@yannelli/zoomies 0.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ryan Yannelli
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,97 @@
+# Zoomies
+
+> A control plane for NGINX. Zoomies renders, validates, and reloads NGINX
+> configuration from a typed model so you can manage reverse-proxied sites
+> without hand-editing config files.
+
+[![CI](https://github.com/yannelli/zoomies/actions/workflows/ci.yml/badge.svg)](https://github.com/yannelli/zoomies/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+![Status: alpha](https://img.shields.io/badge/status-alpha-yellow)
+
+**Status:** Alpha. The v1 surface is complete and runnable, but the API,
+CLI, and config schema may still see breaking changes before 1.0.
+
+## What it is (and isn't)
+
+Zoomies is the **control plane**. NGINX is the **data plane**: it handles
+every byte of proxied traffic, and that's where the performance comes from.
+Zoomies' job is to:
+
+- Model sites, upstreams, and certificates as typed records.
+- Render NGINX config from those records.
+- Validate the rendered config with `nginx -t` before swapping it in.
+- Atomically swap files, trigger a reload, probe health, and roll back on
+  any failure.
+- Automate Let's Encrypt certificate issuance and renewal.
+
+It is **not** a new proxy, a new HTTP server, or a replacement for NGINX.
+
+See [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md) for the component sketch.
+
+## What's in v1
+
+- **Web UI** at `/login`, `/sites`, `/upstreams` — cookie-gated CRUD with
+  shadcn-style primitives.
+- **HTTP API** under `/api/v1/{sites,upstreams,sites/[id]/cert}` — bearer-
+  token-guarded; `DomainError` and `ZodError` map to clean HTTP statuses.
+- **CLI** — `zoomies sites|upstreams|certs|reload|status`. Runs in
+  `--local` mode (direct SQLite access) or HTTP mode against a running
+  control plane.
+- **ACME worker** (`zoomies-worker`) — long-running process that polls
+  for certs nearing expiry and renews them serially. HTTP-01 challenges
+  served from a directory NGINX exposes.
+- **Reload orchestrator** — validate → atomic write → SIGHUP → health
+  probe → rollback on any failure step.
+- **SQLite persistence** with idempotent migrations and Zod-on-read.
+
+## Install
+
+Two supported paths, both covered in [`docs/INSTALL.md`](docs/INSTALL.md):
+
+- **Docker Compose** — the shipped `docker-compose.yml` runs the control
+  plane (`app`), an NGINX edge sidecar (`nginx`), and optionally the ACME
+  renewal worker (`worker`).
+- **Ubuntu native** — `scripts/install-ubuntu.sh` installs Node 22 if
+  needed, builds into `/opt/zoomies`, and registers `zoomies.service` and
+  `zoomies-worker.service` systemd units.
+
+For the ops side — NGINX permission strategies, the `include` contract,
+ACME challenge directory layout — see
+[`docs/OPERATIONS.md`](docs/OPERATIONS.md).
+
+## Development
+
+```bash
+git clone https://github.com/yannelli/zoomies.git
+cd zoomies
+nvm use            # .nvmrc → Node 22 LTS
+pnpm install
+pnpm typecheck
+pnpm test
+pnpm dev           # next dev on http://localhost:3000
+```
+
+Other scripts:
+
+| Command          | What it does                                                          |
+| ---------------- | --------------------------------------------------------------------- |
+| `pnpm typecheck` | `tsc --noEmit` for both the Next app and the CLI tsconfig             |
+| `pnpm lint`      | `eslint .`                                                            |
+| `pnpm format`    | `prettier --write .`                                                  |
+| `pnpm test`      | `vitest run` (NGINX-dependent e2e gated on `ZOOMIES_E2E=1`)           |
+| `pnpm build`     | `next build` (web) + `tsc -p tsconfig.cli.json` + copy SQL migrations |
+| `pnpm start`     | `next start` against the standalone bundle                            |
+| `pnpm cli`       | Run the CLI through `tsx` for fast iteration                          |
+
+See [`CONTRIBUTING.md`](CONTRIBUTING.md) for the conventions: ESM only,
+strict TypeScript, validate-at-boundary with Zod, never write NGINX
+config without validating first, no shell-string `execa`.
+
+## Why "Zoomies"?
+
+It's what cats do when they sprint in circles for no apparent reason.
+NGINX already runs fast; Zoomies just points it where to go.
+
+## License
+
+[MIT](LICENSE) © Ryan Yannelli

package/dist/cli/client.d.ts

@@ -0,0 +1,77 @@
+/**
+ * CLI client abstraction — single interface, two implementations.
+ *
+ * The CLI commands speak {@link CliClient}. `createLocalClient` wraps the
+ * in-process repositories + framework-agnostic handlers; `createHttpClient`
+ * hits the running Next.js HTTP API. Commands never branch on mode — the
+ * dispatcher picks one client and hands it to every command.
+ *
+ * Failures bubble as plain `Error`s with a `code` discriminator where the
+ * structured server response provided one, so command modules can pretty-
+ * print without re-deriving HTTP details.
+ */
+import { type CreateSiteInput, type UpdateSiteInput } from '../server/api/handlers/sites.js';
+import { type CreateUpstreamInput, type UpdateUpstreamInput } from '../server/api/handlers/upstreams.js';
+import type { Cert } from '../server/domain/cert.js';
+import type { Site } from '../server/domain/site.js';
+import type { Upstream } from '../server/domain/upstream.js';
+import { type ApplyStep } from '../server/reload/reload.js';
+export type { CreateSiteInput, UpdateSiteInput, CreateUpstreamInput, UpdateUpstreamInput };
+export interface SitesClient {
+    list(): Promise<Site[]>;
+    get(id: string): Promise<Site>;
+    create(input: CreateSiteInput): Promise<Site>;
+    update(id: string, patch: UpdateSiteInput): Promise<Site>;
+    delete(id: string): Promise<void>;
+}
+export interface UpstreamsClient {
+    list(): Promise<Upstream[]>;
+    get(id: string): Promise<Upstream>;
+    create(input: CreateUpstreamInput): Promise<Upstream>;
+    update(id: string, patch: UpdateUpstreamInput): Promise<Upstream>;
+    delete(id: string): Promise<void>;
+}
+export interface CertsClient {
+    issueForSite(siteId: string): Promise<Cert>;
+    list(): Promise<Cert[]>;
+}
+export interface ReloadResult {
+    ok: boolean;
+    step: ApplyStep | 'config' | 'unsupported';
+    message?: string;
+}
+export interface ReloadClient {
+    apply(): Promise<ReloadResult>;
+}
+export interface HealthResult {
+    ok: boolean;
+    status: number | null;
+    body?: unknown;
+}
+export interface StatusClient {
+    health(): Promise<HealthResult>;
+}
+export interface CliClient {
+    sites: SitesClient;
+    upstreams: UpstreamsClient;
+    certs: CertsClient;
+    reload: ReloadClient;
+    status: StatusClient;
+}
+/**
+ * Structured client error. Mirrors the shape of `mapErrorToResponse`'s
+ * body so commands can pretty-print uniformly across local and http modes.
+ */
+export declare class CliClientError extends Error {
+    readonly status: number | null;
+    readonly code: string;
+    readonly details?: unknown;
+    constructor(message: string, opts?: {
+        status?: number | null;
+        code?: string;
+        details?: unknown;
+    });
+}
+export declare function createLocalClient(): CliClient;
+export declare function createHttpClient(baseUrl: string, token: string | undefined): CliClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/cli/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/cli/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,eAAe,EACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAML,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACzB,MAAM,qCAAqC,CAAC;AAM7C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAG/E,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,CAAC;AAE3F,MAAM,WAAW,WAAW;IAC1B,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,aAAa,CAAC;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,eAAe,CAAC;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAGzB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO;CAU1E;AAYD,wBAAgB,iBAAiB,IAAI,SAAS,CA4H7C;AA+CD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAkGtF"}

package/dist/cli/client.js

@@ -0,0 +1,300 @@
+/**
+ * CLI client abstraction — single interface, two implementations.
+ *
+ * The CLI commands speak {@link CliClient}. `createLocalClient` wraps the
+ * in-process repositories + framework-agnostic handlers; `createHttpClient`
+ * hits the running Next.js HTTP API. Commands never branch on mode — the
+ * dispatcher picks one client and hands it to every command.
+ *
+ * Failures bubble as plain `Error`s with a `code` discriminator where the
+ * structured server response provided one, so command modules can pretty-
+ * print without re-deriving HTTP details.
+ */
+import { mkdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { createSite, deleteSite, getSite, listSites, updateSite, } from '../server/api/handlers/sites.js';
+import { createUpstream, deleteUpstream, getUpstream, listUpstreams, updateUpstream, } from '../server/api/handlers/upstreams.js';
+import { issueCertForSite } from '../server/api/handlers/site-cert.js';
+import { getDb, getRepositories } from '../server/api/db-context.js';
+import { loadOrCreateAccount } from '../server/certs/acme-account.js';
+import { createChallengeStore } from '../server/certs/challenge-store.js';
+import { issueCertificate } from '../server/certs/issue.js';
+import { applyDesiredState } from '../server/reload/reload.js';
+import { renderBundle } from '../server/renderer/render-bundle.js';
+/**
+ * Structured client error. Mirrors the shape of `mapErrorToResponse`'s
+ * body so commands can pretty-print uniformly across local and http modes.
+ */
+export class CliClientError extends Error {
+    status;
+    code;
+    details;
+    constructor(message, opts = {}) {
+        super(message);
+        this.name = 'CliClientError';
+        this.status = opts.status ?? null;
+        this.code = opts.code ?? 'error';
+        if (opts.details !== undefined) {
+            this.details = opts.details;
+        }
+    }
+}
+/**
+ * Wrap a synchronous handler call in `Promise.resolve` so the interface is
+ * uniformly async. The handlers themselves are sync because `better-sqlite3`
+ * is sync, but the HTTP client is necessarily async and we don't want the
+ * command code branching on which one it has.
+ */
+async function syncAsync(fn) {
+    return Promise.resolve(fn());
+}
+export function createLocalClient() {
+    const repos = () => getRepositories();
+    return {
+        sites: {
+            async list() {
+                return syncAsync(() => listSites({ siteRepo: repos().sites }));
+            },
+            async get(id) {
+                return syncAsync(() => getSite(id, { siteRepo: repos().sites }));
+            },
+            async create(input) {
+                return syncAsync(() => createSite(input, { siteRepo: repos().sites }));
+            },
+            async update(id, patch) {
+                return syncAsync(() => updateSite(id, patch, { siteRepo: repos().sites }));
+            },
+            async delete(id) {
+                return syncAsync(() => {
+                    deleteSite(id, { siteRepo: repos().sites });
+                });
+            },
+        },
+        upstreams: {
+            async list() {
+                return syncAsync(() => listUpstreams({ upstreamRepo: repos().upstreams }));
+            },
+            async get(id) {
+                return syncAsync(() => getUpstream(id, { upstreamRepo: repos().upstreams }));
+            },
+            async create(input) {
+                return syncAsync(() => createUpstream(input, { upstreamRepo: repos().upstreams }));
+            },
+            async update(id, patch) {
+                return syncAsync(() => updateUpstream(id, patch, { upstreamRepo: repos().upstreams }));
+            },
+            async delete(id) {
+                return syncAsync(() => {
+                    deleteUpstream(id, { upstreamRepo: repos().upstreams });
+                });
+            },
+        },
+        certs: {
+            async issueForSite(siteId) {
+                const contactEmail = process.env.ZOOMIES_ACME_EMAIL;
+                if (contactEmail === undefined || contactEmail === '') {
+                    throw new CliClientError('ACME email not configured: set ZOOMIES_ACME_EMAIL', {
+                        code: 'config_missing',
+                    });
+                }
+                const directoryUrl = process.env.ZOOMIES_ACME_DIRECTORY_URL ??
+                    'https://acme-v02.api.letsencrypt.org/directory';
+                const stateDir = process.env.ZOOMIES_STATE_DIR ?? join(process.cwd(), '.zoomies');
+                const certDir = process.env.ZOOMIES_CERT_DIR ?? join(stateDir, 'certs');
+                await mkdir(certDir, { recursive: true });
+                const challengeStore = createChallengeStore({ stateDir });
+                await mkdir(challengeStore.basePath, { recursive: true });
+                const account = await loadOrCreateAccount({
+                    accountKeyPath: join(stateDir, 'acme-account.key'),
+                    contactEmail,
+                    directoryUrl,
+                });
+                const { sites, certs } = repos();
+                return issueCertForSite(siteId, {
+                    siteRepo: sites,
+                    certRepo: certs,
+                    account,
+                    challengeStore,
+                    certDir,
+                    issue: issueCertificate,
+                });
+            },
+            async list() {
+                return syncAsync(() => repos().certs.list());
+            },
+        },
+        reload: {
+            async apply() {
+                const sitesDir = process.env.ZOOMIES_NGINX_SITES_DIR;
+                const healthCheckUrl = process.env.ZOOMIES_HEALTH_CHECK_URL;
+                if (sitesDir === undefined || sitesDir === '') {
+                    return {
+                        ok: false,
+                        step: 'config',
+                        message: 'ZOOMIES_NGINX_SITES_DIR is not set',
+                    };
+                }
+                if (healthCheckUrl === undefined || healthCheckUrl === '') {
+                    return {
+                        ok: false,
+                        step: 'config',
+                        message: 'ZOOMIES_HEALTH_CHECK_URL is not set',
+                    };
+                }
+                const { sites, upstreams, certs } = repos();
+                const rendered = renderBundle(sites.list(), upstreams.list(), certs.list());
+                const result = await applyDesiredState(rendered, { sitesDir, healthCheckUrl });
+                return {
+                    ok: result.ok,
+                    step: result.step,
+                    ...(result.message !== undefined ? { message: result.message } : {}),
+                };
+            },
+        },
+        status: {
+            async health() {
+                try {
+                    const db = getDb();
+                    const row = db.prepare('SELECT 1 AS ok').get();
+                    if (row?.ok === 1) {
+                        return { ok: true, status: null, body: { status: 'ok', db: 'reachable' } };
+                    }
+                    return { ok: false, status: null, body: { status: 'degraded', db: 'no rows' } };
+                }
+                catch (err) {
+                    const message = err instanceof Error ? err.message : String(err);
+                    return { ok: false, status: null, body: { status: 'error', message } };
+                }
+            },
+        },
+    };
+}
+function isErrorBody(value) {
+    return typeof value === 'object' && value !== null;
+}
+async function parseJsonOrNull(response) {
+    const text = await response.text();
+    if (text === '') {
+        return null;
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+/**
+ * Throw a {@link CliClientError} carrying the server-provided code + details
+ * when the response is non-2xx; otherwise return the parsed JSON body.
+ */
+async function unwrapResponse(response) {
+    const body = await parseJsonOrNull(response);
+    if (response.ok) {
+        return body;
+    }
+    const message = isErrorBody(body) && typeof body.error === 'string' ? body.error : `HTTP ${response.status}`;
+    const code = isErrorBody(body) && typeof body.code === 'string' ? body.code : 'http_error';
+    const details = isErrorBody(body) ? body.details : undefined;
+    const opts = {
+        status: response.status,
+        code,
+    };
+    if (details !== undefined) {
+        opts.details = details;
+    }
+    throw new CliClientError(message, opts);
+}
+export function createHttpClient(baseUrl, token) {
+    const headers = { 'content-type': 'application/json' };
+    if (token !== undefined && token !== '') {
+        headers.authorization = `Bearer ${token}`;
+    }
+    const url = (path) => {
+        const trimmed = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl;
+        return `${trimmed}${path}`;
+    };
+    async function request(path, init = {}) {
+        const response = await fetch(url(path), {
+            ...init,
+            headers: { ...headers, ...init.headers },
+        });
+        return unwrapResponse(response);
+    }
+    return {
+        sites: {
+            list: () => request('/api/v1/sites'),
+            get: (id) => request(`/api/v1/sites/${encodeURIComponent(id)}`),
+            create: (input) => request('/api/v1/sites', { method: 'POST', body: JSON.stringify(input) }),
+            update: (id, patch) => request(`/api/v1/sites/${encodeURIComponent(id)}`, {
+                method: 'PATCH',
+                body: JSON.stringify(patch),
+            }),
+            async delete(id) {
+                const response = await fetch(url(`/api/v1/sites/${encodeURIComponent(id)}`), {
+                    method: 'DELETE',
+                    headers,
+                });
+                if (response.ok) {
+                    return;
+                }
+                await unwrapResponse(response);
+            },
+        },
+        upstreams: {
+            list: () => request('/api/v1/upstreams'),
+            get: (id) => request(`/api/v1/upstreams/${encodeURIComponent(id)}`),
+            create: (input) => request('/api/v1/upstreams', {
+                method: 'POST',
+                body: JSON.stringify(input),
+            }),
+            update: (id, patch) => request(`/api/v1/upstreams/${encodeURIComponent(id)}`, {
+                method: 'PATCH',
+                body: JSON.stringify(patch),
+            }),
+            async delete(id) {
+                const response = await fetch(url(`/api/v1/upstreams/${encodeURIComponent(id)}`), {
+                    method: 'DELETE',
+                    headers,
+                });
+                if (response.ok) {
+                    return;
+                }
+                await unwrapResponse(response);
+            },
+        },
+        certs: {
+            issueForSite: (siteId) => request(`/api/v1/sites/${encodeURIComponent(siteId)}/cert`, {
+                method: 'POST',
+            }),
+            list: () => {
+                throw new CliClientError('listing certs over HTTP is not yet implemented; use --local', {
+                    code: 'unsupported',
+                });
+            },
+        },
+        reload: {
+            async apply() {
+                return {
+                    ok: false,
+                    step: 'unsupported',
+                    message: 'reload via HTTP not yet implemented; use --local',
+                };
+            },
+        },
+        status: {
+            async health() {
+                try {
+                    const response = await fetch(url('/api/healthz'), { headers });
+                    const body = await parseJsonOrNull(response);
+                    return { ok: response.ok, status: response.status, body };
+                }
+                catch (err) {
+                    const message = err instanceof Error ? err.message : String(err);
+                    return { ok: false, status: null, body: { error: message } };
+                }
+            },
+        },
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/cli/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/cli/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,UAAU,EACV,UAAU,EACV,OAAO,EACP,SAAS,EACT,UAAU,GAGX,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,cAAc,EACd,cAAc,EACd,WAAW,EACX,aAAa,EACb,cAAc,GAGf,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAI5D,OAAO,EAAE,iBAAiB,EAAkB,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAqDnE;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,CAAgB;IACtB,IAAI,CAAS;IACb,OAAO,CAAW;IAE3B,YACE,OAAe,EACf,OAAqE,EAAE;QAEvE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC;QACjC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAI,EAAW;IACrC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC;IAEtC,OAAO;QACL,KAAK,EAAE;YACL,KAAK,CAAC,IAAI;gBACR,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,EAAE;gBACV,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,KAAK;gBAChB,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACzE,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK;gBACpB,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC7E,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,EAAE;gBACb,OAAO,SAAS,CAAC,GAAG,EAAE;oBACpB,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9C,CAAC,CAAC,CAAC;YACL,CAAC;SACF;QACD,SAAS,EAAE;YACT,KAAK,CAAC,IAAI;gBACR,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC7E,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,EAAE;gBACV,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC/E,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,KAAK;gBAChB,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK;gBACpB,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACzF,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,EAAE;gBACb,OAAO,SAAS,CAAC,GAAG,EAAE;oBACpB,cAAc,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC1D,CAAC,CAAC,CAAC;YACL,CAAC;SACF;QACD,KAAK,EAAE;YACL,KAAK,CAAC,YAAY,CAAC,MAAM;gBACvB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBACpD,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;oBACtD,MAAM,IAAI,cAAc,CAAC,mDAAmD,EAAE;wBAC5E,IAAI,EAAE,gBAAgB;qBACvB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CAAC,0BAA0B;oBACtC,gDAAgD,CAAC;gBACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;gBAClF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAExE,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,MAAM,cAAc,GAAG,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC1D,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAE1D,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;oBACxC,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC;oBAClD,YAAY;oBACZ,YAAY;iBACb,CAAC,CAAC;gBAEH,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;gBACjC,OAAO,gBAAgB,CAAC,MAAM,EAAE;oBAC9B,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,KAAK;oBACf,OAAO;oBACP,cAAc;oBACd,OAAO;oBACP,KAAK,EAAE,gBAAgB;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,IAAI;gBACR,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/C,CAAC;SACF;QACD,MAAM,EAAE;YACN,KAAK,CAAC,KAAK;gBACT,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;gBACrD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;gBAC5D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;oBAC9C,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,oCAAoC;qBAC9C,CAAC;gBACJ,CAAC;gBACD,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,EAAE,EAAE,CAAC;oBAC1D,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,qCAAqC;qBAC/C,CAAC;gBACJ,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC/E,OAAO;oBACL,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE,CAAC;YACJ,CAAC;SACF;QACD,MAAM,EAAE;YACN,KAAK,CAAC,MAAM;gBACV,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;oBACnB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,EAAgC,CAAC;oBAC7E,IAAI,GAAG,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;wBAClB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC;oBAC7E,CAAC;oBACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;gBAClF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;gBACzE,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAQD,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAI,QAAkB;IACjD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,IAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GACX,WAAW,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC/F,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IAC3F,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,IAAI,GAAwD;QAChE,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI;KACL,CAAC;IACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAyB;IACzE,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC/E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,IAAY,EAAU,EAAE;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACvE,OAAO,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;IAC7B,CAAC,CAAC;IAEF,KAAK,UAAU,OAAO,CAAI,IAAY,EAAE,OAAoB,EAAE;QAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YACtC,GAAG,IAAI;YACP,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAI,IAAI,CAAC,OAA8C,EAAE;SACjF,CAAC,CAAC;QACH,OAAO,cAAc,CAAI,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAS,eAAe,CAAC;YAC5C,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAO,iBAAiB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;YACrE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,OAAO,CAAO,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACjF,MAAM,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CACpB,OAAO,CAAO,iBAAiB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;gBACvD,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;aAC5B,CAAC;YACJ,KAAK,CAAC,MAAM,CAAC,EAAE;gBACb,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,iBAAiB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;oBAC3E,MAAM,EAAE,QAAQ;oBAChB,OAAO;iBACR,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,OAAO;gBACT,CAAC;gBACD,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;SACF;QACD,SAAS,EAAE;YACT,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAa,mBAAmB,CAAC;YACpD,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAW,qBAAqB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7E,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,OAAO,CAAW,mBAAmB,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;aAC5B,CAAC;YACJ,MAAM,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CACpB,OAAO,CAAW,qBAAqB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC/D,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;aAC5B,CAAC;YACJ,KAAK,CAAC,MAAM,CAAC,EAAE;gBACb,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,qBAAqB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;oBAC/E,MAAM,EAAE,QAAQ;oBAChB,OAAO;iBACR,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,OAAO;gBACT,CAAC;gBACD,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;SACF;QACD,KAAK,EAAE;YACL,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CACvB,OAAO,CAAO,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE;gBAChE,MAAM,EAAE,MAAM;aACf,CAAC;YACJ,IAAI,EAAE,GAAG,EAAE;gBACT,MAAM,IAAI,cAAc,CAAC,6DAA6D,EAAE;oBACtF,IAAI,EAAE,aAAa;iBACpB,CAAC,CAAC;YACL,CAAC;SACF;QACD,MAAM,EAAE;YACN,KAAK,CAAC,KAAK;gBACT,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,kDAAkD;iBAC5D,CAAC;YACJ,CAAC;SACF;QACD,MAAM,EAAE;YACN,KAAK,CAAC,MAAM;gBACV,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC/D,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;oBAC7C,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;gBAC5D,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC/D,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/commands/certs.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `zoomies certs <subcommand>` — issue / list cert rows.
+ *
+ * `issue` blocks until the ACME order completes (10–60 s in production
+ * against Let's Encrypt). The HTTP API does not yet expose a list-certs
+ * endpoint, so `list` is local-only for now.
+ */
+import type { Command } from '../dispatcher.js';
+export declare const CERTS_USAGE = "Usage: zoomies certs <subcommand> [args]\n\nSubcommands:\n  issue --site-id <id>   Issue (or re-issue) a Let's Encrypt cert for a site.\n                         Blocks until the ACME order completes (10-60 seconds\n                         against the production Let's Encrypt API).\n                         Local mode requires ZOOMIES_ACME_EMAIL to be set.\n  list                   Tabular listing of all certs (local mode only).\n";
+export declare const certsCommand: Command;
+//# sourceMappingURL=certs.d.ts.map

package/dist/cli/commands/certs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certs.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/certs.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAkB,MAAM,kBAAkB,CAAC;AAGhE,eAAO,MAAM,WAAW,wbAQvB,CAAC;AAgFF,eAAO,MAAM,YAAY,EAAE,OAoB1B,CAAC"}

package/dist/cli/commands/certs.js

@@ -0,0 +1,110 @@
+/**
+ * `zoomies certs <subcommand>` — issue / list cert rows.
+ *
+ * `issue` blocks until the ACME order completes (10–60 s in production
+ * against Let's Encrypt). The HTTP API does not yet expose a list-certs
+ * endpoint, so `list` is local-only for now.
+ */
+import { CliClientError } from '../client.js';
+import { FlagParseError, parseFlags } from './flags.js';
+export const CERTS_USAGE = `Usage: zoomies certs <subcommand> [args]
+
+Subcommands:
+  issue --site-id <id>   Issue (or re-issue) a Let's Encrypt cert for a site.
+                         Blocks until the ACME order completes (10-60 seconds
+                         against the production Let's Encrypt API).
+                         Local mode requires ZOOMIES_ACME_EMAIL to be set.
+  list                   Tabular listing of all certs (local mode only).
+`;
+function shortId(id) {
+    return id.slice(0, 8);
+}
+function printUsage(ctx) {
+    ctx.stdout.write(CERTS_USAGE);
+    return 0;
+}
+function writeUsageErr(ctx, msg) {
+    ctx.stderr.write(`zoomies certs: ${msg}\n`);
+    ctx.stderr.write(CERTS_USAGE);
+    return 2;
+}
+function handleClientError(ctx, err) {
+    if (err instanceof CliClientError) {
+        ctx.stderr.write(`zoomies certs: ${err.message} (${err.code})\n`);
+        return 1;
+    }
+    const message = err instanceof Error ? err.message : String(err);
+    ctx.stderr.write(`zoomies certs: ${message}\n`);
+    return 1;
+}
+async function runIssue(args, ctx) {
+    let parsed;
+    try {
+        parsed = parseFlags(args, { valueFlags: new Set(['site-id']) });
+    }
+    catch (err) {
+        if (err instanceof FlagParseError) {
+            return writeUsageErr(ctx, err.message);
+        }
+        throw err;
+    }
+    const siteId = parsed.flags['site-id'];
+    if (siteId === undefined) {
+        return writeUsageErr(ctx, 'issue requires --site-id <id>');
+    }
+    try {
+        const cert = await ctx.client.certs.issueForSite(siteId);
+        ctx.stdout.write(JSON.stringify(cert, null, 2) + '\n');
+        return 0;
+    }
+    catch (err) {
+        return handleClientError(ctx, err);
+    }
+}
+async function runList(ctx) {
+    if (ctx.mode === 'http') {
+        ctx.stderr.write('zoomies certs: listing certs over HTTP is not yet supported; rerun with --local\n');
+        return 2;
+    }
+    try {
+        const certs = await ctx.client.certs.list();
+        if (certs.length === 0) {
+            ctx.stdout.write('(no certs)\n');
+            return 0;
+        }
+        const header = ['id', 'domain', 'provider', 'not_after'];
+        const rows = certs.map((c) => [shortId(c.id), c.domain, c.provider, c.notAfter]);
+        const widths = header.map((h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? '').length)));
+        const fmt = (cols) => cols.map((c, i) => c.padEnd(widths[i] ?? 0)).join('  ');
+        ctx.stdout.write(fmt(header) + '\n');
+        for (const row of rows) {
+            ctx.stdout.write(fmt(row) + '\n');
+        }
+        return 0;
+    }
+    catch (err) {
+        return handleClientError(ctx, err);
+    }
+}
+export const certsCommand = {
+    name: 'certs',
+    describe: 'Issue / list ACME certificates',
+    usage: CERTS_USAGE,
+    async run(args, ctx) {
+        if (args.includes('--help') || args.includes('-h')) {
+            return printUsage(ctx);
+        }
+        const [sub, ...rest] = args;
+        switch (sub) {
+            case undefined:
+                return printUsage(ctx);
+            case 'issue':
+                return runIssue(rest, ctx);
+            case 'list':
+                return runList(ctx);
+            default:
+                return writeUsageErr(ctx, `unknown subcommand '${sub}'`);
+        }
+    },
+};
+//# sourceMappingURL=certs.js.map

package/dist/cli/commands/certs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certs.js","sourceRoot":"","sources":["../../../src/cli/commands/certs.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExD,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;CAQ1B,CAAC;AAEF,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,GAAmB;IACrC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,GAAmB,EAAE,GAAW;IACrD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC5C,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAmB,EAAE,GAAY;IAC1D,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;QAClC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,OAAO,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAuB,EAAE,GAAmB;IAClE,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;YAClC,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,aAAa,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAmB;IACxC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,GAAG,CAAC,MAAM,CAAC,KAAK,CACd,mFAAmF,CACpF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACjC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAC5D,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,IAAuB,EAAU,EAAE,CAC9C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAY;IACnC,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,gCAAgC;IAC1C,KAAK,EAAE,WAAW;IAClB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG;QACjB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QAC5B,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,SAAS;gBACZ,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;YACzB,KAAK,OAAO;gBACV,OAAO,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC7B,KAAK,MAAM;gBACT,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;YACtB;gBACE,OAAO,aAAa,CAAC,GAAG,EAAE,uBAAuB,GAAG,GAAG,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF,CAAC"}