@zincapp/znvault-cli 2.1.0

package/dist/types/index.d.ts

@@ -0,0 +1,411 @@
+export interface CLIConfig {
+    url: string;
+    insecure: boolean;
+    timeout: number;
+    defaultTenant?: string;
+}
+export interface StoredCredentials {
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number;
+    userId: string;
+    username: string;
+    role: string;
+    tenantId: string | null;
+}
+export interface FullConfig extends CLIConfig {
+    credentials?: StoredCredentials;
+}
+export interface HealthResponse {
+    status: 'ok' | 'degraded' | 'error';
+    version: string;
+    uptime: number;
+    timestamp: string;
+    database?: {
+        status: string;
+    };
+    redis?: {
+        status: string;
+    };
+    ha?: {
+        enabled: boolean;
+        nodeId: string;
+        isLeader: boolean;
+        clusterSize: number;
+    };
+}
+export interface ClusterNode {
+    nodeId: string;
+    host: string;
+    port: number;
+    isLeader: boolean;
+    isHealthy: boolean;
+    lastHeartbeat: string;
+    version?: string;
+    uptime?: number;
+}
+export interface ClusterStatus {
+    enabled: boolean;
+    nodeId: string;
+    isLeader: boolean;
+    leaderNodeId: string | null;
+    nodes: ClusterNode[];
+    infrastructure?: {
+        postgres?: {
+            status: string;
+            primary?: string;
+        };
+        redis?: {
+            status: string;
+            master?: string;
+        };
+        etcd?: {
+            status: string;
+        };
+    };
+}
+export interface Tenant {
+    id: string;
+    name: string;
+    status: 'active' | 'suspended' | 'archived';
+    maxSecrets?: number;
+    maxKmsKeys?: number;
+    maxStorageMb?: number;
+    planTier?: string;
+    contactEmail?: string;
+    contactName?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface TenantUsage {
+    secretsCount: number;
+    kmsKeysCount: number;
+    storageUsedMb: number;
+    usersCount: number;
+    apiKeysCount: number;
+}
+export interface TenantWithUsage extends Tenant {
+    usage?: TenantUsage;
+}
+export interface User {
+    id: string;
+    username: string;
+    email?: string;
+    role: 'user' | 'admin' | 'superadmin';
+    tenantId?: string;
+    status: 'active' | 'disabled' | 'locked';
+    totpEnabled: boolean;
+    failedAttempts: number;
+    lockedUntil?: string;
+    lastLogin?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface Superadmin {
+    id: string;
+    username: string;
+    email?: string;
+    status: 'active' | 'disabled' | 'locked';
+    totpEnabled: boolean;
+    failedAttempts: number;
+    lockedUntil?: string;
+    lastLogin?: string;
+    createdAt: string;
+}
+export interface LockdownStatus {
+    scope: 'SYSTEM' | 'TENANT';
+    tenantId?: string;
+    status: 'NORMAL' | 'ALERT' | 'RESTRICT' | 'LOCKDOWN' | 'PANIC';
+    reason?: string;
+    triggeredAt?: string;
+    triggeredBy?: string;
+    escalationCount: number;
+    metrics?: {
+        authFailures: number;
+        apiAbuse: number;
+        permissionViolations: number;
+    };
+}
+export interface ThreatEvent {
+    id: string;
+    ts: string;
+    tenantId?: string;
+    userId?: string;
+    ip: string;
+    userAgent?: string;
+    category: string;
+    signal: string;
+    suggestedLevel: number;
+    endpoint: string;
+    method: string;
+    statusCode: number;
+    escalated: boolean;
+}
+export interface LockdownHistoryEntry {
+    id: string;
+    previousStatus: string;
+    newStatus: string;
+    transitionReason: string;
+    changedByUserId?: string;
+    changedBySystem: boolean;
+    ts: string;
+}
+export interface AuditEntry {
+    id: number;
+    ts: string;
+    clientCn: string;
+    action: string;
+    resource: string;
+    statusCode: number;
+    tenantId?: string;
+    ip?: string;
+    requestBody?: string;
+    responseBody?: string;
+}
+export interface AuditVerifyResult {
+    valid: boolean;
+    totalEntries: number;
+    verifiedEntries: number;
+    firstBrokenEntry?: number;
+    message: string;
+}
+export interface LoginResponse {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+    user: {
+        id: string;
+        username: string;
+        role: string;
+        tenantId: string | null;
+    };
+}
+export interface PaginatedResponse<T> {
+    items: T[];
+    total: number;
+    page: number;
+    pageSize: number;
+}
+export interface ApiError {
+    error: string;
+    message: string;
+    statusCode: number;
+}
+export interface GlobalOptions {
+    url?: string;
+    insecure?: boolean;
+    json?: boolean;
+    quiet?: boolean;
+}
+export interface TenantListOptions extends GlobalOptions {
+    status?: 'active' | 'suspended' | 'archived';
+    withUsage?: boolean;
+}
+export interface UserListOptions extends GlobalOptions {
+    tenant?: string;
+    role?: 'user' | 'admin' | 'superadmin';
+    status?: 'active' | 'disabled' | 'locked';
+}
+export interface AuditListOptions extends GlobalOptions {
+    user?: string;
+    action?: string;
+    days?: number;
+    limit?: number;
+}
+export interface ThreatListOptions extends GlobalOptions {
+    category?: string;
+    since?: string;
+    limit?: number;
+}
+export type OutputFormat = 'table' | 'json' | 'yaml';
+export interface CertificateMetadata {
+    id: string;
+    tenantId: string;
+    clientId: string;
+    kind: string;
+    alias: string;
+    certificateType: 'PEM' | 'P12' | 'DER';
+    purpose: 'SIGNING' | 'AUTHENTICATION' | 'ENCRYPTION';
+    fingerprintSha256: string;
+    subjectCn: string;
+    issuerCn: string;
+    notBefore: string;
+    notAfter: string;
+    clientName: string;
+    organizationId?: string;
+    contactEmail?: string;
+    status: 'ACTIVE' | 'EXPIRING_SOON' | 'EXPIRED' | 'REVOKED' | 'SUSPENDED';
+    version: number;
+    createdAt: string;
+    createdBy: string;
+    updatedAt: string;
+    lastAccessedAt?: string;
+    accessCount: number;
+    tags: string[];
+    daysUntilExpiry: number;
+    isExpired: boolean;
+    hasPrivateKey: boolean;
+}
+export interface CertificateListResponse {
+    items: CertificateMetadata[];
+    total: number;
+    page: number;
+    pageSize: number;
+}
+export interface CertificateStats {
+    total: number;
+    byStatus: Record<string, number>;
+    byKind: Record<string, number>;
+    expiringIn30Days: number;
+    expiringIn7Days: number;
+}
+export interface DecryptedCertificate {
+    id: string;
+    alias: string;
+    certificateData: string;
+    privateKeyData?: string;
+    chainData?: string;
+    certificateType: 'PEM' | 'P12' | 'DER';
+    fingerprint: string;
+    fingerprintSha256: string;
+    version: number;
+}
+export interface APIKey {
+    id: string;
+    tenant_id: string;
+    created_by: string | null;
+    name: string;
+    description: string | null;
+    prefix: string;
+    expires_at: string;
+    last_used: string | null;
+    created_at: string;
+    ip_allowlist: string[] | null;
+    permissions: string[];
+    conditions?: Record<string, unknown>;
+    created_by_username?: string;
+    enabled: boolean;
+    rotation_count: number;
+    last_rotation: string | null;
+}
+export interface CreateAPIKeyRequest {
+    name: string;
+    description?: string;
+    expiresInDays?: number;
+    permissions: string[];
+    tenantId?: string;
+    ipAllowlist?: string[];
+}
+export interface CreateAPIKeyResponse {
+    key: string;
+    apiKey: APIKey;
+    message: string;
+}
+export interface ListAPIKeysResponse {
+    keys: APIKey[];
+    expiringSoon: APIKey[];
+}
+export interface RotateAPIKeyResponse {
+    key: string;
+    apiKey: APIKey;
+    message: string;
+}
+export interface APIKeySelfResponse {
+    apiKey: APIKey;
+    expiresInDays: number;
+    isExpiringSoon: boolean;
+}
+export interface APIKeyPolicyAttachment {
+    policyId: string;
+    policyName: string;
+    apiKeyId: string;
+    attachedAt: string;
+}
+export type PolicyEffect = 'allow' | 'deny';
+export interface PolicyCondition {
+    type: 'ip' | 'ipAddress' | 'mfaVerified' | 'timeRange' | 'tags' | 'resourceTags' | 'userAttributes';
+    operator?: 'in' | 'not_in' | 'equals' | 'contains';
+    value: unknown;
+}
+export interface PolicyResource {
+    type: 'secret' | 'certificate' | 'kms_key' | 'user' | 'role' | 'tenant' | 'policy' | 'api_key';
+    id?: string;
+    tenantId?: string;
+    tags?: Record<string, string>;
+}
+export interface Policy {
+    id: string;
+    name: string;
+    description?: string;
+    effect: PolicyEffect;
+    actions: string[];
+    resources?: PolicyResource[];
+    conditions?: PolicyCondition[];
+    priority: number;
+    isActive: boolean;
+    tenantId?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface PolicyAttachment {
+    policyId: string;
+    policyName: string;
+    userId?: string;
+    roleId?: string;
+    username?: string;
+    roleName?: string;
+    attachedAt: string;
+}
+export interface CreatePolicyInput {
+    name: string;
+    description?: string;
+    effect: PolicyEffect;
+    actions: string[];
+    resources?: PolicyResource[];
+    conditions?: PolicyCondition[];
+    priority?: number;
+    tenantId?: string;
+}
+export interface UpdatePolicyInput {
+    name?: string;
+    description?: string;
+    effect?: PolicyEffect;
+    actions?: string[];
+    resources?: PolicyResource[];
+    conditions?: PolicyCondition[];
+    priority?: number;
+}
+export interface PolicyTestRequest {
+    userId: string;
+    action: string;
+    resource?: {
+        type: string;
+        id?: string;
+        tenantId?: string;
+    };
+    requestContext?: {
+        ip?: string;
+        mfaVerified?: boolean;
+    };
+}
+export interface PolicyTestResult {
+    allowed: boolean;
+    effect: 'allow' | 'deny' | 'no_match';
+    reason: string;
+    matchedPolicies: {
+        id: string;
+        name: string;
+        effect: PolicyEffect;
+        priority: number;
+    }[];
+    evaluatedPolicies: number;
+    evaluationTimeMs: number;
+}
+export interface PolicyListResponse {
+    data: Policy[];
+    page: number;
+    pageSize: number;
+    total: number;
+    totalPages: number;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,UAAW,SAAQ,SAAS;IAC3C,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAGD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,OAAO,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B,EAAE,CAAC,EAAE;QACH,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAChD,KAAK,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,IAAI,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAgB,SAAQ,MAAM;IAC7C,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,YAAY,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD,MAAM,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;IAC7C,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,YAAY,CAAC;IACvC,MAAM,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;CAC3C;AAED,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAGD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAGrD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IACvC,OAAO,EAAE,SAAS,GAAG,gBAAgB,GAAG,YAAY,CAAC;IACrD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,QAAQ,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAErC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,OAAO,EAAE,OAAO,CAAC;IAEjB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC;AAE5C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,IAAI,GAAG,WAAW,GAAG,aAAa,GAAG,WAAW,GAAG,MAAM,GAAG,cAAc,GAAG,gBAAgB,CAAC;IACpG,QAAQ,CAAC,EAAE,IAAI,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;IACnD,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,GAAG,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC/F,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,cAAc,CAAC,EAAE;QACf,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE;QACf,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,YAAY,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/types/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":""}

package/dist/types/update.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Agent Auto-Update Types
+ *
+ * Defines interfaces for the auto-update system including
+ * manifests, artifacts, configuration, and progress tracking.
+ */
+/**
+ * Channel for update releases
+ */
+export type UpdateChannel = 'stable' | 'beta' | 'staging';
+/**
+ * Platform identifiers for agent binaries
+ */
+export type Platform = 'linux_amd64' | 'linux_arm64';
+/**
+ * Information about a specific artifact (platform binary)
+ */
+export interface ArtifactInfo {
+    /** Full URL to download the tarball */
+    url: string;
+    /** SHA256 checksum of the tarball */
+    sha256: string;
+    /** File size in bytes */
+    size: number;
+    /** Base64-encoded GPG signature */
+    signature: string;
+}
+/**
+ * Release manifest stored in S3
+ */
+export interface AgentManifest {
+    /** Channel this manifest belongs to */
+    channel: UpdateChannel;
+    /** Semantic version (e.g., "1.0.0") */
+    version: string;
+    /** ISO timestamp of release */
+    releaseDate: string;
+    /** Minimum version required to update (for breaking changes) */
+    minVersion?: string;
+    /** Release notes / changelog */
+    releaseNotes?: string;
+    /** Platform-specific artifacts */
+    artifacts: {
+        linux_amd64: ArtifactInfo;
+        linux_arm64: ArtifactInfo;
+    };
+    /** Signature metadata */
+    signature: {
+        /** GPG key ID used for signing */
+        keyId: string;
+        /** Timestamp when signed */
+        signedAt: string;
+    };
+}
+/**
+ * Result of checking for updates
+ */
+export interface UpdateCheckResult {
+    /** Whether an update is available */
+    updateAvailable: boolean;
+    /** Currently installed version */
+    currentVersion: string;
+    /** Latest available version */
+    latestVersion: string;
+    /** Full manifest if update available */
+    manifest?: AgentManifest;
+    /** Artifact for current platform if update available */
+    artifact?: ArtifactInfo;
+    /** Error message if check failed */
+    error?: string;
+}
+/**
+ * Maintenance window configuration
+ */
+export interface MaintenanceWindow {
+    /** Start time in HH:MM format */
+    start: string;
+    /** End time in HH:MM format */
+    end: string;
+    /** Timezone (e.g., "UTC", "America/New_York") */
+    timezone: string;
+}
+/**
+ * Auto-update configuration
+ */
+export interface UpdateConfig {
+    /** Update channel to track */
+    channel: UpdateChannel;
+    /** Whether auto-update is enabled */
+    autoUpdate: boolean;
+    /** Maintenance window for auto-updates (optional) */
+    maintenanceWindow?: MaintenanceWindow;
+    /** Interval between update checks in milliseconds */
+    checkInterval: number;
+    /** Path where agent is installed */
+    installPath: string;
+    /** Vault URL for WebSocket notifications (optional) */
+    vaultUrl?: string;
+}
+/**
+ * Stages of the update process
+ */
+export type UpdateStage = 'checking' | 'downloading' | 'verifying' | 'installing' | 'complete' | 'error';
+/**
+ * Progress information during update
+ */
+export interface UpdateProgress {
+    /** Current stage */
+    stage: UpdateStage;
+    /** Download progress (0-100) */
+    progress?: number;
+    /** Human-readable message */
+    message: string;
+    /** Error details if stage is 'error' */
+    error?: string;
+}
+/**
+ * Callback for progress updates
+ */
+export type ProgressCallback = (progress: UpdateProgress) => void;
+/**
+ * Default configuration values
+ */
+export declare const DEFAULT_UPDATE_CONFIG: UpdateConfig;
+/**
+ * S3 base URL for manifests and artifacts
+ */
+export declare const S3_BASE_URL = "https://s3.zincapp.com/zn-releases-prod/vault-agent";
+/**
+ * Manifest URL for a specific channel
+ */
+export declare function getManifestUrl(channel: UpdateChannel): string;
+/**
+ * Public key URL for signature verification
+ */
+export declare function getPublicKeyUrl(): string;
+//# sourceMappingURL=update.d.ts.map

package/dist/types/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/types/update.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,aAAa,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,OAAO,EAAE,aAAa,CAAC;IACvB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,SAAS,EAAE;QACT,WAAW,EAAE,YAAY,CAAC;QAC1B,WAAW,EAAE,YAAY,CAAC;KAC3B,CAAC;IACF,yBAAyB;IACzB,SAAS,EAAE;QACT,kCAAkC;QAClC,KAAK,EAAE,MAAM,CAAC;QACd,4BAA4B;QAC5B,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,eAAe,EAAE,OAAO,CAAC;IACzB,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,8BAA8B;IAC9B,OAAO,EAAE,aAAa,CAAC;IACvB,qCAAqC;IACrC,UAAU,EAAE,OAAO,CAAC;IACpB,qDAAqD;IACrD,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,aAAa,GACb,WAAW,GACX,YAAY,GACZ,UAAU,GACV,OAAO,CAAC;AAEZ;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,oBAAoB;IACpB,KAAK,EAAE,WAAW,CAAC;IACnB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,YAKnC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,wDAAwD,CAAC;AAEjF;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAE7D;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAExC"}

package/dist/types/update.js

@@ -0,0 +1,27 @@
+// Path: znvault-cli/src/types/update.ts
+/**
+ * Default configuration values
+ */
+export const DEFAULT_UPDATE_CONFIG = {
+    channel: 'stable',
+    autoUpdate: false,
+    checkInterval: 3600000, // 1 hour
+    installPath: '/usr/local/bin/znvault',
+};
+/**
+ * S3 base URL for manifests and artifacts
+ */
+export const S3_BASE_URL = 'https://s3.zincapp.com/zn-releases-prod/vault-agent';
+/**
+ * Manifest URL for a specific channel
+ */
+export function getManifestUrl(channel) {
+    return `${S3_BASE_URL}/manifests/${channel}.json`;
+}
+/**
+ * Public key URL for signature verification
+ */
+export function getPublicKeyUrl() {
+    return `${S3_BASE_URL}/keys/public.asc`;
+}
+//# sourceMappingURL=update.js.map

package/dist/types/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/types/update.ts"],"names":[],"mappings":"AAAA,wCAAwC;AA2IxC;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,OAAO,EAAE,QAAQ;IACjB,UAAU,EAAE,KAAK;IACjB,aAAa,EAAE,OAAO,EAAE,SAAS;IACjC,WAAW,EAAE,wBAAwB;CACtC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,qDAAqD,CAAC;AAEjF;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAsB;IACnD,OAAO,GAAG,WAAW,cAAc,OAAO,OAAO,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,GAAG,WAAW,kBAAkB,CAAC;AAC1C,CAAC"}

package/dist/utils/platform.d.ts

@@ -0,0 +1,35 @@
+import type { Platform } from '../types/update.js';
+/**
+ * Detect the current platform for binary downloads
+ * Returns 'unsupported' for non-Linux platforms
+ */
+export declare function getPlatform(): Platform | 'unsupported';
+/**
+ * Get human-readable platform name
+ */
+export declare function getPlatformName(): string;
+/**
+ * Get the installation path of the current znvault binary
+ */
+export declare function getInstallPath(): string;
+/**
+ * Check if the current process has write access to the install path
+ */
+export declare function canWriteToInstallPath(installPath?: string): boolean;
+/**
+ * Check if running as root (required for system-wide installs)
+ */
+export declare function isRoot(): boolean;
+/**
+ * Get temporary directory for downloads
+ */
+export declare function getTempDir(): string;
+/**
+ * Get the home directory for config files
+ */
+export declare function getConfigDir(): string;
+/**
+ * Ensure config directory exists
+ */
+export declare function ensureConfigDir(): string;
+//# sourceMappingURL=platform.d.ts.map

package/dist/utils/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/utils/platform.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;GAGG;AACH,wBAAgB,WAAW,IAAI,QAAQ,GAAG,aAAa,CAiBtD;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAWxC;AAWD;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAkBvC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAWnE;AAED;;GAEG;AACH,wBAAgB,MAAM,IAAI,OAAO,CAEhC;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAGrC;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAMxC"}