@polardbx/pxbaas 0.0.0-stage → 0.1.0-beta.10

package/dist/tenant/guide.js

@@ -0,0 +1,152 @@
+/**
+ * 多租户接入缺口的诊断与引导（方案文档 §5.4）。
+ *
+ * 原来 `profile import` 撞到"多租户 env 却没有租户级凭据"时只抛一句拒绝，而它给出的
+ * 两个建议（"重新生成 client.env"、"用 per-tenant key 登录"）**都是使用者自己做不到**
+ * 的动作——租户级密钥由平台签发。结果是 CLI 把用户堵在门口，还让他以为是自己的错。
+ *
+ * 本模块把这一处变成两条明确出口：
+ *   - 非管理员 → 一份可以直接转给实例管理员的**申请清单**（要哪个租户、哪两把值、
+ *     以及怎么判断拿到的到底是不是租户级密钥）；
+ *   - 具备管理面能力 → 指出可以用 `pxbaas tenant ...` 自助开通/取键，并给出命令。
+ *
+ * 边界：这里**只读、只打印**，绝不在失败分支里创建租户（读路径不携带建库/建账号/
+ * 占配额这类写副作用，见方案 N2）。管理凭据也只做**临时**探测，绝不落库（N3）。
+ */
+import { computeFingerprint, decodeJwt } from '../credentials/index.js';
+import { resolveAdminFromEnv } from '../credentials/env-file.js';
+import { probeTenantAdmin } from './probe.js';
+/** 判据用的候选变量：先看租户级，再看会被误当租户级的平台全局级。 */
+const KEY_CANDIDATES = [
+    'TENANT_ANON_KEY',
+    'TENANT_SERVICE_ROLE_KEY',
+    'SUPABASE_ANON_KEY',
+    'ANON_KEY',
+    'GLOBAL_ANON_KEY',
+    'SUPABASE_SERVICE_ROLE_KEY',
+    'SERVICE_ROLE_KEY',
+    'GLOBAL_SERVICE_ROLE_KEY',
+];
+/** 纯本地解析：不联网、不写任何状态。 */
+export function diagnoseTenantCredentialGap(env, options = {}) {
+    const keyFindings = [];
+    const tenantLevelKeysPresent = [];
+    for (const variable of KEY_CANDIDATES) {
+        const value = (env[variable] ?? '').trim();
+        if (!value)
+            continue;
+        const parts = value.split('.');
+        // 与 whoami / tenant 同一套展示口径：sha256 前 8 + 后 4，前缀只在这一处加。
+        const fingerprint = computeFingerprint(value);
+        let role;
+        let tenantId;
+        let expired = false;
+        let note = 'Value is not a JWT (three dot-separated parts expected) — cannot be a Supabase-style API key.';
+        if (parts.length === 3) {
+            try {
+                const payload = decodeJwt(value);
+                role = payload.role;
+                tenantId = payload.tenant_id;
+                expired = typeof payload.exp === 'number' && payload.exp * 1000 <= Date.now();
+                note = tenantId
+                    ? `Tenant-level key for tenant "${tenantId}"${expired ? ' (EXPIRED)' : ''}`
+                    : `Platform-global key (no tenant_id claim)${expired ? ' (EXPIRED)' : ''} — cannot reach tenant resources`;
+            }
+            catch (error) {
+                note = `JWT payload unparsable: ${error instanceof Error ? error.message : String(error)}`;
+            }
+        }
+        if (/^TENANT_/.test(variable))
+            tenantLevelKeysPresent.push(variable);
+        keyFindings.push({ variable, role, tenantId, expired, fingerprint, note });
+    }
+    const endpoint = firstNonEmpty([
+        env.SUPABASE_URL,
+        env.SUPABASE_PUBLIC_URL,
+        env.SUPABASE_INTRANET_URL,
+    ]);
+    return {
+        envFile: options.envFile,
+        endpoint,
+        multiTenantMode: firstNonEmpty([env.MULTI_TENANT_MODE]),
+        defaultTenantId: firstNonEmpty([env.DEFAULT_TENANT_ID]),
+        tenantLevelKeysPresent,
+        keyFindings,
+        adminCredentialsPresent: Boolean(resolveAdminFromEnv(env)),
+    };
+}
+/** 非管理员出口：一份可原样转给实例管理员的申请清单。 */
+export function renderRequestChecklist(diag) {
+    const lines = [
+        '你需要的不是新建租户，而是**某个租户的两把 per-tenant 密钥**。请向实例管理员申请：',
+        '',
+        `  tenant_id:            ${diag.defaultTenantId ?? '<要访问的租户 ID>'}`,
+        '  anon key:             （JWT payload 必须含 tenant_id）',
+        '  service role key:     （同上）',
+        `  实例端点:              ${diag.endpoint ?? '<Kong 网关地址，通常是 :8000>'}`,
+        '',
+        '拿到后请写成这样一份接入包（变量名必须逐字一致），再导入：',
+        '',
+        '  MULTI_TENANT_MODE=true',
+        `  SUPABASE_URL=${diag.endpoint ?? 'https://<网关地址>'}`,
+        `  DEFAULT_TENANT_ID=${diag.defaultTenantId ?? '<租户 ID>'}`,
+        '  TENANT_ANON_KEY=<粘贴 anon key>',
+        '  TENANT_SERVICE_ROLE_KEY=<粘贴 service role key>',
+        '',
+        `  pxbaas profile import ./<租户>.pxbaas.env --name <租户> --json`,
+        '  pxbaas whoami --json      # 期望 mode=multi-tenant 且 tenantId 正确',
+        '',
+        '自检判据（拿到密钥先解码看一眼，能立刻分辨管理员给的是不是租户级密钥）：',
+        "  printf '%s' \"$TENANT_ANON_KEY\" | cut -d. -f2 | base64 -d",
+        '  → payload 里必须出现 "tenant_id":"<租户ID>"；没有就是平台全局密钥，用不了。',
+    ];
+    if (diag.adminCredentialsPresent) {
+        lines.push('', '注意：这份 env 里带着 DASHBOARD_USERNAME / DASHBOARD_PASSWORD（实例管理面口令）。', '按安全设计它们不会被导入。若这份文件原本来自管理员，请改由管理员用', '"pxbaas tenant login" + "pxbaas tenant keys <id> --bundle <file>" 正规发放接入包。');
+    }
+    return lines.join('\n');
+}
+/** 管理员出口：指出可以自助的动作与命令。 */
+export function renderAdminPath(diag, probe) {
+    const endpoint = diag.endpoint ?? probe.endpoint;
+    const tenant = diag.defaultTenantId;
+    const lines = [
+        '本机凭据可打开该实例的租户管理面。可以选择自助处理（CLI 不会替你建租户，需显式执行）：',
+        '',
+        `  pxbaas tenant login --endpoint ${endpoint}   # 绑定管理凭据（口令走掩码或 stdin，不进 argv）`,
+        '  pxbaas tenant ls --json                       # 看这个实例上到底有哪些租户',
+    ];
+    if (tenant) {
+        lines.push(`  pxbaas tenant keys ${tenant} --admin --as-profile          # 已有该租户：直接把它的密钥绑进本机钥匙串`, `  pxbaas tenant keys ${tenant} --admin --bundle ./${tenant}.pxbaas.env   # 要交给别人：生成规范接入包`, `  pxbaas tenant create ${tenant} --dry-run                    # 确实需要新租户时先看计划`);
+    }
+    else {
+        lines.push('  pxbaas tenant create <tenant-id> --dry-run          # 需要新租户时先看计划');
+    }
+    lines.push('', '  提示：先跑 tenant ls 再决定建不建——多数情况该做的是取回已有租户的密钥，', '  而不是造一个新租户。');
+    return lines.join('\n');
+}
+/**
+ * 用 env 里的 dashboard 凭据做一次**临时**探测：只在内存里使用，不落库、不写文件。
+ * 没有成对凭据时返回 undefined（调用方走非管理员出口）。
+ */
+export async function tryProbeFromEnv(env, endpoint) {
+    if (!endpoint)
+        return undefined;
+    const admin = resolveAdminFromEnv(env);
+    if (!admin)
+        return undefined;
+    try {
+        return await probeTenantAdmin({ endpoint, username: admin.username, password: admin.password });
+    }
+    catch {
+        // 探测本身失败不该掩盖原始报错：按"不具备管理面"处理即可。
+        return undefined;
+    }
+}
+function firstNonEmpty(values) {
+    for (const value of values) {
+        if (typeof value === 'string' && value.trim())
+            return value.trim();
+    }
+    return undefined;
+}
+//# sourceMappingURL=guide.js.map

package/dist/tenant/guide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guide.js","sourceRoot":"","sources":["../../src/tenant/guide.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAkB,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAA0B,MAAM,YAAY,CAAC;AAEtE,sCAAsC;AACtC,MAAM,cAAc,GAAG;IACrB,iBAAiB;IACjB,yBAAyB;IACzB,mBAAmB;IACnB,UAAU;IACV,iBAAiB;IACjB,2BAA2B;IAC3B,kBAAkB;IAClB,yBAAyB;CAC1B,CAAC;AAuBF,wBAAwB;AACxB,MAAM,UAAU,2BAA2B,CACzC,GAAc,EACd,UAAgC,EAAE;IAElC,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAE5C,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,uDAAuD;QACvD,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE9C,IAAI,IAAwB,CAAC;QAC7B,IAAI,QAA4B,CAAC;QACjC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,IAAI,GAAG,+FAA+F,CAAC;QAC3G,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;gBACpB,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;gBAC7B,OAAO,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC9E,IAAI,GAAG,QAAQ;oBACb,CAAC,CAAC,gCAAgC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3E,CAAC,CAAC,2CAA2C,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,kCAAkC,CAAC;YAC/G,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,GAAG,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7F,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrE,WAAW,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,GAAG,CAAC,YAAY;QAChB,GAAG,CAAC,mBAAmB;QACvB,GAAG,CAAC,qBAAqB;KAC1B,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,eAAe,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACvD,eAAe,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACvD,sBAAsB;QACtB,WAAW;QACX,uBAAuB,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,sBAAsB,CAAC,IAA0B;IAC/D,MAAM,KAAK,GAAG;QACZ,mDAAmD;QACnD,EAAE;QACF,2BAA2B,IAAI,CAAC,eAAe,IAAI,aAAa,EAAE;QAClE,qDAAqD;QACrD,8BAA8B;QAC9B,wBAAwB,IAAI,CAAC,QAAQ,IAAI,uBAAuB,EAAE;QAClE,EAAE;QACF,+BAA+B;QAC/B,EAAE;QACF,0BAA0B;QAC1B,kBAAkB,IAAI,CAAC,QAAQ,IAAI,gBAAgB,EAAE;QACrD,uBAAuB,IAAI,CAAC,eAAe,IAAI,SAAS,EAAE;QAC1D,iCAAiC;QACjC,iDAAiD;QACjD,EAAE;QACF,8DAA8D;QAC9D,kEAAkE;QAClE,EAAE;QACF,sCAAsC;QACtC,8DAA8D;QAC9D,wDAAwD;KACzD,CAAC;IACF,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,iEAAiE,EACjE,mCAAmC,EACnC,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,eAAe,CAAC,IAA0B,EAAE,KAAwB;IAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC;IACpC,MAAM,KAAK,GAAG;QACZ,+CAA+C;QAC/C,EAAE;QACF,oCAAoC,QAAQ,mCAAmC;QAC/E,iEAAiE;KAClE,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CACR,wBAAwB,MAAM,uDAAuD,EACrF,wBAAwB,MAAM,uBAAuB,MAAM,+BAA+B,EAC1F,0BAA0B,MAAM,8CAA8C,CAC/E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACnF,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,8CAA8C,EAC9C,cAAc,CACf,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAc,EACd,QAA4B;IAE5B,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAiC;IACtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/tenant/probe.d.ts

@@ -0,0 +1,65 @@
+/**
+ * 平台管理面能力探测（tenant probe）。
+ *
+ * 为什么要它：`profile import` / `login` 撞墙时，CLI 必须先知道"这个人到底是不是
+ * 管理员"才能给出正确的下一步。判据不能用"本机有没有 DASHBOARD_* 凭据"——持有凭据
+ * 与被授予权限是两件事（运维把服务端全量 env 发给客户排查问题，客户就"被管理员"了）。
+ * 所以这里用一次**只读**调用去问平台，按回答分流。
+ *
+ * 关键陷阱（方案文档 G3）：Studio 的列表接口在「元数据查询失败」时同样返回
+ * `200 + { tenants: [], multiTenantMode: true }`（见 pages/api/platform/tenants/index.ts
+ * 的三处 200 空返回）。只看 HTTP 状态会把"平台库有问题/存量 schema 漂移"误报成
+ * "你没有权限 / 这个实例没有租户"。本模块用详情接口做二次判别：
+ *   GET /api/platform/tenants/{不存在的 id}
+ *     → 404  = 查询链路健康 ⇒ 空列表确实是"没有租户"
+ *     → 500  = 查询本身失败 ⇒ 元数据不可读（多半是 schema 漂移）
+ * 这条判据来自 [id].ts 的实现（result.error → 500，未找到 → 404），非猜测。
+ */
+import { type RedactedTenant } from '@polardbx/pxbaas-client';
+export type ProbeStatus = 
+/** 具备平台管理面能力 */
+'admin'
+/** 凭据无效/无权限（401/403） */
+ | 'not-admin'
+/** 该实例不是多租户实例（multiTenantMode=false） */
+ | 'single-tenant'
+/** 元数据不可读：列表为空且详情探测失败（G3/G5） */
+ | 'metadata-unreadable'
+/** 网络不可达 / 端点错误 */
+ | 'unreachable';
+export interface TenantProbeResult {
+    status: ProbeStatus;
+    /** 是否可执行租户管理写操作。仅 admin 为 true。 */
+    adminCapable: boolean;
+    endpoint: string;
+    multiTenantMode: boolean;
+    /** 仅 admin / metadata-unreadable 时可能有值（后者通常为空）。 */
+    tenants?: RedactedTenant[];
+    /** 一句话结论，可直接进诊断输出。 */
+    detail: string;
+    /** 归一化错误码（TENANT_ADMIN_UNAUTHORIZED 等），便于 --json 消费方分支。 */
+    errorCode?: string;
+}
+export interface AdminContext {
+    endpoint: string;
+    username: string;
+    password: string;
+    profileName: string;
+}
+/**
+ * 从当前（或指定）profile 的钥匙串账目里取管理凭据。
+ * 缺失时抛可直接展示的错误 —— 调用方不需要再判断"是 CLI 坏了还是没登录"。
+ */
+export declare function loadAdminContext(options?: {
+    profile?: string;
+}): Promise<AdminContext>;
+export interface ProbeInput {
+    endpoint: string;
+    username: string;
+    password: string;
+    /** 探测用租户列表的条数上限无关；此值仅用于详情判别的超时。 */
+    timeout?: number;
+}
+/** 用给定凭据探测管理面能力。纯只读：不会发出任何写请求。 */
+export declare function probeTenantAdmin(input: ProbeInput): Promise<TenantProbeResult>;
+//# sourceMappingURL=probe.d.ts.map

package/dist/tenant/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../src/tenant/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAMjC,MAAM,MAAM,WAAW;AACrB,gBAAgB;AACd,OAAO;AACT,wBAAwB;GACtB,WAAW;AACb,wCAAwC;GACtC,eAAe;AACjB,gCAAgC;GAC9B,qBAAqB;AACvB,mBAAmB;GACjB,aAAa,CAAC;AAElB,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,WAAW,CAAC;IACpB,mCAAmC;IACnC,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,mDAAmD;IACnD,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CA8BhG;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAkEpF"}

package/dist/tenant/probe.js

@@ -0,0 +1,159 @@
+/**
+ * 平台管理面能力探测（tenant probe）。
+ *
+ * 为什么要它：`profile import` / `login` 撞墙时，CLI 必须先知道"这个人到底是不是
+ * 管理员"才能给出正确的下一步。判据不能用"本机有没有 DASHBOARD_* 凭据"——持有凭据
+ * 与被授予权限是两件事（运维把服务端全量 env 发给客户排查问题，客户就"被管理员"了）。
+ * 所以这里用一次**只读**调用去问平台，按回答分流。
+ *
+ * 关键陷阱（方案文档 G3）：Studio 的列表接口在「元数据查询失败」时同样返回
+ * `200 + { tenants: [], multiTenantMode: true }`（见 pages/api/platform/tenants/index.ts
+ * 的三处 200 空返回）。只看 HTTP 状态会把"平台库有问题/存量 schema 漂移"误报成
+ * "你没有权限 / 这个实例没有租户"。本模块用详情接口做二次判别：
+ *   GET /api/platform/tenants/{不存在的 id}
+ *     → 404  = 查询链路健康 ⇒ 空列表确实是"没有租户"
+ *     → 500  = 查询本身失败 ⇒ 元数据不可读（多半是 schema 漂移）
+ * 这条判据来自 [id].ts 的实现（result.error → 500，未找到 → 404），非猜测。
+ */
+import { TenantAdminDriver, TenantAdminError, } from '@polardbx/pxbaas-client';
+import { CredentialStore, ProfileManager } from '../credentials/index.js';
+/** 探测用的哨兵租户 ID：合法字符集内、且按命名规范不可能真实存在。 */
+const METADATA_PROBE_ID = '__pxbaas_probe__';
+/**
+ * 从当前（或指定）profile 的钥匙串账目里取管理凭据。
+ * 缺失时抛可直接展示的错误 —— 调用方不需要再判断"是 CLI 坏了还是没登录"。
+ */
+export async function loadAdminContext(options = {}) {
+    const profiles = new ProfileManager();
+    const profile = options.profile
+        ? await profiles.getProfile(options.profile)
+        : await profiles.getCurrentProfile();
+    if (!profile) {
+        throw new Error(options.profile
+            ? `Profile '${options.profile}' not found. Run "pxbaas profile ls" to list profiles.`
+            : 'No active profile. Run "pxbaas login" or "pxbaas tenant login --endpoint <url>" first.');
+    }
+    const store = new CredentialStore();
+    const admin = await store.getAdminCredentials(profile.name);
+    if (!admin) {
+        throw new Error(`Profile '${profile.name}' has no platform admin credentials. ` +
+            `Run "pxbaas tenant login --endpoint ${profile.endpoint}" (or add --with-admin to "pxbaas profile import") ` +
+            `with the instance dashboard credentials.`);
+    }
+    return {
+        endpoint: profile.endpoint,
+        username: admin.username,
+        password: admin.password,
+        profileName: profile.name,
+    };
+}
+/** 用给定凭据探测管理面能力。纯只读：不会发出任何写请求。 */
+export async function probeTenantAdmin(input) {
+    const driver = new TenantAdminDriver({
+        endpoint: input.endpoint,
+        username: input.username,
+        password: input.password,
+        timeout: input.timeout,
+    });
+    let tenants;
+    let multiTenantMode;
+    try {
+        const listed = await driver.list();
+        tenants = listed.tenants;
+        multiTenantMode = listed.multiTenantMode;
+    }
+    catch (error) {
+        return classifyFailure(input.endpoint, error);
+    }
+    if (!multiTenantMode) {
+        return {
+            status: 'single-tenant',
+            adminCapable: false,
+            endpoint: input.endpoint,
+            multiTenantMode: false,
+            detail: 'This instance is not in multi-tenant mode (multiTenantMode=false). Tenant administration does not apply here.',
+        };
+    }
+    if (tenants.length === 0) {
+        // 空列表有两种成因，必须用详情接口判别，否则会把平台故障报成"没有租户"。
+        const health = await probeMetadataHealth(driver);
+        if (!health.readable) {
+            return {
+                status: 'metadata-unreadable',
+                adminCapable: false,
+                endpoint: input.endpoint,
+                multiTenantMode: true,
+                tenants: [],
+                errorCode: health.errorCode,
+                detail: 'Credentials are accepted, but the tenant metadata could not be read ' +
+                    `(${health.errorCode ?? 'unknown error'}). On long-lived instances this usually means schema drift ` +
+                    '(e.g. a missing column in _platform.tenants) rather than an empty tenant list. ' +
+                    'Verify with the platform operator before retrying.',
+            };
+        }
+        return {
+            status: 'admin',
+            adminCapable: true,
+            endpoint: input.endpoint,
+            multiTenantMode: true,
+            tenants: [],
+            detail: 'Admin channel works. This instance has no tenants yet — you can create the first one with "pxbaas tenant create".',
+        };
+    }
+    return {
+        status: 'admin',
+        adminCapable: true,
+        endpoint: input.endpoint,
+        multiTenantMode: true,
+        tenants,
+        detail: `Admin channel works. ${tenants.length} tenant(s) visible on this instance.`,
+    };
+}
+async function probeMetadataHealth(driver) {
+    try {
+        await driver.get(METADATA_PROBE_ID);
+        // 哨兵 ID 竟然存在：极不可能，但存在即说明查询链路是通的。
+        return { readable: true };
+    }
+    catch (error) {
+        if (error instanceof TenantAdminError) {
+            // 404 ⇒ 查询执行成功且没找到 ⇒ 链路健康
+            if (error.code === 'TENANT_NOT_FOUND')
+                return { readable: true, errorCode: error.code };
+            return { readable: false, errorCode: error.code };
+        }
+        return { readable: false };
+    }
+}
+function classifyFailure(endpoint, error) {
+    const adminError = error instanceof TenantAdminError
+        ? error
+        : new TenantAdminError('TENANT_ADMIN_UNKNOWN_ERROR', error instanceof Error ? error.message : String(error));
+    if (adminError.code === 'TENANT_ADMIN_UNAUTHORIZED' || adminError.code === 'TENANT_ADMIN_FORBIDDEN') {
+        return {
+            status: 'not-admin',
+            adminCapable: false,
+            endpoint,
+            multiTenantMode: false,
+            errorCode: adminError.code,
+            detail: 'These credentials are not accepted by the tenant admin channel ' +
+                `(${adminError.code}, HTTP ${adminError.status ?? 'n/a'}). ` +
+                'Tenant administration needs the instance dashboard credentials, not an API key.',
+        };
+    }
+    // 注意：多租户关闭的信号是列表响应里的 `multiTenantMode: false`（GET 集合接口对
+    // 非多租户实例返回 200 + 空数组），**不是** HTTP 400 —— 400 只出现在写操作分支
+    // ("Multi-tenant mode is not enabled")。所以这里不能把 400 解读成单租户实例，
+    // 否则等于凭一个猜测替用户下结论。400 归到"端点没按预期应答"。
+    return {
+        status: 'unreachable',
+        adminCapable: false,
+        endpoint,
+        multiTenantMode: false,
+        errorCode: adminError.code,
+        detail: adminError.code === 'TENANT_ADMIN_BAD_REQUEST'
+            ? `Tenant admin channel answered 400: ${adminError.message}. This instance did not report multi-tenant mode, so no tenant operation was attempted.`
+            : `Tenant admin channel could not be reached: ${adminError.message}`,
+    };
+}
+//# sourceMappingURL=probe.js.map

package/dist/tenant/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/tenant/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAoB,MAAM,yBAAyB,CAAC;AAE5F,wCAAwC;AACxC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAmC7C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAgC,EAAE;IACvE,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IACtC,MAAM,OAAO,GAAuB,OAAO,CAAC,OAAO;QACjD,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5C,CAAC,CAAC,MAAM,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,OAAO;YACb,CAAC,CAAC,YAAY,OAAO,CAAC,OAAO,wDAAwD;YACrF,CAAC,CAAC,wFAAwF,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,YAAY,OAAO,CAAC,IAAI,uCAAuC;YAC7D,uCAAuC,OAAO,CAAC,QAAQ,qDAAqD;YAC5G,0CAA0C,CAC7C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,OAAO,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC;AAUD,kCAAkC;AAClC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAiB;IACtD,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;QACnC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,IAAI,OAAyB,CAAC;IAC9B,IAAI,eAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,eAAe;YACvB,YAAY,EAAE,KAAK;YACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,KAAK;YACtB,MAAM,EACJ,+GAA+G;SAClH,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,uCAAuC;QACvC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO;gBACL,MAAM,EAAE,qBAAqB;gBAC7B,YAAY,EAAE,KAAK;gBACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,eAAe,EAAE,IAAI;gBACrB,OAAO,EAAE,EAAE;gBACX,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EACJ,sEAAsE;oBACtE,IAAI,MAAM,CAAC,SAAS,IAAI,eAAe,6DAA6D;oBACpG,iFAAiF;oBACjF,oDAAoD;aACvD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO;YACf,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,IAAI;YACrB,OAAO,EAAE,EAAE;YACX,MAAM,EACJ,mHAAmH;SACtH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO;QACf,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,IAAI;QACrB,OAAO;QACP,MAAM,EAAE,wBAAwB,OAAO,CAAC,MAAM,sCAAsC;KACrF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,MAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACpC,iCAAiC;QACjC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,0BAA0B;YAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;gBAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACxF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,KAAc;IACvD,MAAM,UAAU,GACd,KAAK,YAAY,gBAAgB;QAC/B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,gBAAgB,CAClB,4BAA4B,EAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IAER,IAAI,UAAU,CAAC,IAAI,KAAK,2BAA2B,IAAI,UAAU,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;QACpG,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,YAAY,EAAE,KAAK;YACnB,QAAQ;YACR,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,UAAU,CAAC,IAAI;YAC1B,MAAM,EACJ,iEAAiE;gBACjE,IAAI,UAAU,CAAC,IAAI,UAAU,UAAU,CAAC,MAAM,IAAI,KAAK,KAAK;gBAC5D,iFAAiF;SACpF,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,uDAAuD;IACvD,6DAA6D;IAC7D,oCAAoC;IACpC,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,YAAY,EAAE,KAAK;QACnB,QAAQ;QACR,eAAe,EAAE,KAAK;QACtB,SAAS,EAAE,UAAU,CAAC,IAAI;QAC1B,MAAM,EACJ,UAAU,CAAC,IAAI,KAAK,0BAA0B;YAC5C,CAAC,CAAC,sCAAsC,UAAU,CAAC,OAAO,yFAAyF;YACnJ,CAAC,CAAC,8CAA8C,UAAU,CAAC,OAAO,EAAE;KACzE,CAAC;AACJ,CAAC"}

package/dist/tenant/verify.d.ts

@@ -0,0 +1,37 @@
+/**
+ * 建租户后的验证闭环（方案文档 G4）。
+ *
+ * 平台侧的建租户接口会把「建库 / 建账号 / GRANT / 租户库内 RLS 表 / Realtime 注册」
+ * 全部当作**非致命**步骤：任何一步失败只 console.error，HTTP 仍然返回 201
+ * （pages/api/platform/tenants/index.ts:265 起）。也就是说"创建成功"并不等于
+ * "这个租户可用"。CLI 若在 create 之后直接报成功，管理员就会把平台缺陷当成 CLI 的 bug。
+ *
+ * 这里用新签发的**租户自己的** service_role key 走一遍租户自助 DDL 通道，逐项确认：
+ *   1. SELECT DATABASE()      ⇒ 密钥有效、租户处于 active、自助 DDL 通道可用，并拿到真实库名
+ *   2. information_schema 计数 ⇒ 租户库确实存在且可内省（0 张表对新租户是正常的）
+ *   3. RLS 注册表可读          ⇒ 中心 RLS 元数据对该租户可达（RLS 落库的前置条件）
+ * 三条都是只读语句，不改变任何状态。
+ */
+export type VerifyStatus = 'pass' | 'fail' | 'skip';
+export interface VerifyStep {
+    name: string;
+    status: VerifyStatus;
+    detail: string;
+    /** 失败时给管理员的可执行补救建议。 */
+    remediation?: string;
+}
+export interface VerifyTenantResult {
+    ok: boolean;
+    /** 租户实际生效的库名（来自 SELECT DATABASE()，非拼接推断）。 */
+    dbName?: string;
+    steps: VerifyStep[];
+}
+export interface VerifyTenantInput {
+    endpoint: string;
+    serviceRoleKey: string;
+    /** create 响应里的 realtime_provisioned；为 false 时记为 warn 级步骤（平台侧非致命）。 */
+    realtimeProvisioned?: boolean;
+    timeout?: number;
+}
+export declare function verifyTenantUsable(input: VerifyTenantInput): Promise<VerifyTenantResult>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/tenant/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/tenant/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkH9F"}

package/dist/tenant/verify.js

@@ -0,0 +1,132 @@
+/**
+ * 建租户后的验证闭环（方案文档 G4）。
+ *
+ * 平台侧的建租户接口会把「建库 / 建账号 / GRANT / 租户库内 RLS 表 / Realtime 注册」
+ * 全部当作**非致命**步骤：任何一步失败只 console.error，HTTP 仍然返回 201
+ * （pages/api/platform/tenants/index.ts:265 起）。也就是说"创建成功"并不等于
+ * "这个租户可用"。CLI 若在 create 之后直接报成功，管理员就会把平台缺陷当成 CLI 的 bug。
+ *
+ * 这里用新签发的**租户自己的** service_role key 走一遍租户自助 DDL 通道，逐项确认：
+ *   1. SELECT DATABASE()      ⇒ 密钥有效、租户处于 active、自助 DDL 通道可用，并拿到真实库名
+ *   2. information_schema 计数 ⇒ 租户库确实存在且可内省（0 张表对新租户是正常的）
+ *   3. RLS 注册表可读          ⇒ 中心 RLS 元数据对该租户可达（RLS 落库的前置条件）
+ * 三条都是只读语句，不改变任何状态。
+ */
+import { TenantDdlDriver, TenantDdlError } from '@polardbx/pxbaas-client';
+export async function verifyTenantUsable(input) {
+    const driver = new TenantDdlDriver({
+        endpoint: input.endpoint,
+        serviceRoleKey: input.serviceRoleKey,
+        timeout: input.timeout ?? 30_000,
+    });
+    const steps = [];
+    let dbName;
+    // 1) 租户自助 DDL 通道 + 密钥有效性
+    let channelOk = false;
+    try {
+        const rows = (await driver.query('SELECT DATABASE() AS db'));
+        const value = rows?.[0]?.db;
+        dbName = typeof value === 'string' && value ? value : undefined;
+        channelOk = Boolean(dbName);
+        steps.push({
+            name: 'Tenant DDL channel',
+            status: channelOk ? 'pass' : 'fail',
+            detail: channelOk
+                ? `Connected as tenant database "${dbName}"`
+                : 'SELECT DATABASE() returned no database name',
+            remediation: channelOk
+                ? undefined
+                : 'Verify the tenant is active and that the key belongs to this tenant (pxbaas doctor --json).',
+        });
+    }
+    catch (error) {
+        steps.push({
+            name: 'Tenant DDL channel',
+            status: 'fail',
+            detail: describe(error),
+            remediation: 'The tenant database or its account may not have been provisioned. Platform-side tenant creation treats those steps as non-fatal, so a 201 response does not guarantee a usable tenant — ask the operator to check the tenant db, user and GRANT.',
+        });
+    }
+    // 2) 库可内省（存在性代理判据：能查 information_schema 即库已在）
+    if (channelOk) {
+        try {
+            const rows = (await driver.query('SELECT COUNT(*) AS t FROM information_schema.tables WHERE table_schema = DATABASE()'));
+            const count = Number(rows?.[0]?.t ?? NaN);
+            steps.push({
+                name: 'Tenant database introspectable',
+                status: Number.isFinite(count) ? 'pass' : 'fail',
+                detail: Number.isFinite(count)
+                    ? `${count} table(s) currently in "${dbName}"`
+                    : 'Count query returned an unexpected shape',
+            });
+        }
+        catch (error) {
+            steps.push({
+                name: 'Tenant database introspectable',
+                status: 'fail',
+                detail: describe(error),
+                remediation: 'Create tables with "pxbaas db push <file>" or "pxbaas app db-init <name>".',
+            });
+        }
+    }
+    else {
+        steps.push({
+            name: 'Tenant database introspectable',
+            status: 'skip',
+            detail: 'Skipped because the DDL channel is not usable.',
+        });
+    }
+    // 3) 中心 RLS 注册表对该租户可达
+    if (channelOk) {
+        try {
+            const tables = await driver.listRlsTables();
+            steps.push({
+                name: 'RLS registry reachable',
+                status: 'pass',
+                detail: `${tables.length} RLS-registered table(s) for this tenant`,
+            });
+        }
+        catch (error) {
+            steps.push({
+                name: 'RLS registry reachable',
+                status: 'fail',
+                detail: describe(error),
+                remediation: 'RLS metadata may not be initialized for this tenant. Register policies through "pxbaas db push --rls db/rls.json" (multi-tenant binds table_schema server-side).',
+            });
+        }
+    }
+    else {
+        steps.push({ name: 'RLS registry reachable', status: 'skip', detail: 'Skipped (channel unavailable).' });
+    }
+    // 4) Realtime 注册（平台侧非致命；false 时该租户 WS 握手会 403）
+    if (input.realtimeProvisioned === undefined) {
+        steps.push({
+            name: 'Realtime registration',
+            status: 'skip',
+            detail: 'Not reported by this endpoint (only the create response carries it).',
+        });
+    }
+    else {
+        steps.push({
+            name: 'Realtime registration',
+            status: input.realtimeProvisioned ? 'pass' : 'fail',
+            detail: input.realtimeProvisioned
+                ? 'Tenant registered for Realtime'
+                : 'Realtime registration failed (platform-side, non-fatal for REST/Auth)',
+            remediation: input.realtimeProvisioned
+                ? undefined
+                : 'WebSocket subscriptions for this tenant will be rejected until it is registered in Realtime; ask the operator to re-run registration.',
+        });
+    }
+    return {
+        ok: steps.every((step) => step.status !== 'fail'),
+        dbName,
+        steps,
+    };
+}
+function describe(error) {
+    if (error instanceof TenantDdlError)
+        return `${error.code}: ${error.message}`;
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=verify.js.map

package/dist/tenant/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/tenant/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AA2B1E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAwB;IAC/D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,MAAM;KACjC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,MAA0B,CAAC;IAE/B,yBAAyB;IACzB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAA4B,CAAC;QACxF,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACnC,MAAM,EAAE,SAAS;gBACf,CAAC,CAAC,iCAAiC,MAAM,GAAG;gBAC5C,CAAC,CAAC,6CAA6C;YACjD,WAAW,EAAE,SAAS;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,6FAA6F;SAClG,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC;YACvB,WAAW,EACT,kPAAkP;SACrP,CAAC,CAAC;IACL,CAAC;IAED,8CAA8C;IAC9C,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAC9B,qFAAqF,CACtF,CAA2B,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,gCAAgC;gBACtC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAChD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAC5B,CAAC,CAAC,GAAG,KAAK,2BAA2B,MAAM,GAAG;oBAC9C,CAAC,CAAC,0CAA0C;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,gCAAgC;gBACtC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC;gBACvB,WAAW,EAAE,4EAA4E;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,gCAAgC;YACtC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,gDAAgD;SACzD,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,0CAA0C;aACnE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC;gBACvB,WAAW,EACT,kKAAkK;aACrK,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,+CAA+C;IAC/C,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,sEAAsE;SAC/E,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACnD,MAAM,EAAE,KAAK,CAAC,mBAAmB;gBAC/B,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,uEAAuE;YAC3E,WAAW,EAAE,KAAK,CAAC,mBAAmB;gBACpC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,uIAAuI;SAC5I,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;QACjD,MAAM;QACN,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,YAAY,cAAc;QAAE,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAC9E,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Runtime CLI version resolution.
+ *
+ * `npm run build` is a plain `tsc --build`, so there is no bundler step that
+ * could inline `package.json#version` into the emitted JS — and adding one is
+ * out of the question for a build pipeline this simple. Read the manifest from
+ * disk instead, walking up from this module so every supported layout works:
+ *
+ *   - source tree : <pkg>/dist/version.js  -> <pkg>/package.json
+ *   - npm install : node_modules/@polardbx/pxbaas/dist/version.js -> .../package.json
+ *
+ * The walk-up must not stop at the first manifest it finds: in a monorepo the
+ * workspace root (`cli/package.json`, version `0.0.0-dev`) is also an ancestor,
+ * which is exactly how `--version` used to report a version nobody published.
+ * Only the manifest that owns this package (matching `name`, or declaring the
+ * `pxbaas` bin) counts.
+ *
+ * Never throws: an unreadable manifest must not stop `pxbaas --help`.
+ */
+export declare const PACKAGE_NAME = "@polardbx/pxbaas";
+/** Reported when no owning manifest can be found (e.g. a single-file bundle). */
+export declare const UNKNOWN_VERSION = "0.0.0-unknown";
+/**
+ * The published version of this CLI, or {@link UNKNOWN_VERSION} when it cannot be
+ * determined. Synchronous on purpose: commander's `.version()` is wired up at
+ * module scope, before any await could run.
+ */
+export declare function resolvePackageVersion(startDir?: string): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,eAAO,MAAM,YAAY,qBAAqB,CAAC;AAE/C,iFAAiF;AACjF,eAAO,MAAM,eAAe,kBAAkB,CAAC;AA8B/C;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,GAAE,MAAoB,GAAG,MAAM,CAY5E"}