@polardbx/pxbaas 0.0.0-stage → 0.1.0-beta.2

package/dist/commands/login/login.js

@@ -0,0 +1,185 @@
+import inquirer from 'inquirer';
+import { CredentialStore, ProfileManager, introspectJwt, validateTenantConsistency, assertTty, assertNoKeyArgs, formatSuccess, formatError, computeFingerprint, } from '../../credentials/index.js';
+/**
+ * 从 stdin 读取一行（用于 --anon-key-stdin / --service-key-stdin）
+ */
+async function readFromStdin() {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        process.stdin.setEncoding('utf8');
+        process.stdin.on('readable', () => {
+            let chunk;
+            while ((chunk = process.stdin.read()) !== null) {
+                data += chunk;
+            }
+        });
+        process.stdin.on('end', () => {
+            resolve(data.trim());
+        });
+        process.stdin.on('error', reject);
+    });
+}
+export function registerLoginCommand(program) {
+    program
+        .command('login')
+        .description('Authenticate with PolarDB-X BaaS (interactive TTY only)')
+        .option('--endpoint <url>', 'BaaS endpoint URL')
+        .option('--tenant-id <id>', 'Tenant ID (for multi-tenant mode)')
+        .option('--anon-key-stdin', 'Read anon key from stdin')
+        .option('--service-key-stdin', 'Read service role key from stdin')
+        .option('--profile <name>', 'Profile name to use')
+        .action(async (options) => {
+        try {
+            await handleLogin(options, program);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            console.error(formatError(message));
+            process.exit(1);
+        }
+    });
+}
+async function handleLogin(options, program) {
+    // 检查 argv 中是否有密钥参数（安全守卫）
+    assertNoKeyArgs(process.argv);
+    const isStdinMode = options.anonKeyStdin || options.serviceKeyStdin;
+    // 如果不是 stdin 模式，必须是 TTY
+    if (!isStdinMode) {
+        assertTty();
+    }
+    let endpoint;
+    let tenantId;
+    let anonKey;
+    let serviceRoleKey;
+    if (isStdinMode) {
+        // stdin 模式：从命令行参数或 stdin 获取
+        endpoint = options.endpoint || '';
+        tenantId = options.tenantId;
+        if (!endpoint) {
+            throw new Error('--endpoint is required when using --anon-key-stdin or --service-key-stdin');
+        }
+        if (options.anonKeyStdin && options.serviceKeyStdin) {
+            // 两个都从 stdin 读取（每行一个）
+            const lines = (await readFromStdin()).split('\n');
+            if (lines.length < 2) {
+                throw new Error('Expected two lines from stdin: anon key on first line, service role key on second line');
+            }
+            anonKey = lines[0].trim();
+            serviceRoleKey = lines[1].trim();
+        }
+        else if (options.anonKeyStdin) {
+            anonKey = (await readFromStdin()).trim();
+            throw new Error('--service-key-stdin is required when using --anon-key-stdin');
+        }
+        else {
+            serviceRoleKey = (await readFromStdin()).trim();
+            throw new Error('--anon-key-stdin is required when using --service-key-stdin');
+        }
+    }
+    else {
+        // TTY 交互模式：使用 inquirer 提示
+        const answers = await inquirer.prompt([
+            {
+                type: 'input',
+                name: 'endpoint',
+                message: 'BaaS endpoint URL:',
+                default: options.endpoint || 'http://localhost:8000',
+                validate: (input) => {
+                    if (!input.trim())
+                        return 'Endpoint is required';
+                    if (!input.startsWith('http://') && !input.startsWith('https://')) {
+                        return 'Endpoint must start with http:// or https://';
+                    }
+                    return true;
+                },
+            },
+            {
+                type: 'input',
+                name: 'tenantId',
+                message: 'Tenant ID (leave empty for single-tenant mode):',
+                default: options.tenantId || '',
+            },
+            {
+                type: 'password',
+                name: 'anonKey',
+                message: 'Anon Key:',
+                mask: '*',
+                validate: (input) => {
+                    if (!input.trim())
+                        return 'Anon key is required';
+                    return true;
+                },
+            },
+            {
+                type: 'password',
+                name: 'serviceRoleKey',
+                message: 'Service Role Key:',
+                mask: '*',
+                validate: (input) => {
+                    if (!input.trim())
+                        return 'Service role key is required';
+                    return true;
+                },
+            },
+        ]);
+        endpoint = answers.endpoint;
+        tenantId = answers.tenantId || undefined;
+        anonKey = answers.anonKey;
+        serviceRoleKey = answers.serviceRoleKey;
+    }
+    // 解析 JWT
+    const anonJwt = await introspectJwt(anonKey);
+    const serviceJwt = await introspectJwt(serviceRoleKey);
+    // 检查 JWT 是否过期
+    if (anonJwt.isExpired) {
+        console.warn(formatError('Warning: Anon key is expired'));
+    }
+    if (serviceJwt.isExpired) {
+        console.warn(formatError('Warning: Service role key is expired'));
+    }
+    // 创建 profile
+    const mode = tenantId ? 'multi-tenant' : 'single-tenant';
+    const profileName = options.profile || 'default';
+    const profile = {
+        name: profileName,
+        endpoint,
+        tenantId,
+        mode,
+        createdAt: new Date().toISOString(),
+        updatedAt: new Date().toISOString(),
+    };
+    // 验证租户一致性
+    validateTenantConsistency(profile, anonJwt, serviceJwt);
+    // 保存 profile
+    const profileManager = new ProfileManager();
+    await profileManager.setProfile(profile);
+    await profileManager.useProfile(profileName);
+    // 保存凭据
+    const credentialStore = new CredentialStore();
+    await credentialStore.setCredentials(profileName, {
+        anonKey,
+        serviceRoleKey,
+        storedAt: new Date().toISOString(),
+    });
+    // 输出成功消息
+    const output = {
+        profile: profileName,
+        endpoint,
+        tenantId: tenantId || '(single-tenant)',
+        mode,
+        anonKeyFingerprint: computeFingerprint(anonKey),
+        serviceKeyFingerprint: computeFingerprint(serviceRoleKey),
+    };
+    if (options.json || program.opts().json) {
+        console.log(JSON.stringify(output, null, 2));
+    }
+    else {
+        console.log(formatSuccess(`Login successful for profile: ${profileName}`));
+        console.log(`  Endpoint:    ${endpoint}`);
+        console.log(`  Tenant ID:   ${tenantId || '(single-tenant)'}`);
+        console.log(`  Mode:        ${mode}`);
+        console.log(`  Anon Key:    ${output.anonKeyFingerprint}`);
+        console.log(`  Service Key: ${output.serviceKeyFingerprint}`);
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/commands/login/login.ts"],"names":[],"mappings":"AACA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EACL,eAAe,EACf,cAAc,EACd,aAAa,EACb,yBAAyB,EACzB,SAAS,EACT,eAAe,EACf,aAAa,EACb,WAAW,EACX,kBAAkB,GAEnB,MAAM,4BAA4B,CAAC;AAWpC;;GAEG;AACH,KAAK,UAAU,aAAa;IAC1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;YAChC,IAAI,KAAa,CAAC;YAClB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC/C,IAAI,IAAI,KAAK,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;SAC/C,MAAM,CAAC,kBAAkB,EAAE,mCAAmC,CAAC;SAC/D,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;SACtD,MAAM,CAAC,qBAAqB,EAAE,kCAAkC,CAAC;SACjE,MAAM,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,OAAqB,EAAE,EAAE;QACtC,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAqB,EAAE,OAAgB;IAChE,yBAAyB;IACzB,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9B,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;IAEpE,wBAAwB;IACxB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,SAAS,EAAE,CAAC;IACd,CAAC;IAED,IAAI,QAAgB,CAAC;IACrB,IAAI,QAA4B,CAAC;IACjC,IAAI,OAAe,CAAC;IACpB,IAAI,cAAsB,CAAC;IAE3B,IAAI,WAAW,EAAE,CAAC;QAChB,4BAA4B;QAC5B,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QAClC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAE5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YACpD,sBAAsB;YACtB,MAAM,KAAK,GAAG,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;YAC5G,CAAC;YACD,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1B,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;aAAM,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,0BAA0B;QAC1B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YACpC;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,oBAAoB;gBAC7B,OAAO,EAAE,OAAO,CAAC,QAAQ,IAAI,uBAAuB;gBACpD,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;wBAAE,OAAO,sBAAsB,CAAC;oBACjD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;wBAClE,OAAO,8CAA8C,CAAC;oBACxD,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,iDAAiD;gBAC1D,OAAO,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;aAChC;YACD;gBACE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,GAAG;gBACT,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;wBAAE,OAAO,sBAAsB,CAAC;oBACjD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;YACD;gBACE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,mBAAmB;gBAC5B,IAAI,EAAE,GAAG;gBACT,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;wBAAE,OAAO,8BAA8B,CAAC;oBACzD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;SACF,CAAC,CAAC;QAEH,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC5B,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;QACzC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC1B,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAC1C,CAAC;IAED,SAAS;IACT,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,cAAc,CAAC,CAAC;IAEvD,cAAc;IACd,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,aAAa;IACb,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;IAEjD,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,WAAW;QACjB,QAAQ;QACR,QAAQ;QACR,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,UAAU;IACV,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAExD,aAAa;IACb,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAE7C,OAAO;IACP,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,eAAe,CAAC,cAAc,CAAC,WAAW,EAAE;QAChD,OAAO;QACP,cAAc;QACd,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC,CAAC;IAEH,SAAS;IACT,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,WAAW;QACpB,QAAQ;QACR,QAAQ,EAAE,QAAQ,IAAI,iBAAiB;QACvC,IAAI;QACJ,kBAAkB,EAAE,kBAAkB,CAAC,OAAO,CAAC;QAC/C,qBAAqB,EAAE,kBAAkB,CAAC,cAAc,CAAC;KAC1D,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,iCAAiC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,IAAI,iBAAiB,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC"}

package/dist/commands/logout/index.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function registerLogoutCommand(program: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/logout/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/logout/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAa5D"}

package/dist/commands/logout/index.js

@@ -0,0 +1,41 @@
+import { CredentialStore, ProfileManager, formatSuccess, formatError, } from '../../credentials/index.js';
+export function registerLogoutCommand(program) {
+    program
+        .command('logout')
+        .description('Clear credentials for current profile')
+        .action(async () => {
+        try {
+            await handleLogout(program);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            console.error(formatError(message));
+            process.exit(1);
+        }
+    });
+}
+async function handleLogout(program) {
+    const profileManager = new ProfileManager();
+    const currentProfile = await profileManager.getCurrentProfile();
+    if (!currentProfile) {
+        throw new Error('No active profile. Use "pxbaas login" to authenticate first.');
+    }
+    const credentialStore = new CredentialStore();
+    const deleted = await credentialStore.deleteCredentials(currentProfile.name);
+    if (deleted) {
+        const output = {
+            profile: currentProfile.name,
+            status: 'logged out',
+        };
+        if (program.opts().json) {
+            console.log(JSON.stringify(output, null, 2));
+        }
+        else {
+            console.log(formatSuccess(`Logged out from profile: ${currentProfile.name}`));
+        }
+    }
+    else {
+        throw new Error(`No credentials found for profile: ${currentProfile.name}`);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/logout/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/logout/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,cAAc,EACd,aAAa,EACb,WAAW,GACZ,MAAM,4BAA4B,CAAC;AAEpC,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAgB;IAC1C,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,iBAAiB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAE7E,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,cAAc,CAAC,IAAI;YAC5B,MAAM,EAAE,YAAY;SACrB,CAAC;QAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,4BAA4B,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/commands/profile/import-env.d.ts

@@ -0,0 +1,13 @@
+/**
+ * pxbaas profile import <env-file>
+ *
+ * 直接从一个 Supabase/BaaS 惯例的 .env 文件导入单租户实例凭据并落库为 profile，
+ * 免去把 URL / anon key / service key 拆出来再拼 stdin 登录命令。
+ *
+ * 与 login 共用 commitProfileCredentials（JWT 过期校验 + 租户一致性校验 + keyring 存储）。
+ * 密钥来自文件而非 argv/shell history，因此该命令可被 agent 非交互执行。
+ * 多租户实例暂不支持（env 文件只有 global keys）——见 resolveLoginFromEnv 的显式报错。
+ */
+import type { Command } from 'commander';
+export declare function registerProfileImportCommand(profileCmd: Command, program: Command): void;
+//# sourceMappingURL=import-env.d.ts.map

package/dist/commands/profile/import-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-env.d.ts","sourceRoot":"","sources":["../../../src/commands/profile/import-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAezC,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAoBxF"}

package/dist/commands/profile/import-env.js

@@ -0,0 +1,81 @@
+/**
+ * pxbaas profile import <env-file>
+ *
+ * 直接从一个 Supabase/BaaS 惯例的 .env 文件导入单租户实例凭据并落库为 profile，
+ * 免去把 URL / anon key / service key 拆出来再拼 stdin 登录命令。
+ *
+ * 与 login 共用 commitProfileCredentials（JWT 过期校验 + 租户一致性校验 + keyring 存储）。
+ * 密钥来自文件而非 argv/shell history，因此该命令可被 agent 非交互执行。
+ * 多租户实例暂不支持（env 文件只有 global keys）——见 resolveLoginFromEnv 的显式报错。
+ */
+import { readFile } from 'node:fs/promises';
+import { parseEnvText, resolveLoginFromEnv, commitProfileCredentials, formatSuccess, formatError, } from '../../credentials/index.js';
+export function registerProfileImportCommand(profileCmd, program) {
+    profileCmd
+        .command('import <env-file>')
+        .description('Import a single-tenant instance profile from a .env file (non-interactive)')
+        .option('--name <profile>', 'Profile name to create/overwrite (default: --profile or "default")')
+        .option('--intranet', 'Prefer SUPABASE_INTRANET_URL over the public endpoint')
+        .option('--json', 'Output in JSON format')
+        .action(async (envFile, options) => {
+        try {
+            await handleProfileImport(envFile, options, program);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            if (options.json || program.opts().json) {
+                console.log(JSON.stringify({ status: 'error', message }, null, 2));
+            }
+            else {
+                console.error(formatError(message));
+            }
+            process.exit(1);
+        }
+    });
+}
+async function handleProfileImport(envFile, options, program) {
+    let text;
+    try {
+        text = await readFile(envFile, 'utf-8');
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to read env file '${envFile}': ${reason}`);
+    }
+    const env = parseEnvText(text);
+    const fields = resolveLoginFromEnv(env, { intranet: options.intranet });
+    // profile 名优先级：--name > 全局 --profile > 'default'
+    const profileName = options.name || program.opts().profile || 'default';
+    const result = await commitProfileCredentials({
+        profileName,
+        endpoint: fields.endpoint,
+        tenantId: fields.tenantId,
+        anonKey: fields.anonKey,
+        serviceRoleKey: fields.serviceRoleKey,
+    });
+    if (options.json || program.opts().json) {
+        const output = {
+            status: 'success',
+            message: `Imported profile from env file: ${profileName}`,
+            profile: profileName,
+            envFile,
+            endpoint: result.endpoint,
+            tenantId: result.tenantId || '(single-tenant)',
+            mode: result.mode,
+            sources: fields.sources,
+            anonKeyFingerprint: result.anonKeyFingerprint,
+            serviceKeyFingerprint: result.serviceKeyFingerprint,
+        };
+        console.log(JSON.stringify(output, null, 2));
+    }
+    else {
+        console.log(formatSuccess(`Imported profile from env file: ${profileName}`));
+        console.log(`  Env file:    ${envFile}`);
+        console.log(`  Endpoint:    ${result.endpoint}  (from ${fields.sources.endpoint})`);
+        console.log(`  Tenant ID:   ${result.tenantId || '(single-tenant)'}`);
+        console.log(`  Mode:        ${result.mode}`);
+        console.log(`  Anon Key:    ${result.anonKeyFingerprint}  (from ${fields.sources.anonKey})`);
+        console.log(`  Service Key: ${result.serviceKeyFingerprint}  (from ${fields.sources.serviceRoleKey})`);
+    }
+}
+//# sourceMappingURL=import-env.js.map

package/dist/commands/profile/import-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-env.js","sourceRoot":"","sources":["../../../src/commands/profile/import-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,wBAAwB,EACxB,aAAa,EACb,WAAW,GACZ,MAAM,4BAA4B,CAAC;AAQpC,MAAM,UAAU,4BAA4B,CAAC,UAAmB,EAAE,OAAgB;IAChF,UAAU;SACP,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,4EAA4E,CAAC;SACzF,MAAM,CAAC,kBAAkB,EAAE,oEAAoE,CAAC;SAChG,MAAM,CAAC,YAAY,EAAE,uDAAuD,CAAC;SAC7E,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,OAAsB,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAe,EACf,OAAsB,EACtB,OAAgB;IAEhB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,MAAM,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAExE,iDAAiD;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,IAAI,SAAS,CAAC;IAExE,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;QAC5C,WAAW;QACX,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG;YACb,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,mCAAmC,WAAW,EAAE;YACzD,OAAO,EAAE,WAAW;YACpB,OAAO;YACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,iBAAiB;YAC9C,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;SACpD,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,QAAQ,WAAW,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,QAAQ,IAAI,iBAAiB,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,kBAAkB,WAAW,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;QAC7F,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,qBAAqB,WAAW,MAAM,CAAC,OAAO,CAAC,cAAc,GAAG,CAAC,CAAC;IACzG,CAAC;AACH,CAAC"}

package/dist/commands/profile/index.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function registerProfileCommand(program: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/profile/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/profile/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAiD7D"}

package/dist/commands/profile/index.js

@@ -0,0 +1,112 @@
+import { ProfileManager, formatSuccess, formatError, } from '../../credentials/index.js';
+import { registerProfileImportCommand } from './import-env.js';
+export function registerProfileCommand(program) {
+    const profileCmd = program
+        .command('profile')
+        .description('Manage multiple environment profiles');
+    // profile ls
+    profileCmd
+        .command('ls')
+        .description('List all profiles')
+        .action(async () => {
+        try {
+            await handleProfileLs(program);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            console.error(formatError(message));
+            process.exit(1);
+        }
+    });
+    // profile use <name>
+    profileCmd
+        .command('use <name>')
+        .description('Switch to a different profile')
+        .action(async (name) => {
+        try {
+            await handleProfileUse(name, program);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            console.error(formatError(message));
+            process.exit(1);
+        }
+    });
+    // profile rm <name>
+    profileCmd
+        .command('rm <name>')
+        .description('Remove a profile')
+        .action(async (name) => {
+        try {
+            await handleProfileRm(name, program);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            console.error(formatError(message));
+            process.exit(1);
+        }
+    });
+    // profile import <env-file>
+    registerProfileImportCommand(profileCmd, program);
+}
+async function handleProfileLs(program) {
+    const profileManager = new ProfileManager();
+    const profiles = await profileManager.listProfiles();
+    const currentProfile = await profileManager.getCurrentProfile();
+    if (profiles.length === 0) {
+        console.log('No profiles found. Use "pxbaas login" to create a profile.');
+        return;
+    }
+    const output = profiles.map(p => ({
+        name: p.name,
+        endpoint: p.endpoint,
+        tenantId: p.tenantId || '(single-tenant)',
+        mode: p.mode,
+        current: currentProfile?.name === p.name,
+    }));
+    if (program.opts().json) {
+        console.log(JSON.stringify(output, null, 2));
+    }
+    else {
+        for (const p of output) {
+            const marker = p.current ? '* ' : '  ';
+            console.log(`${marker}${p.name}`);
+            console.log(`    Endpoint:  ${p.endpoint}`);
+            console.log(`    Tenant ID: ${p.tenantId}`);
+            console.log(`    Mode:      ${p.mode}`);
+            console.log();
+        }
+    }
+}
+async function handleProfileUse(name, program) {
+    const profileManager = new ProfileManager();
+    await profileManager.useProfile(name);
+    const output = {
+        profile: name,
+        status: 'active',
+    };
+    if (program.opts().json) {
+        console.log(JSON.stringify(output, null, 2));
+    }
+    else {
+        console.log(formatSuccess(`Switched to profile: ${name}`));
+    }
+}
+async function handleProfileRm(name, program) {
+    const profileManager = new ProfileManager();
+    const deleted = await profileManager.removeProfile(name);
+    if (!deleted) {
+        throw new Error(`Profile not found: ${name}`);
+    }
+    const output = {
+        profile: name,
+        status: 'removed',
+    };
+    if (program.opts().json) {
+        console.log(JSON.stringify(output, null, 2));
+    }
+    else {
+        console.log(formatSuccess(`Removed profile: ${name}`));
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/profile/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/profile/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,aAAa,EACb,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,UAAU,GAAG,OAAO;SACvB,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,sCAAsC,CAAC,CAAC;IAEvD,aAAa;IACb,UAAU;SACP,OAAO,CAAC,IAAI,CAAC;SACb,WAAW,CAAC,mBAAmB,CAAC;SAChC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,qBAAqB;IACrB,UAAU;SACP,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,oBAAoB;IACpB,UAAU;SACP,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,kBAAkB,CAAC;SAC/B,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,4BAA4B;IAC5B,4BAA4B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAgB;IAC7C,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC;IACrD,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,iBAAiB;QACzC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK,CAAC,CAAC,IAAI;KACzC,CAAC,CAAC,CAAC;IAEJ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAgB;IAC5D,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,QAAQ;KACjB,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,OAAgB;IAC3D,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAEzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,SAAS;KAClB,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/commands/rest/index.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function registerRestCommand(program: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/rest/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/rest/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAoB1D"}

package/dist/commands/rest/index.js

@@ -0,0 +1,102 @@
+import axios from 'axios';
+import { CredentialStore, ProfileManager, formatSuccess, formatError, } from '../../credentials/index.js';
+export function registerRestCommand(program) {
+    program
+        .command('rest <method> <path>')
+        .description('Raw HTTP passthrough to /rest/v1/* (for debugging)')
+        .option('--data <json>', 'Request body (JSON)')
+        .option('--role <role>', 'Role to use (anon or service_role)', 'anon')
+        .option('--json', 'Output in JSON format')
+        .action(async (method, path, options) => {
+        try {
+            await handleRest(method, path, { ...options, json: options.json || program.opts().json });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            console.error(formatError(message));
+            process.exit(1);
+        }
+    });
+}
+async function handleRest(method, path, options) {
+    // Get current profile
+    const profileManager = new ProfileManager();
+    const currentProfile = await profileManager.getCurrentProfile();
+    if (!currentProfile) {
+        throw new Error('No active profile. Use "pxbaas login" to authenticate first.');
+    }
+    // Get credentials
+    const credentialStore = new CredentialStore();
+    const credentials = await credentialStore.getCredentials(currentProfile.name);
+    if (!credentials) {
+        throw new Error(`No credentials found for profile: ${currentProfile.name}. Use "pxbaas login" to authenticate.`);
+    }
+    // Validate method
+    const httpMethod = method.toUpperCase();
+    const validMethods = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS'];
+    if (!validMethods.includes(httpMethod)) {
+        throw new Error(`Invalid HTTP method: ${method}. Valid methods: ${validMethods.join(', ')}`);
+    }
+    // Build URL
+    const url = path.startsWith('/rest/v1/')
+        ? `${currentProfile.endpoint}${path}`
+        : `${currentProfile.endpoint}/rest/v1/${path}`;
+    // Select key based on role
+    const apiKey = options.role === 'service_role' ? credentials.serviceRoleKey : credentials.anonKey;
+    // Parse data if provided
+    let data = undefined;
+    if (options.data) {
+        try {
+            data = JSON.parse(options.data);
+        }
+        catch {
+            throw new Error('Invalid JSON in --data');
+        }
+    }
+    // Make request
+    try {
+        const headers = {
+            'apikey': apiKey,
+            'Authorization': `Bearer ${apiKey}`,
+            'Content-Type': 'application/json',
+        };
+        if (currentProfile.tenantId) {
+            headers['X-Tenant-Id'] = currentProfile.tenantId;
+        }
+        const response = await axios({
+            method: httpMethod,
+            url,
+            headers,
+            data,
+            validateStatus: () => true, // Don't throw on non-2xx status codes
+        });
+        const output = {
+            status: response.status,
+            statusText: response.statusText,
+            headers: response.headers,
+            data: response.data,
+        };
+        if (options.json) {
+            console.log(JSON.stringify(output, null, 2));
+        }
+        else {
+            console.log(formatSuccess(`${httpMethod} ${path}`));
+            console.log(`  Status: ${response.status} ${response.statusText}`);
+            console.log('');
+            if (response.data) {
+                console.log('Response:');
+                console.log(JSON.stringify(response.data, null, 2));
+            }
+        }
+    }
+    catch (error) {
+        if (axios.isAxiosError(error)) {
+            const status = error.response?.status ?? 'unknown';
+            const statusText = error.response?.statusText ?? 'Unknown';
+            const data = error.response?.data;
+            throw new Error(`HTTP ${status} ${statusText}: ${data ? JSON.stringify(data) : error.message}`);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/rest/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/rest/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAiB,MAAM,OAAO,CAAC;AACtC,OAAO,EACL,eAAe,EACf,cAAc,EACd,aAAa,EACb,WAAW,GACZ,MAAM,4BAA4B,CAAC;AAEpC,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,OAAO;SACJ,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,oDAAoD,CAAC;SACjE,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAAC;SAC9C,MAAM,CAAC,eAAe,EAAE,oCAAoC,EAAE,MAAM,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,OAI5C,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAc,EACd,IAAY,EACZ,OAIC;IAED,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnH,CAAC;IAED,kBAAkB;IAClB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAY,CAAC;IAClD,MAAM,YAAY,GAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAE5F,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,oBAAoB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,YAAY;IACZ,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QACtC,CAAC,CAAC,GAAG,cAAc,CAAC,QAAQ,GAAG,IAAI,EAAE;QACrC,CAAC,CAAC,GAAG,cAAc,CAAC,QAAQ,YAAY,IAAI,EAAE,CAAC;IAEjD,2BAA2B;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;IAElG,yBAAyB;IACzB,IAAI,IAAI,GAAY,SAAS,CAAC;IAC9B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,eAAe;IACf,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B;YACtC,QAAQ,EAAE,MAAM;YAChB,eAAe,EAAE,UAAU,MAAM,EAAE;YACnC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,aAAa,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC;YAC3B,MAAM,EAAE,UAAU;YAClB,GAAG;YACH,OAAO;YACP,IAAI;YACJ,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,sCAAsC;SACnE,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG;YACb,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC;QAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,SAAS,CAAC;YACnD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,IAAI,SAAS,CAAC;YAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;YAElC,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/commands/skill/index.d.ts

@@ -0,0 +1,11 @@
+import { Command } from 'commander';
+/**
+ * `pxbaas skill` — install/list/remove ALL bundled Agent Skills (pxbaas-cli,
+ * pxbaas-app-spec, ...) into supported Agent hosts (~/.qoder, ~/.claude,
+ * ~/.cursor, ~/.qwen, ~/.hermes). Each skill lands in `<host>/skills/<skill>/`
+ * with its own fail-closed owner marker.
+ *
+ * Offline and credential-free: never requires `pxbaas login`.
+ */
+export declare function registerSkillCommands(program: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/skill/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/skill/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuD5D"}