@numa-tech/numa 1.26.14 → 1.26.16

package/dist/cert/schemas.d.ts

@@ -0,0 +1,421 @@
+import { z } from "zod";
+export declare const findingTypes: readonly ["EXPIRING", "EXPIRED_IN_USE", "HOSTNAME_MISMATCH", "CHAIN_INVALID", "UNEXPECTED_CERT", "RENEWAL_NOT_DEPLOYED", "DRIFT", "PROBE_UNAVAILABLE", "EXPIRED_STILL_BOUND", "ORPHAN_COPY", "KEY_REUSED"];
+export declare const findingSeverities: readonly ["P1", "P2", "P3"];
+export declare const findingStatuses: readonly ["OPEN", "CLOSED", "ALL"];
+export declare const pageSchema: <T extends z.ZodTypeAny>(item: T) => z.ZodObject<{
+    items: z.ZodArray<T>;
+    total: z.ZodNumber;
+    page: z.ZodNumber;
+    size: z.ZodNumber;
+}, z.core.$strip>;
+export declare const certificateSchema: z.ZodObject<{
+    fingerprint: z.ZodString;
+    commonName: z.ZodNullable<z.ZodString>;
+    sans: z.ZodArray<z.ZodString>;
+    issuer: z.ZodNullable<z.ZodString>;
+    serial: z.ZodNullable<z.ZodString>;
+    notBefore: z.ZodNullable<z.ZodString>;
+    notAfter: z.ZodNullable<z.ZodString>;
+    publicKeyFingerprint: z.ZodNullable<z.ZodString>;
+    publicKeyScheme: z.ZodNullable<z.ZodString>;
+    provenance: z.ZodNullable<z.ZodString>;
+    status: z.ZodNullable<z.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        OBSERVED_ONLY: "OBSERVED_ONLY";
+        RETIRED: "RETIRED";
+        SUPERSEDED: "SUPERSEDED";
+    }>>;
+    supersededBy: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export declare const copySchema: z.ZodObject<{
+    id: z.ZodString;
+    accountId: z.ZodString;
+    site: z.ZodEnum<{
+        CHINA: "CHINA";
+        INTERNATIONAL: "INTERNATIONAL";
+    }>;
+    casId: z.ZodString;
+    certIdentifier: z.ZodNullable<z.ZodString>;
+    name: z.ZodNullable<z.ZodString>;
+    status: z.ZodNullable<z.ZodString>;
+    fingerprint: z.ZodNullable<z.ZodString>;
+    lastSeenAt: z.ZodString;
+    removedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export declare const bindingSchema: z.ZodObject<{
+    id: z.ZodString;
+    accountId: z.ZodString;
+    region: z.ZodString;
+    albId: z.ZodString;
+    albName: z.ZodNullable<z.ZodString>;
+    listenerId: z.ZodString;
+    port: z.ZodNumber;
+    protocol: z.ZodString;
+    certificateId: z.ZodString;
+    defaultCertificate: z.ZodBoolean;
+    associationStatus: z.ZodNullable<z.ZodString>;
+    managementSource: z.ZodNullable<z.ZodString>;
+    lastSeenAt: z.ZodString;
+    removedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export declare const endpointSchema: z.ZodObject<{
+    id: z.ZodString;
+    hostname: z.ZodString;
+    port: z.ZodNumber;
+    ownerTeamId: z.ZodNullable<z.ZodString>;
+    ownershipStatus: z.ZodEnum<{
+        CONFIRMED: "CONFIRMED";
+        PENDING: "PENDING";
+    }>;
+    managementSource: z.ZodString;
+    environmentId: z.ZodNullable<z.ZodString>;
+    tier: z.ZodNullable<z.ZodEnum<{
+        DEV: "DEV";
+        PRD: "PRD";
+        STG: "STG";
+        UNKNOWN: "UNKNOWN";
+    }>>;
+    expectedFingerprint: z.ZodNullable<z.ZodString>;
+    enabled: z.ZodBoolean;
+    version: z.ZodNumber;
+}, z.core.$strip>;
+export declare const probeSchema: z.ZodObject<{
+    id: z.ZodString;
+    runId: z.ZodString;
+    attemptedAt: z.ZodString;
+    observedAt: z.ZodNullable<z.ZodString>;
+    outcome: z.ZodEnum<{
+        OBSERVED: "OBSERVED";
+        UNKNOWN: "UNKNOWN";
+    }>;
+    errorCode: z.ZodNullable<z.ZodString>;
+    elapsedMs: z.ZodNumber;
+    chain: z.ZodArray<z.ZodObject<{
+        fingerprint: z.ZodString;
+        commonName: z.ZodNullable<z.ZodString>;
+        sans: z.ZodArray<z.ZodString>;
+        issuer: z.ZodNullable<z.ZodString>;
+        serial: z.ZodNullable<z.ZodString>;
+        notBefore: z.ZodNullable<z.ZodString>;
+        notAfter: z.ZodNullable<z.ZodString>;
+        publicKeyFingerprint: z.ZodNullable<z.ZodString>;
+        publicKeyScheme: z.ZodNullable<z.ZodString>;
+        provenance: z.ZodNullable<z.ZodString>;
+        status: z.ZodNullable<z.ZodEnum<{
+            ACTIVE: "ACTIVE";
+            OBSERVED_ONLY: "OBSERVED_ONLY";
+            RETIRED: "RETIRED";
+            SUPERSEDED: "SUPERSEDED";
+        }>>;
+        supersededBy: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    validity: z.ZodEnum<{
+        EXPIRED: "EXPIRED";
+        NOT_YET_VALID: "NOT_YET_VALID";
+        UNKNOWN: "UNKNOWN";
+        VALID: "VALID";
+    }>;
+    hostname: z.ZodEnum<{
+        INVALID: "INVALID";
+        UNKNOWN: "UNKNOWN";
+        VALID: "VALID";
+    }>;
+    trust: z.ZodEnum<{
+        INVALID: "INVALID";
+        UNKNOWN: "UNKNOWN";
+        VALID: "VALID";
+    }>;
+}, z.core.$strip>;
+export declare const certificateDetailSchema: z.ZodObject<{
+    certificate: z.ZodObject<{
+        fingerprint: z.ZodString;
+        commonName: z.ZodNullable<z.ZodString>;
+        sans: z.ZodArray<z.ZodString>;
+        issuer: z.ZodNullable<z.ZodString>;
+        serial: z.ZodNullable<z.ZodString>;
+        notBefore: z.ZodNullable<z.ZodString>;
+        notAfter: z.ZodNullable<z.ZodString>;
+        publicKeyFingerprint: z.ZodNullable<z.ZodString>;
+        publicKeyScheme: z.ZodNullable<z.ZodString>;
+        provenance: z.ZodNullable<z.ZodString>;
+        status: z.ZodNullable<z.ZodEnum<{
+            ACTIVE: "ACTIVE";
+            OBSERVED_ONLY: "OBSERVED_ONLY";
+            RETIRED: "RETIRED";
+            SUPERSEDED: "SUPERSEDED";
+        }>>;
+        supersededBy: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    endpoints: z.ZodObject<{
+        items: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            hostname: z.ZodString;
+            port: z.ZodNumber;
+            ownerTeamId: z.ZodNullable<z.ZodString>;
+            ownershipStatus: z.ZodEnum<{
+                CONFIRMED: "CONFIRMED";
+                PENDING: "PENDING";
+            }>;
+            managementSource: z.ZodString;
+            environmentId: z.ZodNullable<z.ZodString>;
+            tier: z.ZodNullable<z.ZodEnum<{
+                DEV: "DEV";
+                PRD: "PRD";
+                STG: "STG";
+                UNKNOWN: "UNKNOWN";
+            }>>;
+            expectedFingerprint: z.ZodNullable<z.ZodString>;
+            enabled: z.ZodBoolean;
+            version: z.ZodNumber;
+        }, z.core.$strip>>;
+        total: z.ZodNumber;
+        page: z.ZodNumber;
+        size: z.ZodNumber;
+    }, z.core.$strip>;
+    copies: z.ZodObject<{
+        items: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            accountId: z.ZodString;
+            site: z.ZodEnum<{
+                CHINA: "CHINA";
+                INTERNATIONAL: "INTERNATIONAL";
+            }>;
+            casId: z.ZodString;
+            certIdentifier: z.ZodNullable<z.ZodString>;
+            name: z.ZodNullable<z.ZodString>;
+            status: z.ZodNullable<z.ZodString>;
+            fingerprint: z.ZodNullable<z.ZodString>;
+            lastSeenAt: z.ZodString;
+            removedAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+        total: z.ZodNumber;
+        page: z.ZodNumber;
+        size: z.ZodNumber;
+    }, z.core.$strip>;
+    bindings: z.ZodObject<{
+        items: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            accountId: z.ZodString;
+            region: z.ZodString;
+            albId: z.ZodString;
+            albName: z.ZodNullable<z.ZodString>;
+            listenerId: z.ZodString;
+            port: z.ZodNumber;
+            protocol: z.ZodString;
+            certificateId: z.ZodString;
+            defaultCertificate: z.ZodBoolean;
+            associationStatus: z.ZodNullable<z.ZodString>;
+            managementSource: z.ZodNullable<z.ZodString>;
+            lastSeenAt: z.ZodString;
+            removedAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+        total: z.ZodNumber;
+        page: z.ZodNumber;
+        size: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const endpointDetailSchema: z.ZodObject<{
+    endpoint: z.ZodObject<{
+        id: z.ZodString;
+        hostname: z.ZodString;
+        port: z.ZodNumber;
+        ownerTeamId: z.ZodNullable<z.ZodString>;
+        ownershipStatus: z.ZodEnum<{
+            CONFIRMED: "CONFIRMED";
+            PENDING: "PENDING";
+        }>;
+        managementSource: z.ZodString;
+        environmentId: z.ZodNullable<z.ZodString>;
+        tier: z.ZodNullable<z.ZodEnum<{
+            DEV: "DEV";
+            PRD: "PRD";
+            STG: "STG";
+            UNKNOWN: "UNKNOWN";
+        }>>;
+        expectedFingerprint: z.ZodNullable<z.ZodString>;
+        enabled: z.ZodBoolean;
+        version: z.ZodNumber;
+    }, z.core.$strip>;
+    bindings: z.ZodObject<{
+        items: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            accountId: z.ZodString;
+            region: z.ZodString;
+            albId: z.ZodString;
+            albName: z.ZodNullable<z.ZodString>;
+            listenerId: z.ZodString;
+            port: z.ZodNumber;
+            protocol: z.ZodString;
+            certificateId: z.ZodString;
+            defaultCertificate: z.ZodBoolean;
+            associationStatus: z.ZodNullable<z.ZodString>;
+            managementSource: z.ZodNullable<z.ZodString>;
+            lastSeenAt: z.ZodString;
+            removedAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+        total: z.ZodNumber;
+        page: z.ZodNumber;
+        size: z.ZodNumber;
+    }, z.core.$strip>;
+    latestProbe: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        runId: z.ZodString;
+        attemptedAt: z.ZodString;
+        observedAt: z.ZodNullable<z.ZodString>;
+        outcome: z.ZodEnum<{
+            OBSERVED: "OBSERVED";
+            UNKNOWN: "UNKNOWN";
+        }>;
+        errorCode: z.ZodNullable<z.ZodString>;
+        elapsedMs: z.ZodNumber;
+        chain: z.ZodArray<z.ZodObject<{
+            fingerprint: z.ZodString;
+            commonName: z.ZodNullable<z.ZodString>;
+            sans: z.ZodArray<z.ZodString>;
+            issuer: z.ZodNullable<z.ZodString>;
+            serial: z.ZodNullable<z.ZodString>;
+            notBefore: z.ZodNullable<z.ZodString>;
+            notAfter: z.ZodNullable<z.ZodString>;
+            publicKeyFingerprint: z.ZodNullable<z.ZodString>;
+            publicKeyScheme: z.ZodNullable<z.ZodString>;
+            provenance: z.ZodNullable<z.ZodString>;
+            status: z.ZodNullable<z.ZodEnum<{
+                ACTIVE: "ACTIVE";
+                OBSERVED_ONLY: "OBSERVED_ONLY";
+                RETIRED: "RETIRED";
+                SUPERSEDED: "SUPERSEDED";
+            }>>;
+            supersededBy: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+        validity: z.ZodEnum<{
+            EXPIRED: "EXPIRED";
+            NOT_YET_VALID: "NOT_YET_VALID";
+            UNKNOWN: "UNKNOWN";
+            VALID: "VALID";
+        }>;
+        hostname: z.ZodEnum<{
+            INVALID: "INVALID";
+            UNKNOWN: "UNKNOWN";
+            VALID: "VALID";
+        }>;
+        trust: z.ZodEnum<{
+            INVALID: "INVALID";
+            UNKNOWN: "UNKNOWN";
+            VALID: "VALID";
+        }>;
+    }, z.core.$strip>>;
+    observationStatus: z.ZodEnum<{
+        NOT_OBSERVED: "NOT_OBSERVED";
+        OBSERVED: "OBSERVED";
+        UNKNOWN: "UNKNOWN";
+    }>;
+}, z.core.$strip>;
+export declare const findingSchema: z.ZodObject<{
+    id: z.ZodString;
+    type: z.ZodEnum<{
+        CHAIN_INVALID: "CHAIN_INVALID";
+        DRIFT: "DRIFT";
+        EXPIRED_IN_USE: "EXPIRED_IN_USE";
+        EXPIRED_STILL_BOUND: "EXPIRED_STILL_BOUND";
+        EXPIRING: "EXPIRING";
+        HOSTNAME_MISMATCH: "HOSTNAME_MISMATCH";
+        KEY_REUSED: "KEY_REUSED";
+        ORPHAN_COPY: "ORPHAN_COPY";
+        PROBE_UNAVAILABLE: "PROBE_UNAVAILABLE";
+        RENEWAL_NOT_DEPLOYED: "RENEWAL_NOT_DEPLOYED";
+        UNEXPECTED_CERT: "UNEXPECTED_CERT";
+    }>;
+    severity: z.ZodEnum<{
+        P1: "P1";
+        P2: "P2";
+        P3: "P3";
+    }>;
+    firstSeenAt: z.ZodString;
+    lastSeenAt: z.ZodString;
+    closedAt: z.ZodNullable<z.ZodString>;
+    fingerprint: z.ZodNullable<z.ZodString>;
+    replacementFingerprint: z.ZodNullable<z.ZodString>;
+    notAfter: z.ZodNullable<z.ZodString>;
+    endpointIds: z.ZodObject<{
+        items: z.ZodArray<z.ZodString>;
+        total: z.ZodNumber;
+        page: z.ZodNumber;
+        size: z.ZodNumber;
+    }, z.core.$strip>;
+    bindingIds: z.ZodObject<{
+        items: z.ZodArray<z.ZodString>;
+        total: z.ZodNumber;
+        page: z.ZodNumber;
+        size: z.ZodNumber;
+    }, z.core.$strip>;
+    notification: z.ZodObject<{
+        status: z.ZodEnum<{
+            ACCEPTED: "ACCEPTED";
+            CONFIGURATION_ERROR: "CONFIGURATION_ERROR";
+            CONFLICT: "CONFLICT";
+            FAILED: "FAILED";
+            NO_EVENT: "NO_EVENT";
+            PARTIAL: "PARTIAL";
+            PENDING_RECIPIENTS: "PENDING_RECIPIENTS";
+            READY: "READY";
+            RETRY: "RETRY";
+            SENDING: "SENDING";
+            UNKNOWN: "UNKNOWN";
+        }>;
+        errorCode: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type PageInput = {
+    page?: string | number;
+    size?: string | number;
+};
+export type CertificateInput = PageInput & {
+    query?: string;
+    expiringDays?: number;
+};
+export type EndpointInput = PageInput & {
+    query?: string;
+    teamId?: string;
+};
+export type FindingInput = PageInput & {
+    type?: string;
+    severity?: string;
+    status?: string;
+};
+export declare function invalid(field: string): never;
+export declare function paging(options?: PageInput): {
+    page: number;
+    size: number;
+};
+export declare function pageInput(options?: PageInput): {
+    page: number;
+    size: number;
+};
+export declare function fingerprint(value: unknown): string;
+export declare function identity(value: unknown): string;
+export declare function expiring(value: unknown): number;
+export declare function hostname(value: unknown): string;
+export declare function probeInput(host: unknown, port?: unknown): {
+    hostname: string;
+    port: number;
+};
+export declare function certificateInput(options?: CertificateInput): {
+    page: number;
+    size: number;
+    query?: string | undefined;
+    expiringDays?: number | undefined;
+};
+export declare function endpointInput(options?: EndpointInput): {
+    page: number;
+    size: number;
+    query?: string | undefined;
+    teamId?: string | undefined;
+};
+export declare function findingInput(options?: FindingInput): {
+    page: number;
+    size: number;
+    type?: string | undefined;
+    severity?: string | undefined;
+    status: string;
+};

package/dist/cert/schemas.js

@@ -0,0 +1,92 @@
+import { domainToASCII } from "node:url";
+import { z } from "zod";
+import { CertError } from "./errors.js";
+const text = z.string().max(4096);
+const id = z.string().regex(/^[1-9]\d*$/u);
+const sha = z.string().regex(/^[0-9a-f]{64}$/u);
+const time = z.string().datetime();
+const uuid = z.string().uuid();
+const count = z.number().int().nonnegative().safe();
+const code = z.string().regex(/^[A-Z][A-Z0-9_]{0,127}$/u);
+export const findingTypes = ["EXPIRING", "EXPIRED_IN_USE", "HOSTNAME_MISMATCH", "CHAIN_INVALID", "UNEXPECTED_CERT", "RENEWAL_NOT_DEPLOYED", "DRIFT", "PROBE_UNAVAILABLE", "EXPIRED_STILL_BOUND", "ORPHAN_COPY", "KEY_REUSED"];
+export const findingSeverities = ["P1", "P2", "P3"];
+export const findingStatuses = ["OPEN", "CLOSED", "ALL"];
+export const pageSchema = (item) => z.object({ items: z.array(item).max(100), total: count, page: z.number().int().min(1).max(1000000), size: z.number().int().min(1).max(100) });
+export const certificateSchema = z.object({
+    fingerprint: sha, commonName: text.nullable(), sans: z.array(text), issuer: text.nullable(), serial: text.nullable(),
+    notBefore: time.nullable(), notAfter: time.nullable(), publicKeyFingerprint: text.nullable(), publicKeyScheme: text.nullable(),
+    provenance: text.nullable(), status: z.enum(["ACTIVE", "SUPERSEDED", "RETIRED", "OBSERVED_ONLY"]).nullable(), supersededBy: sha.nullable(),
+});
+export const copySchema = z.object({ id, accountId: id, site: z.enum(["CHINA", "INTERNATIONAL"]), casId: text, certIdentifier: text.nullable(), name: text.nullable(), status: text.nullable(), fingerprint: sha.nullable(), lastSeenAt: time, removedAt: time.nullable() });
+export const bindingSchema = z.object({ id, accountId: id, region: text, albId: text, albName: text.nullable(), listenerId: text, port: z.number().int().min(1).max(65535), protocol: text, certificateId: text, defaultCertificate: z.boolean(), associationStatus: text.nullable(), managementSource: text.nullable(), lastSeenAt: time, removedAt: time.nullable() });
+export const endpointSchema = z.object({ id, hostname: text, port: z.number().int().min(1).max(65535), ownerTeamId: id.nullable(), ownershipStatus: z.enum(["PENDING", "CONFIRMED"]), managementSource: text, environmentId: id.nullable(), tier: z.enum(["PRD", "DEV", "STG", "UNKNOWN"]).nullable(), expectedFingerprint: sha.nullable(), enabled: z.boolean(), version: count });
+export const probeSchema = z.object({ id: uuid, runId: uuid, attemptedAt: time, observedAt: time.nullable(), outcome: z.enum(["OBSERVED", "UNKNOWN"]), errorCode: code.nullable(), elapsedMs: count, chain: z.array(certificateSchema), validity: z.enum(["VALID", "EXPIRED", "NOT_YET_VALID", "UNKNOWN"]), hostname: z.enum(["VALID", "INVALID", "UNKNOWN"]), trust: z.enum(["VALID", "INVALID", "UNKNOWN"]) });
+export const certificateDetailSchema = z.object({ certificate: certificateSchema, endpoints: pageSchema(endpointSchema), copies: pageSchema(copySchema), bindings: pageSchema(bindingSchema) });
+export const endpointDetailSchema = z.object({ endpoint: endpointSchema, bindings: pageSchema(bindingSchema), latestProbe: probeSchema.nullable(), observationStatus: z.enum(["NOT_OBSERVED", "OBSERVED", "UNKNOWN"]) });
+export const findingSchema = z.object({ id: uuid, type: z.enum(findingTypes), severity: z.enum(findingSeverities), firstSeenAt: time, lastSeenAt: time, closedAt: time.nullable(), fingerprint: sha.nullable(), replacementFingerprint: sha.nullable(), notAfter: time.nullable(), endpointIds: pageSchema(id), bindingIds: pageSchema(id), notification: z.object({ status: z.enum(["NO_EVENT", "PENDING_RECIPIENTS", "READY", "RETRY", "CONFIGURATION_ERROR", "SENDING", "ACCEPTED", "PARTIAL", "FAILED", "UNKNOWN", "CONFLICT"]), errorCode: code.nullable(), createdAt: time.nullable() }) });
+export function invalid(field) { throw new CertError(`TLS 参数 ${field} 无效；请求尚未发送。`, "TLS_INPUT_INVALID"); }
+function integer(value, field, min, max) {
+    if (typeof value !== "number" && (typeof value !== "string" || !/^\d+$/u.test(value)))
+        return invalid(field);
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed) || parsed < min || parsed > max)
+        return invalid(field);
+    return parsed;
+}
+function keys(options, allowed) {
+    if (!options || typeof options !== "object" || Array.isArray(options) || Object.keys(options).some(key => !allowed.includes(key)))
+        invalid("options");
+}
+export function paging(options = {}) {
+    return { page: integer(options.page ?? 1, "page", 1, 1000000), size: integer(options.size ?? 20, "size", 1, 100) };
+}
+export function pageInput(options = {}) { keys(options, ["page", "size"]); return paging(options); }
+function query(value) {
+    if (typeof value !== "string" || value.trim().length > 253)
+        return invalid("query");
+    return value.trim();
+}
+export function fingerprint(value) { if (typeof value !== "string" || !/^[0-9a-f]{64}$/iu.test(value))
+    return invalid("fingerprint"); return value.toLowerCase(); }
+export function identity(value) { if (typeof value !== "string" || !/^[1-9]\d*$/u.test(value))
+    return invalid("id"); return value; }
+export function expiring(value) {
+    if (typeof value !== "string" || !/^\d+d$/u.test(value))
+        return invalid("expiring");
+    return integer(value.slice(0, -1), "expiring", 0, 3650);
+}
+export function hostname(value) {
+    if (typeof value !== "string" || /[\s/:?@#*%\\]/u.test(value))
+        return invalid("hostname");
+    const original = value.endsWith(".") ? value.slice(0, -1) : value;
+    const normalized = domainToASCII(original).toLowerCase();
+    const labels = normalized.split(".");
+    if (normalized.length > 253 || labels.length < 2 || labels.every(label => /^\d+$/u.test(label)) || labels.some(label => label.length < 1 || label.length > 63 || !/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/u.test(label)))
+        return invalid("hostname");
+    // Node UTS46 and server Java IDNA2003 differ. Preserve validated Unicode identity
+    // for authoritative server normalization instead of selecting a remapped ASCII host.
+    return /[^\x00-\x7f]/u.test(original) ? original : normalized;
+}
+export function probeInput(host, port = 443) {
+    const normalized = hostname(host);
+    if (port !== 443 && port !== "443")
+        return invalid("port");
+    return { hostname: normalized, port: 443 };
+}
+export function certificateInput(options = {}) {
+    keys(options, ["query", "expiringDays", "page", "size"]);
+    return { ...(options.query === undefined ? {} : { query: query(options.query) }), ...(options.expiringDays === undefined ? {} : { expiringDays: integer(options.expiringDays, "expiringDays", 0, 3650) }), ...paging(options) };
+}
+export function endpointInput(options = {}) {
+    keys(options, ["query", "teamId", "page", "size"]);
+    return { ...(options.query === undefined ? {} : { query: query(options.query) }), ...(options.teamId === undefined ? {} : { teamId: identity(options.teamId) }), ...paging(options) };
+}
+export function findingInput(options = {}) {
+    keys(options, ["type", "severity", "status", "page", "size"]);
+    for (const [name, values] of [["type", findingTypes], ["severity", findingSeverities], ["status", findingStatuses]]) {
+        if (options[name] !== undefined && !values.includes(options[name]))
+            invalid(name);
+    }
+    return { ...(options.type === undefined ? {} : { type: options.type }), ...(options.severity === undefined ? {} : { severity: options.severity }), status: options.status ?? "OPEN", ...paging(options) };
+}
+//# sourceMappingURL=schemas.js.map

package/dist/cert/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/cert/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAClC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;AAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAChD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AACnC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACpD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,eAAe,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,aAAa,EAAE,YAAY,CAAU,CAAC;AACvO,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAU,CAAC;AAClE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAyB,IAAO,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC7M,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;IACpH,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,oBAAoB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,QAAQ,EAAE;IAC9H,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE;CAC3I,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC7Q,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACzW,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,mBAAmB,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AACpX,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;AACjZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;AAChM,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;AACzN,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,sBAAsB,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AAMlkB,MAAM,UAAU,OAAO,CAAC,KAAa,IAAW,MAAM,IAAI,SAAS,CAAC,UAAU,KAAK,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;AACzH,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW,EAAE,GAAW;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7G,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,IAAI,CAAC,OAAe,EAAE,OAAiB;IAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AACxJ,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,OAAO,GAAc,EAAE;IAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACrH,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,OAAO,GAAc,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC/G,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc,IAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;IAAE,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACpL,MAAM,UAAU,QAAQ,CAAC,KAAc,IAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;IAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;AACrJ,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IAChP,kFAAkF;IAClF,qFAAqF;IACrF,OAAO,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;AAChE,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,IAAa,EAAE,IAAI,GAAY,GAAG;IAC3D,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC7C,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,OAAO,GAAqB,EAAE;IAC7D,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AAClO,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,OAAO,GAAkB,EAAE;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AACxL,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,OAAO,GAAiB,EAAE;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAU,EAAE,CAAC;QAC7H,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAE,MAA4B,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5M,CAAC"}

package/dist/cli.js

@@ -45,6 +45,8 @@ import { registerPublicationCommands } from "./publications/commands.js";
 import { registerJenkinsCommands } from "./jenkins/commands.js";
 import { registerClusterCommands } from "./clusters/commands.js";
 import { ClusterError, clusterExitCode, sanitizeClusterOutput } from "./clusters/errors.js";
+import { registerDataResourceCommands } from "./data-resources/commands.js";
+import { DataResourceError } from "./data-resources/client.js";
 import { registerTeamCommands } from "./teams/commands.js";
 import { TeamError, sanitizeTeamOutput, teamExitCode } from "./teams/errors.js";
 import { registerApplicationOnboardingCommands } from "./application-onboarding/commands.js";
@@ -52,6 +54,7 @@ import { OnboardingError, sanitizeOnboardingOutput } from "./application-onboard
 import { registerAuthorizationCommands } from "./authorization/commands.js";
 import { AuthorizationError, authorizationExitCode, sanitizeAuthorizationOutput } from "./authorization/errors.js";
 import { registerJevCommands } from "./jev/commands.js";
+import { registerCertCommands } from "./cert/commands.js";
 import { JevError, jevExitCode } from "./jev/errors.js";
 import { registerNotionCommands } from "./notion/commands.js";
 import { registerKbCommands } from "./kb/commands.js";
@@ -524,6 +527,7 @@ Examples:
     const localPublicationScan = commandPath[0] === "publication" && commandPath[1] === "scan";
     // Jev validates input first, then resolves its own platform HTTP identity and diagnostics.
     const localJev = commandName === "jev";
+    const localCert = commandName === "cert";
     const localMailArchive = commandPath[0] === "mail";
     const localInstallEntry = ["mcp", "skills"].includes(commandPath[0] ?? "") && commandPath[1] === "install";
     const localMcpManagement = commandPath[0] === "mcp" && ["install-cli", "tools", "modules"].includes(commandPath[1] ?? "");
@@ -531,7 +535,7 @@ Examples:
         || commandPath[0] === "skills" && commandPath[1] === "uninstall"
         || commandPath[0] === "skills" && commandPath[1] === "updates"
             && ["status", "configure", "track", "pin"].includes(commandPath[2] ?? "");
-    if (!localJev && !localInstallEntry && !localMcpManagement && !localClusterDiscovery && !localPublicationScan && !localMailArchive && !localMaintenanceSettings
+    if (!localJev && !localCert && !localInstallEntry && !localMcpManagement && !localClusterDiscovery && !localPublicationScan && !localMailArchive && !localMaintenanceSettings
         && !["task", "modules", "config", "doctor", "commands", "help", "--help", "-h", "--version", "--cli-version", "-V"].includes(commandName)) {
         rootSafeDiagnostic("platform_profile.resolve.started", { cliVersion: PACKAGE_VERSION });
         try {
@@ -583,12 +587,14 @@ Examples:
     registerJenkinsCommands(program);
     registerClusterCommands(program);
     registerTeamCommands(program);
+    registerDataResourceCommands(program);
     registerApplicationOnboardingCommands(program);
     registerAuthorizationCommands(program);
     registerMailCommands(program);
     registerWecomCommands(program);
     registerNotionCommands(program);
     registerJevCommands(program);
+    registerCertCommands(program);
     registerKbCommands(program);
     registerTaskCommands(program);
     registerMaintenanceCommands(program, () => moduleMaintenanceTasks(codexModule));
@@ -597,7 +603,7 @@ Examples:
         for (let cursor = action; cursor && cursor !== program; cursor = cursor.parent)
             path.unshift(cursor.name());
         let json = Boolean(action.optsWithGlobals().json);
-        if (path[0] === "jev")
+        if (path[0] === "jev" || path[0] === "cert")
             return;
         if (!automaticMaintenanceAllowed(path, json))
             return;
@@ -647,39 +653,41 @@ main().catch((error) => {
             ? error.code
             : error instanceof ModuleUnavailableError || error instanceof ProfileMismatchError
                 ? error.code
-                : error instanceof JevError
+                : error instanceof DataResourceError
                     ? error.code
-                    : error instanceof KbError
+                    : error instanceof JevError
                         ? error.code
-                        : error instanceof CodexError
+                        : error instanceof KbError
                             ? error.code
-                            : error instanceof MediaError
+                            : error instanceof CodexError
                                 ? error.code
-                                : error instanceof OssError
+                                : error instanceof MediaError
                                     ? error.code
-                                    : error instanceof PipelineError
+                                    : error instanceof OssError
                                         ? error.code
-                                        : error instanceof GitOpsError
+                                        : error instanceof PipelineError
                                             ? error.code
-                                            : error instanceof RepositoryError
+                                            : error instanceof GitOpsError
                                                 ? error.code
-                                                : error instanceof ClusterError
+                                                : error instanceof RepositoryError
                                                     ? error.code
-                                                    : error instanceof TeamError
+                                                    : error instanceof ClusterError
                                                         ? error.code
-                                                        : error instanceof OnboardingError
+                                                        : error instanceof TeamError
                                                             ? error.code
-                                                            : error instanceof AuthorizationError
+                                                            : error instanceof OnboardingError
                                                                 ? error.code
-                                                                : error instanceof AiRegistryError
+                                                                : error instanceof AuthorizationError
                                                                     ? error.code
-                                                                    : error instanceof WecomError
+                                                                    : error instanceof AiRegistryError
                                                                         ? error.code
-                                                                        : error instanceof MailArchiveError
+                                                                        : error instanceof WecomError
                                                                             ? error.code
-                                                                            : error instanceof CommanderError
-                                                                                ? "cli_usage_error"
-                                                                                : "command_failed";
+                                                                            : error instanceof MailArchiveError
+                                                                                ? error.code
+                                                                                : error instanceof CommanderError
+                                                                                    ? "cli_usage_error"
+                                                                                    : "command_failed";
     if (json) {
         printJson({
             ...(error instanceof CodexError ? { schemaVersion: 1 } : {}),
@@ -697,6 +705,7 @@ main().catch((error) => {
                 ...(error instanceof MediaError
                     ? { status: error.status ?? null, request_id: error.requestId ?? null }
                     : {}),
+                ...(error instanceof DataResourceError ? { status: error.status ?? null } : {}),
                 ...(error instanceof JevError ? { status: error.status ?? null } : {}),
                 ...(error instanceof KbError
                     ? { status: error.status ?? null, ...(error.details === undefined ? {} : { details: sanitizeKbOutput(error.details) }) }