openxiangda-cli 2.0.0-alpha.20 → 2.0.0-alpha.23

package/README.md

@@ -6,7 +6,8 @@ renders its `DevkitResult`; commands never invoke other commands or parse their
 stdout. React, Ant Design and editor runtimes are intentionally absent.
 
 The CLI includes application creation, deterministic contract generation,
-checks/tests/build/deploy, OAuth2 client lifecycle, platform-managed runtime
+checks/tests/build/deploy, Native role membership and relationship management,
+reserved application super-admin lifecycle, OAuth2 client lifecycle, platform-managed runtime
 credential status/rotation, environment Secret management, event operations
 and staged Workflow Provider rotation. Runtime rotation stages a credential by
 CAS and promotes the currently active immutable AppVersion, so no secret is

package/dist/base.d.ts

@@ -4,6 +4,8 @@ import { OpenXiangdaApplicationServices } from 'openxiangda-devkit-core';
 export declare const workspaceFlags: {
     cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
 };
+export declare const requiredRemoteEnvironmentFlag: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+export declare const optionalRemoteEnvironmentFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
 export declare const backendImageFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
 export declare abstract class OpenXiangdaCommand extends Command {
     static enableJsonFlag: boolean;

package/dist/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../src/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAEzE,eAAO,MAAM,cAAc;;CAE1B,CAAC;AAEF,eAAO,MAAM,gBAAgB,iHAI3B,CAAC;AAEH,8BAAsB,kBAAmB,SAAQ,OAAO;IACtD,MAAM,CAAC,cAAc,UAAQ;IAE7B,SAAS,CAAC,QAAQ,CAAC,QAAQ,iCAAwC;IAEnE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC;CAYhD"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../src/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAEzE,eAAO,MAAM,cAAc;;CAE1B,CAAC;AAEF,eAAO,MAAM,6BAA6B,qGAIxC,CAAC;AAEH,eAAO,MAAM,6BAA6B,iHAGxC,CAAC;AAEH,eAAO,MAAM,gBAAgB,iHAI3B,CAAC;AAEH,8BAAsB,kBAAmB,SAAQ,OAAO;IACtD,MAAM,CAAC,cAAc,UAAQ;IAE7B,SAAS,CAAC,QAAQ,CAAC,QAAQ,iCAAwC;IAEnE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC;CAYhD"}

package/dist/base.js

@@ -3,6 +3,15 @@ import { OpenXiangdaApplicationServices } from 'openxiangda-devkit-core';
 export const workspaceFlags = {
     cwd: Flags.string({ summary: '应用工作区目录', helpValue: '<directory>' }),
 };
+export const requiredRemoteEnvironmentFlag = Flags.string({
+    required: true,
+    options: ['preproduction', 'production'],
+    summary: '目标远端环境（preproduction 或 production）',
+});
+export const optionalRemoteEnvironmentFlag = Flags.string({
+    options: ['preproduction', 'production'],
+    summary: '按远端环境筛选',
+});
 export const backendImageFlag = Flags.string({
     summary: '已经推送的不可变后端 OCI image',
     helpValue: '<registry/repository@sha256:digest>',

package/dist/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../src/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAEzE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;CACpE,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,sBAAsB;IAC/B,SAAS,EAAE,qCAAqC;IAChD,GAAG,EAAE,2BAA2B;CACjC,CAAC,CAAC;AAEH,MAAM,OAAgB,kBAAmB,SAAQ,OAAO;IACtD,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;IAEV,QAAQ,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAEzD,OAAO,CAAC,MAA6B;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACzD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,IAAI,UAAU,CAAC,WAAW;gBAAE,IAAI,CAAC,GAAG,CAAC,OAAO,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC"}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../src/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAEzE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;CACpE,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,CAAC,MAAM,CAAC;IACxD,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC;IACxC,OAAO,EAAE,oCAAoC;CAC9C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,CAAC,MAAM,CAAC;IACxD,OAAO,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC;IACxC,OAAO,EAAE,SAAS;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,sBAAsB;IAC/B,SAAS,EAAE,qCAAqC;IAChD,GAAG,EAAE,2BAA2B;CACjC,CAAC,CAAC;AAEH,MAAM,OAAgB,kBAAmB,SAAQ,OAAO;IACtD,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;IAEV,QAAQ,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAEzD,OAAO,CAAC,MAA6B;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACzD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,IAAI,UAAU,CAAC,WAAW;gBAAE,IAAI,CAAC,GAAG,CAAC,OAAO,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC"}

package/dist/commands/app/create.js

@@ -9,7 +9,7 @@ export default class AppCreate extends OpenXiangdaCommand {
         name: Flags.string({ required: true, summary: "应用名称" }),
         install: Flags.boolean({ summary: "创建后安装依赖" }),
         "local-sdk": Flags.string({
-            summary: "使用本地 OpenXiangda 2.0 源码包，不经过 npm 发布",
+            summary: "把本地 OpenXiangda 2.0 SDK 打包为验收工件，不经过 npm 发布",
         }),
     };
     async run() {

package/dist/commands/app/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/commands/app/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,kBAAkB;IACvD,MAAM,CAAC,OAAO,GAAG,2BAA2B,CAAC;IAC7C,MAAM,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7D,MAAM,CAAC,KAAK,GAAG;QACb,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/D,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9C,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,OAAO,EAAE,qCAAqC;SAC/C,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;gBACpB,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;gBACtC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACtE,IAAI;YACJ,WAAW,EAAE,EAAE;YACf,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,MAAM;oBACb,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,uBAAuB;iBAChD;aACF;SACF,CAAC,CAAC;IACL,CAAC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/commands/app/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,kBAAkB;IACvD,MAAM,CAAC,OAAO,GAAG,2BAA2B,CAAC;IAC7C,MAAM,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7D,MAAM,CAAC,KAAK,GAAG;QACb,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/D,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9C,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,OAAO,EAAE,4CAA4C;SACtD,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;gBACpB,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;gBACtC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACtE,IAAI;YACJ,WAAW,EAAE,EAAE;YACf,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,MAAM;oBACb,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,uBAAuB;iBAChD;aACF;SACF,CAAC,CAAC;IACL,CAAC"}

package/dist/commands/app/provision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../../src/commands/app/provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,SAAsB;IACpC,MAAM,CAAC,KAAK;;MAAkB;IAExB,GAAG;CAIV"}
+{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../../src/commands/app/provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,SAA8B;IAC5C,MAAM,CAAC,KAAK;;MAAkB;IAExB,GAAG;CAIV"}

package/dist/commands/app/provision.js

@@ -1,6 +1,6 @@
 import { OpenXiangdaCommand, workspaceFlags } from "../../base.js";
 export default class AppProvision extends OpenXiangdaCommand {
-    static summary = "在平台幂等创建 2.0 应用身份";
+    static summary = "在平台幂等创建 2.0 应用身份和预发/生产环境";
     static flags = workspaceFlags;
     async run() {
         const { flags } = await this.parse(AppProvision);

package/dist/commands/app/provision.js.map

@@ -1 +1 @@
-{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../../src/commands/app/provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,GAAG,kBAAkB,CAAC;IACpC,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC;IAE9B,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC"}
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../../src/commands/app/provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,kBAAkB;IAC1D,MAAM,CAAC,OAAO,GAAG,0BAA0B,CAAC;IAC5C,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC;IAE9B,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC"}

package/dist/commands/authz/membership/grant.d.ts

@@ -0,0 +1,16 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class AuthzMembershipGrant extends OpenXiangdaCommand {
+    static summary: string;
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        user: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        role: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        scope: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "valid-from": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "valid-to": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "operation-id": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=grant.d.ts.map

package/dist/commands/authz/membership/grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../../../src/commands/authz/membership/grant.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,kBAAkB;IAClE,MAAM,CAAC,OAAO,SAA2B;IACzC,MAAM,CAAC,KAAK;;;;;;;;;MAYV;IAEI,GAAG;CAcV"}

package/dist/commands/authz/membership/grant.js

@@ -0,0 +1,32 @@
+import { Flags } from "@oclif/core";
+import { OpenXiangdaCommand, requiredRemoteEnvironmentFlag, workspaceFlags, } from "../../../base.js";
+import { mutationOperationId, parseScopeGrants } from "../../../native-authz.js";
+export default class AuthzMembershipGrant extends OpenXiangdaCommand {
+    static summary = "为用户授予单一 Native 应用业务角色";
+    static flags = {
+        ...workspaceFlags,
+        environment: requiredRemoteEnvironmentFlag,
+        user: Flags.string({ required: true, summary: "用户 ID" }),
+        role: Flags.string({ required: true, summary: "业务角色 code" }),
+        scope: Flags.string({
+            multiple: true,
+            summary: "数据范围，可重复传入 dimension=value1,value2",
+        }),
+        "valid-from": Flags.string({ summary: "可选 ISO 8601 生效时间" }),
+        "valid-to": Flags.string({ summary: "可选 ISO 8601 失效时间" }),
+        "operation-id": Flags.string({ summary: "可选 UUID 幂等操作 ID" }),
+    };
+    async run() {
+        const { flags } = await this.parse(AuthzMembershipGrant);
+        return this.present(await this.services.createNativeRoleMembership(flags.cwd, {
+            environmentKey: flags.environment,
+            operationId: mutationOperationId(flags["operation-id"]),
+            userId: flags.user,
+            roleCode: flags.role,
+            scopeGrants: parseScopeGrants(flags.scope),
+            ...(flags["valid-from"] ? { validFrom: flags["valid-from"] } : {}),
+            ...(flags["valid-to"] ? { validTo: flags["valid-to"] } : {}),
+        }));
+    }
+}
+//# sourceMappingURL=grant.js.map

package/dist/commands/authz/membership/grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.js","sourceRoot":"","sources":["../../../../src/commands/authz/membership/grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjF,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,kBAAkB;IAClE,MAAM,CAAC,OAAO,GAAG,uBAAuB,CAAC;IACzC,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACxD,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAC5D,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,oCAAoC;SAC9C,CAAC;QACF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAC3D,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACzD,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;KAC7D,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,KAAK,CAAC,GAAG,EAAE;YACxD,cAAc,EAAE,KAAK,CAAC,WAA6C;YACnE,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACvD,MAAM,EAAE,KAAK,CAAC,IAAI;YAClB,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1C,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CACH,CAAC;IACJ,CAAC"}

package/dist/commands/authz/membership/list.d.ts

@@ -0,0 +1,16 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class AuthzMembershipList extends OpenXiangdaCommand {
+    static summary: string;
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        user: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        role: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        keyword: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        status: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        limit: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        offset: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/authz/membership/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../src/commands/authz/membership/list.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,kBAAkB;IACjE,MAAM,CAAC,OAAO,SAAwB;IACtC,MAAM,CAAC,KAAK;;;;;;;;;MAYV;IAEI,GAAG;CAqBV"}

package/dist/commands/authz/membership/list.js

@@ -0,0 +1,34 @@
+import { Flags } from "@oclif/core";
+import { OpenXiangdaCommand, requiredRemoteEnvironmentFlag, workspaceFlags, } from "../../../base.js";
+export default class AuthzMembershipList extends OpenXiangdaCommand {
+    static summary = "分页查询 Native 应用角色成员";
+    static flags = {
+        ...workspaceFlags,
+        environment: requiredRemoteEnvironmentFlag,
+        user: Flags.string({ summary: "按用户 ID 过滤" }),
+        role: Flags.string({ summary: "按业务角色 code 过滤" }),
+        keyword: Flags.string({ summary: "按用户或角色搜索" }),
+        status: Flags.string({
+            options: ["active", "revoked", "expired"],
+            summary: "成员状态",
+        }),
+        limit: Flags.integer({ min: 1, max: 100, default: 50 }),
+        offset: Flags.integer({ min: 0, default: 0 }),
+    };
+    async run() {
+        const { flags } = await this.parse(AuthzMembershipList);
+        return this.present(await this.services.nativeRoleMemberships(flags.cwd, flags.environment, {
+            ...(flags.user ? { userId: flags.user } : {}),
+            ...(flags.role ? { roleCode: flags.role } : {}),
+            ...(flags.keyword ? { keyword: flags.keyword } : {}),
+            ...(flags.status
+                ? {
+                    status: flags.status,
+                }
+                : {}),
+            limit: flags.limit,
+            offset: flags.offset,
+        }));
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/authz/membership/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../src/commands/authz/membership/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,kBAAkB;IACjE,MAAM,CAAC,OAAO,GAAG,oBAAoB,CAAC;IACtC,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAC5C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAC9C,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC;YACzC,OAAO,EAAE,MAAM;SAChB,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACvD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;KAC9C,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CACvC,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,WAAW,EACjB;YACE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC;oBACE,MAAM,EAAE,KAAK,CAAC,MAA0C;iBACzD;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CACF,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/authz/membership/revoke.d.ts

@@ -0,0 +1,15 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class AuthzMembershipRevoke extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        membershipId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        revision: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        "operation-id": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=revoke.d.ts.map

package/dist/commands/authz/membership/revoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../../../src/commands/authz/membership/revoke.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,CAAC,OAAO,OAAO,qBAAsB,SAAQ,kBAAkB;IACnE,MAAM,CAAC,OAAO,SAA0B;IACxC,MAAM,CAAC,IAAI;;MAAqD;IAChE,MAAM,CAAC,KAAK;;;;;MAKV;IAEI,GAAG;CAgBV"}

package/dist/commands/authz/membership/revoke.js

@@ -0,0 +1,22 @@
+import { Args, Flags } from "@oclif/core";
+import { OpenXiangdaCommand, requiredRemoteEnvironmentFlag, workspaceFlags, } from "../../../base.js";
+import { mutationOperationId } from "../../../native-authz.js";
+export default class AuthzMembershipRevoke extends OpenXiangdaCommand {
+    static summary = "CAS 撤销 Native 应用角色成员";
+    static args = { membershipId: Args.string({ required: true }) };
+    static flags = {
+        ...workspaceFlags,
+        environment: requiredRemoteEnvironmentFlag,
+        revision: Flags.integer({ required: true, min: 1 }),
+        "operation-id": Flags.string({ summary: "可选 UUID 幂等操作 ID" }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(AuthzMembershipRevoke);
+        return this.present(await this.services.revokeNativeRoleMembership(flags.cwd, args.membershipId, {
+            environmentKey: flags.environment,
+            operationId: mutationOperationId(flags["operation-id"]),
+            expectedRevision: flags.revision,
+        }));
+    }
+}
+//# sourceMappingURL=revoke.js.map

package/dist/commands/authz/membership/revoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke.js","sourceRoot":"","sources":["../../../../src/commands/authz/membership/revoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,qBAAsB,SAAQ,kBAAkB;IACnE,MAAM,CAAC,OAAO,GAAG,sBAAsB,CAAC;IACxC,MAAM,CAAC,IAAI,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChE,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACnD,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;KAC7D,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAC5C,KAAK,CAAC,GAAG,EACT,IAAI,CAAC,YAAY,EACjB;YACE,cAAc,EAAE,KAAK,CAAC,WAEN;YAChB,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACvD,gBAAgB,EAAE,KAAK,CAAC,QAAQ;SACjC,CACF,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/authz/membership/update.d.ts

@@ -0,0 +1,18 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class AuthzMembershipUpdate extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        membershipId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        revision: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        scope: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "valid-from": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "valid-to": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "operation-id": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/authz/membership/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/commands/authz/membership/update.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,CAAC,OAAO,OAAO,qBAAsB,SAAQ,kBAAkB;IACnE,MAAM,CAAC,OAAO,SAAiC;IAC/C,MAAM,CAAC,IAAI;;MAAqD;IAChE,MAAM,CAAC,KAAK;;;;;;;;MAWV;IAEI,GAAG;CAmBV"}

package/dist/commands/authz/membership/update.js

@@ -0,0 +1,31 @@
+import { Args, Flags } from "@oclif/core";
+import { OpenXiangdaCommand, requiredRemoteEnvironmentFlag, workspaceFlags, } from "../../../base.js";
+import { mutationOperationId, parseScopeGrants } from "../../../native-authz.js";
+export default class AuthzMembershipUpdate extends OpenXiangdaCommand {
+    static summary = "CAS 更新 Native 角色成员的数据范围与有效期";
+    static args = { membershipId: Args.string({ required: true }) };
+    static flags = {
+        ...workspaceFlags,
+        environment: requiredRemoteEnvironmentFlag,
+        revision: Flags.integer({ required: true, min: 1 }),
+        scope: Flags.string({
+            multiple: true,
+            summary: "完整替换数据范围，dimension=value1,value2",
+        }),
+        "valid-from": Flags.string({ summary: "可选 ISO 8601 生效时间" }),
+        "valid-to": Flags.string({ summary: "可选 ISO 8601 失效时间" }),
+        "operation-id": Flags.string({ summary: "可选 UUID 幂等操作 ID" }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(AuthzMembershipUpdate);
+        return this.present(await this.services.updateNativeRoleMembership(flags.cwd, args.membershipId, {
+            environmentKey: flags.environment,
+            operationId: mutationOperationId(flags["operation-id"]),
+            expectedRevision: flags.revision,
+            scopeGrants: parseScopeGrants(flags.scope),
+            ...(flags["valid-from"] ? { validFrom: flags["valid-from"] } : {}),
+            ...(flags["valid-to"] ? { validTo: flags["valid-to"] } : {}),
+        }));
+    }
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/authz/membership/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../src/commands/authz/membership/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjF,MAAM,CAAC,OAAO,OAAO,qBAAsB,SAAQ,kBAAkB;IACnE,MAAM,CAAC,OAAO,GAAG,6BAA6B,CAAC;IAC/C,MAAM,CAAC,IAAI,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChE,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACnD,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,kCAAkC;SAC5C,CAAC;QACF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAC3D,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACzD,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;KAC7D,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAC5C,KAAK,CAAC,GAAG,EACT,IAAI,CAAC,YAAY,EACjB;YACE,cAAc,EAAE,KAAK,CAAC,WAEN;YAChB,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACvD,gBAAgB,EAAE,KAAK,CAAC,QAAQ;YAChC,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1C,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CACF,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/authz/relationship/grant.d.ts

@@ -0,0 +1,20 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class AuthzRelationshipGrant extends OpenXiangdaCommand {
+    static summary: string;
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        "subject-type": import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        "subject-key": import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        relation: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        resource: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        "resource-id": import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        operation: import("@oclif/core/interfaces").OptionFlag<string[], import("@oclif/core/interfaces").CustomOptions>;
+        source: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        "valid-from": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "valid-to": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "operation-id": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=grant.d.ts.map

package/dist/commands/authz/relationship/grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../../../src/commands/authz/relationship/grant.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,CAAC,OAAO,OAAO,sBAAuB,SAAQ,kBAAkB;IACpE,MAAM,CAAC,OAAO,SAAsB;IACpC,MAAM,CAAC,KAAK;;;;;;;;;;;;;MAgBV;IAEI,GAAG;CAkBV"}

package/dist/commands/authz/relationship/grant.js

@@ -0,0 +1,40 @@
+import { Flags } from "@oclif/core";
+import { OpenXiangdaCommand, requiredRemoteEnvironmentFlag, workspaceFlags, } from "../../../base.js";
+import { mutationOperationId } from "../../../native-authz.js";
+export default class AuthzRelationshipGrant extends OpenXiangdaCommand {
+    static summary = "创建 Native 资源关系授权";
+    static flags = {
+        ...workspaceFlags,
+        environment: requiredRemoteEnvironmentFlag,
+        "subject-type": Flags.string({
+            required: true,
+            options: ["user", "role_membership"],
+        }),
+        "subject-key": Flags.string({ required: true }),
+        relation: Flags.string({ required: true }),
+        resource: Flags.string({ required: true }),
+        "resource-id": Flags.string({ required: true }),
+        operation: Flags.string({ multiple: true, default: ["*"] }),
+        source: Flags.string({ default: "manual" }),
+        "valid-from": Flags.string(),
+        "valid-to": Flags.string(),
+        "operation-id": Flags.string({ summary: "可选 UUID 幂等操作 ID" }),
+    };
+    async run() {
+        const { flags } = await this.parse(AuthzRelationshipGrant);
+        return this.present(await this.services.createNativeRelationshipGrant(flags.cwd, {
+            environmentKey: flags.environment,
+            operationId: mutationOperationId(flags["operation-id"]),
+            subjectType: flags["subject-type"],
+            subjectKey: flags["subject-key"],
+            relationCode: flags.relation,
+            resourceCode: flags.resource,
+            resourceId: flags["resource-id"],
+            operations: flags.operation,
+            sourceCode: flags.source,
+            ...(flags["valid-from"] ? { validFrom: flags["valid-from"] } : {}),
+            ...(flags["valid-to"] ? { validTo: flags["valid-to"] } : {}),
+        }));
+    }
+}
+//# sourceMappingURL=grant.js.map

package/dist/commands/authz/relationship/grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.js","sourceRoot":"","sources":["../../../../src/commands/authz/relationship/grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,sBAAuB,SAAQ,kBAAkB;IACpE,MAAM,CAAC,OAAO,GAAG,kBAAkB,CAAC;IACpC,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,6BAA6B;QAC1C,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC;YAC3B,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC;SACrC,CAAC;QACF,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/C,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC1C,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC1C,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/C,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC3C,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;QAC5B,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;QAC1B,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;KAC7D,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3D,cAAc,EAAE,KAAK,CAAC,WAA6C;YACnE,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACvD,WAAW,EAAE,KAAK,CAAC,cAAc,CAA+B;YAChE,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC;YAChC,YAAY,EAAE,KAAK,CAAC,QAAQ;YAC5B,YAAY,EAAE,KAAK,CAAC,QAAQ;YAC5B,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC;YAChC,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CACH,CAAC;IACJ,CAAC"}

package/dist/commands/authz/relationship/list.d.ts

@@ -0,0 +1,18 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class AuthzRelationshipList extends OpenXiangdaCommand {
+    static summary: string;
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        "subject-type": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "subject-key": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        relation: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        resource: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "resource-id": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        status: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        limit: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        offset: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/authz/relationship/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../src/commands/authz/relationship/list.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,OAAO,OAAO,qBAAsB,SAAQ,kBAAkB;IACnE,MAAM,CAAC,OAAO,SAAwB;IACtC,MAAM,CAAC,KAAK;;;;;;;;;;;MAWV;IAEI,GAAG;CAiCV"}

package/dist/commands/authz/relationship/list.js

@@ -0,0 +1,43 @@
+import { Flags } from "@oclif/core";
+import { OpenXiangdaCommand, requiredRemoteEnvironmentFlag, workspaceFlags, } from "../../../base.js";
+export default class AuthzRelationshipList extends OpenXiangdaCommand {
+    static summary = "分页查询 Native 资源关系授权";
+    static flags = {
+        ...workspaceFlags,
+        environment: requiredRemoteEnvironmentFlag,
+        "subject-type": Flags.string({ options: ["user", "role_membership"] }),
+        "subject-key": Flags.string(),
+        relation: Flags.string(),
+        resource: Flags.string(),
+        "resource-id": Flags.string(),
+        status: Flags.string({ options: ["active", "revoked", "expired"] }),
+        limit: Flags.integer({ min: 1, max: 100, default: 50 }),
+        offset: Flags.integer({ min: 0, default: 0 }),
+    };
+    async run() {
+        const { flags } = await this.parse(AuthzRelationshipList);
+        return this.present(await this.services.nativeRelationshipGrants(flags.cwd, flags.environment, {
+            ...(flags["subject-type"]
+                ? {
+                    subjectType: flags["subject-type"],
+                }
+                : {}),
+            ...(flags["subject-key"]
+                ? { subjectKey: flags["subject-key"] }
+                : {}),
+            ...(flags.relation ? { relationCode: flags.relation } : {}),
+            ...(flags.resource ? { resourceCode: flags.resource } : {}),
+            ...(flags["resource-id"]
+                ? { resourceId: flags["resource-id"] }
+                : {}),
+            ...(flags.status
+                ? {
+                    status: flags.status,
+                }
+                : {}),
+            limit: flags.limit,
+            offset: flags.offset,
+        }));
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/authz/relationship/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../src/commands/authz/relationship/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,OAAO,OAAO,qBAAsB,SAAQ,kBAAkB;IACnE,MAAM,CAAC,OAAO,GAAG,oBAAoB,CAAC;IACtC,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,6BAA6B;QAC1C,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACtE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE;QAC7B,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE;QACxB,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE;QACxB,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE;QAC7B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QACnE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACvD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;KAC9C,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAC1C,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,WAAW,EACjB;YACE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;gBACvB,CAAC,CAAC;oBACE,WAAW,EAAE,KAAK,CAAC,cAAc,CAEZ;iBACtB;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;gBACtB,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;gBACtB,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC;oBACE,MAAM,EAAE,KAAK,CAAC,MAA0C;iBACzD;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CACF,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/authz/relationship/revoke.d.ts

@@ -0,0 +1,15 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class AuthzRelationshipRevoke extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        grantId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        revision: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        "operation-id": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=revoke.d.ts.map

package/dist/commands/authz/relationship/revoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../../../src/commands/authz/relationship/revoke.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,CAAC,OAAO,OAAO,uBAAwB,SAAQ,kBAAkB;IACrE,MAAM,CAAC,OAAO,SAA0B;IACxC,MAAM,CAAC,IAAI;;MAAgD;IAC3D,MAAM,CAAC,KAAK;;;;;MAKV;IAEI,GAAG;CAgBV"}

package/dist/commands/authz/relationship/revoke.js

@@ -0,0 +1,22 @@
+import { Args, Flags } from "@oclif/core";
+import { OpenXiangdaCommand, requiredRemoteEnvironmentFlag, workspaceFlags, } from "../../../base.js";
+import { mutationOperationId } from "../../../native-authz.js";
+export default class AuthzRelationshipRevoke extends OpenXiangdaCommand {
+    static summary = "CAS 撤销 Native 资源关系授权";
+    static args = { grantId: Args.string({ required: true }) };
+    static flags = {
+        ...workspaceFlags,
+        environment: requiredRemoteEnvironmentFlag,
+        revision: Flags.integer({ required: true, min: 1 }),
+        "operation-id": Flags.string({ summary: "可选 UUID 幂等操作 ID" }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(AuthzRelationshipRevoke);
+        return this.present(await this.services.revokeNativeRelationshipGrant(flags.cwd, args.grantId, {
+            environmentKey: flags.environment,
+            operationId: mutationOperationId(flags["operation-id"]),
+            expectedRevision: flags.revision,
+        }));
+    }
+}
+//# sourceMappingURL=revoke.js.map

package/dist/commands/authz/relationship/revoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke.js","sourceRoot":"","sources":["../../../../src/commands/authz/relationship/revoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,uBAAwB,SAAQ,kBAAkB;IACrE,MAAM,CAAC,OAAO,GAAG,sBAAsB,CAAC;IACxC,MAAM,CAAC,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3D,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACnD,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;KAC7D,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAC/C,KAAK,CAAC,GAAG,EACT,IAAI,CAAC,OAAO,EACZ;YACE,cAAc,EAAE,KAAK,CAAC,WAEN;YAChB,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACvD,gBAAgB,EAAE,KAAK,CAAC,QAAQ;SACjC,CACF,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/authz/relationship/update.d.ts

@@ -0,0 +1,18 @@
+import { OpenXiangdaCommand } from "../../../base.js";
+export default class AuthzRelationshipUpdate extends OpenXiangdaCommand {
+    static summary: string;
+    static args: {
+        grantId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        revision: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        operation: import("@oclif/core/interfaces").OptionFlag<string[], import("@oclif/core/interfaces").CustomOptions>;
+        "valid-from": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "valid-to": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "operation-id": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("openxiangda-contracts").DevkitResult<unknown>>;
+}
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/authz/relationship/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/commands/authz/relationship/update.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAGnB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,CAAC,OAAO,OAAO,uBAAwB,SAAQ,kBAAkB;IACrE,MAAM,CAAC,OAAO,SAA0B;IACxC,MAAM,CAAC,IAAI;;MAAgD;IAC3D,MAAM,CAAC,KAAK;;;;;;;;MAQV;IAEI,GAAG;CAmBV"}

package/dist/commands/authz/relationship/update.js

@@ -0,0 +1,28 @@
+import { Args, Flags } from "@oclif/core";
+import { OpenXiangdaCommand, requiredRemoteEnvironmentFlag, workspaceFlags, } from "../../../base.js";
+import { mutationOperationId } from "../../../native-authz.js";
+export default class AuthzRelationshipUpdate extends OpenXiangdaCommand {
+    static summary = "CAS 更新 Native 资源关系授权";
+    static args = { grantId: Args.string({ required: true }) };
+    static flags = {
+        ...workspaceFlags,
+        environment: requiredRemoteEnvironmentFlag,
+        revision: Flags.integer({ required: true, min: 1 }),
+        operation: Flags.string({ multiple: true, default: ["*"] }),
+        "valid-from": Flags.string(),
+        "valid-to": Flags.string(),
+        "operation-id": Flags.string({ summary: "可选 UUID 幂等操作 ID" }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(AuthzRelationshipUpdate);
+        return this.present(await this.services.updateNativeRelationshipGrant(flags.cwd, args.grantId, {
+            environmentKey: flags.environment,
+            operationId: mutationOperationId(flags["operation-id"]),
+            expectedRevision: flags.revision,
+            operations: flags.operation,
+            ...(flags["valid-from"] ? { validFrom: flags["valid-from"] } : {}),
+            ...(flags["valid-to"] ? { validTo: flags["valid-to"] } : {}),
+        }));
+    }
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/authz/relationship/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../src/commands/authz/relationship/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,uBAAwB,SAAQ,kBAAkB;IACrE,MAAM,CAAC,OAAO,GAAG,sBAAsB,CAAC;IACxC,MAAM,CAAC,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3D,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,cAAc;QACjB,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACnD,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;QAC5B,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;QAC1B,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;KAC7D,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAC/C,KAAK,CAAC,GAAG,EACT,IAAI,CAAC,OAAO,EACZ;YACE,cAAc,EAAE,KAAK,CAAC,WAEN;YAChB,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACvD,gBAAgB,EAAE,KAAK,CAAC,QAAQ;YAChC,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CACF,CACF,CAAC;IACJ,CAAC"}