.map

package/dist/skill/ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.js","sourceRoot":"","sources":["../../src/skill/ownership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AACpD,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAcrC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAyB,CAAC;QACtF,IAAI,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpF,OAAO,MAAqB,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,MAAmB;IAChE,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC"}

package/dist/tenant/bundle.d.ts

@@ -0,0 +1,66 @@
+/**
+ * 租户交付包（tenant access bundle）。
+ *
+ * 解决的问题：管理员在 CLI 里拿到了新租户的密钥之后，怎么把它交给"另一个真人"。
+ * 交付物是一份**规范 env 文件**，格式与 `pxbaas profile import` 的多租户输入契约逐字
+ * 对齐（credentials/env-file.ts 的 TENANT_* 分支），所以收件人不需要手改任何字段名。
+ *
+ * 三条硬纪律：
+ * 1. **字段白名单**。bundle 内容由本模块**逐字段显式拼装**，因此结构上不可能包含
+ *    `jwt_secret`（租户签名母密钥）、`DASHBOARD_*`（实例管理口令）或 `GLOBAL_*`
+ *    （平台全局密钥）。这不是"记得过滤"，而是根本没有把它们写进去的入口。
+ * 2. **明文只落 0600 文件，绝不进 stdout / `--json` / 日志**。终端上只出现指纹。
+ * 3. **不留存于内存之外**：调用方拿到 keys 后要么写钥匙串，要么交给本模块写文件。
+ */
+export declare const BUNDLE_VERSION = 1;
+export interface BundleInput {
+    tenantId: string;
+    /** Kong 网关地址；必须已是网关，不能是 Studio 端口。 */
+    endpoint: string;
+    anonKey: string;
+    serviceRoleKey: string;
+    /** 同 VPC 使用者可加内网入口，导入时用 --intranet 优先。 */
+    intranetEndpoint?: string;
+    issuedBy?: string;
+    /** 供注释头标注有效期语义（当前平台签发约 10 年且不可撤销）。 */
+    generatedAt?: string;
+}
+export interface HandoffRecord {
+    tenantId: string;
+    endpoint: string;
+    generatedAt: string;
+    anonFingerprint: string;
+    serviceFingerprint: string;
+    bundlePath: string;
+    /** 交付包整文件 sha256，用于收件人比对"拿到的是不是同一份"。 */
+    bundleSha256: string;
+    issuedBy?: string;
+}
+export interface WriteBundleResult {
+    path: string;
+    bytes: number;
+    record: HandoffRecord;
+    instructions: string;
+}
+/**
+ * 渲染交付包文本。只输出这 5（+1）个变量：
+ * MULTI_TENANT_MODE / SUPABASE_URL / DEFAULT_TENANT_ID / TENANT_ANON_KEY /
+ * TENANT_SERVICE_ROLE_KEY（可选 SUPABASE_INTRANET_URL）。
+ */
+export declare function renderBundle(input: BundleInput): string;
+/**
+ * 写交付包。目标已存在时**必须**显式 `overwrite`，否则拒绝 —— 不静默覆盖别人的接入包。
+ */
+export declare function writeBundle(file: string, input: BundleInput, options?: {
+    overwrite?: boolean;
+    homeDir?: string;
+}): Promise<WriteBundleResult>;
+/** 可直接复制转发给使用者的交接说明（不含任何密钥值）。 */
+export declare function renderInstructions(record: HandoffRecord): string;
+export declare function listHandoffs(homeDir?: string): Promise<HandoffRecord[]>;
+/**
+ * 签发台账：只记指纹与文件哈希，**不含任何明文密钥**。0600。
+ * 泄露事件回溯时这是唯一能回答"我发过哪些包、对应哪个租户"的记录。
+ */
+export declare function appendHandoffRecord(record: HandoffRecord, homeDir?: string): Promise<void>;
+//# sourceMappingURL=bundle.d.ts.map

package/dist/tenant/bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../src/tenant/bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AASH,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CA0BvD;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,WAAW,EAClB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,OAAO,CAAC,iBAAiB,CAAC,CA+B5B;AAED,iCAAiC;AACjC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAgBhE;AAID,wBAAsB,YAAY,CAChC,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,aAAa,EAAE,CAAC,CAY1B;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,EACrB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAcf"}

package/dist/tenant/bundle.js

@@ -0,0 +1,132 @@
+/**
+ * 租户交付包（tenant access bundle）。
+ *
+ * 解决的问题：管理员在 CLI 里拿到了新租户的密钥之后，怎么把它交给"另一个真人"。
+ * 交付物是一份**规范 env 文件**，格式与 `pxbaas profile import` 的多租户输入契约逐字
+ * 对齐（credentials/env-file.ts 的 TENANT_* 分支），所以收件人不需要手改任何字段名。
+ *
+ * 三条硬纪律：
+ * 1. **字段白名单**。bundle 内容由本模块**逐字段显式拼装**，因此结构上不可能包含
+ *    `jwt_secret`（租户签名母密钥）、`DASHBOARD_*`（实例管理口令）或 `GLOBAL_*`
+ *    （平台全局密钥）。这不是"记得过滤"，而是根本没有把它们写进去的入口。
+ * 2. **明文只落 0600 文件，绝不进 stdout / `--json` / 日志**。终端上只出现指纹。
+ * 3. **不留存于内存之外**：调用方拿到 keys 后要么写钥匙串，要么交给本模块写文件。
+ */
+import { createHash } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { homedir } from 'node:os';
+import { computeFingerprint } from '../credentials/index.js';
+export const BUNDLE_VERSION = 1;
+/**
+ * 渲染交付包文本。只输出这 5（+1）个变量：
+ * MULTI_TENANT_MODE / SUPABASE_URL / DEFAULT_TENANT_ID / TENANT_ANON_KEY /
+ * TENANT_SERVICE_ROLE_KEY（可选 SUPABASE_INTRANET_URL）。
+ */
+export function renderBundle(input) {
+    const endpoint = stripSlash(input.endpoint);
+    const generatedAt = input.generatedAt ?? new Date().toISOString();
+    // 注释头：parseEnvText 会安全忽略 '#' 行，因此头部不需要解析器改动。
+    const header = [
+        '# PolarDB-X BaaS 租户接入包 (tenant access bundle)',
+        `# tenant_id  : ${input.tenantId}`,
+        `# instance   : ${endpoint}   (Kong 网关，勿改成 Studio/内网调试端口)`,
+        `# created_at : ${generatedAt}`,
+        input.issuedBy ? `# issued_by  : ${input.issuedBy}` : undefined,
+        '#',
+        '# ⚠ 本文件含明文租户密钥，且：有效期约 10 年、当前平台不支持撤销。',
+        '#   - 只通过安全通道传输（受控网盘 / 密邮正文 / 当面拷贝）；不要贴进 IM 群、工单附件、截图或聊天记录',
+        '#   - 收件人导入成功后请删除本文件（凭据会进入其操作系统钥匙串）',
+        '#   - 怀疑泄露：当前只能由平台侧重建该租户',
+        '# ============================================================',
+        'MULTI_TENANT_MODE=true',
+        `SUPABASE_URL=${endpoint}`,
+        `DEFAULT_TENANT_ID=${input.tenantId}`,
+        `TENANT_ANON_KEY=${input.anonKey}`,
+        `TENANT_SERVICE_ROLE_KEY=${input.serviceRoleKey}`,
+    ];
+    if (input.intranetEndpoint) {
+        header.push(`SUPABASE_INTRANET_URL=${stripSlash(input.intranetEndpoint)}`);
+    }
+    return header.join('\n') + '\n';
+}
+/**
+ * 写交付包。目标已存在时**必须**显式 `overwrite`，否则拒绝 —— 不静默覆盖别人的接入包。
+ */
+export async function writeBundle(file, input, options = {}) {
+    const path = resolve(file);
+    if (existsSync(path) && !options.overwrite) {
+        throw new Error(`Bundle file already exists: ${path}. Pass --overwrite to replace it (the old bundle's keys stay valid — overwriting the file does NOT revoke them).`);
+    }
+    const text = renderBundle(input);
+    const dir = dirname(path);
+    if (!existsSync(dir)) {
+        await mkdir(dir, { mode: 0o700, recursive: true });
+    }
+    await writeFile(path, text, { mode: 0o600 });
+    await chmod(path, 0o600);
+    const generatedAt = input.generatedAt ?? new Date().toISOString();
+    const record = {
+        tenantId: input.tenantId,
+        endpoint: stripSlash(input.endpoint),
+        generatedAt,
+        anonFingerprint: computeFingerprint(input.anonKey),
+        serviceFingerprint: computeFingerprint(input.serviceRoleKey),
+        bundlePath: path,
+        bundleSha256: createHash('sha256').update(text).digest('hex'),
+        issuedBy: input.issuedBy,
+    };
+    await appendHandoffRecord(record, options.homeDir);
+    return { path, bytes: Buffer.byteLength(text), record, instructions: renderInstructions(record) };
+}
+/** 可直接复制转发给使用者的交接说明（不含任何密钥值）。 */
+export function renderInstructions(record) {
+    return [
+        `下一步：把 ${record.bundlePath} 通过安全通道发给该租户的使用者，并附上以下说明。`,
+        '',
+        `  1) 安装 CLI（需 Node.js >= 20）： npm install -g @polardbx/pxbaas@beta`,
+        `  2) 导入接入包：                 pxbaas profile import ${record.bundlePath.split('/').pop()} --name ${record.tenantId} --json`,
+        '  3) 自检：                       pxbaas whoami --json   → 期望 mode=multi-tenant、tenantId=' + record.tenantId,
+        '  4) 健康检查：                   pxbaas doctor --json   → 5 项全 pass，Tenant Consistency 必须 pass',
+        '  5) 打通数据面：                 pxbaas db tables --json',
+        '  6) 全部通过后删除该 env 文件',
+        '',
+        '  指纹核对（证明收件人拿到的就是这份包，防传输途中被替换）：',
+        `    anon:         ${record.anonFingerprint}`,
+        `    service_role: ${record.serviceFingerprint}`,
+        '    收件人在 `pxbaas whoami --json` 里比对 anonKey.fingerprint / serviceKey.fingerprint 是否一致。',
+    ].join('\n');
+}
+const HANDOFF_FILE_NAME = 'handoffs.json';
+export async function listHandoffs(homeDir) {
+    const path = join(homeDir ?? join(homedir(), '.baas'), HANDOFF_FILE_NAME);
+    if (!existsSync(path))
+        return [];
+    try {
+        const parsed = JSON.parse(await readFile(path, 'utf-8'));
+        return parsed.records ?? [];
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * 签发台账：只记指纹与文件哈希，**不含任何明文密钥**。0600。
+ * 泄露事件回溯时这是唯一能回答"我发过哪些包、对应哪个租户"的记录。
+ */
+export async function appendHandoffRecord(record, homeDir) {
+    const dir = homeDir ?? join(homedir(), '.baas');
+    const path = join(dir, HANDOFF_FILE_NAME);
+    const records = await listHandoffs(dir);
+    records.push(record);
+    if (!existsSync(dir)) {
+        await mkdir(dir, { mode: 0o700, recursive: true });
+    }
+    await writeFile(path, JSON.stringify({ version: BUNDLE_VERSION, records }, null, 2) + '\n', { mode: 0o600 });
+    await chmod(path, 0o600);
+}
+function stripSlash(value) {
+    return value.replace(/\/+$/, '');
+}
+//# sourceMappingURL=bundle.js.map

package/dist/tenant/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../src/tenant/bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAkChC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClE,6CAA6C;IAC7C,MAAM,MAAM,GAAG;QACb,+CAA+C;QAC/C,kBAAkB,KAAK,CAAC,QAAQ,EAAE;QAClC,kBAAkB,QAAQ,gCAAgC;QAC1D,kBAAkB,WAAW,EAAE;QAC/B,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;QAC/D,GAAG;QACH,uCAAuC;QACvC,4DAA4D;QAC5D,qCAAqC;QACrC,0BAA0B;QAC1B,gEAAgE;QAChE,wBAAwB;QACxB,gBAAgB,QAAQ,EAAE;QAC1B,qBAAqB,KAAK,CAAC,QAAQ,EAAE;QACrC,mBAAmB,KAAK,CAAC,OAAO,EAAE;QAClC,2BAA2B,KAAK,CAAC,cAAc,EAAE;KAClD,CAAC;IACF,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,yBAAyB,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,KAAkB,EAClB,UAAqD,EAAE;IAEvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,kHAAkH,CACtJ,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEzB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClE,MAAM,MAAM,GAAkB;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,WAAW;QACX,eAAe,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;QAClD,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,cAAc,CAAC;QAC5D,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7D,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IAEF,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAEnD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,OAAO;QACL,SAAS,MAAM,CAAC,UAAU,2BAA2B;QACrD,EAAE;QACF,oEAAoE;QACpE,qDAAqD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,WAAW,MAAM,CAAC,QAAQ,SAAS;QAC1H,wFAAwF,GAAG,MAAM,CAAC,QAAQ;QAC1G,4FAA4F;QAC5F,qDAAqD;QACrD,sBAAsB;QACtB,EAAE;QACF,iCAAiC;QACjC,qBAAqB,MAAM,CAAC,eAAe,EAAE;QAC7C,qBAAqB,MAAM,CAAC,kBAAkB,EAAE;QAChD,wFAAwF;KACzF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC1E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAGtD,CAAC;QACF,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAqB,EACrB,OAAgB;IAEhB,MAAM,GAAG,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,CACb,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACpE,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/tenant/guide.d.ts

@@ -0,0 +1,50 @@
+/**
+ * 多租户接入缺口的诊断与引导（方案文档 §5.4）。
+ *
+ * 原来 `profile import` 撞到"多租户 env 却没有租户级凭据"时只抛一句拒绝，而它给出的
+ * 两个建议（"重新生成 client.env"、"用 per-tenant key 登录"）**都是使用者自己做不到**
+ * 的动作——租户级密钥由平台签发。结果是 CLI 把用户堵在门口，还让他以为是自己的错。
+ *
+ * 本模块把这一处变成两条明确出口：
+ *   - 非管理员 → 一份可以直接转给实例管理员的**申请清单**（要哪个租户、哪两把值、
+ *     以及怎么判断拿到的到底是不是租户级密钥）；
+ *   - 具备管理面能力 → 指出可以用 `pxbaas tenant ...` 自助开通/取键，并给出命令。
+ *
+ * 边界：这里**只读、只打印**，绝不在失败分支里创建租户（读路径不携带建库/建账号/
+ * 占配额这类写副作用，见方案 N2）。管理凭据也只做**临时**探测，绝不落库（N3）。
+ */
+import { type ParsedEnv } from '../credentials/index.js';
+import { type TenantProbeResult } from './probe.js';
+export interface KeyFinding {
+    variable: string;
+    role?: string;
+    /** JWT 里的 tenant_id claim；无 = 平台全局密钥，无法访问租户资源。 */
+    tenantId?: string;
+    expired: boolean;
+    fingerprint: string;
+    note: string;
+}
+export interface TenantGapDiagnostics {
+    envFile?: string;
+    endpoint?: string;
+    multiTenantMode?: string;
+    defaultTenantId?: string;
+    tenantLevelKeysPresent: string[];
+    keyFindings: KeyFinding[];
+    /** env 文件里是否有成对的 dashboard 凭据（仅报告存在，不导入）。 */
+    adminCredentialsPresent: boolean;
+}
+/** 纯本地解析：不联网、不写任何状态。 */
+export declare function diagnoseTenantCredentialGap(env: ParsedEnv, options?: {
+    envFile?: string;
+}): TenantGapDiagnostics;
+/** 非管理员出口：一份可原样转给实例管理员的申请清单。 */
+export declare function renderRequestChecklist(diag: TenantGapDiagnostics): string;
+/** 管理员出口：指出可以自助的动作与命令。 */
+export declare function renderAdminPath(diag: TenantGapDiagnostics, probe: TenantProbeResult): string;
+/**
+ * 用 env 里的 dashboard 凭据做一次**临时**探测：只在内存里使用，不落库、不写文件。
+ * 没有成对凭据时返回 undefined（调用方走非管理员出口）。
+ */
+export declare function tryProbeFromEnv(env: ParsedEnv, endpoint: string | undefined): Promise<TenantProbeResult | undefined>;
+//# sourceMappingURL=guide.d.ts.map

package/dist/tenant/guide.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guide.d.ts","sourceRoot":"","sources":["../../src/tenant/guide.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAExF,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AActE,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,6CAA6C;IAC7C,uBAAuB,EAAE,OAAO,CAAC;CAClC;AAED,wBAAwB;AACxB,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,SAAS,EACd,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,oBAAoB,CAiDtB;AAED,gCAAgC;AAChC,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,GAAG,MAAM,CAiCzE;AAED,0BAA0B;AAC1B,wBAAgB,eAAe,CAAC,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAwB5F;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,SAAS,EACd,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAUxC"}