@polardbx/pxbaas 0.1.0-beta.3 → 0.1.0-beta.5

package/dist/commands/data/index.js

@@ -1,5 +1,24 @@
 import axios from 'axios';
-import { CredentialStore, ProfileManager, formatSuccess, formatError, } from '../../credentials/index.js';
+import inquirer from 'inquirer';
+import { CredentialStore, ProfileManager, formatSuccess, formatError, formatWarning, } from '../../credentials/index.js';
+/** Rows fetched by the read-only preview; the count itself comes from Content-Range. */
+const DELETE_PREVIEW_LIMIT = 1000;
+/**
+ * Failure of the delete gate (missing filter, or execution not authorized).
+ *
+ * Carries the preview so `--json` callers still get the audit trail of what was
+ * NOT deleted — the whole point of the two-phase flow.
+ */
+export class DataDeleteError extends Error {
+    code;
+    preview;
+    constructor(code, message, preview) {
+        super(message);
+        this.code = code;
+        this.preview = preview;
+        this.name = 'DataDeleteError';
+    }
+}
 export function registerDataCommands(program) {
     const dataCmd = program
         .command('data')
@@ -60,20 +79,196 @@ export function registerDataCommands(program) {
     // data delete
     dataCmd
         .command('delete <table>')
-        .description('Delete rows from table (two-phase confirmation)')
-        .requiredOption('--filter <filter>', 'PostgREST filter (e.g., "id=eq.1")')
+        .description('Delete rows from table. Previews the affected row count and the exact request URL, then requires confirmation (--yes to authorize non-interactively)')
+        .requiredOption('--filter <filter>', 'PostgREST condition passed through verbatim; repeat to combine (e.g. --filter "id=eq.1" --filter "or=(a.eq.1,b.eq.2)"). Required: without it every row would be deleted', collectFilter)
+        .option('--yes', 'Authorize non-interactively (skip the confirm prompt)')
         .option('--json', 'Output in JSON format')
         .action(async (table, options) => {
+        const json = Boolean(options.json || program.opts().json);
         try {
-            await handleDataDelete(table, { ...options, json: options.json || program.opts().json });
+            await handleDataDelete(table, { ...options, json });
         }
         catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            console.error(formatError(message));
+            // Keep the preview in the machine-readable payload: an audit consumer must
+            // be able to tell what was refused, not just that something was.
+            if (json && error instanceof DataDeleteError) {
+                console.log(JSON.stringify({
+                    code: error.code,
+                    message: error.message,
+                    ...(error.preview ? { preview: error.preview } : {}),
+                }, null, 2));
+            }
+            else {
+                const message = error instanceof Error ? error.message : String(error);
+                console.error(formatError(message));
+            }
             process.exit(1);
         }
     });
 }
+/** Accumulate repeated `--filter` flags instead of letting the last one win. */
+function collectFilter(value, previous) {
+    return [...(previous ?? []), value];
+}
+/**
+ * Normalize the `--filter` flags into the PostgREST query string, verbatim.
+ *
+ * The previous implementation did `filter.split('=')` and rebuilt ONE key/value
+ * pair, so a condition containing `&` (e.g. `id=eq.1&name=like.a%`) had
+ * everything after the first `&` percent-encoded INTO the value: the extra
+ * condition silently disappeared and the DELETE matched strictly more rows than
+ * the operator asked for. Filters are therefore split on `&` only, each fragment
+ * is validated to be a `column=operator.value` pair, and nothing is re-encoded.
+ *
+ * An empty/absent filter is a hard error — it would delete the whole table. A
+ * blank fragment is an error too rather than something to skip: `--filter "$VAR"`
+ * with an unset VAR must fail loudly, not silently narrow to the other flags.
+ */
+export function normalizeDeleteFilters(raw) {
+    const given = typeof raw === 'string' ? [raw] : raw ?? [];
+    const parts = [];
+    for (const item of given) {
+        const value = String(item ?? '');
+        if (!value.trim()) {
+            throw new DataDeleteError('DATA_DELETE_FILTER_INVALID', 'Empty --filter value. Expected a PostgREST condition such as "id=eq.1"; ' +
+                'an empty filter would delete the whole table.');
+        }
+        for (const condition of value.split('&')) {
+            const trimmed = condition.trim();
+            if (!trimmed || trimmed.indexOf('=') <= 0) {
+                throw new DataDeleteError('DATA_DELETE_FILTER_INVALID', `Invalid --filter '${trimmed || value}'. Expected a PostgREST condition such as ` +
+                    '"id=eq.1", "created_at=lt.2026-01-01" or "or=(a.eq.1,b.eq.2)".');
+            }
+            parts.push(trimmed);
+        }
+    }
+    if (parts.length === 0) {
+        throw new DataDeleteError('DATA_DELETE_FILTER_REQUIRED', 'Refusing to delete without a filter: that would delete EVERY row of the table. ' +
+            'Pass at least one --filter "column=operator.value" (repeatable), e.g. --filter "id=eq.1".');
+    }
+    return parts;
+}
+/** Total row count from a PostgREST `Content-Range: 0-9/42` header; null when unknown. */
+function parseContentRangeTotal(header) {
+    if (typeof header !== 'string' || header === '')
+        return null;
+    const total = header.split('/')[1]?.trim();
+    if (!total || total === '*')
+        return null;
+    const parsed = Number(total);
+    return Number.isFinite(parsed) ? parsed : null;
+}
+/**
+ * Decide whether the DELETE is authorized. Same contract as `db push --yes`
+ * (src/db/apply-schema.ts authorize): `--yes` authorizes outright; `--json` and
+ * non-TTY sessions cannot prompt, so they require `--yes` explicitly.
+ */
+async function authorizeDelete(preview, options) {
+    if (options.yes)
+        return;
+    if (options.json) {
+        throw new DataDeleteError('DATA_DELETE_NOT_AUTHORIZED', 'Refusing to delete rows in --json mode without explicit authorization. ' +
+            'Re-run with --yes to apply. Nothing was deleted.', preview);
+    }
+    if (!process.stdin.isTTY) {
+        throw new DataDeleteError('DATA_DELETE_NOT_AUTHORIZED', 'Refusing to delete rows without explicit authorization: pass --yes for ' +
+            'non-interactive use, or run in a TTY to confirm. Nothing was deleted.', preview);
+    }
+    const described = preview.rowCount === null
+        ? 'an unknown number of row(s)'
+        : preview.countExact
+            ? `${preview.rowCount} row(s)`
+            : `at least ${preview.rowCount} row(s)`;
+    const { ok } = await inquirer.prompt([
+        {
+            type: 'confirm',
+            name: 'ok',
+            message: `Delete ${described} from '${preview.table}' (filter: ${preview.filters.join(' & ')})? This cannot be undone`,
+            default: false,
+        },
+    ]);
+    if (!ok) {
+        throw new DataDeleteError('DATA_DELETE_CANCELLED', `Cancelled by operator; nothing was deleted from '${preview.table}'.`, preview);
+    }
+}
+function printPreview(preview) {
+    const described = preview.rowCount === null
+        ? 'an unknown number of row(s)'
+        : preview.countExact
+            ? `${preview.rowCount} row(s)`
+            : `at least ${preview.rowCount} row(s)`;
+    console.log(formatWarning(`Preview: will delete ${described} from '${preview.table}'`));
+    console.log(`  Filter:  ${preview.filters.join(' & ')}`);
+    console.log(`  Request: DELETE ${preview.url}`);
+    if (preview.previewError) {
+        console.log(`  Note:    the read-only count failed (${preview.previewError}); the delete is still gated.`);
+    }
+}
+export async function handleDataDelete(table, options) {
+    // Get current profile
+    const profileManager = new ProfileManager();
+    const currentProfile = await profileManager.getCurrentProfile();
+    if (!currentProfile) {
+        throw new Error('No active profile. Use "pxbaas login" to authenticate first.');
+    }
+    // Get credentials
+    const credentialStore = new CredentialStore();
+    const credentials = await credentialStore.getCredentials(currentProfile.name);
+    if (!credentials) {
+        throw new Error(`No credentials found for profile: ${currentProfile.name}. Use "pxbaas login" to authenticate.`);
+    }
+    const filters = normalizeDeleteFilters(options.filter);
+    const query = filters.join('&');
+    const url = `${currentProfile.endpoint}/rest/v1/${table}?${query}`;
+    const headers = {
+        'apikey': credentials.anonKey,
+        'Authorization': `Bearer ${credentials.anonKey}`,
+    };
+    // Phase 1: read-only preview against the SAME filter, so the operator sees the
+    // blast radius before anything is destroyed. A failing count (e.g. RLS allows
+    // DELETE but not SELECT) degrades to "unknown" instead of skipping the gate.
+    const preview = {
+        table,
+        filters,
+        rowCount: null,
+        countExact: false,
+        url,
+    };
+    try {
+        const probe = await axios.get(`${currentProfile.endpoint}/rest/v1/${table}?select=*&limit=${DELETE_PREVIEW_LIMIT}&${query}`, { headers: { ...headers, 'Prefer': 'count=exact' } });
+        const fromRange = parseContentRangeTotal(probe.headers?.['content-range']);
+        if (fromRange !== null) {
+            preview.rowCount = fromRange;
+            preview.countExact = true;
+        }
+        else if (Array.isArray(probe.data)) {
+            preview.rowCount = probe.data.length;
+            preview.countExact = probe.data.length < DELETE_PREVIEW_LIMIT;
+        }
+    }
+    catch (error) {
+        preview.previewError = error instanceof Error ? error.message : String(error);
+    }
+    if (!options.json)
+        printPreview(preview);
+    // Phase 2: explicit authorization (--yes, or an interactive confirm).
+    await authorizeDelete(preview, options);
+    const response = await axios.delete(url, {
+        headers: { ...headers, 'Prefer': 'return=representation' },
+    });
+    const rows = Array.isArray(response.data) ? response.data : [];
+    const result = {
+        preview,
+        deleted: { table, count: rows.length, url },
+    };
+    if (options.json) {
+        console.log(JSON.stringify(result, null, 2));
+    }
+    else {
+        console.log(formatSuccess(`Deleted ${rows.length} row(s) from '${table}'`));
+    }
+    return result;
+}
 async function handleDataSelect(table, options) {
     // Get current profile
     const profileManager = new ProfileManager();
@@ -209,37 +404,4 @@ async function handleDataUpdate(table, options) {
         console.log(formatSuccess(`Updated ${rows.length} row(s) in ${table}`));
     }
 }
-async function handleDataDelete(table, options) {
-    // Get current profile
-    const profileManager = new ProfileManager();
-    const currentProfile = await profileManager.getCurrentProfile();
-    if (!currentProfile) {
-        throw new Error('No active profile. Use "pxbaas login" to authenticate first.');
-    }
-    // Get credentials
-    const credentialStore = new CredentialStore();
-    const credentials = await credentialStore.getCredentials(currentProfile.name);
-    if (!credentials) {
-        throw new Error(`No credentials found for profile: ${currentProfile.name}. Use "pxbaas login" to authenticate.`);
-    }
-    // Build query URL with filter
-    const params = new URLSearchParams();
-    params.append(options.filter.split('=')[0], options.filter.split('=').slice(1).join('='));
-    const url = `${currentProfile.endpoint}/rest/v1/${table}?${params.toString()}`;
-    // Make request
-    const response = await axios.delete(url, {
-        headers: {
-            'apikey': credentials.anonKey,
-            'Authorization': `Bearer ${credentials.anonKey}`,
-            'Prefer': 'return=representation',
-        },
-    });
-    if (options.json) {
-        console.log(JSON.stringify(response.data, null, 2));
-    }
-    else {
-        const rows = response.data;
-        console.log(formatSuccess(`Deleted ${rows.length} row(s) from ${table}`));
-    }
-}
 //# sourceMappingURL=index.js.map

package/dist/commands/data/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/data/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,eAAe,EACf,cAAc,EACd,aAAa,EACb,WAAW,GACZ,MAAM,4BAA4B,CAAC;AAEpC,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0CAA0C,CAAC,CAAC;IAE3D,cAAc;IACd,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;SACjE,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,EAAE,GAAG,CAAC;SACzE,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,KAAK,CAAC;SACvD,MAAM,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;SAC7C,MAAM,CAAC,aAAa,EAAE,sCAAsC,CAAC;SAC7D,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAO7B,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,cAAc;IACd,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,wBAAwB,CAAC;SACrC,cAAc,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;SAC5D,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAA2C,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,cAAc;IACd,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,sBAAsB,CAAC;SACnC,cAAc,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;SAC5D,cAAc,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;SACzE,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAA2D,EAAE,EAAE;QAC3F,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,cAAc;IACd,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,iDAAiD,CAAC;SAC9D,cAAc,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;SACzE,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAA2C,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,OAO9C;IACC,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnH,CAAC;IAED,kBAAkB;IAClB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,uDAAuD;QACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,cAAc,CAAC,QAAQ,YAAY,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAE/E,eAAe;IACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;QACpC,OAAO,EAAE;YACP,QAAQ,EAAE,WAAW,CAAC,OAAO;YAC7B,eAAe,EAAE,UAAU,WAAW,CAAC,OAAO,EAAE;SACjD;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAiC,CAAC;QAExD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,CAAC,MAAM,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,mBAAmB;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEjD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,OAA2C;IACxF,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnH,CAAC;IAED,eAAe;IACf,IAAI,MAA2D,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,cAAc,CAAC,QAAQ,YAAY,KAAK,EAAE,CAAC;IAE1D,eAAe;IACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE;QAC7C,OAAO,EAAE;YACP,QAAQ,EAAE,WAAW,CAAC,OAAO;YAC7B,eAAe,EAAE,UAAU,WAAW,CAAC,OAAO,EAAE;YAChD,cAAc,EAAE,kBAAkB;YAClC,QAAQ,EAAE,uBAAuB;SAClC;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAiC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,IAAI,CAAC,MAAM,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,OAA2D;IACxG,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnH,CAAC;IAED,eAAe;IACf,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1F,MAAM,GAAG,GAAG,GAAG,cAAc,CAAC,QAAQ,YAAY,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAE/E,eAAe;IACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE;QAC9C,OAAO,EAAE;YACP,QAAQ,EAAE,WAAW,CAAC,OAAO;YAC7B,eAAe,EAAE,UAAU,WAAW,CAAC,OAAO,EAAE;YAChD,cAAc,EAAE,kBAAkB;YAClC,QAAQ,EAAE,uBAAuB;SAClC;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAiC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,WAAW,IAAI,CAAC,MAAM,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,OAA2C;IACxF,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnH,CAAC;IAED,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1F,MAAM,GAAG,GAAG,GAAG,cAAc,CAAC,QAAQ,YAAY,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAE/E,eAAe;IACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;QACvC,OAAO,EAAE;YACP,QAAQ,EAAE,WAAW,CAAC,OAAO;YAC7B,eAAe,EAAE,UAAU,WAAW,CAAC,OAAO,EAAE;YAChD,QAAQ,EAAE,uBAAuB;SAClC;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAiC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,WAAW,IAAI,CAAC,MAAM,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/data/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EACL,eAAe,EACf,cAAc,EACd,aAAa,EACb,WAAW,EACX,aAAa,GACd,MAAM,4BAA4B,CAAC;AAEpC,wFAAwF;AACxF,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC;;;;;GAKG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAE7B;IAEA;IAHX,YACW,IAAY,EACrB,OAAe,EACN,OAA2B;QAEpC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,SAAI,GAAJ,IAAI,CAAQ;QAEZ,YAAO,GAAP,OAAO,CAAoB;QAGpC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAqBD,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0CAA0C,CAAC,CAAC;IAE3D,cAAc;IACd,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;SACjE,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,EAAE,GAAG,CAAC;SACzE,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,KAAK,CAAC;SACvD,MAAM,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;SAC7C,MAAM,CAAC,aAAa,EAAE,sCAAsC,CAAC;SAC7D,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAO7B,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,cAAc;IACd,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,wBAAwB,CAAC;SACrC,cAAc,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;SAC5D,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAA2C,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,cAAc;IACd,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,sBAAsB,CAAC;SACnC,cAAc,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;SAC5D,cAAc,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;SACzE,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAA2D,EAAE,EAAE;QAC3F,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,cAAc;IACd,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CACV,sJAAsJ,CACvJ;SACA,cAAc,CACb,mBAAmB,EACnB,yKAAyK,EACzK,aAAa,CACd;SACA,MAAM,CAAC,OAAO,EAAE,uDAAuD,CAAC;SACxE,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAA6D,EAAE,EAAE;QAC7F,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,2EAA2E;YAC3E,iEAAiE;YACjE,IAAI,IAAI,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBACzB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrD,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,gFAAgF;AAChF,SAAS,aAAa,CAAC,KAAa,EAAE,QAA8B;IAClE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAkC;IACvE,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,4BAA4B,EAC5B,0EAA0E;gBACxE,+CAA+C,CAClD,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,eAAe,CACvB,4BAA4B,EAC5B,qBAAqB,OAAO,IAAI,KAAK,4CAA4C;oBAC/E,gEAAgE,CACnE,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CACvB,6BAA6B,EAC7B,iFAAiF;YAC/E,2FAA2F,CAC9F,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0FAA0F;AAC1F,SAAS,sBAAsB,CAAC,MAAe;IAC7C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAAC,OAA0B,EAAE,OAG1D;IACC,IAAI,OAAO,CAAC,GAAG;QAAE,OAAO;IAExB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,eAAe,CACvB,4BAA4B,EAC5B,yEAAyE;YACvE,kDAAkD,EACpD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CACvB,4BAA4B,EAC5B,yEAAyE;YACvE,uEAAuE,EACzE,OAAO,CACR,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI;QACzC,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,OAAO,CAAC,UAAU;YAClB,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,SAAS;YAC9B,CAAC,CAAC,YAAY,OAAO,CAAC,QAAQ,SAAS,CAAC;IAC5C,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAkB;QACpD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,UAAU,SAAS,UAAU,OAAO,CAAC,KAAK,cAAc,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B;YACtH,OAAO,EAAE,KAAK;SACf;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,eAAe,CACvB,uBAAuB,EACvB,oDAAoD,OAAO,CAAC,KAAK,IAAI,EACrE,OAAO,CACR,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAA0B;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI;QACzC,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,OAAO,CAAC,UAAU;YAClB,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,SAAS;YAC9B,CAAC,CAAC,YAAY,OAAO,CAAC,QAAQ,SAAS,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,wBAAwB,SAAS,UAAU,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,0CAA0C,OAAO,CAAC,YAAY,+BAA+B,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,OAIrD;IACC,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,GAAG,cAAc,CAAC,QAAQ,YAAY,KAAK,IAAI,KAAK,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,WAAW,CAAC,OAAO;QAC7B,eAAe,EAAE,UAAU,WAAW,CAAC,OAAO,EAAE;KACjD,CAAC;IAEF,+EAA+E;IAC/E,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,OAAO,GAAsB;QACjC,KAAK;QACL,OAAO;QACP,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,KAAK;QACjB,GAAG;KACJ,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAC3B,GAAG,cAAc,CAAC,QAAQ,YAAY,KAAK,mBAAmB,oBAAoB,IAAI,KAAK,EAAE,EAC7F,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CACrD,CAAC;QACF,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAC3E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC7B,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;QAC5B,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YACrC,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,oBAAoB,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,YAAY,CAAC,OAAO,CAAC,CAAC;IAEzC,sEAAsE;IACtE,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;QACvC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE;KAC3D,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAqB;QAC/B,OAAO;QACP,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;KAC5C,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,WAAW,IAAI,CAAC,MAAM,iBAAiB,KAAK,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,OAO9C;IACC,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnH,CAAC;IAED,kBAAkB;IAClB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,uDAAuD;QACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,cAAc,CAAC,QAAQ,YAAY,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAE/E,eAAe;IACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;QACpC,OAAO,EAAE;YACP,QAAQ,EAAE,WAAW,CAAC,OAAO;YAC7B,eAAe,EAAE,UAAU,WAAW,CAAC,OAAO,EAAE;SACjD;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAiC,CAAC;QAExD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,IAAI,CAAC,MAAM,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,mBAAmB;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEjD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,OAA2C;IACxF,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnH,CAAC;IAED,eAAe;IACf,IAAI,MAA2D,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,cAAc,CAAC,QAAQ,YAAY,KAAK,EAAE,CAAC;IAE1D,eAAe;IACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE;QAC7C,OAAO,EAAE;YACP,QAAQ,EAAE,WAAW,CAAC,OAAO;YAC7B,eAAe,EAAE,UAAU,WAAW,CAAC,OAAO,EAAE;YAChD,cAAc,EAAE,kBAAkB;YAClC,QAAQ,EAAE,uBAAuB;SAClC;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAiC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,IAAI,CAAC,MAAM,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,OAA2D;IACxG,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;IAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,kBAAkB;IAClB,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACnH,CAAC;IAED,eAAe;IACf,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1F,MAAM,GAAG,GAAG,GAAG,cAAc,CAAC,QAAQ,YAAY,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAE/E,eAAe;IACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE;QAC9C,OAAO,EAAE;YACP,QAAQ,EAAE,WAAW,CAAC,OAAO;YAC7B,eAAe,EAAE,UAAU,WAAW,CAAC,OAAO,EAAE;YAChD,cAAc,EAAE,kBAAkB;YAClC,QAAQ,EAAE,uBAAuB;SAClC;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAiC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,WAAW,IAAI,CAAC,MAAM,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC"}

package/dist/commands/db/index.d.ts

@@ -4,6 +4,20 @@ export declare function handleDbQuery(sql: string, options: {
     role: string;
     json?: boolean;
 }, program: Command): Promise<void>;
+export declare function handleDbCreateTable(name: string, options: {
+    columns?: string;
+    schema?: string;
+    role: string;
+    json?: boolean;
+}, program: Command): Promise<void>;
+export declare function handleDbAddColumn(table: string, column: string, options: {
+    type: string;
+    nullable: boolean;
+    default?: string;
+    schema?: string;
+    role: string;
+    json?: boolean;
+}, program: Command): Promise<void>;
 export declare function handleDbPush(file: string, options: {
     schema: string;
     rls?: string;

package/dist/commands/db/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/db/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmBpC,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA8HzD;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EACzC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CAoEf;AA4PD,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACP,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,EACD,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CAuCf"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/db/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBpC,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA8HzD;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EACzC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CAoEf;AAiOD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EAC5E,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CAmEf;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,EACD,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CAgDf;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACP,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,EACD,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC,CAsDf"}

package/dist/commands/db/index.js

@@ -58,9 +58,9 @@ export function registerDbCommands(program) {
     });
     db
         .command('create-table <name>')
-        .description('Create a new table (requires service_role, two-phase confirmation)')
+        .description('Create a new table (requires service_role; executes immediately, no confirmation prompt)')
         .option('--columns <json>', 'Column definitions (JSON array)')
-        .option('--schema <schema>', 'Schema name', 'public')
+        .option('--schema <schema>', 'Schema name (single-tenant only; multi-tenant always targets the tenant database)')
         .option('--role <role>', 'Role to use (anon or service_role)', 'service_role')
         .option('--json', 'Output in JSON format')
         .action(async (name, options) => {
@@ -75,11 +75,11 @@ export function registerDbCommands(program) {
     });
     db
         .command('add-column <table> <column>')
-        .description('Add a column to a table (requires service_role, two-phase confirmation)')
+        .description('Add a column to a table (requires service_role; executes immediately, no confirmation prompt)')
         .option('--type <type>', 'Column data type', 'text')
         .option('--nullable', 'Allow NULL values', true)
         .option('--default <value>', 'Default value')
-        .option('--schema <schema>', 'Schema name', 'public')
+        .option('--schema <schema>', 'Schema name (single-tenant only; multi-tenant always targets the tenant database)')
         .option('--role <role>', 'Role to use (anon or service_role)', 'service_role')
         .option('--json', 'Output in JSON format')
         .action(async (table, column, options) => {
@@ -274,7 +274,86 @@ async function handleDbSchema(table, options, program) {
         }
     }
 }
-async function handleDbCreateTable(name, options, program) {
+/** Same actionable error as `handleDbQuery` for a malformed multi-tenant profile. */
+function assertTenantId(profile) {
+    if (!profile.tenantId) {
+        throw new Error('Multi-tenant profile is missing tenantId; re-run "pxbaas login --tenant-id <id>" with per-tenant keys.');
+    }
+}
+/**
+ * D1 fix: run one DDL statement through the channel the profile can actually
+ * authenticate on. Mirrors the mode dispatch of `handleDbQuery`: in
+ * multi-tenant the Meta API (/pg/*) only accepts the platform global
+ * service_role key (per-tenant keys get 401), so tenant DDL must go through
+ * /api/tenant-ddl with the per-tenant service_role key.
+ */
+async function runDdl(profile, credentials, sql, options) {
+    const useServiceRole = options.role === 'service_role';
+    if (profile.mode === 'multi-tenant') {
+        assertTenantId(profile);
+        // tenant-ddl role-gates on service_role, so --role anon is not applicable
+        // and the statement always runs as the tenant's service_role.
+        if (!useServiceRole) {
+            console.error(formatWarning(`${options.command} in multi-tenant mode always runs as the tenant service_role (tenant-ddl ignores --role anon).`));
+        }
+        const tenantDriver = new TenantDdlDriver({
+            endpoint: profile.endpoint,
+            serviceRoleKey: credentials.serviceRoleKey,
+        });
+        const rows = (await tenantDriver.query(sql));
+        return { rows, rowCount: rows.length };
+    }
+    const metaDriver = new MetaDriver({
+        endpoint: profile.endpoint,
+        anonKey: credentials.anonKey,
+        serviceRoleKey: credentials.serviceRoleKey,
+        tenantId: profile.tenantId,
+    });
+    return metaDriver.query(sql, useServiceRole);
+}
+/**
+ * D3 / 06-§3 fix: the REAL target database name in multi-tenant mode, via the
+ * same route `db tables` uses (tenant-ddl `SELECT DATABASE()`). Falls back to
+ * the platform's `tenant_<id>` naming convention so a failed read-only probe
+ * never hard-fails an otherwise successful DDL.
+ */
+async function resolveTenantSchemaLabel(profile, credentials) {
+    assertTenantId(profile);
+    try {
+        const introspector = makeIntrospector({
+            mode: profile.mode,
+            endpoint: profile.endpoint,
+            anonKey: credentials.anonKey,
+            serviceRoleKey: credentials.serviceRoleKey,
+            tenantId: profile.tenantId,
+        });
+        const label = await introspector.currentSchema();
+        if (label)
+            return label;
+    }
+    catch {
+        // fall through to the convention-based label
+    }
+    return `tenant_${profile.tenantId}`;
+}
+/**
+ * D2/D3 fix: resolve the schema a DDL command actually targets. Multi-tenant
+ * DDL always lands in the tenant's own database, so report that real name and
+ * warn when the user explicitly asked for a different --schema (instead of
+ * silently dropping the input). Single-tenant keeps the requested value with
+ * the historical `public` default.
+ */
+async function resolveDdlSchema(profile, credentials, requestedSchema) {
+    if (profile.mode !== 'multi-tenant') {
+        return requestedSchema ?? 'public';
+    }
+    const effective = await resolveTenantSchemaLabel(profile, credentials);
+    if (requestedSchema && requestedSchema !== effective) {
+        console.error(formatWarning(`--schema is ignored in multi-tenant mode: DDL always targets the tenant database "${effective}" (requested "${requestedSchema}").`));
+    }
+    return effective;
+}
+export async function handleDbCreateTable(name, options, program) {
     const profileManager = new ProfileManager();
     const currentProfile = await profileManager.getCurrentProfile();
     if (!currentProfile) {
@@ -302,6 +381,9 @@ async function handleDbCreateTable(name, options, program) {
             { name: 'created_at', type: 'timestamp', nullable: false },
         ];
     }
+    // D2/D3 fix: the effective target schema (tenant db in multi-tenant).
+    const effectiveSchema = await resolveDdlSchema(currentProfile, credentials, options.schema);
+    const isMultiTenant = currentProfile.mode === 'multi-tenant';
     // Build SQL
     const columnSql = columnDefs.map(col => {
         let sql = `${col.name} ${col.type}`;
@@ -311,25 +393,26 @@ async function handleDbCreateTable(name, options, program) {
             sql += ' NOT NULL';
         return sql;
     }).join(', ');
-    const sql = `CREATE TABLE ${options.schema}.${name} (${columnSql})`;
-    const useServiceRole = options.role === 'service_role';
-    const metaDriver = new MetaDriver({
-        endpoint: currentProfile.endpoint,
-        anonKey: credentials.anonKey,
-        serviceRoleKey: credentials.serviceRoleKey,
-        tenantId: currentProfile.tenantId,
+    // Multi-tenant: NO schema qualifier — the tenant-ddl connection is bound to
+    // the tenant's own database and a `public.` prefix would be rejected (or
+    // would write into the shared public db). Single-tenant shape is unchanged.
+    const sql = isMultiTenant
+        ? `CREATE TABLE \`${name}\` (${columnSql})`
+        : `CREATE TABLE ${effectiveSchema}.${name} (${columnSql})`;
+    const result = await runDdl(currentProfile, credentials, sql, {
+        role: options.role,
+        command: 'db create-table',
     });
-    const result = await metaDriver.query(sql, useServiceRole);
     if (options.json || program.opts().json) {
-        console.log(JSON.stringify({ table: name, schema: options.schema, sql, result }, null, 2));
+        console.log(JSON.stringify({ table: name, schema: effectiveSchema, sql, result }, null, 2));
     }
     else {
-        console.log(formatSuccess(`Created table "${options.schema}.${name}"`));
+        console.log(formatSuccess(`Created table "${effectiveSchema}.${name}"`));
         console.log(`  SQL: ${sql}`);
         console.log(formatWarning('  Note: the REST schema cache re-introspects after DDL; the new table is visible to /rest/v1 within a few seconds.'));
     }
 }
-async function handleDbAddColumn(table, column, options, program) {
+export async function handleDbAddColumn(table, column, options, program) {
     const profileManager = new ProfileManager();
     const currentProfile = await profileManager.getCurrentProfile();
     if (!currentProfile) {
@@ -340,27 +423,28 @@ async function handleDbAddColumn(table, column, options, program) {
     if (!credentials) {
         throw new Error(`No credentials found for profile: ${currentProfile.name}. Use "pxbaas login" to authenticate.`);
     }
-    // Build SQL
-    let sql = `ALTER TABLE ${options.schema}.${table} ADD COLUMN ${column} ${options.type}`;
+    // D2/D3 fix: the effective target schema (tenant db in multi-tenant).
+    const effectiveSchema = await resolveDdlSchema(currentProfile, credentials, options.schema);
+    const isMultiTenant = currentProfile.mode === 'multi-tenant';
+    // Build SQL. Multi-tenant: NO schema qualifier (see handleDbCreateTable).
+    let sql = isMultiTenant
+        ? `ALTER TABLE \`${table}\` ADD COLUMN ${column} ${options.type}`
+        : `ALTER TABLE ${effectiveSchema}.${table} ADD COLUMN ${column} ${options.type}`;
     if (!options.nullable) {
         sql += ' NOT NULL';
     }
     if (options.default !== undefined) {
         sql += ` DEFAULT ${options.default}`;
     }
-    const useServiceRole = options.role === 'service_role';
-    const metaDriver = new MetaDriver({
-        endpoint: currentProfile.endpoint,
-        anonKey: credentials.anonKey,
-        serviceRoleKey: credentials.serviceRoleKey,
-        tenantId: currentProfile.tenantId,
+    const result = await runDdl(currentProfile, credentials, sql, {
+        role: options.role,
+        command: 'db add-column',
     });
-    const result = await metaDriver.query(sql, useServiceRole);
     if (options.json || program.opts().json) {
-        console.log(JSON.stringify({ table, column, schema: options.schema, sql, result }, null, 2));
+        console.log(JSON.stringify({ table, column, schema: effectiveSchema, sql, result }, null, 2));
     }
     else {
-        console.log(formatSuccess(`Added column "${column}" to table "${options.schema}.${table}"`));
+        console.log(formatSuccess(`Added column "${column}" to table "${effectiveSchema}.${table}"`));
         console.log(`  SQL: ${sql}`);
         console.log(formatWarning('  Note: REST select=* re-introspects columns after DDL. If a query still omits the new column, select it explicitly or retry in a few seconds (schema cache refresh).'));
     }
@@ -374,6 +458,20 @@ export async function handleDbPush(file, options, program) {
     // Mode-aware: single-tenant -> /pg/query (global admin); multi-tenant ->
     // /api/tenant-ddl (per-tenant service_role). RLS is diverted appropriately.
     const sink = await getSchemaSink(options.role === 'anon' ? 'anon' : 'service_role');
+    // 06-§3 fix: in multi-tenant the statements execute in the tenant's OWN
+    // database, so the plan/JSON must report that real target instead of
+    // echoing the --schema default ("public"), which misleads audits.
+    let effectiveSchema = options.schema;
+    if (sink.mode === 'multi-tenant') {
+        const profileManager = new ProfileManager();
+        const currentProfile = await profileManager.getCurrentProfile();
+        const credentials = currentProfile
+            ? await new CredentialStore().getCredentials(currentProfile.name)
+            : null;
+        if (currentProfile && credentials) {
+            effectiveSchema = await resolveTenantSchemaLabel(currentProfile, credentials);
+        }
+    }
     let rls = null;
     if (options.rls) {
         if (!existsSync(options.rls)) {
@@ -385,7 +483,7 @@ export async function handleDbPush(file, options, program) {
         rawSql: raw,
         source: file,
         rls,
-        schema: options.schema,
+        schema: effectiveSchema,
         dryRun: Boolean(options.dryRun),
         assumeYes: Boolean(options.yes),
         json,