@polardbx/pxbaas 0.0.0-stage → 0.1.0-beta.2

package/dist/credentials/commit.js

@@ -0,0 +1,57 @@
+/**
+ * 凭据落库共享逻辑 - login（交互/stdin）与 profile import（env 文件）复用。
+ *
+ * 统一执行：JWT 解析 → 过期校验 → 租户一致性校验 → 写 profile → 切为当前 → 写凭据。
+ * 只返回指纹，绝不回传明文密钥。
+ */
+import { ProfileManager } from './profile.js';
+import { CredentialStore } from './credential-store.js';
+import { introspectJwt } from './jwt-introspect.js';
+import { validateTenantConsistency } from './tenant-guard.js';
+import { computeFingerprint } from './masker.js';
+/**
+ * 校验并持久化一份 profile + 凭据。
+ *
+ * @throws Error 密钥过期、或 profile 与 JWT 的 tenant_id 不一致时抛出。
+ */
+export async function commitProfileCredentials(input, deps = {}) {
+    const anonJwt = await introspectJwt(input.anonKey);
+    const serviceJwt = await introspectJwt(input.serviceRoleKey);
+    // 过期凭据不可用：拒绝登录而非保存坏凭据（否则后续每条命令都 401，且难排查）。
+    if (anonJwt.isExpired) {
+        throw new Error('Anon key is expired. Please provide a valid (non-expired) key.');
+    }
+    if (serviceJwt.isExpired) {
+        throw new Error('Service role key is expired. Please provide a valid (non-expired) key.');
+    }
+    const mode = input.tenantId ? 'multi-tenant' : 'single-tenant';
+    const now = new Date().toISOString();
+    const profile = {
+        name: input.profileName,
+        endpoint: input.endpoint,
+        tenantId: input.tenantId,
+        mode,
+        createdAt: now,
+        updatedAt: now,
+    };
+    // 校验 profile 与两把 key 的 tenant_id 一致
+    validateTenantConsistency(profile, anonJwt, serviceJwt);
+    const profileManager = deps.profileManager ?? new ProfileManager();
+    await profileManager.setProfile(profile);
+    await profileManager.useProfile(input.profileName);
+    const credentialStore = deps.credentialStore ?? new CredentialStore();
+    await credentialStore.setCredentials(input.profileName, {
+        anonKey: input.anonKey,
+        serviceRoleKey: input.serviceRoleKey,
+        storedAt: now,
+    });
+    return {
+        profileName: input.profileName,
+        endpoint: input.endpoint,
+        tenantId: input.tenantId,
+        mode,
+        anonKeyFingerprint: computeFingerprint(input.anonKey),
+        serviceKeyFingerprint: computeFingerprint(input.serviceRoleKey),
+    };
+}
+//# sourceMappingURL=commit.js.map

package/dist/credentials/commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit.js","sourceRoot":"","sources":["../../src/credentials/commit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAsC,MAAM,cAAc,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA4BjD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAkB,EAClB,OAAmB,EAAE;IAErB,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAE7D,2CAA2C;IAC3C,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,IAAI,GAAgB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,KAAK,CAAC,WAAW;QACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI;QACJ,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,oCAAoC;IACpC,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAExD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,cAAc,EAAE,CAAC;IACnE,MAAM,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEnD,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,eAAe,EAAE,CAAC;IACtE,MAAM,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE;QACtD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI;QACJ,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;QACrD,qBAAqB,EAAE,kBAAkB,CAAC,KAAK,CAAC,cAAc,CAAC;KAChE,CAAC;AACJ,CAAC"}

package/dist/credentials/credential-store.d.ts

@@ -0,0 +1,57 @@
+/**
+ * 凭据存储系统 - keytar (OS keychain) + 0600 文件双轨
+ */
+export interface StoredCredentials {
+    anonKey: string;
+    serviceRoleKey: string;
+    storedAt: string;
+}
+/**
+ * 凭据存储管理器
+ *
+ * 存储策略：
+ * 1. 优先使用 keytar (OS keychain: macOS Keychain, Windows Credential Manager, Linux Secret Service)
+ * 2. keytar 不可用时回退到 ~/.baas/credentials.json (权限 0600)
+ */
+export declare class CredentialStore {
+    private homeDir;
+    private keytarAvailable;
+    constructor(homeDir?: string);
+    /**
+     * 检测 keytar 是否可用
+     */
+    private checkKeytar;
+    /**
+     * 确保 ~/.baas 目录存在且权限正确
+     */
+    private ensureHomeDir;
+    /**
+     * 获取凭据文件路径
+     */
+    private getCredentialsFilePath;
+    /**
+     * 读取凭据文件
+     */
+    private readCredentialsFile;
+    /**
+     * 写入凭据文件（权限 0600）
+     */
+    private writeCredentialsFile;
+    /**
+     * 获取指定 profile 的凭据
+     */
+    getCredentials(profileName: string): Promise<StoredCredentials | null>;
+    /**
+     * 设置指定 profile 的凭据
+     */
+    setCredentials(profileName: string, credentials: StoredCredentials): Promise<void>;
+    /**
+     * 删除指定 profile 的凭据
+     */
+    deleteCredentials(profileName: string): Promise<boolean>;
+    /**
+     * 列出所有有凭据的 profile
+     */
+    listStoredProfiles(): Promise<string[]>;
+}
+//# sourceMappingURL=credential-store.d.ts.map

package/dist/credentials/credential-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.d.ts","sourceRoot":"","sources":["../../src/credentials/credential-store.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD;;;;;;GAMG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,eAAe,CAAwB;gBAEnC,OAAO,CAAC,EAAE,MAAM;IAI5B;;OAEG;YACW,WAAW;IAkBzB;;OAEG;YACW,aAAa;IAM3B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAI9B;;OAEG;YACW,mBAAmB;IAqBjC;;OAEG;YACW,oBAAoB;IAUlC;;OAEG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAsB5E;;OAEG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBxF;;OAEG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB9D;;OAEG;IACG,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CA4B9C"}

package/dist/credentials/credential-store.js

@@ -0,0 +1,180 @@
+/**
+ * 凭据存储系统 - keytar (OS keychain) + 0600 文件双轨
+ */
+import { mkdir, readFile, writeFile, chmod } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/**
+ * 凭据存储管理器
+ *
+ * 存储策略：
+ * 1. 优先使用 keytar (OS keychain: macOS Keychain, Windows Credential Manager, Linux Secret Service)
+ * 2. keytar 不可用时回退到 ~/.baas/credentials.json (权限 0600)
+ */
+export class CredentialStore {
+    homeDir;
+    keytarAvailable = null;
+    constructor(homeDir) {
+        this.homeDir = homeDir ?? join(homedir(), '.baas');
+    }
+    /**
+     * 检测 keytar 是否可用
+     */
+    async checkKeytar() {
+        if (this.keytarAvailable !== null) {
+            return this.keytarAvailable;
+        }
+        try {
+            const keytar = await import('keytar');
+            // 尝试一个简单的操作来验证 keytar 工作正常
+            await keytar.getPassword('pxbaas-cli-test', 'test');
+            this.keytarAvailable = true;
+        }
+        catch {
+            this.keytarAvailable = false;
+            console.warn('Warning: keytar unavailable, falling back to file storage (~/.baas/credentials.json)');
+        }
+        return this.keytarAvailable;
+    }
+    /**
+     * 确保 ~/.baas 目录存在且权限正确
+     */
+    async ensureHomeDir() {
+        if (!existsSync(this.homeDir)) {
+            await mkdir(this.homeDir, { mode: 0o700, recursive: true });
+        }
+    }
+    /**
+     * 获取凭据文件路径
+     */
+    getCredentialsFilePath() {
+        return join(this.homeDir, 'credentials.json');
+    }
+    /**
+     * 读取凭据文件
+     */
+    async readCredentialsFile() {
+        const filePath = this.getCredentialsFilePath();
+        if (!existsSync(filePath)) {
+            return { version: 1, credentials: {} };
+        }
+        try {
+            const content = await readFile(filePath, 'utf-8');
+            const data = JSON.parse(content);
+            if (data.version !== 1) {
+                throw new Error(`Unsupported credentials file version: ${data.version}`);
+            }
+            return data;
+        }
+        catch (err) {
+            throw new Error(`Failed to read credentials file: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    /**
+     * 写入凭据文件（权限 0600）
+     */
+    async writeCredentialsFile(data) {
+        await this.ensureHomeDir();
+        const filePath = this.getCredentialsFilePath();
+        const content = JSON.stringify(data, null, 2);
+        await writeFile(filePath, content, { mode: 0o600 });
+        await chmod(filePath, 0o600); // 确保权限正确
+    }
+    /**
+     * 获取指定 profile 的凭据
+     */
+    async getCredentials(profileName) {
+        const useKeytar = await this.checkKeytar();
+        if (useKeytar) {
+            try {
+                const keytar = await import('keytar');
+                const stored = await keytar.getPassword('pxbaas-cli', `credentials/${profileName}`);
+                if (stored) {
+                    return JSON.parse(stored);
+                }
+                // keytar 没有存储该 profile 的凭据，回退到文件存储
+            }
+            catch (err) {
+                console.warn(`Warning: keytar read failed, falling back to file: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        // 回退到文件存储
+        const data = await this.readCredentialsFile();
+        return data.credentials[profileName] ?? null;
+    }
+    /**
+     * 设置指定 profile 的凭据
+     */
+    async setCredentials(profileName, credentials) {
+        const useKeytar = await this.checkKeytar();
+        if (useKeytar) {
+            try {
+                const keytar = await import('keytar');
+                const stored = JSON.stringify(credentials);
+                await keytar.setPassword('pxbaas-cli', `credentials/${profileName}`, stored);
+                return;
+            }
+            catch (err) {
+                console.warn(`Warning: keytar write failed, falling back to file: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        // 回退到文件存储
+        const data = await this.readCredentialsFile();
+        data.credentials[profileName] = credentials;
+        await this.writeCredentialsFile(data);
+    }
+    /**
+     * 删除指定 profile 的凭据
+     */
+    async deleteCredentials(profileName) {
+        const useKeytar = await this.checkKeytar();
+        let deleted = false;
+        if (useKeytar) {
+            try {
+                const keytar = await import('keytar');
+                deleted = await keytar.deletePassword('pxbaas-cli', `credentials/${profileName}`);
+            }
+            catch (err) {
+                console.warn(`Warning: keytar delete failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        // 也从文件存储中删除
+        const data = await this.readCredentialsFile();
+        if (data.credentials[profileName]) {
+            delete data.credentials[profileName];
+            await this.writeCredentialsFile(data);
+            deleted = true;
+        }
+        return deleted;
+    }
+    /**
+     * 列出所有有凭据的 profile
+     */
+    async listStoredProfiles() {
+        const useKeytar = await this.checkKeytar();
+        const profiles = new Set();
+        if (useKeytar) {
+            try {
+                const keytar = await import('keytar');
+                const credentials = await keytar.findCredentials('pxbaas-cli');
+                for (const cred of credentials) {
+                    if (cred.account.startsWith('credentials/')) {
+                        const profileName = cred.account.slice('credentials/'.length);
+                        profiles.add(profileName);
+                    }
+                }
+            }
+            catch (err) {
+                console.warn(`Warning: keytar list failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        // 也从文件存储中读取
+        const data = await this.readCredentialsFile();
+        for (const profileName of Object.keys(data.credentials)) {
+            profiles.add(profileName);
+        }
+        return Array.from(profiles);
+    }
+}
+//# sourceMappingURL=credential-store.js.map

package/dist/credentials/credential-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.js","sourceRoot":"","sources":["../../src/credentials/credential-store.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAajC;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,CAAS;IAChB,eAAe,GAAmB,IAAI,CAAC;IAE/C,YAAY,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtC,2BAA2B;YAC3B,MAAM,MAAM,CAAC,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QACvG,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,sBAAsB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,mBAAmB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAE/C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;YAEpD,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,IAAqB;QACtD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE9C,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,eAAe,WAAW,EAAE,CAAC,CAAC;gBAEpF,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsB,CAAC;gBACjD,CAAC;gBACD,mCAAmC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzH,CAAC;QACH,CAAC;QAED,UAAU;QACV,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,WAA8B;QACtE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBAC3C,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,eAAe,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC7E,OAAO;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,uDAAuD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1H,CAAC;QACH,CAAC;QAED,UAAU;QACV,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC;QAC5C,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QACzC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,eAAe,WAAW,EAAE,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QAED,YAAY;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB;QACtB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QAEnC,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBAE/D,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;wBAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;wBAC9D,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QAED,YAAY;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/credentials/env-file.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Env-file 解析 - 从 Supabase/BaaS 惯例的 .env 文件里提取登录所需字段
+ *
+ * 仅覆盖单租户实例（MULTI_TENANT_MODE=false / 缺省）。多租户实例的 env 文件
+ * 只带 global keys，无法直接作为租户业务凭证，需走平台 API 铸造 per-tenant key，
+ * 该路径暂不支持（见 resolveLoginFromEnv 的显式报错）。
+ *
+ * 不引入 dotenv 依赖：项目内的 env 文件均为简单 KEY=VALUE 格式。
+ */
+export interface ParsedEnv {
+    [key: string]: string;
+}
+/**
+ * 解析 env 文件文本为键值对。
+ *
+ * 支持：`#` / `//` 行注释、空行、`export KEY=VALUE` 前缀、
+ * 单/双引号包裹的值（双引号内不解析转义，按字面保留）、行内 `#` 注释（仅未加引号时）。
+ */
+export declare function parseEnvText(text: string): ParsedEnv;
+export interface EnvLoginFields {
+    endpoint: string;
+    anonKey: string;
+    serviceRoleKey: string;
+    /** 单租户恒为 undefined。 */
+    tenantId?: string;
+    mode: 'single-tenant';
+    /** 命中的来源变量名，便于诊断/输出。 */
+    sources: {
+        endpoint: string;
+        anonKey: string;
+        serviceRoleKey: string;
+    };
+}
+/**
+ * 从解析后的 env 中提取单租户登录字段。
+ *
+ * @param env       parseEnvText 的结果
+ * @param options.intranet  为 true 时优先使用内网入口 SUPABASE_INTRANET_URL
+ * @throws Error    多租户实例、或缺少必需字段时抛出可直接展示的错误
+ */
+export declare function resolveLoginFromEnv(env: ParsedEnv, options?: {
+    intranet?: boolean;
+}): EnvLoginFields;
+//# sourceMappingURL=env-file.d.ts.map

package/dist/credentials/env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.d.ts","sourceRoot":"","sources":["../../src/credentials/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,SAAS;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAyCpD;AAOD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,wBAAwB;IACxB,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAwBD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,SAAS,EACd,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GACnC,cAAc,CA2ChB"}

package/dist/credentials/env-file.js

@@ -0,0 +1,118 @@
+/**
+ * Env-file 解析 - 从 Supabase/BaaS 惯例的 .env 文件里提取登录所需字段
+ *
+ * 仅覆盖单租户实例（MULTI_TENANT_MODE=false / 缺省）。多租户实例的 env 文件
+ * 只带 global keys，无法直接作为租户业务凭证，需走平台 API 铸造 per-tenant key，
+ * 该路径暂不支持（见 resolveLoginFromEnv 的显式报错）。
+ *
+ * 不引入 dotenv 依赖：项目内的 env 文件均为简单 KEY=VALUE 格式。
+ */
+/**
+ * 解析 env 文件文本为键值对。
+ *
+ * 支持：`#` / `//` 行注释、空行、`export KEY=VALUE` 前缀、
+ * 单/双引号包裹的值（双引号内不解析转义，按字面保留）、行内 `#` 注释（仅未加引号时）。
+ */
+export function parseEnvText(text) {
+    const env = {};
+    for (const rawLine of text.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith('#') || line.startsWith('//')) {
+            continue;
+        }
+        // 去掉可选的 `export ` 前缀
+        const withoutExport = line.replace(/^export\s+/, '');
+        const eq = withoutExport.indexOf('=');
+        if (eq === -1) {
+            continue; // 不是 KEY=VALUE 行，跳过
+        }
+        const key = withoutExport.slice(0, eq).trim();
+        if (!key) {
+            continue;
+        }
+        let value = withoutExport.slice(eq + 1).trim();
+        // 引号包裹：剥掉成对引号，值内内容原样保留（不处理行内注释）
+        const quoted = (value.startsWith('"') && value.endsWith('"') && value.length >= 2) ||
+            (value.startsWith("'") && value.endsWith("'") && value.length >= 2);
+        if (quoted) {
+            value = value.slice(1, -1);
+        }
+        else {
+            // 未加引号：截断行内注释（前面有空白的 # 才视为注释起点）
+            const commentIdx = value.search(/\s+#/);
+            if (commentIdx !== -1) {
+                value = value.slice(0, commentIdx).trim();
+            }
+        }
+        env[key] = value;
+    }
+    return env;
+}
+/** 去掉 URL 尾部斜杠，避免拼接出 //rest/v1 之类的路径。 */
+function stripTrailingSlash(url) {
+    return url.replace(/\/+$/, '');
+}
+const ENDPOINT_VARS = ['SUPABASE_URL', 'SUPABASE_PUBLIC_URL', 'SUPABASE_INTRANET_URL'];
+const ENDPOINT_VARS_INTRANET = ['SUPABASE_INTRANET_URL', 'SUPABASE_URL', 'SUPABASE_PUBLIC_URL'];
+const ANON_VARS = ['SUPABASE_ANON_KEY', 'ANON_KEY', 'GLOBAL_ANON_KEY'];
+const SERVICE_VARS = [
+    'SUPABASE_SERVICE_ROLE_KEY',
+    'SERVICE_ROLE_KEY',
+    'GLOBAL_SERVICE_ROLE_KEY',
+];
+function pickWithSource(env, keys) {
+    for (const k of keys) {
+        const v = env[k];
+        if (v !== undefined && v.trim() !== '') {
+            return { value: v.trim(), source: k };
+        }
+    }
+    return undefined;
+}
+/**
+ * 从解析后的 env 中提取单租户登录字段。
+ *
+ * @param env       parseEnvText 的结果
+ * @param options.intranet  为 true 时优先使用内网入口 SUPABASE_INTRANET_URL
+ * @throws Error    多租户实例、或缺少必需字段时抛出可直接展示的错误
+ */
+export function resolveLoginFromEnv(env, options = {}) {
+    // 多租户：暂不支持（global keys 不能直接访问租户资源）
+    const mtRaw = (env.MULTI_TENANT_MODE ?? '').trim().toLowerCase();
+    if (mtRaw === 'true' || mtRaw === '1' || mtRaw === 'yes') {
+        throw new Error('Multi-tenant instances are not supported by `profile import` yet ' +
+            '(MULTI_TENANT_MODE=true). The env file only carries global keys, which cannot ' +
+            'access tenant resources. Use `pxbaas login` with per-tenant anon/service keys instead.');
+    }
+    const endpointVars = options.intranet ? ENDPOINT_VARS_INTRANET : ENDPOINT_VARS;
+    const endpointHit = pickWithSource(env, endpointVars);
+    const anonHit = pickWithSource(env, ANON_VARS);
+    const serviceHit = pickWithSource(env, SERVICE_VARS);
+    const missing = [];
+    if (!endpointHit)
+        missing.push(`endpoint (${endpointVars.join(' | ')})`);
+    if (!anonHit)
+        missing.push(`anon key (${ANON_VARS.join(' | ')})`);
+    if (!serviceHit)
+        missing.push(`service role key (${SERVICE_VARS.join(' | ')})`);
+    if (missing.length > 0) {
+        throw new Error(`Env file is missing required variable(s): ${missing.join('; ')}`);
+    }
+    const endpoint = stripTrailingSlash(endpointHit.value);
+    if (!/^https?:\/\//.test(endpoint)) {
+        throw new Error(`Endpoint from ${endpointHit.source} must start with http:// or https:// (got: ${endpoint})`);
+    }
+    return {
+        endpoint,
+        anonKey: anonHit.value,
+        serviceRoleKey: serviceHit.value,
+        tenantId: undefined,
+        mode: 'single-tenant',
+        sources: {
+            endpoint: endpointHit.source,
+            anonKey: anonHit.source,
+            serviceRoleKey: serviceHit.source,
+        },
+    };
+}
+//# sourceMappingURL=env-file.js.map

package/dist/credentials/env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../../src/credentials/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAc,EAAE,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QAED,qBAAqB;QACrB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACd,SAAS,CAAC,oBAAoB;QAChC,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,SAAS;QACX,CAAC;QAED,IAAI,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE/C,gCAAgC;QAChC,MAAM,MAAM,GACV,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YACnE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yCAAyC;AACzC,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAiBD,MAAM,aAAa,GAAG,CAAC,cAAc,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;AACvF,MAAM,sBAAsB,GAAG,CAAC,uBAAuB,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;AAChG,MAAM,SAAS,GAAG,CAAC,mBAAmB,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;AACvE,MAAM,YAAY,GAAG;IACnB,2BAA2B;IAC3B,kBAAkB;IAClB,yBAAyB;CAC1B,CAAC;AAEF,SAAS,cAAc,CACrB,GAAc,EACd,IAAc;IAEd,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAc,EACd,UAAkC,EAAE;IAEpC,mCAAmC;IACnC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,mEAAmE;YACjE,gFAAgF;YAChF,wFAAwF,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC;IAC/E,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAErD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAY,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,iBAAiB,WAAY,CAAC,MAAM,8CAA8C,QAAQ,GAAG,CAC9F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,OAAQ,CAAC,KAAK;QACvB,cAAc,EAAE,UAAW,CAAC,KAAK;QACjC,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE;YACP,QAAQ,EAAE,WAAY,CAAC,MAAM;YAC7B,OAAO,EAAE,OAAQ,CAAC,MAAM;YACxB,cAAc,EAAE,UAAW,CAAC,MAAM;SACnC;KACF,CAAC;AACJ,CAAC"}

package/dist/credentials/formatter.d.ts

@@ -0,0 +1,39 @@
+/**
+ * 输出格式化器 - text/json 双模式
+ */
+export interface FormatOptions {
+    json: boolean;
+}
+/**
+ * 格式化输出
+ * - JSON 模式：直接 stringify
+ * - Text 模式：使用 chalk + cli-table3 渲染
+ */
+export declare function formatOutput(data: Record<string, unknown>, options: FormatOptions): string;
+/**
+ * 格式化键值对（text 模式）
+ */
+export declare function formatKeyValue(pairs: Record<string, string>): string;
+/**
+ * 格式化表格
+ */
+export declare function formatTable(headers: string[], rows: string[][], options?: {
+    head?: string[];
+}): string;
+/**
+ * 格式化状态标记
+ */
+export declare function formatStatus(status: 'pass' | 'warn' | 'fail' | 'skip'): string;
+/**
+ * 格式化成功消息
+ */
+export declare function formatSuccess(message: string): string;
+/**
+ * 格式化错误消息
+ */
+export declare function formatError(message: string): string;
+/**
+ * 格式化警告消息
+ */
+export declare function formatWarning(message: string): string;
+//# sourceMappingURL=formatter.d.ts.map

package/dist/credentials/formatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatter.d.ts","sourceRoot":"","sources":["../../src/credentials/formatter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,aAAa,GACrB,MAAM,CAOR;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAUpE;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,MAAM,EAAE,EAAE,EAChB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC5B,MAAM,CAcR;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAW9E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/dist/credentials/formatter.js

@@ -0,0 +1,79 @@
+/**
+ * 输出格式化器 - text/json 双模式
+ */
+import chalk from 'chalk';
+import Table from 'cli-table3';
+/**
+ * 格式化输出
+ * - JSON 模式：直接 stringify
+ * - Text 模式：使用 chalk + cli-table3 渲染
+ */
+export function formatOutput(data, options) {
+    if (options.json) {
+        return JSON.stringify(data, null, 2);
+    }
+    // Text 模式：键值对展示
+    return formatKeyValue(data);
+}
+/**
+ * 格式化键值对（text 模式）
+ */
+export function formatKeyValue(pairs) {
+    const lines = [];
+    const maxKeyLength = Math.max(...Object.keys(pairs).map(k => k.length));
+    for (const [key, value] of Object.entries(pairs)) {
+        const paddedKey = key.padEnd(maxKeyLength, ' ');
+        lines.push(`${chalk.gray(paddedKey)}  ${value}`);
+    }
+    return lines.join('\n');
+}
+/**
+ * 格式化表格
+ */
+export function formatTable(headers, rows, options) {
+    const table = new Table({
+        head: options?.head ?? headers.map(h => chalk.cyan(h)),
+        style: {
+            head: [],
+            border: [],
+        },
+    });
+    for (const row of rows) {
+        table.push(row);
+    }
+    return table.toString();
+}
+/**
+ * 格式化状态标记
+ */
+export function formatStatus(status) {
+    switch (status) {
+        case 'pass':
+            return chalk.green('✓ PASS');
+        case 'warn':
+            return chalk.yellow('⚠ WARN');
+        case 'fail':
+            return chalk.red('✗ FAIL');
+        case 'skip':
+            return chalk.gray('- SKIP');
+    }
+}
+/**
+ * 格式化成功消息
+ */
+export function formatSuccess(message) {
+    return chalk.green('✓') + ' ' + message;
+}
+/**
+ * 格式化错误消息
+ */
+export function formatError(message) {
+    return chalk.red('✗') + ' ' + message;
+}
+/**
+ * 格式化警告消息
+ */
+export function formatWarning(message) {
+    return chalk.yellow('⚠') + ' ' + message;
+}
+//# sourceMappingURL=formatter.js.map

package/dist/credentials/formatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatter.js","sourceRoot":"","sources":["../../src/credentials/formatter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,YAAY,CAAC;AAM/B;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,IAA6B,EAC7B,OAAsB;IAEtB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,gBAAgB;IAChB,OAAO,cAAc,CAAC,IAA8B,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAA6B;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAExE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,OAAiB,EACjB,IAAgB,EAChB,OAA6B;IAE7B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtD,KAAK,EAAE;YACL,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,EAAE;SACX;KACF,CAAC,CAAC;IAEH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAyC;IACpE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC;AAC3C,CAAC"}

package/dist/credentials/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Credentials 模块 - 凭据管理、JWT 解析、守卫工具
+ */
+export * from './credential-store.js';
+export * from './profile.js';
+export * from './jwt-introspect.js';
+export * from './masker.js';
+export * from './tty-guard.js';
+export * from './tenant-guard.js';
+export * from './env-file.js';
+export * from './commit.js';
+export * from './formatter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/credentials/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/credentials/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/credentials/index.js

@@ -0,0 +1,13 @@
+/**
+ * Credentials 模块 - 凭据管理、JWT 解析、守卫工具
+ */
+export * from './credential-store.js';
+export * from './profile.js';
+export * from './jwt-introspect.js';
+export * from './masker.js';
+export * from './tty-guard.js';
+export * from './tenant-guard.js';
+export * from './env-file.js';
+export * from './commit.js';
+export * from './formatter.js';
+//# sourceMappingURL=index.js.map

package/dist/credentials/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/credentials/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}