@prd-improve/cli 1.0.0

package/dist/config/rc.d.ts

@@ -0,0 +1,70 @@
+import { type PrdRc, type ResolvedBackend } from "./schema.js";
+export declare const RC_PATH: string;
+export type LoadRcResult = {
+    ok: true;
+    rc: PrdRc;
+    path: string;
+} | {
+    ok: false;
+    reason: "missing";
+} | {
+    ok: false;
+    reason: "permissions";
+    mode: string;
+} | {
+    ok: false;
+    reason: "parse";
+    message: string;
+} | {
+    ok: false;
+    reason: "schema";
+    message: string;
+};
+/**
+ * Load ~/.prdrc — returns typed result rather than throwing.
+ * `pathOverride` exists for tests (HOME juggling is fragile in vitest workers).
+ */
+export declare function loadRc(pathOverride?: string): LoadRcResult;
+export declare function saveRc(rc: PrdRc, pathOverride?: string): {
+    ok: true;
+    path: string;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * Override precedence (design §6.9):
+ *   1. opts.backend  (CLI --backend <name>) — selects from rc
+ *   2. PRDSERVER_URL + PRDSERVER_TOKEN env (both set) → ad-hoc backend
+ *   3. PRDSERVER_BACKEND env → selects from rc
+ *   4. rc.default_backend
+ *
+ * `PRDSERVER_URL` alone (no token) is an explicit error — callers must
+ * surface "rc_env_url_without_token".
+ */
+export type ResolveBackendResult = {
+    ok: true;
+    backend: ResolvedBackend;
+} | {
+    ok: false;
+    reason: "no_backend";
+} | {
+    ok: false;
+    reason: "unknown_name";
+    name: string;
+} | {
+    ok: false;
+    reason: "no_token";
+    name: string;
+} | {
+    ok: false;
+    reason: "env_url_without_token";
+};
+export declare function resolveBackend(rc: PrdRc | null, opts?: {
+    backend?: string;
+}, env?: NodeJS.ProcessEnv): ResolveBackendResult;
+/**
+ * Token masking for `prd config show` / `prd whoami` output.
+ * Format: prd_pat_<first4>****<last2>  (design §6.7 / §6.8 example).
+ */
+export declare function maskToken(token: string): string;

package/dist/config/rc.js

@@ -0,0 +1,148 @@
+/**
+ * ~/.prdrc load / save / backend resolution (T6).
+ *
+ * Hardening choices:
+ *  - chmod 600 on save (idempotent, defensive — never widens permissions).
+ *  - Refuse to load if file mode is wider than 600 — return {ok:false,reason}
+ *    so callers can warn the user (consistent with design §6.9 security goal).
+ *  - All errors return typed Result instead of throwing — driver code wants
+ *    to render its own i18n message, not catch raw zod issues.
+ */
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { load as yamlLoad, dump as yamlDump } from "js-yaml";
+import { PrdRcSchema, } from "./schema.js";
+import { writeFileAtomic } from "../fs/atomicWrite.js";
+export const RC_PATH = join(homedir(), ".prdrc");
+/**
+ * Load ~/.prdrc — returns typed result rather than throwing.
+ * `pathOverride` exists for tests (HOME juggling is fragile in vitest workers).
+ */
+export function loadRc(pathOverride) {
+    const path = pathOverride ?? RC_PATH;
+    if (!existsSync(path))
+        return { ok: false, reason: "missing" };
+    // Permission check — POSIX only; on Windows mode bits are mostly noise so
+    // we skip the check there. Aligns with the "best-effort" Unix-only policy
+    // in the design doc.
+    if (process.platform !== "win32") {
+        try {
+            const st = statSync(path);
+            const mode = st.mode & 0o777;
+            if (mode & 0o077) {
+                return {
+                    ok: false,
+                    reason: "permissions",
+                    mode: mode.toString(8).padStart(3, "0"),
+                };
+            }
+        }
+        catch {
+            // stat failed → fall through to readFileSync which will surface the real
+            // error; don't hide it behind a fake "permissions" reason.
+        }
+    }
+    let text;
+    try {
+        text = readFileSync(path, "utf8");
+    }
+    catch (e) {
+        return { ok: false, reason: "parse", message: e.message };
+    }
+    let raw;
+    try {
+        raw = yamlLoad(text);
+    }
+    catch (e) {
+        return { ok: false, reason: "parse", message: e.message };
+    }
+    const parsed = PrdRcSchema.safeParse(raw ?? {});
+    if (!parsed.success) {
+        return {
+            ok: false,
+            reason: "schema",
+            message: parsed.error.issues
+                .map((i) => `${i.path.join(".")}: ${i.message}`)
+                .join("; "),
+        };
+    }
+    return { ok: true, rc: parsed.data, path };
+}
+export function saveRc(rc, pathOverride) {
+    const path = pathOverride ?? RC_PATH;
+    try {
+        const text = yamlDump(rc, { lineWidth: 0, noRefs: true });
+        // T6-MN1 (v1.7) — atomic tempfile + rename so a crash mid-write leaves
+        // the previous rc intact rather than producing a truncated rc that bricks
+        // `prd push/pull/whoami`. writeFileAtomic chmod's the tempfile to 0o600
+        // before rename — POSIX rename(2) unlinks the target and gives the tempfile
+        // its name, so the resulting inode carries the tempfile's mode. No extra
+        // chmod needed here (I2 reviewer fix — previous defensive chmod was based
+        // on a wrong inode-reuse model).
+        writeFileAtomic(path, text, { mode: 0o600 });
+        return { ok: true, path };
+    }
+    catch (e) {
+        return { ok: false, message: e.message };
+    }
+}
+export function resolveBackend(rc, opts = {}, env = process.env) {
+    // Step 1: --backend flag → select from rc
+    if (opts.backend) {
+        if (!rc)
+            return { ok: false, reason: "no_backend" };
+        const entry = rc.backends[opts.backend];
+        if (!entry)
+            return { ok: false, reason: "unknown_name", name: opts.backend };
+        if (!entry.token)
+            return { ok: false, reason: "no_token", name: opts.backend };
+        return { ok: true, backend: { name: opts.backend, url: entry.url, token: entry.token } };
+    }
+    // Step 2: PRDSERVER_URL + PRDSERVER_TOKEN env (both) → ad-hoc backend
+    const envUrl = env.PRDSERVER_URL;
+    const envTok = env.PRDSERVER_TOKEN;
+    if (envUrl && envTok) {
+        return { ok: true, backend: { name: "(env)", url: envUrl, token: envTok } };
+    }
+    if (envUrl && !envTok) {
+        return { ok: false, reason: "env_url_without_token" };
+    }
+    // Step 3: PRDSERVER_BACKEND env → select from rc
+    const envName = env.PRDSERVER_BACKEND;
+    if (envName) {
+        if (!rc)
+            return { ok: false, reason: "no_backend" };
+        const entry = rc.backends[envName];
+        if (!entry)
+            return { ok: false, reason: "unknown_name", name: envName };
+        if (!entry.token)
+            return { ok: false, reason: "no_token", name: envName };
+        return { ok: true, backend: { name: envName, url: entry.url, token: entry.token } };
+    }
+    // Step 4: rc.default_backend
+    if (!rc || !rc.default_backend)
+        return { ok: false, reason: "no_backend" };
+    const entry = rc.backends[rc.default_backend];
+    if (!entry)
+        return { ok: false, reason: "unknown_name", name: rc.default_backend };
+    if (!entry.token)
+        return { ok: false, reason: "no_token", name: rc.default_backend };
+    return { ok: true, backend: { name: rc.default_backend, url: entry.url, token: entry.token } };
+}
+/**
+ * Token masking for `prd config show` / `prd whoami` output.
+ * Format: prd_pat_<first4>****<last2>  (design §6.7 / §6.8 example).
+ */
+export function maskToken(token) {
+    // Token shape from server: 'prd_pat_' + 32 base64url chars.
+    if (token.length <= 12)
+        return "****";
+    if (token.startsWith("prd_pat_")) {
+        const body = token.slice(8);
+        return `prd_pat_${body.slice(0, 4)}****${body.slice(-2)}`;
+    }
+    // Foreign token shape — still mask the middle.
+    return `${token.slice(0, 4)}****${token.slice(-2)}`;
+}
+//# sourceMappingURL=rc.js.map

package/dist/config/rc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rc.js","sourceRoot":"","sources":["../../src/config/rc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EACL,WAAW,GAGZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AASjD;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,YAAqB;IAC1C,MAAM,IAAI,GAAG,YAAY,IAAI,OAAO,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAE/D,0EAA0E;IAC1E,0EAA0E;IAC1E,qBAAqB;IACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC;YAC7B,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACjB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,aAAa;oBACrB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;iBACxC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,2DAA2D;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;iBACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC;SACd,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,YAAqB;IACrD,MAAM,IAAI,GAAG,YAAY,IAAI,OAAO,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,iCAAiC;QACjC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAmBD,MAAM,UAAU,cAAc,CAC5B,EAAgB,EAChB,OAA6B,EAAE,EAC/B,MAAyB,OAAO,CAAC,GAAG;IAEpC,0CAA0C;IAC1C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7E,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3F,CAAC;IAED,sEAAsE;IACtE,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;IACnC,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACxD,CAAC;IAED,iDAAiD;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACtF,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,eAAe;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC3E,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC;IACnF,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC;IACrF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;AACjG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,4DAA4D;IAC5D,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,+CAA+C;IAC/C,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC"}

package/dist/config/schema.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Zod schema for ~/.prdrc.yaml (T6).
+ *
+ * Shape locked by design doc §6.9. Keep optional fields *truly* optional —
+ * users may have a half-bootstrapped rc (just user.name) before any login.
+ */
+import { z } from "zod";
+export declare const BackendEntrySchema: z.ZodObject<{
+    url: z.ZodString;
+    token: z.ZodOptional<z.ZodString>;
+    last_login_at: z.ZodOptional<z.ZodString>;
+    default_team: z.ZodOptional<z.ZodString>;
+    default_project: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    token?: string | undefined;
+    last_login_at?: string | undefined;
+    default_team?: string | undefined;
+    default_project?: string | undefined;
+}, {
+    url: string;
+    token?: string | undefined;
+    last_login_at?: string | undefined;
+    default_team?: string | undefined;
+    default_project?: string | undefined;
+}>;
+export declare const PrdRcSchema: z.ZodObject<{
+    user: z.ZodOptional<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        email: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name?: string | undefined;
+        email?: string | undefined;
+    }, {
+        name?: string | undefined;
+        email?: string | undefined;
+    }>>;
+    default_backend: z.ZodOptional<z.ZodString>;
+    backends: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        url: z.ZodString;
+        token: z.ZodOptional<z.ZodString>;
+        last_login_at: z.ZodOptional<z.ZodString>;
+        default_team: z.ZodOptional<z.ZodString>;
+        default_project: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        token?: string | undefined;
+        last_login_at?: string | undefined;
+        default_team?: string | undefined;
+        default_project?: string | undefined;
+    }, {
+        url: string;
+        token?: string | undefined;
+        last_login_at?: string | undefined;
+        default_team?: string | undefined;
+        default_project?: string | undefined;
+    }>>>;
+    admin_backends: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        url: z.ZodString;
+        token: z.ZodOptional<z.ZodString>;
+        last_login_at: z.ZodOptional<z.ZodString>;
+        default_team: z.ZodOptional<z.ZodString>;
+        default_project: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        token?: string | undefined;
+        last_login_at?: string | undefined;
+        default_team?: string | undefined;
+        default_project?: string | undefined;
+    }, {
+        url: string;
+        token?: string | undefined;
+        last_login_at?: string | undefined;
+        default_team?: string | undefined;
+        default_project?: string | undefined;
+    }>>>;
+    lang: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    backends: Record<string, {
+        url: string;
+        token?: string | undefined;
+        last_login_at?: string | undefined;
+        default_team?: string | undefined;
+        default_project?: string | undefined;
+    }>;
+    admin_backends: Record<string, {
+        url: string;
+        token?: string | undefined;
+        last_login_at?: string | undefined;
+        default_team?: string | undefined;
+        default_project?: string | undefined;
+    }>;
+    user?: {
+        name?: string | undefined;
+        email?: string | undefined;
+    } | undefined;
+    default_backend?: string | undefined;
+    lang?: string | undefined;
+}, {
+    user?: {
+        name?: string | undefined;
+        email?: string | undefined;
+    } | undefined;
+    default_backend?: string | undefined;
+    backends?: Record<string, {
+        url: string;
+        token?: string | undefined;
+        last_login_at?: string | undefined;
+        default_team?: string | undefined;
+        default_project?: string | undefined;
+    }> | undefined;
+    admin_backends?: Record<string, {
+        url: string;
+        token?: string | undefined;
+        last_login_at?: string | undefined;
+        default_team?: string | undefined;
+        default_project?: string | undefined;
+    }> | undefined;
+    lang?: string | undefined;
+}>;
+export type BackendEntry = z.infer<typeof BackendEntrySchema>;
+export type PrdRc = z.infer<typeof PrdRcSchema>;
+/**
+ * Backend "selection" result — the URL + token that the API client uses.
+ * `name` is the rc key, or '(env)' for env-based override, or '(flag)' for
+ * --backend ad-hoc.
+ */
+export interface ResolvedBackend {
+    name: string;
+    url: string;
+    token: string;
+}

package/dist/config/schema.js

@@ -0,0 +1,36 @@
+/**
+ * Zod schema for ~/.prdrc.yaml (T6).
+ *
+ * Shape locked by design doc §6.9. Keep optional fields *truly* optional —
+ * users may have a half-bootstrapped rc (just user.name) before any login.
+ */
+import { z } from "zod";
+export const BackendEntrySchema = z.object({
+    url: z.string().url(),
+    token: z.string().optional(),
+    last_login_at: z.string().optional(),
+    // v1.1 §6.3 — default scope for `prd init` / `prd migrate-yaml` so users
+    // don't have to retype --team / --project every command. Kept optional so
+    // legacy .prdrc files keep validating (the consuming command surfaces a
+    // "you must pass --team or set default_team" error at use-site).
+    default_team: z.string().optional(),
+    default_project: z.string().optional(),
+});
+export const PrdRcSchema = z.object({
+    user: z
+        .object({
+        name: z.string().min(1).optional(),
+        email: z.string().email().optional(),
+    })
+        .optional(),
+    default_backend: z.string().optional(),
+    backends: z.record(z.string(), BackendEntrySchema).default({}),
+    // v1.3 §A.1 — separate admin namespace; admin CLI reads here, never falls
+    // back to `backends.<name>.token`. Same BackendEntry shape (url required,
+    // token optional, last_login_at/default_team/default_project ignored for
+    // admin track).
+    admin_backends: z.record(z.string(), BackendEntrySchema).default({}),
+    // v1.16 — 全局 UX 语言偏好(顶层,非 per-backend);resolveLang 优先级 config 层
+    lang: z.string().optional(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,iEAAiE;IACjE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;KACrC,CAAC;SACD,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,gBAAgB;IAChB,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpE,gEAAgE;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC"}

package/dist/diff/engine.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Pure function:把两份 PRD yaml AST 对比成结构化 DiffResult。
+ * 不读不写,可独立单测。
+ *
+ * 18 个 diffable 单元 = 14 个普通模块 + data_and_api 的 4 子组(DC/API/PC/SEC)。
+ * Summary 的 unchanged_modules 用 15 模块(parent)计数。
+ */
+export interface FieldChange {
+    field: string;
+    before: unknown;
+    after: unknown;
+    is_multiline: boolean;
+}
+export interface ChangedItem {
+    primary_key: string;
+    display_label?: string;
+    field_changes?: FieldChange[];
+}
+export interface ModuleDiff {
+    module_key: string;
+    module_label: string;
+    added: ChangedItem[];
+    modified: ChangedItem[];
+    removed: ChangedItem[];
+}
+export interface DiffResult {
+    perModule: Record<string, ModuleDiff>;
+    totals: {
+        added: number;
+        modified: number;
+        removed: number;
+        unchanged_modules: number;
+    };
+}
+export declare function diffPRDs(left: any, right: any): DiffResult;