@matter/nodejs-shell 0.16.0-alpha.0-20251115-d89e62680 → 0.16.0-alpha.0-20251129-96ad07c6e

package/README.md

@@ -63,6 +63,8 @@ matter-node> help
   config                                   Manage global configuration
   session                                  Manage session
   nodes                                    Manage nodes
+  ota                                      OTA update operations
+  cert                                     Certificate management operations
   subscribe [node-id]                      Subscribe to all events and attributes of a node
   identify [time] [node-id] [endpoint-id]  Trigger Identify command with given time (default 10s). Execute on one node or endpoint, else all onoff clusters will be controlled
   discover                                 Handle device discovery
@@ -81,11 +83,12 @@ For instance `config --help` will display all node configuration for the persist
 
 ```
 > config
-  config loglevel             Manage Console and File LogLevels
-  config logfile              Manage Logfile path
-  config ble-hci              Manage BLE HCI ID (Linux)
-  config wifi-credentials     Manage Wi-Fi credentials used in commissioning process
-  config thread-credentials   Manage Thread credentials used in commissioning process
+  config loglevel                 Manage Console and File LogLevels
+  config logfile                  Manage Logfile path
+  config ble-hci                  Manage BLE HCI ID (Linux)
+  config wifi-credentials         Manage Wi-Fi credentials used in commissioning process
+  config thread-credentials       Manage Thread credentials used in commissioning process
+  config dcl-test-certificates    Manage DCL test certificate fetching
 
 Done
 ```
@@ -96,6 +99,24 @@ By default the Shell logs messages to the console. The log level can be changed
 
 Additionally the Shell can log to a file. The log file path can be set using the `config logfile` command or as commandline parameter (which will then be persisted in the configuration). The log file always contain the logs in "debug" level.
 
+### DCL Test Certificates
+
+By default, the shell only fetches production certificates from the Distributed Compliance Ledger (DCL). To also fetch test certificates from DCL and development certificates from GitHub, use the `config dcl-test-certificates` command:
+
+```
+config dcl-test-certificates set true
+config dcl-test-certificates set false
+config dcl-test-certificates get
+config dcl-test-certificates delete
+```
+
+When enabled, the certificate service will fetch:
+- Production certificates from DCL
+- Test certificates from DCL
+- Development certificates from the Matter GitHub repository
+
+When disabled (default), only production certificates from DCL are fetched. Changes require restarting the shell to take effect.
+
 ### Commission a device
 
 The shell supports discovery and also commissioning of devices. The commissioning process is based on the Matter SDK and uses the same commissioning process as the chip-tool. The commissioning process is started by the `commission pair` command.
@@ -129,6 +150,190 @@ Additional parameters to the connect command are the subscription delays (min/ma
 
 To see the full node structure of a node you can use the `nodes log` command and provide the node-id as parameter (`nodes log 5000`).
 
+### OTA Update Management
+
+The shell provides comprehensive OTA (Over-The-Air) update management through DCL (Distributed Compliance Ledger) integration and local file operations.
+
+#### Check for OTA updates for a commissioned node
+
+Use `nodes ota check <node-id>` to query the DCL for available OTA updates for a specific commissioned node. The command uses the node's basic information (vendor ID, product ID, current software version) to check for newer firmware versions.
+
+```
+nodes ota check 5000
+nodes ota check 5000 --mode test
+```
+
+Options:
+- `--mode <prod|test>`: Specify DCL mode - production (default) or test
+
+The command will display information about available updates including version, file size, and download URL.
+
+#### Download OTA updates for a commissioned node
+
+Use `nodes ota download <node-id>` to check for and download OTA updates from DCL. The downloaded update is validated and stored locally for later use.
+
+```
+nodes ota download 5000
+nodes ota download 5000 --mode test --force
+```
+
+Options:
+- `--mode <prod|test>`: Specify DCL mode - production (default) or test
+- `--force`: Force re-download even if the update is already cached locally
+
+#### Display OTA image information
+
+Use `ota info <file>` to display detailed information about an OTA image file including vendor ID, product ID, software version, and applicable version ranges.
+
+```
+ota info file:///path/to/firmware.bin
+ota info fff1-8000-prod
+```
+
+The command accepts:
+- `file://` prefix: Absolute file path on the filesystem
+- No prefix: Storage key for a previously downloaded/imported OTA file
+
+#### List stored OTA images
+
+Use `ota list` to list all OTA images currently stored locally with optional filtering.
+
+```
+ota list
+ota list --vendor 0xfff1
+ota list --vendor 0xfff1 --product 0x8000
+ota list --mode test
+```
+
+Options:
+- `--vendor <vid>`: Filter by vendor ID (hex format like 0xFFF1 or decimal)
+- `--product <pid>`: Filter by product ID (hex format like 0x8000 or decimal) - requires --vendor
+- `--mode <prod|test>`: Filter by DCL mode (production or test)
+
+#### Add OTA image to storage
+
+Use `ota add <file>` to import a local OTA image file into storage after validation.
+
+```
+ota add /path/to/firmware.bin
+ota add /path/to/test-firmware.bin --mode test
+```
+
+Options:
+- `--mode <prod|test>`: Mark the OTA image as production (default) or test mode
+
+The command validates the OTA file format and extracts metadata before storing it.
+
+#### Delete OTA images from storage
+
+Use `ota delete` to remove OTA images from local storage.
+
+```
+ota delete fff1-8000-prod
+ota delete --vendor 0xfff1
+ota delete --vendor 0xfff1 --product 0x8000 --mode test
+```
+
+Options:
+- `<keyname>`: Delete specific OTA file by storage key
+- `--vendor <vid>`: Delete all OTA files for a vendor
+- `--product <pid>`: Delete specific product (requires --vendor)
+- `--mode <prod|test>`: Specify DCL mode - production (default) or test
+
+#### Copy OTA image to filesystem
+
+Use `ota copy` to export a stored OTA image to the filesystem.
+
+```
+ota copy fff1-8000-prod /path/to/output.bin
+ota copy 0xfff1 0x8000 prod /path/to/output.bin
+```
+
+Both forms are supported:
+- `ota copy <keyname> <target>`: Copy by storage key
+- `ota copy <vendor-id> <product-id> <mode> <target>`: Copy by vendor/product/mode
+
+If target is a directory, the source keyname is used as the filename.
+
+#### Verify OTA image
+
+Use `ota verify <file>` to validate an OTA image file without extracting the payload. This performs full validation including header parsing and checksum verification.
+
+```
+ota verify file:///path/to/firmware.bin
+ota verify fff1-8000-prod
+```
+
+#### Extract OTA payload
+
+Use `ota extract <file>` to extract and validate the payload from an OTA image file. The payload is written to a new file with "-payload" added to the filename.
+
+```
+ota extract /path/to/firmware.bin
+```
+
+The extracted payload file will be created at `/path/to/firmware-payload.bin`.
+
+### Certificate Management
+
+The shell provides certificate management operations for PAA (Product Attestation Authority) certificates stored locally. Certificates are automatically fetched from DCL (Distributed Compliance Ledger) and can be managed through the cert commands.
+
+#### List certificates
+
+Use `cert list` to display all stored certificates with their subject key IDs and subject information. Optionally filter by vendor ID.
+
+```
+cert list
+cert list 0xFFF1
+```
+
+The command displays:
+- Subject Key ID (unique identifier)
+- Subject (certificate subject as text)
+
+For detailed information about a specific certificate, use the `cert details` command.
+
+#### View certificate details
+
+Use `cert details <subject-key-id>` to view detailed metadata about a specific certificate.
+
+```
+cert details 6AFD22771F511FECBF1641976710DCDC31A1717E
+```
+
+This displays all certificate metadata in JSON format, including subject information, serial number, VID, and more.
+
+#### Get certificate as PEM
+
+Use `cert as-pem <subject-key-id>` to retrieve a certificate in PEM format, which can be saved to a file or used for verification.
+
+```
+cert as-pem 6AFD22771F511FECBF1641976710DCDC31A1717E
+cert as-pem 6AFD22771F511FECBF1641976710DCDC31A1717E > certificate.pem
+```
+
+The PEM format output can be redirected to a file for use with standard certificate tools.
+
+#### Delete certificate
+
+Use `cert delete <subject-key-id>` to remove a certificate from local storage.
+
+```
+cert delete 6AFD22771F511FECBF1641976710DCDC31A1717E
+```
+
+Note: This only removes the certificate from local storage. Production certificates from DCL will be re-downloaded during the next automatic update cycle.
+
+#### Update certificates from DCL
+
+Use `cert update` to manually trigger an update of certificates from the Distributed Compliance Ledger.
+
+```
+cert update
+```
+
+This fetches the latest production certificates from DCL and, if configured, also fetches test certificates from DCL and GitHub. The shell automatically performs periodic updates, but this command allows manual updates when needed.
+
 ### Commissioning related node operations
 
 To open a commissioning window on a node to allow an additional pairing use `commission open-enhanced-window <node-id>`. When the command was successful the shell outputs the pairing code and a QR code to scan with the relevant pairing App.

package/dist/cjs/MatterNode.js

@@ -22,6 +22,7 @@ __export(MatterNode_exports, {
 });
 module.exports = __toCommonJS(MatterNode_exports);
 var import_general = require("#general");
+var import_protocol = require("#protocol");
 var import_types = require("#types");
 var import_matter = require("@project-chip/matter.js");
 var import_node_path = require("node:path");
@@ -39,6 +40,8 @@ class MatterNode {
   #started = false;
   #nodeNum;
   #netInterface;
+  #dclFetchTestCertificates = false;
+  #services;
   constructor(nodeNum, netInterface) {
     this.#environment = import_general.Environment.default;
     this.#environment.runtime.add(this);
@@ -48,6 +51,33 @@ class MatterNode {
   get storageLocation() {
     return this.#storageLocation;
   }
+  get environment() {
+    return this.#environment;
+  }
+  get services() {
+    if (!this.#services) {
+      this.#services = this.#environment.asDependent();
+    }
+    return this.#services;
+  }
+  get otaService() {
+    if (!this.environment.has(import_protocol.DclOtaUpdateService)) {
+      new import_protocol.DclOtaUpdateService(this.environment);
+    }
+    return this.services.get(import_protocol.DclOtaUpdateService);
+  }
+  get certificateService() {
+    if (!this.environment.has(import_protocol.DclCertificateService)) {
+      new import_protocol.DclCertificateService(this.environment, { fetchTestCertificates: this.#dclFetchTestCertificates });
+    }
+    return this.services.get(import_protocol.DclCertificateService);
+  }
+  get vendorInfoService() {
+    if (!this.environment.has(import_protocol.DclVendorInfoService)) {
+      new import_protocol.DclVendorInfoService(this.environment);
+    }
+    return this.services.get(import_protocol.DclVendorInfoService);
+  }
   async initialize(resetStorage) {
     if (this.#environment) {
       if (this.#netInterface !== void 0) {
@@ -68,6 +98,7 @@ class MatterNode {
         await controllerStore.erase();
       }
       this.#storageContext = controllerStore.storage.createContext("Node");
+      this.#dclFetchTestCertificates = await this.#storageContext.get("DclFetchTestCertificates", false);
       const storageService = this.commissioningController.env.get(import_general.StorageService);
       const baseLocation = storageService.location;
       if (baseLocation !== void 0) {
@@ -88,6 +119,7 @@ class MatterNode {
   }
   async close() {
     await this.commissioningController?.close();
+    await this.#services?.close();
   }
   async start() {
     if (this.#started) {

package/dist/cjs/MatterNode.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../src/MatterNode.ts"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,qBAAoE;AACpE,mBAAuB;AACvB,oBAAyD;AAEzD,uBAAqB;AAXrB;AAAA;AAAA;AAAA;AAAA;AAaA,MAAM,SAAS,sBAAO,IAAI,MAAM;AAEzB,MAAM,WAAW;AAAA,EACpB;AAAA,EACA;AAAA,EACS;AAAA,EACT;AAAA,EACA,WAAW;AAAA,EACF;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,cAAuB;AAChD,SAAK,eAAe,2BAAY;AAChC,SAAK,aAAa,QAAQ,IAAI,IAAI;AAClC,SAAK,WAAW;AAChB,SAAK,gBAAgB;AAAA,EACzB;AAAA,EAEA,IAAI,kBAAkB;AAClB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,MAAM,WAAW,cAAuB;AAQpC,QAAI,KAAK,cAAc;AACnB,UAAI,KAAK,kBAAkB,QAAW;AAClC,aAAK,aAAa,KAAK,IAAI,yBAAyB,KAAK,aAAa;AAAA,MAC1E;AAEA,YAAM,KAAK,SAAS,KAAK,SAAS,SAAS,CAAC;AAC5C,WAAK,0BAA0B,IAAI,sCAAwB;AAAA,QACvD,aAAa;AAAA,UACT,aAAa,KAAK;AAAA,UAClB;AAAA,QACJ;AAAA,QACA,aAAa;AAAA,QACb,kBAAkB;AAAA,MACtB,CAAC;AACD,YAAM,KAAK,wBAAwB,0BAA0B;AAE7D,YAAM,kBAAkB,KAAK,wBAAwB,IAAI,IAAI,6BAAe;AAC5E,UAAI,cAAc;AACd,cAAM,gBAAgB,MAAM;AAAA,MAChC;AACA,WAAK,kBAAkB,gBAAgB,QAAQ,cAAc,MAAM;AAEnE,YAAM,iBAAiB,KAAK,wBAAwB,IAAI,IAAI,6BAAc;AAC1E,YAAM,eAAe,eAAe;AACpC,UAAI,iBAAiB,QAAW;AAC5B,aAAK,uBAAmB,uBAAK,cAAc,EAAE;AAAA,MACjD;AAAA,IACJ,OAAO;AACH,cAAQ;AAAA,QACJ;AAAA,MACJ;AACA,cAAQ,KAAK,CAAC;AAAA,IAClB;AAAA,EACJ;AAAA,EAEA,IAAI,QAAQ;AACR,QAAI,CAAC,KAAK,iBAAiB;AACvB,YAAM,IAAI,MAAM,uBAAuB;AAAA,IAC3C;AACA,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,MAAM,QAAQ;AACV,UAAM,KAAK,yBAAyB,MAAM;AAAA,EAC9C;AAAA,EAEA,MAAM,QAAQ;AACV,QAAI,KAAK,UAAU;AACf;AAAA,IACJ;AACA,WAAO,KAAK,+CAA+C,KAAK,QAAQ,EAAE;AAE1E,QAAI,KAAK,4BAA4B,QAAW;AAC5C,YAAM,KAAK,wBAAwB,MAAM;AAEzC,UAAI,MAAM,KAAK,MAAM,IAAI,uBAAuB,GAAG;AAC/C,cAAM,KAAK,wBAAwB;AAAA,UAC/B,MAAM,KAAK,MAAM,IAAY,yBAAyB,iBAAiB;AAAA,QAC3E;AAAA,MACJ;AAAA,IACJ,OAAO;AACH,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC/C;AACA,SAAK,WAAW;AAAA,EACpB;AAAA,EAEA,MAAM,mBAAmB,WAAoB,gBAAqD;AAC9F,UAAM,KAAK,MAAM;AACjB,UAAM,SAAS,cAAc,aAAY,qBAAO,OAAO,SAAS,CAAC,IAAI;AAErE,QAAI,KAAK,4BAA4B,QAAW;AAC5C,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC7D;AAEA,QAAI,WAAW,QAAW;AACtB,aAAO,MAAM,KAAK,wBAAwB,QAAQ,cAAc;AAAA,IACpE;AAEA,UAAM,OAAO,MAAM,KAAK,wBAAwB,YAAY,QAAQ,cAAc;AAClF,QAAI,CAAC,KAAK,aAAa;AACnB,YAAM,KAAK,OAAO;AAAA,IACtB;AACA,WAAO,CAAC,IAAI;AAAA,EAChB;AAAA,EAEA,IAAI,aAAa;AACb,QAAI,KAAK,4BAA4B,QAAW;AAC5C,YAAM,IAAI,MAAM,sDAAsD;AAAA,IAC1E;AACA,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,MAAM,mBACF,OACA,UACA,YACF;AACE,eAAW,QAAQ,OAAO;AACtB,UAAI,UAAU,KAAK,WAAW;AAC9B,UAAI,eAAe,QAAW;AAC1B,kBAAU,QAAQ,OAAO,YAAU,OAAO,WAAW,UAAU;AAAA,MACnE;AAEA,iBAAW,UAAU,SAAS;AAC1B,cAAM,SAAS,QAAQ,IAAI;AAAA,MAC/B;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,kBAAkB,OAAe;AAC7B,WAAO,KAAK,yBAAyB,kBAAkB,KAAK;AAAA,EAChE;AACJ;",
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,qBAA+F;AAC/F,sBAAiF;AACjF,mBAAuB;AACvB,oBAAyD;AAEzD,uBAAqB;AAZrB;AAAA;AAAA;AAAA;AAAA;AAcA,MAAM,SAAS,sBAAO,IAAI,MAAM;AAEzB,MAAM,WAAW;AAAA,EACpB;AAAA,EACA;AAAA,EACS;AAAA,EACT;AAAA,EACA,WAAW;AAAA,EACF;AAAA,EACA;AAAA,EACT,4BAA4B;AAAA,EAC5B;AAAA,EAEA,YAAY,SAAiB,cAAuB;AAChD,SAAK,eAAe,2BAAY;AAChC,SAAK,aAAa,QAAQ,IAAI,IAAI;AAClC,SAAK,WAAW;AAChB,SAAK,gBAAgB;AAAA,EACzB;AAAA,EAEA,IAAI,kBAAkB;AAClB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,cAAc;AACd,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAc,WAAW;AACrB,QAAI,CAAC,KAAK,WAAW;AACjB,WAAK,YAAY,KAAK,aAAa,YAAY;AAAA,IACnD;AACA,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,aAAa;AACb,QAAI,CAAC,KAAK,YAAY,IAAI,mCAAmB,GAAG;AAC5C,UAAI,oCAAoB,KAAK,WAAW;AAAA,IAC5C;AACA,WAAO,KAAK,SAAS,IAAI,mCAAmB;AAAA,EAChD;AAAA,EAEA,IAAI,qBAAqB;AACrB,QAAI,CAAC,KAAK,YAAY,IAAI,qCAAqB,GAAG;AAC9C,UAAI,sCAAsB,KAAK,aAAa,EAAE,uBAAuB,KAAK,0BAA0B,CAAC;AAAA,IACzG;AACA,WAAO,KAAK,SAAS,IAAI,qCAAqB;AAAA,EAClD;AAAA,EAEA,IAAI,oBAAoB;AACpB,QAAI,CAAC,KAAK,YAAY,IAAI,oCAAoB,GAAG;AAC7C,UAAI,qCAAqB,KAAK,WAAW;AAAA,IAC7C;AACA,WAAO,KAAK,SAAS,IAAI,oCAAoB;AAAA,EACjD;AAAA,EAEA,MAAM,WAAW,cAAuB;AAQpC,QAAI,KAAK,cAAc;AACnB,UAAI,KAAK,kBAAkB,QAAW;AAClC,aAAK,aAAa,KAAK,IAAI,yBAAyB,KAAK,aAAa;AAAA,MAC1E;AAEA,YAAM,KAAK,SAAS,KAAK,SAAS,SAAS,CAAC;AAC5C,WAAK,0BAA0B,IAAI,sCAAwB;AAAA,QACvD,aAAa;AAAA,UACT,aAAa,KAAK;AAAA,UAClB;AAAA,QACJ;AAAA,QACA,aAAa;AAAA,QACb,kBAAkB;AAAA,MACtB,CAAC;AACD,YAAM,KAAK,wBAAwB,0BAA0B;AAE7D,YAAM,kBAAkB,KAAK,wBAAwB,IAAI,IAAI,6BAAe;AAC5E,UAAI,cAAc;AACd,cAAM,gBAAgB,MAAM;AAAA,MAChC;AACA,WAAK,kBAAkB,gBAAgB,QAAQ,cAAc,MAAM;AAGnE,WAAK,4BAA4B,MAAM,KAAK,gBAAgB,IAAa,4BAA4B,KAAK;AAE1G,YAAM,iBAAiB,KAAK,wBAAwB,IAAI,IAAI,6BAAc;AAC1E,YAAM,eAAe,eAAe;AACpC,UAAI,iBAAiB,QAAW;AAC5B,aAAK,uBAAmB,uBAAK,cAAc,EAAE;AAAA,MACjD;AAAA,IACJ,OAAO;AACH,cAAQ;AAAA,QACJ;AAAA,MACJ;AACA,cAAQ,KAAK,CAAC;AAAA,IAClB;AAAA,EACJ;AAAA,EAEA,IAAI,QAAQ;AACR,QAAI,CAAC,KAAK,iBAAiB;AACvB,YAAM,IAAI,MAAM,uBAAuB;AAAA,IAC3C;AACA,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,MAAM,QAAQ;AACV,UAAM,KAAK,yBAAyB,MAAM;AAC1C,UAAM,KAAK,WAAW,MAAM;AAAA,EAChC;AAAA,EAEA,MAAM,QAAQ;AACV,QAAI,KAAK,UAAU;AACf;AAAA,IACJ;AACA,WAAO,KAAK,+CAA+C,KAAK,QAAQ,EAAE;AAE1E,QAAI,KAAK,4BAA4B,QAAW;AAC5C,YAAM,KAAK,wBAAwB,MAAM;AAEzC,UAAI,MAAM,KAAK,MAAM,IAAI,uBAAuB,GAAG;AAC/C,cAAM,KAAK,wBAAwB;AAAA,UAC/B,MAAM,KAAK,MAAM,IAAY,yBAAyB,iBAAiB;AAAA,QAC3E;AAAA,MACJ;AAAA,IACJ,OAAO;AACH,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC/C;AACA,SAAK,WAAW;AAAA,EACpB;AAAA,EAEA,MAAM,mBAAmB,WAAoB,gBAAqD;AAC9F,UAAM,KAAK,MAAM;AACjB,UAAM,SAAS,cAAc,aAAY,qBAAO,OAAO,SAAS,CAAC,IAAI;AAErE,QAAI,KAAK,4BAA4B,QAAW;AAC5C,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC7D;AAEA,QAAI,WAAW,QAAW;AACtB,aAAO,MAAM,KAAK,wBAAwB,QAAQ,cAAc;AAAA,IACpE;AAEA,UAAM,OAAO,MAAM,KAAK,wBAAwB,YAAY,QAAQ,cAAc;AAClF,QAAI,CAAC,KAAK,aAAa;AACnB,YAAM,KAAK,OAAO;AAAA,IACtB;AACA,WAAO,CAAC,IAAI;AAAA,EAChB;AAAA,EAEA,IAAI,aAAa;AACb,QAAI,KAAK,4BAA4B,QAAW;AAC5C,YAAM,IAAI,MAAM,sDAAsD;AAAA,IAC1E;AACA,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,MAAM,mBACF,OACA,UACA,YACF;AACE,eAAW,QAAQ,OAAO;AACtB,UAAI,UAAU,KAAK,WAAW;AAC9B,UAAI,eAAe,QAAW;AAC1B,kBAAU,QAAQ,OAAO,YAAU,OAAO,WAAW,UAAU;AAAA,MACnE;AAEA,iBAAW,UAAU,SAAS;AAC1B,cAAM,SAAS,QAAQ,IAAI;AAAA,MAC/B;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,kBAAkB,OAAe;AAC7B,WAAO,KAAK,yBAAyB,kBAAkB,KAAK;AAAA,EAChE;AACJ;",
   "names": []
 }

package/dist/cjs/shell/Shell.js

@@ -38,17 +38,21 @@ var import_node_util = require("node:util");
 var import_yargs = __toESM(require("yargs/yargs"));
 var import_app = require("../app");
 var import_CommandlineParser = require("../util/CommandlineParser.js");
+var import_cmd_cert = __toESM(require("./cmd_cert.js"));
 var import_cmd_cluster_attributes = __toESM(require("./cmd_cluster-attributes"));
 var import_cmd_cluster_commands = __toESM(require("./cmd_cluster-commands"));
 var import_cmd_cluster_events = __toESM(require("./cmd_cluster-events"));
 var import_cmd_commission = __toESM(require("./cmd_commission.js"));
 var import_cmd_config = __toESM(require("./cmd_config.js"));
+var import_cmd_dcl = __toESM(require("./cmd_dcl.js"));
 var import_cmd_discover = __toESM(require("./cmd_discover.js"));
 var import_cmd_identify = __toESM(require("./cmd_identify.js"));
 var import_cmd_nodes = __toESM(require("./cmd_nodes.js"));
+var import_cmd_ota = __toESM(require("./cmd_ota.js"));
 var import_cmd_session = __toESM(require("./cmd_session.js"));
 var import_cmd_subscribe = __toESM(require("./cmd_subscribe.js"));
 var import_cmd_tlv = __toESM(require("./cmd_tlv"));
+var import_cmd_vendor = __toESM(require("./cmd_vendor.js"));
 /**
  * @license
  * Copyright 2022-2025 Matter.js Authors
@@ -165,7 +169,11 @@ class Shell {
         (0, import_cmd_cluster_attributes.default)(this.theNode),
         (0, import_cmd_cluster_events.default)(this.theNode),
         (0, import_cmd_cluster_commands.default)(this.theNode),
+        (0, import_cmd_ota.default)(this.theNode),
+        (0, import_cmd_cert.default)(this.theNode),
+        (0, import_cmd_vendor.default)(this.theNode),
         (0, import_cmd_tlv.default)(),
+        (0, import_cmd_dcl.default)(),
         exitCommand()
       ]).command({
         command: "*",

package/dist/cjs/shell/Shell.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../../src/shell/Shell.ts"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,qBAA4B;AAC5B,qBAAgD;AAChD,2BAAqB;AAErB,uBAAwB;AACxB,mBAAkB;AAElB,iBAAqB;AACrB,+BAAkC;AAClC,oCAA0B;AAC1B,kCAAwB;AACxB,gCAAsB;AACtB,4BAA0B;AAC1B,wBAAsB;AACtB,0BAAwB;AACxB,0BAAwB;AACxB,uBAAqB;AACrB,yBAAuB;AACvB,2BAAyB;AACzB,qBAAmB;AAzBnB;AAAA;AAAA;AAAA;AAAA;AA2BA,MAAM,mBAAmB;AAEzB,SAAS,cAAc;AACnB,SAAO;AAAA,IACH,SAAS;AAAA,IACT,UAAU;AAAA,IACV,SAAS,CAAC;AAAA,IACV,SAAS,YAAY;AACjB,cAAQ,IAAI,UAAU;AACtB,gBAAM,iBAAK;AAAA,IACf;AAAA,EACJ;AACJ;AAKO,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA,EAOf,YACW,SACA,SACA,QACA,OACA,QACT;AALS;AACA;AACA;AACA;AACA;AAAA,EACR;AAAA,EAZH;AAAA,EACA;AAAA,EAaA,MAAM,aAAsB;AACxB,UAAM,UAAU,IAAI,MAAc;AAClC,QAAI,gBAAgB,QAAW;AAC3B,YAAM,WAAW,GAAG,WAAW;AAC/B,UAAI;AACA,cAAM,kBAAc,6BAAa,UAAU,MAAM;AACjD,gBAAQ;AAAA,UACJ,GAAG,YACE,MAAM,IAAI,EACV,IAAI,UAAQ,KAAK,KAAK,CAAC,EACvB,OAAO,UAAQ,KAAK,MAAM;AAAA,QACnC;AACA,gBAAQ,OAAO,GAAG,CAAC,gBAAgB;AACnC,gBAAQ,IAAI,UAAU,QAAQ,MAAM,yBAAyB,QAAQ,EAAE;AAAA,MAC3E,SAAS,GAAG;AACR,YAAI,aAAa,SAAS,UAAU,KAAK,EAAE,SAAS,UAAU;AAC1D,kBAAQ,OAAO,MAAM,4CAA4C,CAAC;AAAA,CAAI;AAAA,QAC1E;AAAA,MACJ;AACA,UAAI;AACA,aAAK,kBAAc,kCAAkB,UAAU,EAAE,OAAO,IAAI,CAAC;AAC7D,aAAK,YAAY,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAC;AAAA,CAAI;AAAA,MACpD,SAAS,GAAG;AACR,gBAAQ,OAAO,MAAM,6CAA6C,CAAC;AAAA,CAAI;AAAA,MAC3E;AAAA,IACJ;AACA,SAAK,WAAW,qBAAAA,QAAS,gBAAgB;AAAA,MACrC,OAAO,KAAK;AAAA,MACZ,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK,UAAU,QAAQ,SAAS,KAAK,WAAW,QAAQ;AAAA,MAClE,QAAQ,KAAK;AAAA,MACb,SAAS,QAAQ,QAAQ;AAAA,MACzB,aAAa;AAAA,IACjB,CAAC;AACD,SAAK,SACA,GAAG,QAAQ,SAAO;AACf,YAAM,IAAI,KAAK;AACf,WAAK,WAAW,GAAG,EACd,KAAK,YAAU,UAAU,IAAI,UAAU,KAAK,aAAa,MAAM,GAAG,GAAG;AAAA,CAAI,CAAC,EAC1E,MAAM,OAAK;AACR,gBAAQ,OAAO,MAAM,eAAe,CAAC;AAAA,CAAI;AACzC,gBAAQ,KAAK,CAAC;AAAA,MAClB,CAAC;AAAA,IACT,CAAC,EACA,GAAG,SAAS,MAAM;AACf,UAAI;AACA,aAAK,aAAa,IAAI;AAAA,MAC1B,SAAS,GAAG;AACR,gBAAQ,OAAO,MAAM,6CAA6C,CAAC;AAAA,CAAI;AAAA,MAC3E;AAEA,UAAI,KAAK,UAAU,QAAQ,SAAS,KAAK,WAAW,QAAQ,QAAQ;AAChE,6BAAK,EACA,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC,EAC1B,MAAM,OAAK;AACR,kBAAQ,OAAO,MAAM,gBAAgB,CAAC;AAAA,CAAI;AAC1C,kBAAQ,KAAK,CAAC;AAAA,QAClB,CAAC;AAAA,MACT;AAAA,IACJ,CAAC;AAEL,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,WAAW,MAAc;AAC3B,QAAI,SAAS;AACb,QAAI,MAAM;AACN,UAAI;AACJ,UAAI;AACA,mBAAO,4CAAkB,IAAI;AAAA,MACjC,SAAS,OAAO;AACZ,gBAAQ,OAAO,MAAM,0CAA0C,KAAK;AAAA,CAAI;AACxE,eAAO;AAAA,MACX;AACA,YAAM,oBAAgB,aAAAC,SAAM,IAAI,EAC3B,QAAQ;AAAA,YACL,sBAAAC,SAAc,KAAK,OAAO;AAAA,YAC1B,kBAAAC,SAAU,KAAK,OAAO;AAAA,YACtB,mBAAAC,SAAW,KAAK,OAAO;AAAA,YACvB,iBAAAC,SAAS,KAAK,OAAO;AAAA,YACrB,qBAAAC,SAAa,KAAK,OAAO;AAAA,YACzB,oBAAAC,SAAY,KAAK,OAAO;AAAA,YACxB,oBAAAC,SAAY,KAAK,OAAO;AAAA,YACxB,8BAAAC,SAAc,KAAK,OAAO;AAAA,YAC1B,0BAAAC,SAAU,KAAK,OAAO;AAAA,YACtB,4BAAAC,SAAY,KAAK,OAAO;AAAA,YACxB,eAAAC,SAAO;AAAA,QACP,YAAY;AAAA,MAChB,CAAC,EACA,QAAQ;AAAA,QACL,SAAS;AAAA,QACT,SAAS,UAAQ;AACb,eAAK,YAAY;AAAA,QACrB;AAAA,MACJ,CAAC,EACA,YAAY,KAAK,EACjB,QAAQ,KAAK,EACb,KAAK,MAAM,EACX,WAAW,EAAE,EACb,eAAe,KAAK,EACpB,cAAc,KAAK,EACnB,KAAK,KAAK,EACV,OAAO,KAAK;AACjB,UAAI;AACA,cAAM,OAAO,MAAM,cAAc,KAAK,cAAc,cAAc,CAAC,EAAE,WAAW;AAEhF,YAAI,KAAK,WAAW;AAChB,kBAAQ,OAAO,MAAM,oBAAoB,IAAI;AAAA,CAAI;AACjD,wBAAc,SAAS;AAAA,QAC3B,OAAO;AACH,kBAAQ,IAAI,OAAO;AAAA,QACvB;AAAA,MACJ,SAAS,OAAO;AACZ,gBAAQ,OAAO,MAAM,kCAAkC,KAAK;AAAA,CAAI;AAChE,YAAI,iBAAiB,SAAS,MAAM,OAAO;AACvC,gBAAM,gBAAY,0BAAQ,OAAO,EAAE,OAAO,GAAG,CAAC;AAC9C,kBAAQ,OAAO,MAAM,SAAS;AAC9B,kBAAQ,OAAO,MAAM,IAAI;AAAA,QAC7B;AACA,YAAI,EAAE,iBAAiB,6BAAc;AACjC,wBAAc,SAAS;AACvB,mBAAS;AAAA,QACb;AAAA,MACJ;AAAA,IACJ;AACA,SAAK,UAAU,OAAO;AACtB,WAAO;AAAA,EACX;AACJ;",
-  "names": ["readline", "yargs", "cmdCommission", "cmdConfig", "cmdSession", "cmdNodes", "cmdSubscribe", "cmdIdentify", "cmdDiscover", "cmdAttributes", "cmdEvents", "cmdCommands", "cmdTlv"]
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,qBAA4B;AAC5B,qBAAgD;AAChD,2BAAqB;AAErB,uBAAwB;AACxB,mBAAkB;AAElB,iBAAqB;AACrB,+BAAkC;AAClC,sBAAoB;AACpB,oCAA0B;AAC1B,kCAAwB;AACxB,gCAAsB;AACtB,4BAA0B;AAC1B,wBAAsB;AACtB,qBAAmB;AACnB,0BAAwB;AACxB,0BAAwB;AACxB,uBAAqB;AACrB,qBAAmB;AACnB,yBAAuB;AACvB,2BAAyB;AACzB,qBAAmB;AACnB,wBAAsB;AA7BtB;AAAA;AAAA;AAAA;AAAA;AA+BA,MAAM,mBAAmB;AAEzB,SAAS,cAAc;AACnB,SAAO;AAAA,IACH,SAAS;AAAA,IACT,UAAU;AAAA,IACV,SAAS,CAAC;AAAA,IACV,SAAS,YAAY;AACjB,cAAQ,IAAI,UAAU;AACtB,gBAAM,iBAAK;AAAA,IACf;AAAA,EACJ;AACJ;AAKO,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA,EAOf,YACW,SACA,SACA,QACA,OACA,QACT;AALS;AACA;AACA;AACA;AACA;AAAA,EACR;AAAA,EAZH;AAAA,EACA;AAAA,EAaA,MAAM,aAAsB;AACxB,UAAM,UAAU,IAAI,MAAc;AAClC,QAAI,gBAAgB,QAAW;AAC3B,YAAM,WAAW,GAAG,WAAW;AAC/B,UAAI;AACA,cAAM,kBAAc,6BAAa,UAAU,MAAM;AACjD,gBAAQ;AAAA,UACJ,GAAG,YACE,MAAM,IAAI,EACV,IAAI,UAAQ,KAAK,KAAK,CAAC,EACvB,OAAO,UAAQ,KAAK,MAAM;AAAA,QACnC;AACA,gBAAQ,OAAO,GAAG,CAAC,gBAAgB;AACnC,gBAAQ,IAAI,UAAU,QAAQ,MAAM,yBAAyB,QAAQ,EAAE;AAAA,MAC3E,SAAS,GAAG;AACR,YAAI,aAAa,SAAS,UAAU,KAAK,EAAE,SAAS,UAAU;AAC1D,kBAAQ,OAAO,MAAM,4CAA4C,CAAC;AAAA,CAAI;AAAA,QAC1E;AAAA,MACJ;AACA,UAAI;AACA,aAAK,kBAAc,kCAAkB,UAAU,EAAE,OAAO,IAAI,CAAC;AAC7D,aAAK,YAAY,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAC;AAAA,CAAI;AAAA,MACpD,SAAS,GAAG;AACR,gBAAQ,OAAO,MAAM,6CAA6C,CAAC;AAAA,CAAI;AAAA,MAC3E;AAAA,IACJ;AACA,SAAK,WAAW,qBAAAA,QAAS,gBAAgB;AAAA,MACrC,OAAO,KAAK;AAAA,MACZ,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK,UAAU,QAAQ,SAAS,KAAK,WAAW,QAAQ;AAAA,MAClE,QAAQ,KAAK;AAAA,MACb,SAAS,QAAQ,QAAQ;AAAA,MACzB,aAAa;AAAA,IACjB,CAAC;AACD,SAAK,SACA,GAAG,QAAQ,SAAO;AACf,YAAM,IAAI,KAAK;AACf,WAAK,WAAW,GAAG,EACd,KAAK,YAAU,UAAU,IAAI,UAAU,KAAK,aAAa,MAAM,GAAG,GAAG;AAAA,CAAI,CAAC,EAC1E,MAAM,OAAK;AACR,gBAAQ,OAAO,MAAM,eAAe,CAAC;AAAA,CAAI;AACzC,gBAAQ,KAAK,CAAC;AAAA,MAClB,CAAC;AAAA,IACT,CAAC,EACA,GAAG,SAAS,MAAM;AACf,UAAI;AACA,aAAK,aAAa,IAAI;AAAA,MAC1B,SAAS,GAAG;AACR,gBAAQ,OAAO,MAAM,6CAA6C,CAAC;AAAA,CAAI;AAAA,MAC3E;AAEA,UAAI,KAAK,UAAU,QAAQ,SAAS,KAAK,WAAW,QAAQ,QAAQ;AAChE,6BAAK,EACA,KAAK,MAAM,QAAQ,KAAK,CAAC,CAAC,EAC1B,MAAM,OAAK;AACR,kBAAQ,OAAO,MAAM,gBAAgB,CAAC;AAAA,CAAI;AAC1C,kBAAQ,KAAK,CAAC;AAAA,QAClB,CAAC;AAAA,MACT;AAAA,IACJ,CAAC;AAEL,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,WAAW,MAAc;AAC3B,QAAI,SAAS;AACb,QAAI,MAAM;AACN,UAAI;AACJ,UAAI;AACA,mBAAO,4CAAkB,IAAI;AAAA,MACjC,SAAS,OAAO;AACZ,gBAAQ,OAAO,MAAM,0CAA0C,KAAK;AAAA,CAAI;AACxE,eAAO;AAAA,MACX;AACA,YAAM,oBAAgB,aAAAC,SAAM,IAAI,EAC3B,QAAQ;AAAA,YACL,sBAAAC,SAAc,KAAK,OAAO;AAAA,YAC1B,kBAAAC,SAAU,KAAK,OAAO;AAAA,YACtB,mBAAAC,SAAW,KAAK,OAAO;AAAA,YACvB,iBAAAC,SAAS,KAAK,OAAO;AAAA,YACrB,qBAAAC,SAAa,KAAK,OAAO;AAAA,YACzB,oBAAAC,SAAY,KAAK,OAAO;AAAA,YACxB,oBAAAC,SAAY,KAAK,OAAO;AAAA,YACxB,8BAAAC,SAAc,KAAK,OAAO;AAAA,YAC1B,0BAAAC,SAAU,KAAK,OAAO;AAAA,YACtB,4BAAAC,SAAY,KAAK,OAAO;AAAA,YACxB,eAAAC,SAAO,KAAK,OAAO;AAAA,YACnB,gBAAAC,SAAQ,KAAK,OAAO;AAAA,YACpB,kBAAAC,SAAU,KAAK,OAAO;AAAA,YACtB,eAAAC,SAAO;AAAA,YACP,eAAAC,SAAO;AAAA,QACP,YAAY;AAAA,MAChB,CAAC,EACA,QAAQ;AAAA,QACL,SAAS;AAAA,QACT,SAAS,UAAQ;AACb,eAAK,YAAY;AAAA,QACrB;AAAA,MACJ,CAAC,EACA,YAAY,KAAK,EACjB,QAAQ,KAAK,EACb,KAAK,MAAM,EACX,WAAW,EAAE,EACb,eAAe,KAAK,EACpB,cAAc,KAAK,EACnB,KAAK,KAAK,EACV,OAAO,KAAK;AACjB,UAAI;AACA,cAAM,OAAO,MAAM,cAAc,KAAK,cAAc,cAAc,CAAC,EAAE,WAAW;AAEhF,YAAI,KAAK,WAAW;AAChB,kBAAQ,OAAO,MAAM,oBAAoB,IAAI;AAAA,CAAI;AACjD,wBAAc,SAAS;AAAA,QAC3B,OAAO;AACH,kBAAQ,IAAI,OAAO;AAAA,QACvB;AAAA,MACJ,SAAS,OAAO;AACZ,gBAAQ,OAAO,MAAM,kCAAkC,KAAK;AAAA,CAAI;AAChE,YAAI,iBAAiB,SAAS,MAAM,OAAO;AACvC,gBAAM,gBAAY,0BAAQ,OAAO,EAAE,OAAO,GAAG,CAAC;AAC9C,kBAAQ,OAAO,MAAM,SAAS;AAC9B,kBAAQ,OAAO,MAAM,IAAI;AAAA,QAC7B;AACA,YAAI,EAAE,iBAAiB,6BAAc;AACjC,wBAAc,SAAS;AACvB,mBAAS;AAAA,QACb;AAAA,MACJ;AAAA,IACJ;AACA,SAAK,UAAU,OAAO;AACtB,WAAO;AAAA,EACX;AACJ;",
+  "names": ["readline", "yargs", "cmdCommission", "cmdConfig", "cmdSession", "cmdNodes", "cmdSubscribe", "cmdIdentify", "cmdDiscover", "cmdAttributes", "cmdEvents", "cmdCommands", "cmdOta", "cmdCert", "cmdVendor", "cmdTlv", "cmdDcl"]
 }

package/dist/cjs/shell/cmd_cert.js

@@ -0,0 +1,154 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var cmd_cert_exports = {};
+__export(cmd_cert_exports, {
+  default: () => commands
+});
+module.exports = __toCommonJS(cmd_cert_exports);
+var import_general = require("#general");
+/**
+ * @license
+ * Copyright 2022-2025 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+function commands(theNode) {
+  return {
+    command: "cert",
+    describe: "Certificate management operations",
+    builder: (yargs) => yargs.command(
+      ["*", "list [vendor-id]"],
+      "List all stored certificates",
+      (yargs2) => {
+        return yargs2.positional("vendor-id", {
+          describe: "Filter by vendor ID (hex format like 0xFFF1 or decimal)",
+          type: "string"
+        });
+      },
+      async (argv) => {
+        const { vendorId: vendorIdStr } = argv;
+        await theNode.start();
+        let certificates = theNode.certificateService.certificates;
+        if (vendorIdStr) {
+          let vendorId;
+          if (vendorIdStr.startsWith("0x")) {
+            const hexStr = vendorIdStr.replace(/^0x/i, "");
+            vendorId = parseInt(hexStr, 16);
+          } else {
+            vendorId = parseInt(vendorIdStr, 10);
+          }
+          if (!isFinite(vendorId)) {
+            console.error(`Error: Invalid vendor ID "${vendorIdStr}"`);
+            return;
+          }
+          certificates = certificates.filter((cert) => cert.vid === vendorId);
+        }
+        if (certificates.length === 0) {
+          console.log(
+            vendorIdStr ? `No certificates found for vendor ID ${vendorIdStr}.` : "No certificates found in storage."
+          );
+          return;
+        }
+        console.log(`
+Found ${certificates.length} certificate(s):
+`);
+        certificates.forEach((cert) => {
+          console.log(`Subject Key ID: ${cert.subjectKeyId}`);
+          console.log(`  Subject: ${cert.subjectAsText || cert.subject || "N/A"}`);
+          console.log("");
+        });
+      }
+    ).command(
+      "details <subject-key-id>",
+      "Display detailed information about a certificate",
+      (yargs2) => {
+        return yargs2.positional("subject-key-id", {
+          describe: "Subject Key ID of the certificate",
+          type: "string",
+          demandOption: true
+        });
+      },
+      async (argv) => {
+        const { subjectKeyId } = argv;
+        await theNode.start();
+        const cert = theNode.certificateService.getCertificate(subjectKeyId);
+        if (!cert) {
+          console.error(`Certificate with subject key ID ${subjectKeyId} not found`);
+          return;
+        }
+        console.log("\nCertificate Details:");
+        console.log(import_general.Diagnostic.json(cert));
+      }
+    ).command(
+      "as-pem <subject-key-id>",
+      "Get certificate in PEM format",
+      (yargs2) => {
+        return yargs2.positional("subject-key-id", {
+          describe: "Subject Key ID of the certificate",
+          type: "string",
+          demandOption: true
+        });
+      },
+      async (argv) => {
+        const { subjectKeyId } = argv;
+        const normalizedId = subjectKeyId.replace(/:/g, "").toUpperCase();
+        await theNode.start();
+        const pemCert = await theNode.certificateService.getCertificateAsPem(normalizedId);
+        console.log(pemCert);
+      }
+    ).command(
+      "delete <subject-key-id>",
+      "Deletes a certificate from the storage",
+      (yargs2) => {
+        return yargs2.positional("subject-key-id", {
+          describe: "Subject Key ID of the certificate to delete",
+          type: "string",
+          demandOption: true
+        });
+      },
+      async (argv) => {
+        const { subjectKeyId } = argv;
+        const normalizedId = subjectKeyId.replace(/:/g, "").toUpperCase();
+        await theNode.start();
+        await theNode.certificateService.deleteCertificate(normalizedId);
+        console.log(`Certificate ${subjectKeyId} deleted successfully`);
+      }
+    ).command(
+      "update",
+      "Update certificates from DCL",
+      (yargs2) => yargs2.option("force", {
+        describe: "Force re-download and overwrite existing certificates",
+        type: "boolean",
+        default: false
+      }),
+      async (argv) => {
+        const { force } = argv;
+        await theNode.start();
+        console.log(`Updating certificates from DCL${force ? " (force mode)" : ""}...`);
+        await theNode.certificateService.update(force);
+        console.log("Certificate update completed successfully");
+        const count = theNode.certificateService.certificates.length;
+        console.log(`Total certificates in storage: ${count}`);
+      }
+    ),
+    handler: async (argv) => {
+      argv.unhandled = true;
+    }
+  };
+}
+//# sourceMappingURL=cmd_cert.js.map

package/dist/cjs/shell/cmd_cert.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../src/shell/cmd_cert.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,qBAA2B;AAN3B;AAAA;AAAA;AAAA;AAAA;AAUe,SAAR,SAA0B,SAAqB;AAClD,SAAO;AAAA,IACH,SAAS;AAAA,IACT,UAAU;AAAA,IACV,SAAS,CAAC,UACN,MACK;AAAA,MACG,CAAC,KAAK,kBAAkB;AAAA,MACxB;AAAA,MACA,CAAAA,WAAS;AACL,eAAOA,OAAM,WAAW,aAAa;AAAA,UACjC,UAAU;AAAA,UACV,MAAM;AAAA,QACV,CAAC;AAAA,MACL;AAAA,MACA,OAAM,SAAQ;AACV,cAAM,EAAE,UAAU,YAAY,IAAI;AAElC,cAAM,QAAQ,MAAM;AACpB,YAAI,eAAe,QAAQ,mBAAmB;AAG9C,YAAI,aAAa;AACb,cAAI;AACJ,cAAI,YAAY,WAAW,IAAI,GAAG;AAC9B,kBAAM,SAAS,YAAY,QAAQ,QAAQ,EAAE;AAC7C,uBAAW,SAAS,QAAQ,EAAE;AAAA,UAClC,OAAO;AACH,uBAAW,SAAS,aAAa,EAAE;AAAA,UACvC;AAEA,cAAI,CAAC,SAAS,QAAQ,GAAG;AACrB,oBAAQ,MAAM,6BAA6B,WAAW,GAAG;AACzD;AAAA,UACJ;AACA,yBAAe,aAAa,OAAO,UAAQ,KAAK,QAAQ,QAAQ;AAAA,QACpE;AAEA,YAAI,aAAa,WAAW,GAAG;AAC3B,kBAAQ;AAAA,YACJ,cACM,uCAAuC,WAAW,MAClD;AAAA,UACV;AACA;AAAA,QACJ;AAEA,gBAAQ,IAAI;AAAA,QAAW,aAAa,MAAM;AAAA,CAAoB;AAE9D,qBAAa,QAAQ,UAAQ;AACzB,kBAAQ,IAAI,mBAAmB,KAAK,YAAY,EAAE;AAClD,kBAAQ,IAAI,cAAc,KAAK,iBAAiB,KAAK,WAAW,KAAK,EAAE;AACvE,kBAAQ,IAAI,EAAE;AAAA,QAClB,CAAC;AAAA,MACL;AAAA,IACJ,EACC;AAAA,MACG;AAAA,MACA;AAAA,MACA,CAAAA,WAAS;AACL,eAAOA,OAAM,WAAW,kBAAkB;AAAA,UACtC,UAAU;AAAA,UACV,MAAM;AAAA,UACN,cAAc;AAAA,QAClB,CAAC;AAAA,MACL;AAAA,MACA,OAAM,SAAQ;AACV,cAAM,EAAE,aAAa,IAAI;AAEzB,cAAM,QAAQ,MAAM;AACpB,cAAM,OAAO,QAAQ,mBAAmB,eAAe,YAAY;AACnE,YAAI,CAAC,MAAM;AACP,kBAAQ,MAAM,mCAAmC,YAAY,YAAY;AACzE;AAAA,QACJ;AAEA,gBAAQ,IAAI,wBAAwB;AACpC,gBAAQ,IAAI,0BAAW,KAAK,IAAI,CAAC;AAAA,MACrC;AAAA,IACJ,EACC;AAAA,MACG;AAAA,MACA;AAAA,MACA,CAAAA,WAAS;AACL,eAAOA,OAAM,WAAW,kBAAkB;AAAA,UACtC,UAAU;AAAA,UACV,MAAM;AAAA,UACN,cAAc;AAAA,QAClB,CAAC;AAAA,MACL;AAAA,MACA,OAAM,SAAQ;AACV,cAAM,EAAE,aAAa,IAAI;AAEzB,cAAM,eAAe,aAAa,QAAQ,MAAM,EAAE,EAAE,YAAY;AAEhE,cAAM,QAAQ,MAAM;AACpB,cAAM,UAAU,MAAM,QAAQ,mBAAmB,oBAAoB,YAAY;AACjF,gBAAQ,IAAI,OAAO;AAAA,MACvB;AAAA,IACJ,EACC;AAAA,MACG;AAAA,MACA;AAAA,MACA,CAAAA,WAAS;AACL,eAAOA,OAAM,WAAW,kBAAkB;AAAA,UACtC,UAAU;AAAA,UACV,MAAM;AAAA,UACN,cAAc;AAAA,QAClB,CAAC;AAAA,MACL;AAAA,MACA,OAAM,SAAQ;AACV,cAAM,EAAE,aAAa,IAAI;AAEzB,cAAM,eAAe,aAAa,QAAQ,MAAM,EAAE,EAAE,YAAY;AAEhE,cAAM,QAAQ,MAAM;AACpB,cAAM,QAAQ,mBAAmB,kBAAkB,YAAY;AAC/D,gBAAQ,IAAI,eAAe,YAAY,uBAAuB;AAAA,MAClE;AAAA,IACJ,EACC;AAAA,MACG;AAAA,MACA;AAAA,MACA,CAAAA,WACIA,OAAM,OAAO,SAAS;AAAA,QAClB,UAAU;AAAA,QACV,MAAM;AAAA,QACN,SAAS;AAAA,MACb,CAAC;AAAA,MACL,OAAM,SAAQ;AACV,cAAM,EAAE,MAAM,IAAI;AAClB,cAAM,QAAQ,MAAM;AAEpB,gBAAQ,IAAI,iCAAiC,QAAQ,kBAAkB,EAAE,KAAK;AAC9E,cAAM,QAAQ,mBAAmB,OAAO,KAAK;AAC7C,gBAAQ,IAAI,2CAA2C;AAEvD,cAAM,QAAQ,QAAQ,mBAAmB,aAAa;AACtD,gBAAQ,IAAI,kCAAkC,KAAK,EAAE;AAAA,MACzD;AAAA,IACJ;AAAA,IACR,SAAS,OAAO,SAAc;AAC1B,WAAK,YAAY;AAAA,IACrB;AAAA,EACJ;AACJ;",
+  "names": ["yargs"]
+}

package/dist/cjs/shell/cmd_config.js

@@ -22,6 +22,7 @@ __export(cmd_config_exports, {
 });
 module.exports = __toCommonJS(cmd_config_exports);
 var import_general = require("#general");
+var import_protocol = require("@matter/protocol");
 var import_app = require("../app");
 /**
  * @license
@@ -201,7 +202,37 @@ function commands(theNode) {
         },
         (argv) => doThreadCredentials(theNode, { action: "set", ...argv })
       );
-    }),
+    }).command(
+      "dcl-test-certificates",
+      "Manage DCL test certificate fetching (production only vs. include test)",
+      (yargs2) => {
+        return yargs2.command(
+          "* [action]",
+          "get/delete DCL test certificate setting",
+          (yargs3) => {
+            return yargs3.positional("action", {
+              describe: "get/delete",
+              choices: ["get", "delete"],
+              default: "get",
+              type: "string"
+            });
+          },
+          async (argv) => doDclTestCertificates(theNode, argv)
+        ).command(
+          "set <value>",
+          "Enable or disable test certificate fetching from DCL",
+          (yargs3) => {
+            return yargs3.positional("value", {
+              describe: "Enable test certificates (true/false)",
+              type: "string",
+              choices: ["true", "false"],
+              demandOption: true
+            });
+          },
+          async (argv) => doDclTestCertificates(theNode, { action: "set", ...argv })
+        );
+      }
+    ),
     handler: async (argv) => {
       argv.unhandled = true;
     }
@@ -360,4 +391,34 @@ async function doThreadCredentials(theNode, args) {
       break;
   }
 }
+async function doDclTestCertificates(theNode, args) {
+  const { action, value } = args;
+  switch (action) {
+    case "get":
+      const enabled = await theNode.Store.get("DclFetchTestCertificates", false);
+      console.log(
+        `DCL test certificates: ${enabled ? "enabled (production + test + GitHub)" : "disabled (production only)"}`
+      );
+      break;
+    case "set":
+      if (value === void 0) {
+        console.log(`Cannot change DCL test certificates setting: New value not provided`);
+        return;
+      }
+      const newValue = value === "true";
+      await theNode.Store.set("DclFetchTestCertificates", newValue);
+      await theNode.environment.close(import_protocol.DclCertificateService);
+      console.log(
+        `DCL test certificates: ${newValue ? "enabled (production + test + GitHub)" : "disabled (production only)"}. Please restart the shell for the changes to take effect.`
+      );
+      break;
+    case "delete":
+      await theNode.Store.delete("DclFetchTestCertificates");
+      await theNode.environment.close(import_protocol.DclCertificateService);
+      console.log(
+        `DCL test certificates setting reset to default (disabled). Please restart the shell for the changes to take effect.`
+      );
+      break;
+  }
+}
 //# sourceMappingURL=cmd_config.js.map