@ledgerhq/vault-cli 1.14.2 → 1.16.0

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
-@ledgerhq/vault-cli:build: cache hit, replaying output 6f6ef23db1700fb7
+@ledgerhq/vault-cli:build: cache hit, replaying output 70779db42119c28e
 @ledgerhq/vault-cli:build: 
-@ledgerhq/vault-cli:build: > @ledgerhq/vault-cli@1.14.2 build /home/runner/work/vault-ts/vault-ts/apps/cli
+@ledgerhq/vault-cli:build: > @ledgerhq/vault-cli@1.16.0 build /home/runner/work/vault-ts/vault-ts/apps/cli
 @ledgerhq/vault-cli:build: > tsc && chmod +x bin/index.js
 @ledgerhq/vault-cli:build: 

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @ledgerhq/vault-cli
 
+## 1.16.0
+
+### Minor Changes
+
+- 6be93c3: Add revoke command
+
+## 1.15.0
+
+### Minor Changes
+
+- 41de09a: Add ability to backup & restore HSM compartment
+
+### Patch Changes
+
+- Updated dependencies [17b3731]
+- Updated dependencies [41de09a]
+  - @ledgerhq/vault-common@1.17.0
+
 ## 1.14.2
 
 ### Patch Changes

package/__mocks__/@ledgerhq/vault-common.ts

@@ -133,12 +133,14 @@ export const createDevicesPool = jest.fn().mockReturnValue({
     connectSocket: jest.fn(),
     onEvent: jest.fn(),
     rejectRequest: jest.fn(),
+    post: jest.fn(),
   }),
   getUserID: jest.fn().mockReturnValue("userID"),
   getOnboardingAdminDevices: jest.fn().mockReturnValue([
     ["Admin 1", 4],
     ["Admin 2", 5],
   ]),
+  runWithQuorum: jest.fn(),
 });
 export const genSeed = jest.fn();
 

package/bin/__tests__/backupCompartment.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backupCompartment.test.d.ts.map

package/bin/__tests__/backupCompartment.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupCompartment.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/backupCompartment.test.ts"],"names":[],"mappings":""}

package/bin/__tests__/backupCompartment.test.js

@@ -0,0 +1,84 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const createHSMBridge = __importStar(require("@ledgerhq/vault-common/lib/createHSMBridge"));
+const fs_1 = __importDefault(require("fs"));
+const backupCompartment_1 = __importDefault(require("../commands/backupCompartment"));
+describe("backupCompartment", () => {
+    beforeEach(() => {
+        jest.spyOn(console, "log").mockImplementation();
+        jest.spyOn(fs_1.default, "readFileSync").mockReturnValue("<cert>");
+    });
+    afterEach(() => {
+        jest.restoreAllMocks();
+    });
+    it("should throw if no HSM cert given", () => __awaiter(void 0, void 0, void 0, function* () {
+        let err;
+        try {
+            yield backupCompartment_1.default.run({
+                compartment: 1,
+                hsm: "<hsm>",
+                hsmCert: undefined,
+            });
+        }
+        catch (e) {
+            err = e;
+        }
+        expect(err).toEqual(new Error("You must specify the path to your HSM certificate in your environment variable VAULT_HSM_CLIENT_CERT_PATH or use the --hsmCert flag"));
+    }));
+    it("should backup a compartment", () => __awaiter(void 0, void 0, void 0, function* () {
+        const fakeBridge = {
+            backupCompartment: jest.fn(),
+            restoreCompartment: jest.fn(),
+            resetCompartment: jest.fn(),
+        };
+        const createHSMBridgeSpy = jest.spyOn(createHSMBridge, "default").mockReturnValue(fakeBridge);
+        yield backupCompartment_1.default.run({
+            compartment: 42,
+            hsm: "<hsm>",
+            hsmCert: "abcde",
+            hsmCertPassword: "1234",
+        });
+        expect(createHSMBridgeSpy).toHaveBeenCalledWith({
+            hsmCert: "<cert>",
+            hsmCertPassword: "1234",
+            hsmEndpoint: "<hsm>",
+        });
+        expect(fakeBridge.backupCompartment).toHaveBeenCalledWith(42);
+    }));
+});
+//# sourceMappingURL=backupCompartment.test.js.map

package/bin/__tests__/backupCompartment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupCompartment.test.js","sourceRoot":"","sources":["../../src/__tests__/backupCompartment.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4FAA8E;AAC9E,4CAAoB;AAEpB,sFAA8D;AAE9D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,YAAE,EAAE,cAAc,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAS,EAAE;QACjD,IAAI,GAAG,CAAC;QACR,IAAI;YACF,MAAM,2BAAiB,CAAC,GAAG,CAAC;gBAC1B,WAAW,EAAE,CAAC;gBACd,GAAG,EAAE,OAAO;gBAEZ,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;SACJ;QAAC,OAAO,CAAC,EAAE;YACV,GAAG,GAAG,CAAC,CAAC;SACT;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CACjB,IAAI,KAAK,CACP,qIAAqI,CACtI,CACF,CAAC;IACJ,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAS,EAAE;QAC3C,MAAM,UAAU,GAAG;YACjB,iBAAiB,EAAE,IAAI,CAAC,EAAE,EAAE;YAC5B,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE;YAC7B,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE;SAC5B,CAAC;QACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAC9F,MAAM,2BAAiB,CAAC,GAAG,CAAC;YAC1B,WAAW,EAAE,EAAE;YACf,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAAC;YAC9C,OAAO,EAAE,QAAQ;YACjB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,OAAO;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC,CAAA,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/bin/__tests__/restoreCompartment.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=restoreCompartment.test.d.ts.map

package/bin/__tests__/restoreCompartment.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restoreCompartment.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/restoreCompartment.test.ts"],"names":[],"mappings":""}

package/bin/__tests__/restoreCompartment.test.js

@@ -0,0 +1,92 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const createHSMBridge = __importStar(require("@ledgerhq/vault-common/lib/createHSMBridge"));
+const fs_1 = __importDefault(require("fs"));
+const restoreCompartment_1 = __importDefault(require("../commands/restoreCompartment"));
+const logger_1 = __importDefault(require("../logger"));
+describe("restoreCompartment", () => {
+    beforeEach(() => {
+        jest.spyOn(console, "log").mockImplementation();
+    });
+    afterEach(() => {
+        jest.restoreAllMocks();
+    });
+    it("should throw if no HSM cert given", () => __awaiter(void 0, void 0, void 0, function* () {
+        let err;
+        try {
+            yield restoreCompartment_1.default.run({
+                compartment: 1,
+                hsm: "<hsm>",
+                hsmCert: undefined,
+            });
+        }
+        catch (e) {
+            err = e;
+        }
+        expect(err).toEqual(new Error("You must specify the path to your HSM certificate in your environment variable VAULT_HSM_CLIENT_CERT_PATH or use the --hsmCert flag"));
+    }));
+    it("should restore a compartment", () => __awaiter(void 0, void 0, void 0, function* () {
+        jest
+            .spyOn(fs_1.default, "readFileSync")
+            .mockReturnValueOnce("<cert>")
+            .mockReturnValue('{"counters":"1234","internalfs":"abcdef"}');
+        const fakeBridge = {
+            backupCompartment: jest.fn(),
+            restoreCompartment: jest.fn(),
+            resetCompartment: jest.fn(),
+        };
+        const createHSMBridgeSpy = jest.spyOn(createHSMBridge, "default").mockReturnValue(fakeBridge);
+        yield restoreCompartment_1.default.run({
+            backupFile: "/path/to/file",
+            compartment: 42,
+            hsm: "<hsm>",
+            hsmCert: "abcde",
+            hsmCertPassword: "1234",
+        });
+        expect(createHSMBridgeSpy).toHaveBeenCalledWith({
+            hsmCert: "<cert>",
+            hsmCertPassword: "1234",
+            hsmEndpoint: "<hsm>",
+        });
+        expect(fakeBridge.restoreCompartment).toHaveBeenCalledWith(42, {
+            counters: "1234",
+            internalfs: "abcdef",
+        }, { logger: logger_1.default });
+    }));
+});
+//# sourceMappingURL=restoreCompartment.test.js.map

package/bin/__tests__/restoreCompartment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restoreCompartment.test.js","sourceRoot":"","sources":["../../src/__tests__/restoreCompartment.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4FAA8E;AAC9E,4CAAoB;AAEpB,wFAAgE;AAChE,uDAA+B;AAE/B,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAS,EAAE;QACjD,IAAI,GAAG,CAAC;QACR,IAAI;YACF,MAAM,4BAAkB,CAAC,GAAG,CAAC;gBAC3B,WAAW,EAAE,CAAC;gBACd,GAAG,EAAE,OAAO;gBAEZ,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;SACJ;QAAC,OAAO,CAAC,EAAE;YACV,GAAG,GAAG,CAAC,CAAC;SACT;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CACjB,IAAI,KAAK,CACP,qIAAqI,CACtI,CACF,CAAC;IACJ,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAS,EAAE;QAC5C,IAAI;aACD,KAAK,CAAC,YAAE,EAAE,cAAc,CAAC;aACzB,mBAAmB,CAAC,QAAQ,CAAC;aAC7B,eAAe,CAAC,2CAA2C,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG;YACjB,iBAAiB,EAAE,IAAI,CAAC,EAAE,EAAE;YAC5B,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE;YAC7B,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE;SAC5B,CAAC;QACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAC9F,MAAM,4BAAkB,CAAC,GAAG,CAAC;YAC3B,UAAU,EAAE,eAAe;YAC3B,WAAW,EAAE,EAAE;YACf,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAAC;YAC9C,OAAO,EAAE,QAAQ;YACjB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,OAAO;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CACxD,EAAE,EACF;YACE,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,QAAQ;SACrB,EACD,EAAE,MAAM,EAAN,gBAAM,EAAE,CACX,CAAC;IACJ,CAAC,CAAA,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/bin/__tests__/revoke.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=revoke.test.d.ts.map

package/bin/__tests__/revoke.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/revoke.test.ts"],"names":[],"mappings":""}

package/bin/__tests__/revoke.test.js

@@ -0,0 +1,61 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const revoke_1 = require("../commands/revoke");
+const test_utils_1 = require("./test-utils");
+const options = {
+    command: "user",
+    id: 10,
+    device: 4,
+    salt: "",
+    gate: "<gate>",
+    noApproval: false,
+};
+describe("revoke", () => {
+    beforeEach(() => {
+        jest.spyOn(console, "log").mockImplementation();
+    });
+    afterEach(() => {
+        jest.clearAllMocks();
+    });
+    it("should revoke user", () => __awaiter(void 0, void 0, void 0, function* () {
+        const pool = (0, test_utils_1.createTestDevicesPool)();
+        const userDevice = yield pool.login(options.device);
+        yield (0, revoke_1.revokeEntity)(options);
+        expect(userDevice.post).toHaveBeenCalledWith("/requests", {
+            type: "REVOKE_USER",
+            user_id: options.id,
+        });
+        expect(pool.runWithQuorum).toHaveBeenCalled();
+    }));
+    it("should revoke group", () => __awaiter(void 0, void 0, void 0, function* () {
+        const pool = (0, test_utils_1.createTestDevicesPool)();
+        const userDevice = yield pool.login(options.device);
+        const opts = Object.assign(Object.assign({}, options), { command: "group" });
+        yield (0, revoke_1.revokeEntity)(opts);
+        expect(userDevice.post).toHaveBeenCalledWith("/requests", {
+            type: "REVOKE_GROUP",
+            group_id: opts.id,
+        });
+        expect(pool.runWithQuorum).toHaveBeenCalled();
+    }));
+    it("should revoke without approvals", () => __awaiter(void 0, void 0, void 0, function* () {
+        const pool = (0, test_utils_1.createTestDevicesPool)();
+        const userDevice = yield pool.login(options.device);
+        yield (0, revoke_1.revokeEntity)(Object.assign(Object.assign({}, options), { noApproval: true }));
+        expect(userDevice.post).toHaveBeenCalledWith("/requests", {
+            type: "REVOKE_USER",
+            user_id: options.id,
+        });
+        expect(pool.runWithQuorum).not.toHaveBeenCalled();
+    }));
+});
+//# sourceMappingURL=revoke.test.js.map

package/bin/__tests__/revoke.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke.test.js","sourceRoot":"","sources":["../../src/__tests__/revoke.test.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,+CAAkD;AAElD,6CAAqD;AAErD,MAAM,OAAO,GAAkB;IAC7B,OAAO,EAAE,MAAM;IACf,EAAE,EAAE,EAAE;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,KAAK;CAClB,CAAC;AAEF,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAS,EAAE;QAClC,MAAM,IAAI,GAAG,IAAA,kCAAqB,GAAE,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,IAAA,qBAAY,EAAC,OAAO,CAAC,CAAC;QAE5B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE;YACxD,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,OAAO,CAAC,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAChD,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAS,EAAE;QACnC,MAAM,IAAI,GAAG,IAAA,kCAAqB,GAAE,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,IAAI,mCAAuB,OAAO,KAAE,OAAO,EAAE,OAAO,GAAE,CAAC;QAC7D,MAAM,IAAA,qBAAY,EAAC,IAAI,CAAC,CAAC;QAEzB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE;YACxD,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,IAAI,CAAC,EAAE;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAChD,CAAC,CAAA,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAS,EAAE;QAC/C,MAAM,IAAI,GAAG,IAAA,kCAAqB,GAAE,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,IAAA,qBAAY,kCAAM,OAAO,KAAE,UAAU,EAAE,IAAI,IAAG,CAAC;QAErD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE;YACxD,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,OAAO,CAAC,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAA,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/bin/commands/backupCompartment.d.ts

@@ -0,0 +1,31 @@
+export declare type Options = {
+    compartment: number;
+    hsm: string;
+    hsmCert: string;
+    hsmCertPassword: string;
+};
+declare const _default: {
+    command: string;
+    description: string;
+    help: {
+        content: string;
+    }[];
+    options: ({
+        name: string;
+        alias: string;
+        type: NumberConstructor;
+        description: string;
+        defaultValue: string | undefined;
+        required: boolean;
+    } | {
+        name: string;
+        type: StringConstructor;
+        description: string;
+        defaultValue: string | undefined;
+        required: boolean;
+        alias?: undefined;
+    })[];
+    run: (options: Options) => Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=backupCompartment.d.ts.map

package/bin/commands/backupCompartment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupCompartment.d.ts","sourceRoot":"","sources":["../../src/commands/backupCompartment.ts"],"names":[],"mappings":"AAGA,oBAAY,OAAO,GAAG;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;;;;;;;;;;;;;;;;;;;;;;mBAyCqB,OAAO,KAAG,QAAQ,IAAI,CAAC;;AAvC9C,wBA+DE"}

package/bin/commands/backupCompartment.js

@@ -0,0 +1,76 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const createHSMBridge_1 = __importDefault(require("@ledgerhq/vault-common/lib/createHSMBridge"));
+const fs_1 = __importDefault(require("fs"));
+exports.default = {
+    command: "backupCompartment",
+    description: "Backup HSM simu compartment",
+    help: [
+        {
+            content: "{grey $} ledger-vault backupCompartment --cid 123",
+        },
+    ],
+    options: [
+        {
+            name: "compartment",
+            alias: "c",
+            type: Number,
+            description: "HSM compartment ID {blue $VAULT_COMPARTMENT_ID}",
+            defaultValue: process.env.VAULT_COMPARTMENT_ID,
+            required: true,
+        },
+        {
+            name: "hsm",
+            type: String,
+            description: "HSM endpoint {blue $VAULT_HSM_ENDPOINT}",
+            defaultValue: process.env.VAULT_HSM_ENDPOINT,
+            required: true,
+        },
+        {
+            name: "hsmCert",
+            type: String,
+            description: "Path to HSM certificate {blue $VAULT_HSM_CLIENT_CERT_PATH}",
+            defaultValue: process.env.VAULT_HSM_CLIENT_CERT_PATH,
+            required: true,
+        },
+        {
+            name: "hsmCertPassword",
+            type: String,
+            description: "HSM certificate password {blue $VAULT_HSM_CLIENT_CERT_PWD}",
+            defaultValue: process.env.VAULT_HSM_CLIENT_CERT_PWD,
+            required: true,
+        },
+    ],
+    run: (options) => __awaiter(void 0, void 0, void 0, function* () {
+        if (!options.hsmCert) {
+            throw new Error("You must specify the path to your HSM certificate in your environment variable VAULT_HSM_CLIENT_CERT_PATH or use the --hsmCert flag");
+        }
+        let hsmCert;
+        try {
+            hsmCert = fs_1.default.readFileSync(options.hsmCert);
+        }
+        catch (_a) {
+            throw new Error(`Invalid path for hsmCert: ${options.hsmCert}`);
+        }
+        const bridge = (0, createHSMBridge_1.default)({
+            hsmCert,
+            hsmEndpoint: options.hsm,
+            hsmCertPassword: options.hsmCertPassword,
+        });
+        const backup = yield bridge.backupCompartment(options.compartment);
+        console.log(JSON.stringify(backup));
+    }),
+};
+//# sourceMappingURL=backupCompartment.js.map

package/bin/commands/backupCompartment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupCompartment.js","sourceRoot":"","sources":["../../src/commands/backupCompartment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,iGAAyE;AACzE,4CAAoB;AASpB,kBAAe;IACb,OAAO,EAAE,mBAAmB;IAC5B,WAAW,EAAE,6BAA6B;IAC1C,IAAI,EAAE;QACJ;YACE,OAAO,EAAE,mDAAmD;SAC7D;KACF;IACD,OAAO,EAAE;QACP;YACE,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,iDAAiD;YAC9D,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YAC9C,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,yCAAyC;YACtD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;YAC5C,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,4DAA4D;YACzE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;YACpD,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,4DAA4D;YACzE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACnD,QAAQ,EAAE,IAAI;SACf;KACF;IACD,GAAG,EAAE,CAAO,OAAgB,EAAiB,EAAE;QAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YACpB,MAAM,IAAI,KAAK,CACb,qIAAqI,CACtI,CAAC;SACH;QAED,IAAI,OAAe,CAAC;QACpB,IAAI;YACF,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;SAC5C;QAAC,WAAiC;YACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;SACjE;QAED,MAAM,MAAM,GAAG,IAAA,yBAAe,EAAC;YAC7B,OAAO;YACP,WAAW,EAAE,OAAO,CAAC,GAAG;YACxB,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAEnE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,CAAC,CAAA;CACF,CAAC"}

package/bin/commands/index.d.ts

@@ -385,6 +385,35 @@ declare const _default: {
             required?: undefined;
         })[];
         run: (options: import("./faucet").FaucetOptions) => Promise<void>;
+    } | {
+        command: string;
+        description: string;
+        help: {
+            content: string;
+        }[];
+        options: ({
+            name: string;
+            alias: string;
+            type: NumberConstructor;
+            description: string;
+            defaultValue: string | undefined;
+            required: boolean;
+        } | {
+            name: string;
+            alias: string;
+            type: StringConstructor;
+            description: string;
+            required: boolean;
+            defaultValue?: undefined;
+        } | {
+            name: string;
+            type: StringConstructor;
+            description: string;
+            defaultValue: string | undefined;
+            required: boolean;
+            alias?: undefined;
+        })[];
+        run: (options: import("./restoreCompartment").Options) => Promise<void>;
     } | {
         command: string;
         description: string;
@@ -561,6 +590,35 @@ declare const _default: {
             type: NumberConstructor;
         })[];
         run: (options: import("./approve").ApproveOptions) => Promise<void>;
+    } | {
+        command: string;
+        description: string;
+        options: ({
+            name: string;
+            type: BooleanConstructor;
+            description: string;
+        } | {
+            name: string;
+            description: string;
+            type: StringConstructor;
+        } | {
+            name: string;
+            alias: string;
+            type: NumberConstructor;
+            description: string;
+            defaultValue: number;
+        })[];
+        subCommands: {
+            command: string;
+            description: string;
+            options: {
+                name: string;
+                type: NumberConstructor;
+                description: string;
+                required: boolean;
+            }[];
+            run: (opts: import("./revoke").RevokeOptions) => Promise<void>;
+        }[];
     } | {
         command: string;
         positionals: boolean;

package/bin/commands/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,wBA+BE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgEA,wBAkCE"}

package/bin/commands/index.js

@@ -5,6 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 const apdu_1 = __importDefault(require("./apdu"));
 const approve_1 = __importDefault(require("./approve"));
+const backupCompartment_1 = __importDefault(require("./backupCompartment"));
 const bake_1 = __importDefault(require("./bake"));
 const bridge_1 = __importDefault(require("./bridge"));
 const create_1 = __importDefault(require("./create"));
@@ -26,6 +27,8 @@ const receive_1 = __importDefault(require("./receive"));
 const recipe_1 = __importDefault(require("./recipe"));
 const registerMigratedUsers_1 = __importDefault(require("./registerMigratedUsers"));
 const reject_1 = __importDefault(require("./reject"));
+const restoreCompartment_1 = __importDefault(require("./restoreCompartment"));
+const revoke_1 = __importDefault(require("./revoke"));
 const send_1 = __importDefault(require("./send"));
 const setQuorum_1 = __importDefault(require("./setQuorum"));
 const wipe_1 = __importDefault(require("./wipe"));
@@ -75,6 +78,8 @@ exports.default = {
         faucet_1.default,
         getAuthToken_1.default,
         getUserID_1.default,
+        backupCompartment_1.default,
+        restoreCompartment_1.default,
         migrate_1.default,
         registerMigratedUsers_1.default,
         listen_1.default,
@@ -86,6 +91,7 @@ exports.default = {
         bridge_1.default,
         approve_1.default,
         reject_1.default,
+        revoke_1.default,
         apdu_1.default,
         getMVInstances_1.default,
     ],

package/bin/commands/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":";;;;;AAAA,kDAAiC;AACjC,wDAAuC;AACvC,kDAAiC;AACjC,sDAAqC;AACrC,sDAAqC;AACrC,sDAAqC;AACrC,wDAAuC;AACvC,oDAAmC;AACnC,sDAAqC;AACrC,oDAAmC;AACnC,gDAA+B;AAC/B,kEAAiD;AACjD,sEAAqD;AACrD,0DAAyC;AACzC,4DAA2C;AAC3C,sDAAqC;AACrC,wDAAuC;AACvC,wDAAuC;AACvC,oDAAmC;AACnC,wDAAuC;AACvC,sDAAqC;AACrC,oFAAmE;AACnE,sDAAqC;AACrC,kDAAiC;AACjC,4DAA2C;AAC3C,kDAAiC;AAKjC,MAAM,IAAI,GAAG;IACX;QACE,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE;YACP,uDAAuD;YACvD,EAAE;YACF,yCAAyC;SAC1C;KACF;CACF,CAAC;AAEF,MAAM,OAAO,GAAG;IACd;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,WAAW;KACzB;CACF,CAAC;AAEF,kBAAe;IACb,IAAI;IACJ,OAAO;IACP,WAAW,EAAE;QACX,iBAAc;QACd,cAAW;QACX,gBAAa;QACb,cAAW;QACX,gBAAa;QACb,iBAAc;QACd,gBAAa;QACb,mBAAgB;QAChB,aAAU;QACV,eAAY;QACZ,gBAAa;QACb,sBAAmB;QACnB,mBAAgB;QAChB,iBAAc;QACd,+BAA4B;QAC5B,gBAAa;QACb,kBAAe;QACf,eAAY;QACZ,cAAW;QACX,iBAAc;QACd,eAAY;QACZ,gBAAa;QACb,iBAAc;QACd,gBAAa;QACb,cAAW;QACX,wBAAqB;KACtB;CACF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":";;;;;AAAA,kDAAiC;AACjC,wDAAuC;AACvC,4EAA2D;AAC3D,kDAAiC;AACjC,sDAAqC;AACrC,sDAAqC;AACrC,sDAAqC;AACrC,wDAAuC;AACvC,oDAAmC;AACnC,sDAAqC;AACrC,oDAAmC;AACnC,gDAA+B;AAC/B,kEAAiD;AACjD,sEAAqD;AACrD,0DAAyC;AACzC,4DAA2C;AAC3C,sDAAqC;AACrC,wDAAuC;AACvC,wDAAuC;AACvC,oDAAmC;AACnC,wDAAuC;AACvC,sDAAqC;AACrC,oFAAmE;AACnE,sDAAqC;AACrC,8EAA6D;AAC7D,sDAAqC;AACrC,kDAAiC;AACjC,4DAA2C;AAC3C,kDAAiC;AAKjC,MAAM,IAAI,GAAG;IACX;QACE,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE;YACP,uDAAuD;YACvD,EAAE;YACF,yCAAyC;SAC1C;KACF;CACF,CAAC;AAEF,MAAM,OAAO,GAAG;IACd;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,sBAAsB;KACpC;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,WAAW;KACzB;CACF,CAAC;AAEF,kBAAe;IACb,IAAI;IACJ,OAAO;IACP,WAAW,EAAE;QACX,iBAAc;QACd,cAAW;QACX,gBAAa;QACb,cAAW;QACX,gBAAa;QACb,iBAAc;QACd,gBAAa;QACb,mBAAgB;QAChB,aAAU;QACV,eAAY;QACZ,gBAAa;QACb,sBAAmB;QACnB,mBAAgB;QAChB,2BAAwB;QACxB,4BAAyB;QACzB,iBAAc;QACd,+BAA4B;QAC5B,gBAAa;QACb,kBAAe;QACf,eAAY;QACZ,cAAW;QACX,iBAAc;QACd,eAAY;QACZ,gBAAa;QACb,iBAAc;QACd,gBAAa;QACb,gBAAa;QACb,cAAW;QACX,wBAAqB;KACtB;CACF,CAAC"}

package/bin/commands/restoreCompartment.d.ts

@@ -0,0 +1,39 @@
+export declare type Options = {
+    compartment: number;
+    hsm: string;
+    hsmCert: string;
+    hsmCertPassword: string;
+    backupFile: string;
+};
+declare const _default: {
+    command: string;
+    description: string;
+    help: {
+        content: string;
+    }[];
+    options: ({
+        name: string;
+        alias: string;
+        type: NumberConstructor;
+        description: string;
+        defaultValue: string | undefined;
+        required: boolean;
+    } | {
+        name: string;
+        alias: string;
+        type: StringConstructor;
+        description: string;
+        required: boolean;
+        defaultValue?: undefined;
+    } | {
+        name: string;
+        type: StringConstructor;
+        description: string;
+        defaultValue: string | undefined;
+        required: boolean;
+        alias?: undefined;
+    })[];
+    run: (options: Options) => Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=restoreCompartment.d.ts.map

package/bin/commands/restoreCompartment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restoreCompartment.d.ts","sourceRoot":"","sources":["../../src/commands/restoreCompartment.ts"],"names":[],"mappings":"AAKA,oBAAY,OAAO,GAAG;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAgDqB,OAAO,KAAG,QAAQ,IAAI,CAAC;;AA9C9C,wBAuEE"}

package/bin/commands/restoreCompartment.js

@@ -0,0 +1,85 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const createHSMBridge_1 = __importDefault(require("@ledgerhq/vault-common/lib/createHSMBridge"));
+const fs_1 = __importDefault(require("fs"));
+const logger_1 = __importDefault(require("../logger"));
+exports.default = {
+    command: "restoreCompartment",
+    description: "Restore HSM simu compartment",
+    help: [
+        {
+            content: "{grey $} ledger-vault restoreCompartment --cid 123 --backupFile backup.json",
+        },
+    ],
+    options: [
+        {
+            name: "compartment",
+            alias: "c",
+            type: Number,
+            description: "HSM compartment ID {blue $VAULT_COMPARTMENT_ID}",
+            defaultValue: process.env.VAULT_COMPARTMENT_ID,
+            required: true,
+        },
+        {
+            name: "backupFile",
+            alias: "b",
+            type: String,
+            description: "Location of the backup file (output of ledger-vault backupCompartment)",
+            required: true,
+        },
+        {
+            name: "hsm",
+            type: String,
+            description: "HSM endpoint {blue $VAULT_HSM_ENDPOINT}",
+            defaultValue: process.env.VAULT_HSM_ENDPOINT,
+            required: true,
+        },
+        {
+            name: "hsmCert",
+            type: String,
+            description: "Path to HSM certificate {blue $VAULT_HSM_CLIENT_CERT_PATH}",
+            defaultValue: process.env.VAULT_HSM_CLIENT_CERT_PATH,
+            required: true,
+        },
+        {
+            name: "hsmCertPassword",
+            type: String,
+            description: "HSM certificate password {blue $VAULT_HSM_CLIENT_CERT_PWD}",
+            defaultValue: process.env.VAULT_HSM_CLIENT_CERT_PWD,
+            required: true,
+        },
+    ],
+    run: (options) => __awaiter(void 0, void 0, void 0, function* () {
+        if (!options.hsmCert) {
+            throw new Error("You must specify the path to your HSM certificate in your environment variable VAULT_HSM_CLIENT_CERT_PATH or use the --hsmCert flag");
+        }
+        let hsmCert;
+        try {
+            hsmCert = fs_1.default.readFileSync(options.hsmCert);
+        }
+        catch (_a) {
+            throw new Error(`Invalid path for hsmCert: ${options.hsmCert}`);
+        }
+        const bridge = (0, createHSMBridge_1.default)({
+            hsmCert,
+            hsmEndpoint: options.hsm,
+            hsmCertPassword: options.hsmCertPassword,
+        });
+        const fileContent = fs_1.default.readFileSync(options.backupFile, "utf-8");
+        const backup = JSON.parse(fileContent);
+        yield bridge.restoreCompartment(options.compartment, backup, { logger: logger_1.default });
+    }),
+};
+//# sourceMappingURL=restoreCompartment.js.map

package/bin/commands/restoreCompartment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restoreCompartment.js","sourceRoot":"","sources":["../../src/commands/restoreCompartment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,iGAAyE;AACzE,4CAAoB;AAEpB,uDAA+B;AAU/B,kBAAe;IACb,OAAO,EAAE,oBAAoB;IAC7B,WAAW,EAAE,8BAA8B;IAC3C,IAAI,EAAE;QACJ;YACE,OAAO,EAAE,6EAA6E;SACvF;KACF;IACD,OAAO,EAAE;QACP;YACE,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,iDAAiD;YAC9D,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YAC9C,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,wEAAwE;YACrF,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,yCAAyC;YACtD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;YAC5C,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,4DAA4D;YACzE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;YACpD,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,4DAA4D;YACzE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACnD,QAAQ,EAAE,IAAI;SACf;KACF;IACD,GAAG,EAAE,CAAO,OAAgB,EAAiB,EAAE;QAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YACpB,MAAM,IAAI,KAAK,CACb,qIAAqI,CACtI,CAAC;SACH;QAED,IAAI,OAAe,CAAC;QACpB,IAAI;YACF,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;SAC5C;QAAC,WAAiC;YACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;SACjE;QAED,MAAM,MAAM,GAAG,IAAA,yBAAe,EAAC;YAC7B,OAAO;YACP,WAAW,EAAE,OAAO,CAAC,GAAG;YACxB,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAN,gBAAM,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAA;CACF,CAAC"}

package/bin/commands/revoke.d.ts

@@ -0,0 +1,40 @@
+import type { GateOptions } from "../types";
+export declare type RevokeOptions = GateOptions & {
+    command: "user" | "group";
+    device: number;
+    id: number;
+    noApproval: boolean;
+};
+export declare const revokeEntity: (opts: RevokeOptions) => Promise<void>;
+declare const _default: {
+    command: string;
+    description: string;
+    options: ({
+        name: string;
+        type: BooleanConstructor;
+        description: string;
+    } | {
+        name: string;
+        description: string;
+        type: StringConstructor;
+    } | {
+        name: string;
+        alias: string;
+        type: NumberConstructor;
+        description: string;
+        defaultValue: number;
+    })[];
+    subCommands: {
+        command: string;
+        description: string;
+        options: {
+            name: string;
+            type: NumberConstructor;
+            description: string;
+            required: boolean;
+        }[];
+        run: (opts: RevokeOptions) => Promise<void>;
+    }[];
+};
+export default _default;
+//# sourceMappingURL=revoke.d.ts.map

package/bin/commands/revoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../src/commands/revoke.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,oBAAY,aAAa,GAAG,WAAW,GAAG;IACxC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,eAAO,MAAM,YAAY,SAAgB,aAAa,KAAG,QAAQ,IAAI,CAsBpE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEF,wBAwCE"}

package/bin/commands/revoke.js

@@ -0,0 +1,80 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.revokeEntity = void 0;
+const vault_common_1 = require("@ledgerhq/vault-common");
+const deviceOption_1 = __importDefault(require("../deviceOption"));
+const gateOptions_1 = __importDefault(require("../gateOptions"));
+const logger_1 = __importDefault(require("../logger"));
+const revokeEntity = (opts) => __awaiter(void 0, void 0, void 0, function* () {
+    const pool = (0, vault_common_1.createDevicesPool)(Object.assign(Object.assign({}, opts), { deviceAPIURL: opts.deviceAPI }));
+    const userDevice = yield pool.login(opts.device);
+    let request;
+    if (opts.command === "user") {
+        logger_1.default.info(`Revoking user ${opts.id}`);
+        request = yield userDevice.post("/requests", { type: "REVOKE_USER", user_id: opts.id });
+    }
+    if (opts.command === "group") {
+        logger_1.default.info(`Revoking group ${opts.id}`);
+        request = yield userDevice.post("/requests", { type: "REVOKE_GROUP", group_id: opts.id });
+    }
+    if (opts.noApproval)
+        return;
+    logger_1.default.info("Approving request...");
+    yield pool.getOnboardingAdminDevices();
+    yield pool.runWithQuorum((admin) => admin.approveRequest(request));
+});
+exports.revokeEntity = revokeEntity;
+exports.default = {
+    command: "revoke",
+    description: "Revoke user or group",
+    options: [
+        ...gateOptions_1.default,
+        deviceOption_1.default,
+        {
+            name: "noApproval",
+            type: Boolean,
+            description: "Create the request without approving it",
+        },
+    ],
+    subCommands: [
+        {
+            command: "user",
+            description: "Revoke user",
+            options: [
+                {
+                    name: "id",
+                    type: Number,
+                    description: "User ID",
+                    required: true,
+                },
+            ],
+            run: exports.revokeEntity,
+        },
+        {
+            command: "group",
+            description: "Revoke group",
+            options: [
+                {
+                    name: "id",
+                    type: Number,
+                    description: "Group ID",
+                    required: true,
+                },
+            ],
+            run: exports.revokeEntity,
+        },
+    ],
+};
+//# sourceMappingURL=revoke.js.map

package/bin/commands/revoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke.js","sourceRoot":"","sources":["../../src/commands/revoke.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,yDAA2D;AAE3D,mEAA2C;AAC3C,iEAAyC;AACzC,uDAA+B;AAUxB,MAAM,YAAY,GAAG,CAAO,IAAmB,EAAiB,EAAE;IACvE,MAAM,IAAI,GAAG,IAAA,gCAAiB,kCAAM,IAAI,KAAE,YAAY,EAAE,IAAI,CAAC,SAAS,IAAG,CAAC;IAC1E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjD,IAAI,OAAY,CAAC;IACjB,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE;QAC3B,gBAAM,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;KACzF;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE;QAC5B,gBAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;KAC3F;IAED,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO;IAE5B,gBAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAEpC,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;IAEvC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC,CAAA,CAAC;AAtBW,QAAA,YAAY,gBAsBvB;AAEF,kBAAe;IACb,OAAO,EAAE,QAAQ;IACjB,WAAW,EAAE,sBAAsB;IACnC,OAAO,EAAE;QACP,GAAG,qBAAW;QACd,sBAAY;QACZ;YACE,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,yCAAyC;SACvD;KACF;IACD,WAAW,EAAE;QACX;YACE,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,MAAM;oBACZ,WAAW,EAAE,SAAS;oBACtB,QAAQ,EAAE,IAAI;iBACf;aACF;YACD,GAAG,EAAE,oBAAY;SAClB;QACD;YACE,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,cAAc;YAC3B,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,MAAM;oBACZ,WAAW,EAAE,UAAU;oBACvB,QAAQ,EAAE,IAAI;iBACf;aACF;YACD,GAAG,EAAE,oBAAY;SAClB;KACF;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ledgerhq/vault-cli",
-  "version": "1.14.2",
+  "version": "1.16.0",
   "description": "A various utility command-line for Vault development",
   "homepage": "https://github.com/LedgerHQ/vault-ts",
   "license": "BSD-2-Clause",
@@ -18,7 +18,7 @@
     "@ledgerhq/cryptoassets": "^6.28.2",
     "@ledgerhq/hw-transport-node-hid": "^6.24.1",
     "@ledgerhq/live-common-stub": "1.4.6",
-    "@ledgerhq/vault-common": "1.16.0",
+    "@ledgerhq/vault-common": "1.17.0",
     "axios": "^0.21.0",
     "bignumber.js": "^9.0.1",
     "body-parser": "^1.19.0",