@ledgerhq/vault-cli 1.14.2 → 1.15.0

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
-@ledgerhq/vault-cli:build: cache hit, replaying output 6f6ef23db1700fb7
+@ledgerhq/vault-cli:build: cache hit, replaying output 16bff0e5826675b6
 @ledgerhq/vault-cli:build: 
-@ledgerhq/vault-cli:build: > @ledgerhq/vault-cli@1.14.2 build /home/runner/work/vault-ts/vault-ts/apps/cli
+@ledgerhq/vault-cli:build: > @ledgerhq/vault-cli@1.15.0 build /home/runner/work/vault-ts/vault-ts/apps/cli
 @ledgerhq/vault-cli:build: > tsc && chmod +x bin/index.js
 @ledgerhq/vault-cli:build: 

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @ledgerhq/vault-cli
 
+## 1.15.0
+
+### Minor Changes
+
+- 41de09a: Add ability to backup & restore HSM compartment
+
+### Patch Changes
+
+- Updated dependencies [17b3731]
+- Updated dependencies [41de09a]
+  - @ledgerhq/vault-common@1.17.0
+
 ## 1.14.2
 
 ### Patch Changes

package/bin/__tests__/backupCompartment.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backupCompartment.test.d.ts.map

package/bin/__tests__/backupCompartment.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupCompartment.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/backupCompartment.test.ts"],"names":[],"mappings":""}

package/bin/__tests__/backupCompartment.test.js

@@ -0,0 +1,84 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const createHSMBridge = __importStar(require("@ledgerhq/vault-common/lib/createHSMBridge"));
+const fs_1 = __importDefault(require("fs"));
+const backupCompartment_1 = __importDefault(require("../commands/backupCompartment"));
+describe("backupCompartment", () => {
+    beforeEach(() => {
+        jest.spyOn(console, "log").mockImplementation();
+        jest.spyOn(fs_1.default, "readFileSync").mockReturnValue("<cert>");
+    });
+    afterEach(() => {
+        jest.restoreAllMocks();
+    });
+    it("should throw if no HSM cert given", () => __awaiter(void 0, void 0, void 0, function* () {
+        let err;
+        try {
+            yield backupCompartment_1.default.run({
+                compartment: 1,
+                hsm: "<hsm>",
+                hsmCert: undefined,
+            });
+        }
+        catch (e) {
+            err = e;
+        }
+        expect(err).toEqual(new Error("You must specify the path to your HSM certificate in your environment variable VAULT_HSM_CLIENT_CERT_PATH or use the --hsmCert flag"));
+    }));
+    it("should backup a compartment", () => __awaiter(void 0, void 0, void 0, function* () {
+        const fakeBridge = {
+            backupCompartment: jest.fn(),
+            restoreCompartment: jest.fn(),
+            resetCompartment: jest.fn(),
+        };
+        const createHSMBridgeSpy = jest.spyOn(createHSMBridge, "default").mockReturnValue(fakeBridge);
+        yield backupCompartment_1.default.run({
+            compartment: 42,
+            hsm: "<hsm>",
+            hsmCert: "abcde",
+            hsmCertPassword: "1234",
+        });
+        expect(createHSMBridgeSpy).toHaveBeenCalledWith({
+            hsmCert: "<cert>",
+            hsmCertPassword: "1234",
+            hsmEndpoint: "<hsm>",
+        });
+        expect(fakeBridge.backupCompartment).toHaveBeenCalledWith(42);
+    }));
+});
+//# sourceMappingURL=backupCompartment.test.js.map

package/bin/__tests__/backupCompartment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupCompartment.test.js","sourceRoot":"","sources":["../../src/__tests__/backupCompartment.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4FAA8E;AAC9E,4CAAoB;AAEpB,sFAA8D;AAE9D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,YAAE,EAAE,cAAc,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAS,EAAE;QACjD,IAAI,GAAG,CAAC;QACR,IAAI;YACF,MAAM,2BAAiB,CAAC,GAAG,CAAC;gBAC1B,WAAW,EAAE,CAAC;gBACd,GAAG,EAAE,OAAO;gBAEZ,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;SACJ;QAAC,OAAO,CAAC,EAAE;YACV,GAAG,GAAG,CAAC,CAAC;SACT;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CACjB,IAAI,KAAK,CACP,qIAAqI,CACtI,CACF,CAAC;IACJ,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAS,EAAE;QAC3C,MAAM,UAAU,GAAG;YACjB,iBAAiB,EAAE,IAAI,CAAC,EAAE,EAAE;YAC5B,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE;YAC7B,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE;SAC5B,CAAC;QACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAC9F,MAAM,2BAAiB,CAAC,GAAG,CAAC;YAC1B,WAAW,EAAE,EAAE;YACf,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAAC;YAC9C,OAAO,EAAE,QAAQ;YACjB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,OAAO;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC,CAAA,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/bin/__tests__/restoreCompartment.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=restoreCompartment.test.d.ts.map

package/bin/__tests__/restoreCompartment.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restoreCompartment.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/restoreCompartment.test.ts"],"names":[],"mappings":""}

package/bin/__tests__/restoreCompartment.test.js

@@ -0,0 +1,92 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const createHSMBridge = __importStar(require("@ledgerhq/vault-common/lib/createHSMBridge"));
+const fs_1 = __importDefault(require("fs"));
+const restoreCompartment_1 = __importDefault(require("../commands/restoreCompartment"));
+const logger_1 = __importDefault(require("../logger"));
+describe("restoreCompartment", () => {
+    beforeEach(() => {
+        jest.spyOn(console, "log").mockImplementation();
+    });
+    afterEach(() => {
+        jest.restoreAllMocks();
+    });
+    it("should throw if no HSM cert given", () => __awaiter(void 0, void 0, void 0, function* () {
+        let err;
+        try {
+            yield restoreCompartment_1.default.run({
+                compartment: 1,
+                hsm: "<hsm>",
+                hsmCert: undefined,
+            });
+        }
+        catch (e) {
+            err = e;
+        }
+        expect(err).toEqual(new Error("You must specify the path to your HSM certificate in your environment variable VAULT_HSM_CLIENT_CERT_PATH or use the --hsmCert flag"));
+    }));
+    it("should restore a compartment", () => __awaiter(void 0, void 0, void 0, function* () {
+        jest
+            .spyOn(fs_1.default, "readFileSync")
+            .mockReturnValueOnce("<cert>")
+            .mockReturnValue('{"counters":"1234","internalfs":"abcdef"}');
+        const fakeBridge = {
+            backupCompartment: jest.fn(),
+            restoreCompartment: jest.fn(),
+            resetCompartment: jest.fn(),
+        };
+        const createHSMBridgeSpy = jest.spyOn(createHSMBridge, "default").mockReturnValue(fakeBridge);
+        yield restoreCompartment_1.default.run({
+            backupFile: "/path/to/file",
+            compartment: 42,
+            hsm: "<hsm>",
+            hsmCert: "abcde",
+            hsmCertPassword: "1234",
+        });
+        expect(createHSMBridgeSpy).toHaveBeenCalledWith({
+            hsmCert: "<cert>",
+            hsmCertPassword: "1234",
+            hsmEndpoint: "<hsm>",
+        });
+        expect(fakeBridge.restoreCompartment).toHaveBeenCalledWith(42, {
+            counters: "1234",
+            internalfs: "abcdef",
+        }, { logger: logger_1.default });
+    }));
+});
+//# sourceMappingURL=restoreCompartment.test.js.map

package/bin/__tests__/restoreCompartment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restoreCompartment.test.js","sourceRoot":"","sources":["../../src/__tests__/restoreCompartment.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4FAA8E;AAC9E,4CAAoB;AAEpB,wFAAgE;AAChE,uDAA+B;AAE/B,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAS,EAAE;QACjD,IAAI,GAAG,CAAC;QACR,IAAI;YACF,MAAM,4BAAkB,CAAC,GAAG,CAAC;gBAC3B,WAAW,EAAE,CAAC;gBACd,GAAG,EAAE,OAAO;gBAEZ,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;SACJ;QAAC,OAAO,CAAC,EAAE;YACV,GAAG,GAAG,CAAC,CAAC;SACT;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CACjB,IAAI,KAAK,CACP,qIAAqI,CACtI,CACF,CAAC;IACJ,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAS,EAAE;QAC5C,IAAI;aACD,KAAK,CAAC,YAAE,EAAE,cAAc,CAAC;aACzB,mBAAmB,CAAC,QAAQ,CAAC;aAC7B,eAAe,CAAC,2CAA2C,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG;YACjB,iBAAiB,EAAE,IAAI,CAAC,EAAE,EAAE;YAC5B,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE;YAC7B,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE;SAC5B,CAAC;QACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAC9F,MAAM,4BAAkB,CAAC,GAAG,CAAC;YAC3B,UAAU,EAAE,eAAe;YAC3B,WAAW,EAAE,EAAE;YACf,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAAC;YAC9C,OAAO,EAAE,QAAQ;YACjB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,OAAO;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CACxD,EAAE,EACF;YACE,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,QAAQ;SACrB,EACD,EAAE,MAAM,EAAN,gBAAM,EAAE,CACX,CAAC;IACJ,CAAC,CAAA,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/bin/commands/backupCompartment.d.ts

@@ -0,0 +1,31 @@
+export declare type Options = {
+    compartment: number;
+    hsm: string;
+    hsmCert: string;
+    hsmCertPassword: string;
+};
+declare const _default: {
+    command: string;
+    description: string;
+    help: {
+        content: string;
+    }[];
+    options: ({
+        name: string;
+        alias: string;
+        type: NumberConstructor;
+        description: string;
+        defaultValue: string | undefined;
+        required: boolean;
+    } | {
+        name: string;
+        type: StringConstructor;
+        description: string;
+        defaultValue: string | undefined;
+        required: boolean;
+        alias?: undefined;
+    })[];
+    run: (options: Options) => Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=backupCompartment.d.ts.map

package/bin/commands/backupCompartment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupCompartment.d.ts","sourceRoot":"","sources":["../../src/commands/backupCompartment.ts"],"names":[],"mappings":"AAGA,oBAAY,OAAO,GAAG;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;;;;;;;;;;;;;;;;;;;;;;mBAyCqB,OAAO,KAAG,QAAQ,IAAI,CAAC;;AAvC9C,wBA+DE"}

package/bin/commands/backupCompartment.js

@@ -0,0 +1,76 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const createHSMBridge_1 = __importDefault(require("@ledgerhq/vault-common/lib/createHSMBridge"));
+const fs_1 = __importDefault(require("fs"));
+exports.default = {
+    command: "backupCompartment",
+    description: "Backup HSM simu compartment",
+    help: [
+        {
+            content: "{grey $} ledger-vault backupCompartment --cid 123",
+        },
+    ],
+    options: [
+        {
+            name: "compartment",
+            alias: "c",
+            type: Number,
+            description: "HSM compartment ID {blue $VAULT_COMPARTMENT_ID}",
+            defaultValue: process.env.VAULT_COMPARTMENT_ID,
+            required: true,
+        },
+        {
+            name: "hsm",
+            type: String,
+            description: "HSM endpoint {blue $VAULT_HSM_ENDPOINT}",
+            defaultValue: process.env.VAULT_HSM_ENDPOINT,
+            required: true,
+        },
+        {
+            name: "hsmCert",
+            type: String,
+            description: "Path to HSM certificate {blue $VAULT_HSM_CLIENT_CERT_PATH}",
+            defaultValue: process.env.VAULT_HSM_CLIENT_CERT_PATH,
+            required: true,
+        },
+        {
+            name: "hsmCertPassword",
+            type: String,
+            description: "HSM certificate password {blue $VAULT_HSM_CLIENT_CERT_PWD}",
+            defaultValue: process.env.VAULT_HSM_CLIENT_CERT_PWD,
+            required: true,
+        },
+    ],
+    run: (options) => __awaiter(void 0, void 0, void 0, function* () {
+        if (!options.hsmCert) {
+            throw new Error("You must specify the path to your HSM certificate in your environment variable VAULT_HSM_CLIENT_CERT_PATH or use the --hsmCert flag");
+        }
+        let hsmCert;
+        try {
+            hsmCert = fs_1.default.readFileSync(options.hsmCert);
+        }
+        catch (_a) {
+            throw new Error(`Invalid path for hsmCert: ${options.hsmCert}`);
+        }
+        const bridge = (0, createHSMBridge_1.default)({
+            hsmCert,
+            hsmEndpoint: options.hsm,
+            hsmCertPassword: options.hsmCertPassword,
+        });
+        const backup = yield bridge.backupCompartment(options.compartment);
+        console.log(JSON.stringify(backup));
+    }),
+};
+//# sourceMappingURL=backupCompartment.js.map

package/bin/commands/backupCompartment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupCompartment.js","sourceRoot":"","sources":["../../src/commands/backupCompartment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,iGAAyE;AACzE,4CAAoB;AASpB,kBAAe;IACb,OAAO,EAAE,mBAAmB;IAC5B,WAAW,EAAE,6BAA6B;IAC1C,IAAI,EAAE;QACJ;YACE,OAAO,EAAE,mDAAmD;SAC7D;KACF;IACD,OAAO,EAAE;QACP;YACE,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,iDAAiD;YAC9D,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YAC9C,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,yCAAyC;YACtD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;YAC5C,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,4DAA4D;YACzE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;YACpD,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,4DAA4D;YACzE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACnD,QAAQ,EAAE,IAAI;SACf;KACF;IACD,GAAG,EAAE,CAAO,OAAgB,EAAiB,EAAE;QAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YACpB,MAAM,IAAI,KAAK,CACb,qIAAqI,CACtI,CAAC;SACH;QAED,IAAI,OAAe,CAAC;QACpB,IAAI;YACF,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;SAC5C;QAAC,WAAiC;YACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;SACjE;QAED,MAAM,MAAM,GAAG,IAAA,yBAAe,EAAC;YAC7B,OAAO;YACP,WAAW,EAAE,OAAO,CAAC,GAAG;YACxB,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAEnE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,CAAC,CAAA;CACF,CAAC"}

package/bin/commands/index.d.ts

@@ -385,6 +385,35 @@ declare const _default: {
             required?: undefined;
         })[];
         run: (options: import("./faucet").FaucetOptions) => Promise<void>;
+    } | {
+        command: string;
+        description: string;
+        help: {
+            content: string;
+        }[];
+        options: ({
+            name: string;
+            alias: string;
+            type: NumberConstructor;
+            description: string;
+            defaultValue: string | undefined;
+            required: boolean;
+        } | {
+            name: string;
+            alias: string;
+            type: StringConstructor;
+            description: string;
+            required: boolean;
+            defaultValue?: undefined;
+        } | {
+            name: string;
+            type: StringConstructor;
+            description: string;
+            defaultValue: string | undefined;
+            required: boolean;
+            alias?: undefined;
+        })[];
+        run: (options: import("./restoreCompartment").Options) => Promise<void>;
     } | {
         command: string;
         description: string;

package/bin/commands/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,wBA+BE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+DA,wBAiCE"}

package/bin/commands/index.js

@@ -5,6 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 const apdu_1 = __importDefault(require("./apdu"));
 const approve_1 = __importDefault(require("./approve"));
+const backupCompartment_1 = __importDefault(require("./backupCompartment"));
 const bake_1 = __importDefault(require("./bake"));
 const bridge_1 = __importDefault(require("./bridge"));
 const create_1 = __importDefault(require("./create"));
@@ -26,6 +27,7 @@ const receive_1 = __importDefault(require("./receive"));
 const recipe_1 = __importDefault(require("./recipe"));
 const registerMigratedUsers_1 = __importDefault(require("./registerMigratedUsers"));
 const reject_1 = __importDefault(require("./reject"));
+const restoreCompartment_1 = __importDefault(require("./restoreCompartment"));
 const send_1 = __importDefault(require("./send"));
 const setQuorum_1 = __importDefault(require("./setQuorum"));
 const wipe_1 = __importDefault(require("./wipe"));
@@ -75,6 +77,8 @@ exports.default = {
         faucet_1.default,
         getAuthToken_1.default,
         getUserID_1.default,
+        backupCompartment_1.default,
+        restoreCompartment_1.default,
         migrate_1.default,
         registerMigratedUsers_1.default,
         listen_1.default,

package/bin/commands/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":";;;;;AAAA,kDAAiC;AACjC,wDAAuC;AACvC,kDAAiC;AACjC,sDAAqC;AACrC,sDAAqC;AACrC,sDAAqC;AACrC,wDAAuC;AACvC,oDAAmC;AACnC,sDAAqC;AACrC,oDAAmC;AACnC,gDAA+B;AAC/B,kEAAiD;AACjD,sEAAqD;AACrD,0DAAyC;AACzC,4DAA2C;AAC3C,sDAAqC;AACrC,wDAAuC;AACvC,wDAAuC;AACvC,oDAAmC;AACnC,wDAAuC;AACvC,sDAAqC;AACrC,oFAAmE;AACnE,sDAAqC;AACrC,kDAAiC;AACjC,4DAA2C;AAC3C,kDAAiC;AAKjC,MAAM,IAAI,GAAG;IACX;QACE,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE;YACP,uDAAuD;YACvD,EAAE;YACF,yCAAyC;SAC1C;KACF;CACF,CAAC;AAEF,MAAM,OAAO,GAAG;IACd;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,WAAW;KACzB;CACF,CAAC;AAEF,kBAAe;IACb,IAAI;IACJ,OAAO;IACP,WAAW,EAAE;QACX,iBAAc;QACd,cAAW;QACX,gBAAa;QACb,cAAW;QACX,gBAAa;QACb,iBAAc;QACd,gBAAa;QACb,mBAAgB;QAChB,aAAU;QACV,eAAY;QACZ,gBAAa;QACb,sBAAmB;QACnB,mBAAgB;QAChB,iBAAc;QACd,+BAA4B;QAC5B,gBAAa;QACb,kBAAe;QACf,eAAY;QACZ,cAAW;QACX,iBAAc;QACd,eAAY;QACZ,gBAAa;QACb,iBAAc;QACd,gBAAa;QACb,cAAW;QACX,wBAAqB;KACtB;CACF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":";;;;;AAAA,kDAAiC;AACjC,wDAAuC;AACvC,4EAA2D;AAC3D,kDAAiC;AACjC,sDAAqC;AACrC,sDAAqC;AACrC,sDAAqC;AACrC,wDAAuC;AACvC,oDAAmC;AACnC,sDAAqC;AACrC,oDAAmC;AACnC,gDAA+B;AAC/B,kEAAiD;AACjD,sEAAqD;AACrD,0DAAyC;AACzC,4DAA2C;AAC3C,sDAAqC;AACrC,wDAAuC;AACvC,wDAAuC;AACvC,oDAAmC;AACnC,wDAAuC;AACvC,sDAAqC;AACrC,oFAAmE;AACnE,sDAAqC;AACrC,8EAA6D;AAC7D,kDAAiC;AACjC,4DAA2C;AAC3C,kDAAiC;AAKjC,MAAM,IAAI,GAAG;IACX;QACE,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE;YACP,uDAAuD;YACvD,EAAE;YACF,yCAAyC;SAC1C;KACF;CACF,CAAC;AAEF,MAAM,OAAO,GAAG;IACd;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,WAAW;KACzB;CACF,CAAC;AAEF,kBAAe;IACb,IAAI;IACJ,OAAO;IACP,WAAW,EAAE;QACX,iBAAc;QACd,cAAW;QACX,gBAAa;QACb,cAAW;QACX,gBAAa;QACb,iBAAc;QACd,gBAAa;QACb,mBAAgB;QAChB,aAAU;QACV,eAAY;QACZ,gBAAa;QACb,sBAAmB;QACnB,mBAAgB;QAChB,2BAAwB;QACxB,4BAAyB;QACzB,iBAAc;QACd,+BAA4B;QAC5B,gBAAa;QACb,kBAAe;QACf,eAAY;QACZ,cAAW;QACX,iBAAc;QACd,eAAY;QACZ,gBAAa;QACb,iBAAc;QACd,gBAAa;QACb,cAAW;QACX,wBAAqB;KACtB;CACF,CAAC"}

package/bin/commands/restoreCompartment.d.ts

@@ -0,0 +1,39 @@
+export declare type Options = {
+    compartment: number;
+    hsm: string;
+    hsmCert: string;
+    hsmCertPassword: string;
+    backupFile: string;
+};
+declare const _default: {
+    command: string;
+    description: string;
+    help: {
+        content: string;
+    }[];
+    options: ({
+        name: string;
+        alias: string;
+        type: NumberConstructor;
+        description: string;
+        defaultValue: string | undefined;
+        required: boolean;
+    } | {
+        name: string;
+        alias: string;
+        type: StringConstructor;
+        description: string;
+        required: boolean;
+        defaultValue?: undefined;
+    } | {
+        name: string;
+        type: StringConstructor;
+        description: string;
+        defaultValue: string | undefined;
+        required: boolean;
+        alias?: undefined;
+    })[];
+    run: (options: Options) => Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=restoreCompartment.d.ts.map

package/bin/commands/restoreCompartment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restoreCompartment.d.ts","sourceRoot":"","sources":["../../src/commands/restoreCompartment.ts"],"names":[],"mappings":"AAKA,oBAAY,OAAO,GAAG;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAgDqB,OAAO,KAAG,QAAQ,IAAI,CAAC;;AA9C9C,wBAuEE"}

package/bin/commands/restoreCompartment.js

@@ -0,0 +1,85 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const createHSMBridge_1 = __importDefault(require("@ledgerhq/vault-common/lib/createHSMBridge"));
+const fs_1 = __importDefault(require("fs"));
+const logger_1 = __importDefault(require("../logger"));
+exports.default = {
+    command: "restoreCompartment",
+    description: "Restore HSM simu compartment",
+    help: [
+        {
+            content: "{grey $} ledger-vault restoreCompartment --cid 123 --backupFile backup.json",
+        },
+    ],
+    options: [
+        {
+            name: "compartment",
+            alias: "c",
+            type: Number,
+            description: "HSM compartment ID {blue $VAULT_COMPARTMENT_ID}",
+            defaultValue: process.env.VAULT_COMPARTMENT_ID,
+            required: true,
+        },
+        {
+            name: "backupFile",
+            alias: "b",
+            type: String,
+            description: "Location of the backup file (output of ledger-vault backupCompartment)",
+            required: true,
+        },
+        {
+            name: "hsm",
+            type: String,
+            description: "HSM endpoint {blue $VAULT_HSM_ENDPOINT}",
+            defaultValue: process.env.VAULT_HSM_ENDPOINT,
+            required: true,
+        },
+        {
+            name: "hsmCert",
+            type: String,
+            description: "Path to HSM certificate {blue $VAULT_HSM_CLIENT_CERT_PATH}",
+            defaultValue: process.env.VAULT_HSM_CLIENT_CERT_PATH,
+            required: true,
+        },
+        {
+            name: "hsmCertPassword",
+            type: String,
+            description: "HSM certificate password {blue $VAULT_HSM_CLIENT_CERT_PWD}",
+            defaultValue: process.env.VAULT_HSM_CLIENT_CERT_PWD,
+            required: true,
+        },
+    ],
+    run: (options) => __awaiter(void 0, void 0, void 0, function* () {
+        if (!options.hsmCert) {
+            throw new Error("You must specify the path to your HSM certificate in your environment variable VAULT_HSM_CLIENT_CERT_PATH or use the --hsmCert flag");
+        }
+        let hsmCert;
+        try {
+            hsmCert = fs_1.default.readFileSync(options.hsmCert);
+        }
+        catch (_a) {
+            throw new Error(`Invalid path for hsmCert: ${options.hsmCert}`);
+        }
+        const bridge = (0, createHSMBridge_1.default)({
+            hsmCert,
+            hsmEndpoint: options.hsm,
+            hsmCertPassword: options.hsmCertPassword,
+        });
+        const fileContent = fs_1.default.readFileSync(options.backupFile, "utf-8");
+        const backup = JSON.parse(fileContent);
+        yield bridge.restoreCompartment(options.compartment, backup, { logger: logger_1.default });
+    }),
+};
+//# sourceMappingURL=restoreCompartment.js.map

package/bin/commands/restoreCompartment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restoreCompartment.js","sourceRoot":"","sources":["../../src/commands/restoreCompartment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,iGAAyE;AACzE,4CAAoB;AAEpB,uDAA+B;AAU/B,kBAAe;IACb,OAAO,EAAE,oBAAoB;IAC7B,WAAW,EAAE,8BAA8B;IAC3C,IAAI,EAAE;QACJ;YACE,OAAO,EAAE,6EAA6E;SACvF;KACF;IACD,OAAO,EAAE;QACP;YACE,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,iDAAiD;YAC9D,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YAC9C,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,wEAAwE;YACrF,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,yCAAyC;YACtD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;YAC5C,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,4DAA4D;YACzE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;YACpD,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,4DAA4D;YACzE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACnD,QAAQ,EAAE,IAAI;SACf;KACF;IACD,GAAG,EAAE,CAAO,OAAgB,EAAiB,EAAE;QAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YACpB,MAAM,IAAI,KAAK,CACb,qIAAqI,CACtI,CAAC;SACH;QAED,IAAI,OAAe,CAAC;QACpB,IAAI;YACF,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;SAC5C;QAAC,WAAiC;YACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;SACjE;QAED,MAAM,MAAM,GAAG,IAAA,yBAAe,EAAC;YAC7B,OAAO;YACP,WAAW,EAAE,OAAO,CAAC,GAAG;YACxB,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAN,gBAAM,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAA;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ledgerhq/vault-cli",
-  "version": "1.14.2",
+  "version": "1.15.0",
   "description": "A various utility command-line for Vault development",
   "homepage": "https://github.com/LedgerHQ/vault-ts",
   "license": "BSD-2-Clause",
@@ -18,7 +18,7 @@
     "@ledgerhq/cryptoassets": "^6.28.2",
     "@ledgerhq/hw-transport-node-hid": "^6.24.1",
     "@ledgerhq/live-common-stub": "1.4.6",
-    "@ledgerhq/vault-common": "1.16.0",
+    "@ledgerhq/vault-common": "1.17.0",
     "axios": "^0.21.0",
     "bignumber.js": "^9.0.1",
     "body-parser": "^1.19.0",