openxiangda-cli 2.0.0-alpha.12

package/dist/commands/oauth/runtime/rotate.d.ts

@@ -0,0 +1,12 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class OAuthRuntimeRotate extends OpenXiangdaCommand {
+    static summary: string;
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        "grace-period-seconds": import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        "idempotency-key": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=rotate.d.ts.map

package/dist/commands/oauth/runtime/rotate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotate.d.ts","sourceRoot":"","sources":["../../../../src/commands/oauth/runtime/rotate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,kBAAkB;IAChE,MAAM,CAAC,OAAO,SAA0B;IACxC,MAAM,CAAC,KAAK;;;;;MAeV;IAEI,GAAG;CAWV"}

package/dist/commands/oauth/runtime/rotate.js

@@ -0,0 +1,31 @@
+import { Flags } from "@oclif/core";
+import { randomUUID } from "node:crypto";
+import { OpenXiangdaCommand, workspaceFlags } from "../../../base.js";
+export default class OAuthRuntimeRotate extends OpenXiangdaCommand {
+    static summary = "轮换平台托管运行凭据并创建同版本滚动部署";
+    static flags = {
+        ...workspaceFlags,
+        environment: Flags.string({
+            required: true,
+            summary: "目标 environmentKey",
+        }),
+        "grace-period-seconds": Flags.integer({
+            default: 600,
+            min: 0,
+            max: 3600,
+            summary: "旧 Pod 凭据继续有效的秒数",
+        }),
+        "idempotency-key": Flags.string({
+            summary: "重试同一次轮换时必须复用的幂等键",
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(OAuthRuntimeRotate);
+        return this.present(await this.services.rotateRuntimeOAuthCredential(flags.cwd, {
+            environmentKey: flags.environment,
+            gracePeriodSeconds: flags["grace-period-seconds"],
+            idempotencyKey: flags["idempotency-key"] || `runtime-rotate:${randomUUID()}`,
+        }));
+    }
+}
+//# sourceMappingURL=rotate.js.map

package/dist/commands/oauth/runtime/rotate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotate.js","sourceRoot":"","sources":["../../../../src/commands/oauth/runtime/rotate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,kBAAkB;IAChE,MAAM,CAAC,OAAO,GAAG,sBAAsB,CAAC;IACxC,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,mBAAmB;SAC7B,CAAC;QACF,sBAAsB,EAAE,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,GAAG;YACZ,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,IAAI;YACT,OAAO,EAAE,iBAAiB;SAC3B,CAAC;QACF,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC;YAC9B,OAAO,EAAE,kBAAkB;SAC5B,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1D,cAAc,EAAE,KAAK,CAAC,WAAW;YACjC,kBAAkB,EAAE,KAAK,CAAC,sBAAsB,CAAC;YACjD,cAAc,EACZ,KAAK,CAAC,iBAAiB,CAAC,IAAI,kBAAkB,UAAU,EAAE,EAAE;SAC/D,CAAC,CACH,CAAC;IACJ,CAAC"}

package/dist/commands/oauth/runtime/status.d.ts

@@ -0,0 +1,10 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class OAuthRuntimeStatus extends OpenXiangdaCommand {
+    static summary: string;
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=status.d.ts.map

package/dist/commands/oauth/runtime/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../../src/commands/oauth/runtime/status.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,kBAAkB;IAChE,MAAM,CAAC,OAAO,SAA+B;IAC7C,MAAM,CAAC,KAAK;;;MAMV;IAEI,GAAG;CASV"}

package/dist/commands/oauth/runtime/status.js

@@ -0,0 +1,17 @@
+import { Flags } from "@oclif/core";
+import { OpenXiangdaCommand, workspaceFlags } from "../../../base.js";
+export default class OAuthRuntimeStatus extends OpenXiangdaCommand {
+    static summary = "查询平台托管的应用后端 OAuth2 运行凭据状态";
+    static flags = {
+        ...workspaceFlags,
+        environment: Flags.string({
+            required: true,
+            summary: "目标 environmentKey",
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(OAuthRuntimeStatus);
+        return this.present(await this.services.runtimeOAuthCredentialStatus(flags.cwd, flags.environment));
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/oauth/runtime/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../../src/commands/oauth/runtime/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,kBAAkB;IAChE,MAAM,CAAC,OAAO,GAAG,2BAA2B,CAAC;IAC7C,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,mBAAmB;SAC7B,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAC9C,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,WAAW,CAClB,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/promote.d.ts

@@ -0,0 +1,13 @@
+import { OpenXiangdaCommand } from '../base.js';
+export default class Promote extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        deploymentId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+        environment: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=promote.d.ts.map

package/dist/commands/promote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../src/commands/promote.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,YAAY,CAAC;AAChE,MAAM,CAAC,OAAO,OAAO,OAAQ,SAAQ,kBAAkB;IACrD,MAAM,CAAC,OAAO,SAA8B;IAC5C,MAAM,CAAC,IAAI;;;MAA6I;IACxJ,MAAM,CAAC,KAAK;;MAAkB;IACxB,GAAG;CACV"}

package/dist/commands/promote.js

@@ -0,0 +1,9 @@
+import { Args } from '@oclif/core';
+import { OpenXiangdaCommand, workspaceFlags } from '../base.js';
+export default class Promote extends OpenXiangdaCommand {
+    static summary = '以同一不可变 AppVersion 晋级目标环境';
+    static args = { deploymentId: Args.string({ required: true }), environment: Args.string({ required: true, options: ['preproduction', 'production'] }) };
+    static flags = workspaceFlags;
+    async run() { const { args, flags } = await this.parse(Promote); return this.present(await this.services.promote(flags.cwd, args.deploymentId, args.environment)); }
+}
+//# sourceMappingURL=promote.js.map

package/dist/commands/promote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promote.js","sourceRoot":"","sources":["../../src/commands/promote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChE,MAAM,CAAC,OAAO,OAAO,OAAQ,SAAQ,kBAAkB;IACrD,MAAM,CAAC,OAAO,GAAG,0BAA0B,CAAC;IAC5C,MAAM,CAAC,IAAI,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;IACxJ,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC;IAC9B,KAAK,CAAC,GAAG,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,WAA6C,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/commands/retry.d.ts

@@ -0,0 +1,12 @@
+import { OpenXiangdaCommand } from '../base.js';
+export default class Retry extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        deploymentId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=retry.d.ts.map

package/dist/commands/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/commands/retry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,YAAY,CAAC;AAChE,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,kBAAkB;IACnD,MAAM,CAAC,OAAO,SAA0B;IACxC,MAAM,CAAC,IAAI;;MAAqD;IAChE,MAAM,CAAC,KAAK;;MAAkB;IACxB,GAAG;CACV"}

package/dist/commands/retry.js

@@ -0,0 +1,9 @@
+import { Args } from '@oclif/core';
+import { OpenXiangdaCommand, workspaceFlags } from '../base.js';
+export default class Retry extends OpenXiangdaCommand {
+    static summary = '重试可恢复的 DeploymentRun';
+    static args = { deploymentId: Args.string({ required: true }) };
+    static flags = workspaceFlags;
+    async run() { const { args, flags } = await this.parse(Retry); return this.present(await this.services.retry(flags.cwd, args.deploymentId)); }
+}
+//# sourceMappingURL=retry.js.map

package/dist/commands/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/commands/retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChE,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,kBAAkB;IACnD,MAAM,CAAC,OAAO,GAAG,sBAAsB,CAAC;IACxC,MAAM,CAAC,IAAI,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChE,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC;IAC9B,KAAK,CAAC,GAAG,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/commands/rollback.d.ts

@@ -0,0 +1,13 @@
+import { OpenXiangdaCommand } from '../base.js';
+export default class Rollback extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        environment: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        to: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=rollback.d.ts.map

package/dist/commands/rollback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../../src/commands/rollback.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,YAAY,CAAC;AAChE,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,kBAAkB;IACtD,MAAM,CAAC,OAAO,SAA2B;IACzC,MAAM,CAAC,IAAI;;MAA6G;IACxH,MAAM,CAAC,KAAK;;;MAA4F;IAClG,GAAG;CACV"}

package/dist/commands/rollback.js

@@ -0,0 +1,9 @@
+import { Args, Flags } from '@oclif/core';
+import { OpenXiangdaCommand, workspaceFlags } from '../base.js';
+export default class Rollback extends OpenXiangdaCommand {
+    static summary = '以历史 AppVersion 创建回滚部署';
+    static args = { environment: Args.string({ required: true, options: ['development', 'preproduction', 'production'] }) };
+    static flags = { ...workspaceFlags, to: Flags.string({ required: true, summary: '目标 AppVersion ID' }) };
+    async run() { const { args, flags } = await this.parse(Rollback); return this.present(await this.services.rollback(flags.cwd, args.environment, flags.to)); }
+}
+//# sourceMappingURL=rollback.js.map

package/dist/commands/rollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.js","sourceRoot":"","sources":["../../src/commands/rollback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChE,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,kBAAkB;IACtD,MAAM,CAAC,OAAO,GAAG,uBAAuB,CAAC;IACzC,MAAM,CAAC,IAAI,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;IACxH,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;IACxG,KAAK,CAAC,GAAG,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,WAA6D,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/commands/secret/audit/list.d.ts

@@ -0,0 +1,14 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class SecretAuditList extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        limit: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/secret/audit/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../src/commands/secret/audit/list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,kBAAkB;IAC7D,MAAM,CAAC,OAAO,SAA2B;IACzC,MAAM,CAAC,IAAI;;MAA6C;IACxD,MAAM,CAAC,KAAK;;;;MAIV;IAEI,GAAG;CAWV"}

package/dist/commands/secret/audit/list.js

@@ -0,0 +1,16 @@
+import { Args, Flags } from "@oclif/core";
+import { OpenXiangdaCommand, workspaceFlags } from "../../../base.js";
+export default class SecretAuditList extends OpenXiangdaCommand {
+    static summary = "查询不含明文的应用 Secret 审计事件";
+    static args = { name: Args.string({ required: true }) };
+    static flags = {
+        ...workspaceFlags,
+        environment: Flags.string({ required: true, summary: "目标 environmentKey" }),
+        limit: Flags.integer({ default: 100, min: 1, max: 500, summary: "最大返回数量" }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(SecretAuditList);
+        return this.present(await this.services.applicationSecretAuditEvents(flags.cwd, flags.environment, args.name, flags.limit));
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/secret/audit/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../src/commands/secret/audit/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,kBAAkB;IAC7D,MAAM,CAAC,OAAO,GAAG,uBAAuB,CAAC;IACzC,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACxD,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC3E,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;KAC5E,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAC9C,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,IAAI,EACT,KAAK,CAAC,KAAK,CACZ,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/secret/create.d.ts

@@ -0,0 +1,18 @@
+import { OpenXiangdaCommand } from "../../base.js";
+export default class SecretCreate extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        "from-env": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "from-file": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "expires-at": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "idempotency-key": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=create.d.ts.map

package/dist/commands/secret/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/commands/secret/create.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,eAAe,CAAC;AAGnE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,SAA8B;IAC5C,MAAM,CAAC,IAAI;;MAA6C;IACxD,MAAM,CAAC,KAAK;;;;;;;;MAQV;IAEI,GAAG;CAkBV"}

package/dist/commands/secret/create.js

@@ -0,0 +1,33 @@
+import { randomUUID } from "node:crypto";
+import { Args, Flags } from "@oclif/core";
+import { OpenXiangdaCommand, workspaceFlags } from "../../base.js";
+import { readSecretValue } from "../../secret-value.js";
+export default class SecretCreate extends OpenXiangdaCommand {
+    static summary = "从环境变量或文件创建环境隔离的应用 Secret";
+    static args = { name: Args.string({ required: true }) };
+    static flags = {
+        ...workspaceFlags,
+        environment: Flags.string({ required: true, summary: "目标 environmentKey" }),
+        "from-env": Flags.string({ summary: "从本机环境变量读取 Secret 值" }),
+        "from-file": Flags.string({ summary: "从本机文件读取 Secret 值" }),
+        description: Flags.string({ summary: "Secret 用途说明" }),
+        "expires-at": Flags.string({ summary: "可选 ISO 8601 过期时间" }),
+        "idempotency-key": Flags.string({ summary: "可重放的客户端操作键" }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(SecretCreate);
+        return this.present(await this.services.createApplicationSecret(flags.cwd, flags.environment, {
+            name: args.name,
+            value: readSecretValue({
+                fromEnv: flags["from-env"],
+                fromFile: flags["from-file"],
+            }),
+            idempotencyKey: flags["idempotency-key"] || `secret-create:${randomUUID()}`,
+            ...(flags.description ? { description: flags.description } : {}),
+            ...(flags["expires-at"]
+                ? { expiresAt: flags["expires-at"] }
+                : {}),
+        }));
+    }
+}
+//# sourceMappingURL=create.js.map

package/dist/commands/secret/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/commands/secret/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,GAAG,0BAA0B,CAAC;IAC5C,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACxD,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC3E,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC3D,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAC1D,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACrD,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAC3D,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;KAC3D,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE;YACxE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,eAAe,CAAC;gBACrB,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC;gBAC1B,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC;aAC7B,CAAC;YACF,cAAc,EACZ,KAAK,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,UAAU,EAAE,EAAE;YAC7D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC;gBACrB,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE;gBACpC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH,CAAC;IACJ,CAAC"}

package/dist/commands/secret/delete.d.ts

@@ -0,0 +1,15 @@
+import { OpenXiangdaCommand } from "../../base.js";
+export default class SecretDelete extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        revision: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        reason: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=delete.d.ts.map

package/dist/commands/secret/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/commands/secret/delete.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,SAAyC;IACvD,MAAM,CAAC,IAAI;;MAA6C;IACxD,MAAM,CAAC,KAAK;;;;;MAKV;IAEI,GAAG;CAcV"}

package/dist/commands/secret/delete.js

@@ -0,0 +1,20 @@
+import { Args, Flags } from "@oclif/core";
+import { OpenXiangdaCommand, workspaceFlags } from "../../base.js";
+export default class SecretDelete extends OpenXiangdaCommand {
+    static summary = "删除未被当前环境 Config Bundle 引用的应用 Secret";
+    static args = { name: Args.string({ required: true }) };
+    static flags = {
+        ...workspaceFlags,
+        environment: Flags.string({ required: true, summary: "目标 environmentKey" }),
+        revision: Flags.integer({ required: true, min: 1, summary: "当前 Secret revision" }),
+        reason: Flags.string({ summary: "删除原因" }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(SecretDelete);
+        return this.present(await this.services.deleteApplicationSecret(flags.cwd, flags.environment, args.name, {
+            expectedRevision: flags.revision,
+            ...(flags.reason ? { reason: flags.reason } : {}),
+        }));
+    }
+}
+//# sourceMappingURL=delete.js.map

package/dist/commands/secret/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../src/commands/secret/delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,GAAG,qCAAqC,CAAC;IACvD,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACxD,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC3E,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAClF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;KAC1C,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CACzC,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,IAAI,EACT;YACE,gBAAgB,EAAE,KAAK,CAAC,QAAQ;YAChC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CACF,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/secret/list.d.ts

@@ -0,0 +1,10 @@
+import { OpenXiangdaCommand } from "../../base.js";
+export default class SecretList extends OpenXiangdaCommand {
+    static summary: string;
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/secret/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/secret/list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,kBAAkB;IACxD,MAAM,CAAC,OAAO,SAAgC;IAC9C,MAAM,CAAC,KAAK;;;MAGV;IAEI,GAAG;CAMV"}

package/dist/commands/secret/list.js

@@ -0,0 +1,14 @@
+import { Flags } from "@oclif/core";
+import { OpenXiangdaCommand, workspaceFlags } from "../../base.js";
+export default class SecretList extends OpenXiangdaCommand {
+    static summary = "查询目标环境的应用 Secret 元数据（不含明文）";
+    static flags = {
+        ...workspaceFlags,
+        environment: Flags.string({ required: true, summary: "目标 environmentKey" }),
+    };
+    async run() {
+        const { flags } = await this.parse(SecretList);
+        return this.present(await this.services.applicationSecrets(flags.cwd, flags.environment));
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/secret/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/commands/secret/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,kBAAkB;IACxD,MAAM,CAAC,OAAO,GAAG,4BAA4B,CAAC;IAC9C,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;KAC5E,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CACrE,CAAC;IACJ,CAAC"}

package/dist/commands/secret/rotate.d.ts

@@ -0,0 +1,18 @@
+import { OpenXiangdaCommand } from "../../base.js";
+export default class SecretRotate extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        revision: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        "from-env": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "from-file": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        reason: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "idempotency-key": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=rotate.d.ts.map

package/dist/commands/secret/rotate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotate.d.ts","sourceRoot":"","sources":["../../../src/commands/secret/rotate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,eAAe,CAAC;AAGnE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,SAAyB;IACvC,MAAM,CAAC,IAAI;;MAA6C;IACxD,MAAM,CAAC,KAAK;;;;;;;;MAQV;IAEI,GAAG;CAoBV"}

package/dist/commands/secret/rotate.js

@@ -0,0 +1,30 @@
+import { randomUUID } from "node:crypto";
+import { Args, Flags } from "@oclif/core";
+import { OpenXiangdaCommand, workspaceFlags } from "../../base.js";
+import { readSecretValue } from "../../secret-value.js";
+export default class SecretRotate extends OpenXiangdaCommand {
+    static summary = "追加不可变版本并轮换应用 Secret";
+    static args = { name: Args.string({ required: true }) };
+    static flags = {
+        ...workspaceFlags,
+        environment: Flags.string({ required: true, summary: "目标 environmentKey" }),
+        revision: Flags.integer({ required: true, min: 1, summary: "当前 Secret revision" }),
+        "from-env": Flags.string({ summary: "从本机环境变量读取新值" }),
+        "from-file": Flags.string({ summary: "从本机文件读取新值" }),
+        reason: Flags.string({ summary: "轮换原因" }),
+        "idempotency-key": Flags.string({ summary: "可重放的客户端操作键" }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(SecretRotate);
+        return this.present(await this.services.rotateApplicationSecret(flags.cwd, flags.environment, args.name, {
+            expectedRevision: flags.revision,
+            value: readSecretValue({
+                fromEnv: flags["from-env"],
+                fromFile: flags["from-file"],
+            }),
+            idempotencyKey: flags["idempotency-key"] || `secret-rotate:${randomUUID()}`,
+            ...(flags.reason ? { reason: flags.reason } : {}),
+        }));
+    }
+}
+//# sourceMappingURL=rotate.js.map

package/dist/commands/secret/rotate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotate.js","sourceRoot":"","sources":["../../../src/commands/secret/rotate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,GAAG,qBAAqB,CAAC;IACvC,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACxD,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC3E,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAClF,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACpD,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACnD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACzC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;KAC3D,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CACzC,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,IAAI,EACT;YACE,gBAAgB,EAAE,KAAK,CAAC,QAAQ;YAChC,KAAK,EAAE,eAAe,CAAC;gBACrB,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC;gBAC1B,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC;aAC7B,CAAC;YACF,cAAc,EACZ,KAAK,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,UAAU,EAAE,EAAE;YAC7D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CACF,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/secret/update.d.ts

@@ -0,0 +1,17 @@
+import { OpenXiangdaCommand } from "../../base.js";
+export default class SecretUpdate extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        revision: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "expires-at": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        status: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/secret/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/commands/secret/update.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,SAAqC;IACnD,MAAM,CAAC,IAAI;;MAA6C;IACxD,MAAM,CAAC,KAAK;;;;;;;MASV;IAEI,GAAG;CA4BV"}

package/dist/commands/secret/update.js

@@ -0,0 +1,37 @@
+import { Args, Flags } from "@oclif/core";
+import { OpenXiangdaCommand, workspaceFlags } from "../../base.js";
+export default class SecretUpdate extends OpenXiangdaCommand {
+    static summary = "按 revision 更新应用 Secret 元数据或启停状态";
+    static args = { name: Args.string({ required: true }) };
+    static flags = {
+        ...workspaceFlags,
+        environment: Flags.string({ required: true, summary: "目标 environmentKey" }),
+        revision: Flags.integer({ required: true, min: 1, summary: "当前 Secret revision" }),
+        description: Flags.string({ summary: "Secret 用途说明" }),
+        "expires-at": Flags.string({
+            summary: "ISO 8601 过期时间；传 none 清除",
+        }),
+        status: Flags.string({ options: ["active", "disabled"], summary: "启用或禁用" }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(SecretUpdate);
+        if (!flags.description && !flags["expires-at"] && !flags.status) {
+            this.error("至少指定 --description、--expires-at 或 --status 之一");
+        }
+        return this.present(await this.services.updateApplicationSecret(flags.cwd, flags.environment, args.name, {
+            expectedRevision: flags.revision,
+            ...(flags.description ? { description: flags.description } : {}),
+            ...(flags["expires-at"]
+                ? {
+                    expiresAt: flags["expires-at"] === "none"
+                        ? null
+                        : flags["expires-at"],
+                }
+                : {}),
+            ...(flags.status
+                ? { status: flags.status }
+                : {}),
+        }));
+    }
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/secret/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../src/commands/secret/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,GAAG,iCAAiC,CAAC;IACnD,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACxD,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC3E,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAClF,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACrD,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC;YACzB,OAAO,EAAE,yBAAyB;SACnC,CAAC;QACF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;KAC5E,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAChE,IAAI,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CACzC,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,IAAI,EACT;YACE,gBAAgB,EAAE,KAAK,CAAC,QAAQ;YAChC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC;gBACrB,CAAC,CAAC;oBACE,SAAS,EACP,KAAK,CAAC,YAAY,CAAC,KAAK,MAAM;wBAC5B,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;iBAC1B;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAA+B,EAAE;gBACnD,CAAC,CAAC,EAAE,CAAC;SACR,CACF,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/skill/install.d.ts

@@ -0,0 +1,11 @@
+import { OpenXiangdaCommand } from '../../base.js';
+export default class SkillInstall extends OpenXiangdaCommand {
+    static summary: string;
+    static flags: {
+        source: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        dest: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=install.d.ts.map

package/dist/commands/skill/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/commands/skill/install.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,SAAkC;IAChD,MAAM,CAAC,KAAK;;;;MAIV;IAEI,GAAG;CAqCV"}

package/dist/commands/skill/install.js

@@ -0,0 +1,52 @@
+import { Flags } from '@oclif/core';
+import { SCHEMA_VERSIONS } from 'openxiangda-contracts';
+import { homedir } from 'node:os';
+import { resolve } from 'node:path';
+import { installSkills, resolveDefaultSkillsRoot, validateSkills, } from 'openxiangda-skill-kit';
+import { OpenXiangdaCommand } from '../../base.js';
+export default class SkillInstall extends OpenXiangdaCommand {
+    static summary = '安装 OpenXiangda 2.0 AI Skills';
+    static flags = {
+        source: Flags.string({ summary: '自定义 Skill 源目录' }),
+        dest: Flags.string({ summary: '目标 skills 目录' }),
+        force: Flags.boolean({ summary: '覆盖同名已安装 Skill' }),
+    };
+    async run() {
+        const { flags } = await this.parse(SkillInstall);
+        const skillsRoot = resolve(flags.source || resolveDefaultSkillsRoot());
+        const issues = await validateSkills(skillsRoot);
+        if (issues.length > 0) {
+            return this.present({
+                ok: false,
+                operation: 'skill.install',
+                workspace: { appCode: 'global', root: process.cwd() },
+                diagnostics: issues.map(issue => ({
+                    schemaVersion: SCHEMA_VERSIONS.diagnostic,
+                    code: 'SKILL_VALIDATION_FAILED',
+                    severity: 'error',
+                    message: `${issue.skill}: ${issue.message}`,
+                    path: issue.file,
+                    retryable: false,
+                })),
+                nextActions: [],
+            });
+        }
+        const destination = flags.dest
+            ? resolve(flags.dest)
+            : resolve(process.env.CODEX_HOME || resolve(homedir(), '.codex'), 'skills');
+        const data = await installSkills({
+            skillsRoot,
+            destination,
+            force: flags.force,
+        });
+        return this.present({
+            ok: true,
+            operation: 'skill.install',
+            workspace: { appCode: 'global', root: process.cwd() },
+            data,
+            diagnostics: [],
+            nextActions: [],
+        });
+    }
+}
+//# sourceMappingURL=install.js.map

package/dist/commands/skill/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/commands/skill/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,GAAG,8BAA8B,CAAC;IAChD,MAAM,CAAC,KAAK,GAAG;QACb,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QAClD,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;QAC/C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;KACnD,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,OAAO,CAAC;gBAClB,EAAE,EAAE,KAAK;gBACT,SAAS,EAAE,eAAe;gBAC1B,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;gBACrD,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAChC,aAAa,EAAE,eAAe,CAAC,UAAU;oBACzC,IAAI,EAAE,yBAAyB;oBAC/B,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE;oBAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,SAAS,EAAE,KAAK;iBACjB,CAAC,CAAC;gBACH,WAAW,EAAE,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI;YAC5B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YACrB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC;YAC/B,UAAU;YACV,WAAW;YACX,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,eAAe;YAC1B,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;YACrD,IAAI;YACJ,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,EAAE;SAChB,CAAC,CAAC;IACL,CAAC"}

package/dist/commands/skill/validate.d.ts

@@ -0,0 +1,9 @@
+import { OpenXiangdaCommand } from '../../base.js';
+export default class SkillValidate extends OpenXiangdaCommand {
+    static summary: string;
+    static flags: {
+        source: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=validate.d.ts.map

package/dist/commands/skill/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/commands/skill/validate.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,kBAAkB;IAC3D,MAAM,CAAC,OAAO,SAAkC;IAChD,MAAM,CAAC,KAAK;;MAEV;IAEI,GAAG;CAoBV"}