@zincapp/znvault-cli 2.1.0

package/dist/commands/cert.js

@@ -0,0 +1,398 @@
+import ora from 'ora';
+import * as mode from '../lib/mode.js';
+import * as output from '../lib/output.js';
+export function registerCertCommands(program) {
+    const cert = program
+        .command('cert')
+        .description('Certificate management');
+    // List certificates
+    cert
+        .command('list')
+        .description('List certificates')
+        .option('--status <status>', 'Filter by status (ACTIVE, EXPIRING_SOON, EXPIRED)')
+        .option('--kind <kind>', 'Filter by kind (AEAT, FNMT, CUSTOM, etc.)')
+        .option('--expiring <days>', 'Show certificates expiring within N days')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const spinner = ora('Fetching certificates...').start();
+        try {
+            const params = new URLSearchParams();
+            if (options.status)
+                params.append('status', options.status);
+            if (options.kind)
+                params.append('kind', options.kind);
+            let endpoint = '/v1/certificates';
+            if (options.expiring) {
+                endpoint = `/v1/certificates/expiring?days=${options.expiring}`;
+            }
+            else if (params.toString()) {
+                endpoint += '?' + params.toString();
+            }
+            const result = await mode.apiGet(endpoint);
+            spinner.stop();
+            if (options.json) {
+                output.json(result);
+                return;
+            }
+            const items = Array.isArray(result) ? result : result.items || [];
+            if (items.length === 0) {
+                console.log('No certificates found');
+                return;
+            }
+            output.table(['ID', 'Alias', 'Kind', 'Subject', 'Status', 'Key', 'Expires', 'Days Left'], items.map((cert) => [
+                cert.id.substring(0, 8),
+                cert.alias,
+                cert.kind,
+                cert.subjectCn.length > 25 ? cert.subjectCn.substring(0, 22) + '...' : cert.subjectCn,
+                formatStatus(cert.status),
+                cert.hasPrivateKey ? 'Yes' : 'No',
+                new Date(cert.notAfter).toLocaleDateString(),
+                formatDaysLeft(cert.daysUntilExpiry),
+            ]));
+            if (!Array.isArray(result) && result.total) {
+                console.log(`\nTotal: ${result.total} certificate(s)`);
+            }
+        }
+        catch (err) {
+            spinner.fail('Failed to list certificates');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+        finally {
+            await mode.closeLocalClient();
+        }
+    });
+    // Get certificate details
+    cert
+        .command('get <id>')
+        .description('Get certificate details')
+        .option('--json', 'Output as JSON')
+        .action(async (id, options) => {
+        const spinner = ora('Fetching certificate...').start();
+        try {
+            const result = await mode.apiGet(`/v1/certificates/${id}`);
+            spinner.stop();
+            if (options.json) {
+                output.json(result);
+                return;
+            }
+            console.log();
+            console.log(`ID:          ${result.id}`);
+            console.log(`Alias:       ${result.alias}`);
+            console.log(`Kind:        ${result.kind}`);
+            console.log(`Client ID:   ${result.clientId}`);
+            console.log(`Client:      ${result.clientName}`);
+            console.log();
+            console.log('Certificate Details:');
+            console.log(`  Subject:   ${result.subjectCn}`);
+            console.log(`  Issuer:    ${result.issuerCn}`);
+            console.log(`  Serial:    ${result.fingerprintSha256.substring(0, 32)}...`);
+            console.log(`  Not Before: ${new Date(result.notBefore).toLocaleString()}`);
+            console.log(`  Not After:  ${new Date(result.notAfter).toLocaleString()}`);
+            console.log(`  Status:    ${formatStatus(result.status)}`);
+            console.log(`  Days Left: ${formatDaysLeft(result.daysUntilExpiry)}`);
+            console.log();
+            console.log('Bundle Info:');
+            console.log(`  Has Private Key: ${result.hasPrivateKey ? 'Yes' : 'No'}`);
+            console.log(`  Lifecycle:       Enabled`); // All certs in certificates table have lifecycle enabled
+            console.log();
+            console.log('Metadata:');
+            console.log(`  Version:   ${result.version}`);
+            console.log(`  Created:   ${new Date(result.createdAt).toLocaleString()}`);
+            console.log(`  Updated:   ${new Date(result.updatedAt).toLocaleString()}`);
+            if (result.lastAccessedAt) {
+                console.log(`  Accessed:  ${new Date(result.lastAccessedAt).toLocaleString()}`);
+            }
+            console.log(`  Access Count: ${result.accessCount}`);
+            if (result.tags.length > 0) {
+                console.log(`  Tags:      ${result.tags.join(', ')}`);
+            }
+            console.log();
+        }
+        catch (err) {
+            spinner.fail('Failed to get certificate');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+        finally {
+            await mode.closeLocalClient();
+        }
+    });
+    // Decrypt certificate
+    cert
+        .command('decrypt <id>')
+        .description('Decrypt and download certificate')
+        .option('--output <file>', 'Write to file instead of stdout')
+        .option('--purpose <purpose>', 'Purpose for access (required)', 'CLI access')
+        .action(async (id, options) => {
+        const spinner = ora('Decrypting certificate...').start();
+        try {
+            const result = await mode.apiPost(`/v1/certificates/${id}/decrypt`, {
+                purpose: options.purpose,
+            });
+            spinner.stop();
+            const certData = Buffer.from(result.certificateData, 'base64').toString('utf-8');
+            if (options.output) {
+                const fs = await import('node:fs');
+                fs.writeFileSync(options.output, certData);
+                console.log(`Certificate written to ${options.output}`);
+            }
+            else {
+                console.log(certData);
+            }
+        }
+        catch (err) {
+            spinner.fail('Failed to decrypt certificate');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+        finally {
+            await mode.closeLocalClient();
+        }
+    });
+    // Get expiring certificates
+    cert
+        .command('expiring')
+        .description('List certificates expiring soon')
+        .option('--days <days>', 'Days until expiry (default: 30)', '30')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const spinner = ora('Checking expiring certificates...').start();
+        try {
+            const result = await mode.apiGet(`/v1/certificates/expiring?days=${options.days}`);
+            spinner.stop();
+            if (options.json) {
+                output.json(result);
+                return;
+            }
+            const items = Array.isArray(result) ? result : [];
+            if (items.length === 0) {
+                console.log(`No certificates expiring within ${options.days} days`);
+                return;
+            }
+            console.log(`\nCertificates expiring within ${options.days} days:\n`);
+            output.table(['Alias', 'Subject', 'Expires', 'Days Left', 'Contact'], items.map((cert) => [
+                cert.alias,
+                cert.subjectCn.length > 25 ? cert.subjectCn.substring(0, 22) + '...' : cert.subjectCn,
+                new Date(cert.notAfter).toLocaleDateString(),
+                formatDaysLeft(cert.daysUntilExpiry),
+                cert.contactEmail || '-',
+            ]));
+        }
+        catch (err) {
+            spinner.fail('Failed to check expiring certificates');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+        finally {
+            await mode.closeLocalClient();
+        }
+    });
+    // Get statistics
+    cert
+        .command('stats')
+        .description('Get certificate statistics')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const spinner = ora('Fetching statistics...').start();
+        try {
+            const result = await mode.apiGet('/v1/certificates/stats');
+            spinner.stop();
+            if (options.json) {
+                output.json(result);
+                return;
+            }
+            console.log();
+            console.log(`Total Certificates: ${result.total}`);
+            console.log();
+            console.log('By Status:');
+            for (const [status, count] of Object.entries(result.byStatus)) {
+                console.log(`  ${status}: ${count}`);
+            }
+            console.log();
+            console.log('By Kind:');
+            for (const [kind, count] of Object.entries(result.byKind)) {
+                console.log(`  ${kind}: ${count}`);
+            }
+            console.log();
+            console.log('Expiring:');
+            console.log(`  Within 7 days:  ${result.expiringIn7Days}`);
+            console.log(`  Within 30 days: ${result.expiringIn30Days}`);
+            console.log();
+        }
+        catch (err) {
+            spinner.fail('Failed to get statistics');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+        finally {
+            await mode.closeLocalClient();
+        }
+    });
+    // Store certificate (upload)
+    cert
+        .command('store')
+        .description('Store a new certificate')
+        .requiredOption('--file <path>', 'Certificate file path')
+        .requiredOption('--client-id <id>', 'Client identifier (e.g., NIF/CIF)')
+        .requiredOption('--kind <kind>', 'Certificate kind (AEAT, FNMT, CUSTOM, etc.)')
+        .requiredOption('--alias <alias>', 'Human-readable alias')
+        .option('--type <type>', 'Certificate type (PEM, P12, DER)', 'PEM')
+        .option('--purpose <purpose>', 'Purpose (SIGNING, AUTHENTICATION, ENCRYPTION)', 'SIGNING')
+        .option('--passphrase <pass>', 'Passphrase for P12 certificates')
+        .option('--client-name <name>', 'Client display name')
+        .option('--contact <email>', 'Contact email for notifications')
+        .option('--tags <tags>', 'Comma-separated tags')
+        .action(async (options) => {
+        const spinner = ora('Storing certificate...').start();
+        try {
+            const fs = await import('node:fs');
+            if (!fs.existsSync(options.file)) {
+                throw new Error(`File not found: ${options.file}`);
+            }
+            const fileData = fs.readFileSync(options.file);
+            const base64Data = fileData.toString('base64');
+            const body = {
+                clientId: options.clientId,
+                kind: options.kind,
+                alias: options.alias,
+                certificateData: base64Data,
+                certificateType: options.type,
+                purpose: options.purpose,
+            };
+            if (options.passphrase)
+                body.passphrase = options.passphrase;
+            if (options.clientName)
+                body.clientName = options.clientName;
+            if (options.contact)
+                body.contactEmail = options.contact;
+            if (options.tags)
+                body.tags = options.tags.split(',').map((t) => t.trim());
+            const result = await mode.apiPost('/v1/certificates', body);
+            spinner.stop();
+            console.log();
+            console.log(`Certificate stored successfully!`);
+            console.log();
+            console.log(`  ID:       ${result.id}`);
+            console.log(`  Alias:    ${result.alias}`);
+            console.log(`  Subject:  ${result.subjectCn}`);
+            console.log(`  Issuer:   ${result.issuerCn}`);
+            console.log(`  Expires:  ${new Date(result.notAfter).toLocaleDateString()}`);
+            console.log();
+        }
+        catch (err) {
+            spinner.fail('Failed to store certificate');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+        finally {
+            await mode.closeLocalClient();
+        }
+    });
+    // Rotate certificate
+    cert
+        .command('rotate <id>')
+        .description('Rotate/renew a certificate')
+        .requiredOption('--file <path>', 'New certificate file path')
+        .option('--type <type>', 'Certificate type (PEM, P12, DER)', 'PEM')
+        .option('--passphrase <pass>', 'Passphrase for P12 certificates')
+        .option('--reason <reason>', 'Reason for rotation', 'Certificate renewal')
+        .action(async (id, options) => {
+        const spinner = ora('Rotating certificate...').start();
+        try {
+            const fs = await import('node:fs');
+            if (!fs.existsSync(options.file)) {
+                throw new Error(`File not found: ${options.file}`);
+            }
+            const fileData = fs.readFileSync(options.file);
+            const base64Data = fileData.toString('base64');
+            const body = {
+                certificateData: base64Data,
+                certificateType: options.type,
+                reason: options.reason,
+            };
+            if (options.passphrase)
+                body.passphrase = options.passphrase;
+            const result = await mode.apiPost(`/v1/certificates/${id}/rotate`, body);
+            spinner.stop();
+            console.log();
+            console.log(`Certificate rotated successfully!`);
+            console.log();
+            console.log(`  ID:       ${result.id}`);
+            console.log(`  Version:  ${result.version}`);
+            console.log(`  Subject:  ${result.subjectCn}`);
+            console.log(`  Expires:  ${new Date(result.notAfter).toLocaleDateString()}`);
+            console.log();
+        }
+        catch (err) {
+            spinner.fail('Failed to rotate certificate');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+        finally {
+            await mode.closeLocalClient();
+        }
+    });
+    // Delete certificate
+    cert
+        .command('delete <id>')
+        .description('Delete a certificate')
+        .option('--force', 'Skip confirmation')
+        .action(async (id, options) => {
+        try {
+            if (!options.force) {
+                const readline = await import('node:readline');
+                const rl = readline.createInterface({
+                    input: process.stdin,
+                    output: process.stdout,
+                });
+                const answer = await new Promise((resolve) => {
+                    rl.question(`Are you sure you want to delete certificate ${id}? [y/N] `, resolve);
+                });
+                rl.close();
+                if (answer.toLowerCase() !== 'y') {
+                    console.log('Cancelled');
+                    return;
+                }
+            }
+            const spinner = ora('Deleting certificate...').start();
+            await mode.apiDelete(`/v1/certificates/${id}`);
+            spinner.stop();
+            console.log('Certificate deleted successfully');
+        }
+        catch (err) {
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+        finally {
+            await mode.closeLocalClient();
+        }
+    });
+}
+function formatStatus(status) {
+    switch (status) {
+        case 'ACTIVE':
+            return output.formatStatus('ok');
+        case 'EXPIRING_SOON':
+            return output.formatStatus('warning');
+        case 'EXPIRED':
+            return output.formatStatus('error');
+        case 'REVOKED':
+            return output.formatStatus('error');
+        default:
+            return status;
+    }
+}
+function formatDaysLeft(days) {
+    if (days < 0) {
+        return output.formatStatus('error') + ` (${Math.abs(days)}d ago)`;
+    }
+    if (days < 7) {
+        return output.formatStatus('error') + ` ${days}d`;
+    }
+    if (days < 30) {
+        return output.formatStatus('warning') + ` ${days}d`;
+    }
+    return `${days}d`;
+}
+//# sourceMappingURL=cert.js.map

package/dist/commands/cert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert.js","sourceRoot":"","sources":["../../src/commands/cert.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,kBAAkB,CAAC;AAQ3C,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAEzC,oBAAoB;IACpB,IAAI;SACD,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mBAAmB,CAAC;SAChC,MAAM,CAAC,mBAAmB,EAAE,mDAAmD,CAAC;SAChF,MAAM,CAAC,eAAe,EAAE,2CAA2C,CAAC;SACpE,MAAM,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;SACvE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,IAAI;gBAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAEtD,IAAI,QAAQ,GAAG,kBAAkB,CAAC;YAClC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,QAAQ,GAAG,kCAAkC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClE,CAAC;iBAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC7B,QAAQ,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAkD,QAAQ,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YAElE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,MAAM,CAAC,KAAK,CACV,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,EAC3E,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;gBACvB,IAAI,CAAC,KAAK;gBACV,IAAI,CAAC,IAAI;gBACT,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;gBACrF,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;gBACzB,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBACjC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE;gBAC5C,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC;aACrC,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,KAAK,iBAAiB,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,0BAA0B;IAC1B,IAAI;SACD,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,yBAAyB,CAAC;SACtC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAsB,oBAAoB,EAAE,EAAE,CAAC,CAAC;YAChF,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,gBAAgB,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,gBAAgB,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAE,yDAAyD;YACrG,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,sBAAsB;IACtB,IAAI;SACD,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,kCAAkC,CAAC;SAC/C,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;SAC5D,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,YAAY,CAAC;SAC5E,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,2BAA2B,CAAC,CAAC,KAAK,EAAE,CAAC;QAEzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAuB,oBAAoB,EAAE,UAAU,EAAE;gBACxF,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEjF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,0BAA0B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,4BAA4B;IAC5B,IAAI;SACD,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,iCAAiC,CAAC;SAC9C,MAAM,CAAC,eAAe,EAAE,iCAAiC,EAAE,IAAI,CAAC;SAChE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,mCAAmC,CAAC,CAAC,KAAK,EAAE,CAAC;QAEjE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAwB,kCAAkC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1G,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAElD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,mCAAmC,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC;YAEtE,MAAM,CAAC,KAAK,CACV,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,EACvD,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,IAAI,CAAC,KAAK;gBACV,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;gBACrF,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE;gBAC5C,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC;gBACpC,IAAI,CAAC,YAAY,IAAI,GAAG;aACzB,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACtD,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,iBAAiB;IACjB,IAAI;SACD,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAmB,wBAAwB,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1B,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,KAAK,KAAK,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6BAA6B;IAC7B,IAAI;SACD,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,yBAAyB,CAAC;SACtC,cAAc,CAAC,eAAe,EAAE,uBAAuB,CAAC;SACxD,cAAc,CAAC,kBAAkB,EAAE,mCAAmC,CAAC;SACvE,cAAc,CAAC,eAAe,EAAE,6CAA6C,CAAC;SAC9E,cAAc,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;SACzD,MAAM,CAAC,eAAe,EAAE,kCAAkC,EAAE,KAAK,CAAC;SAClE,MAAM,CAAC,qBAAqB,EAAE,+CAA+C,EAAE,SAAS,CAAC;SACzF,MAAM,CAAC,qBAAqB,EAAE,iCAAiC,CAAC;SAChE,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;SACrD,MAAM,CAAC,mBAAmB,EAAE,iCAAiC,CAAC;SAC9D,MAAM,CAAC,eAAe,EAAE,sBAAsB,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEtD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAEnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YAED,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAE/C,MAAM,IAAI,GAA4B;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,eAAe,EAAE,UAAU;gBAC3B,eAAe,EAAE,OAAO,CAAC,IAAI;gBAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC;YAEF,IAAI,OAAO,CAAC,UAAU;gBAAE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAC7D,IAAI,OAAO,CAAC,UAAU;gBAAE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAC7D,IAAI,OAAO,CAAC,OAAO;gBAAE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;YACzD,IAAI,OAAO,CAAC,IAAI;gBAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAEnF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAsB,kBAAkB,EAAE,IAAI,CAAC,CAAC;YACjF,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,qBAAqB;IACrB,IAAI;SACD,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,4BAA4B,CAAC;SACzC,cAAc,CAAC,eAAe,EAAE,2BAA2B,CAAC;SAC5D,MAAM,CAAC,eAAe,EAAE,kCAAkC,EAAE,KAAK,CAAC;SAClE,MAAM,CAAC,qBAAqB,EAAE,iCAAiC,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,qBAAqB,CAAC;SACzE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAEnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YAED,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAE/C,MAAM,IAAI,GAA4B;gBACpC,eAAe,EAAE,UAAU;gBAC3B,eAAe,EAAE,OAAO,CAAC,IAAI;gBAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC;YAEF,IAAI,OAAO,CAAC,UAAU;gBAAE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAE7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAsB,oBAAoB,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAC9F,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,qBAAqB;IACrB,IAAI;SACD,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;SACtC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;oBAClC,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;oBACnD,EAAE,CAAC,QAAQ,CAAC,+CAA+C,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;gBACpF,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,KAAK,EAAE,CAAC;gBAEX,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;oBACjC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBACzB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;YAEvD,MAAM,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,eAAe;YAClB,OAAO,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACxC,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC;IACpD,CAAC;IACD,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,IAAI,GAAG,CAAC;AACpB,CAAC"}

package/dist/commands/cluster.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function registerClusterCommands(program: Command): void;
+//# sourceMappingURL=cluster.d.ts.map

package/dist/commands/cluster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cluster.d.ts","sourceRoot":"","sources":["../../src/commands/cluster.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAwP9D"}

package/dist/commands/cluster.js

@@ -0,0 +1,228 @@
+import ora from 'ora';
+import { client } from '../lib/client.js';
+import * as mode from '../lib/mode.js';
+import { promptConfirm } from '../lib/prompts.js';
+import * as output from '../lib/output.js';
+export function registerClusterCommands(program) {
+    const cluster = program
+        .command('cluster')
+        .description('Cluster management commands');
+    // Cluster status
+    cluster
+        .command('status')
+        .description('Show cluster status')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const spinner = ora('Getting cluster status...').start();
+        try {
+            const status = await mode.clusterStatus();
+            spinner.stop();
+            if (options.json) {
+                output.json(status);
+                return;
+            }
+            output.section('Cluster Status');
+            output.keyValue({
+                'Mode': mode.getModeDescription(),
+                'Enabled': status.enabled,
+                'Node ID': status.nodeId,
+                'Is Leader': status.isLeader,
+                'Leader Node': status.leaderNodeId || 'None',
+            });
+            if (status.nodes && status.nodes.length > 0) {
+                output.section('Nodes');
+                output.table(['Node ID', 'Host', 'Port', 'Leader', 'Status', 'Last Heartbeat'], status.nodes.map(node => [
+                    node.nodeId,
+                    node.host,
+                    node.port,
+                    node.isLeader,
+                    node.isHealthy ? 'healthy' : 'unhealthy',
+                    node.lastHeartbeat ? output.formatRelativeTime(node.lastHeartbeat) : '-',
+                ]));
+            }
+            if (status.infrastructure) {
+                output.section('Infrastructure');
+                if (status.infrastructure.postgres) {
+                    console.log(`  PostgreSQL: ${output.formatStatus(status.infrastructure.postgres.status)}`);
+                    if (status.infrastructure.postgres.primary) {
+                        console.log(`    Primary: ${status.infrastructure.postgres.primary}`);
+                    }
+                }
+                if (status.infrastructure.redis) {
+                    console.log(`  Redis: ${output.formatStatus(status.infrastructure.redis.status)}`);
+                }
+                if (status.infrastructure.etcd) {
+                    console.log(`  etcd: ${output.formatStatus(status.infrastructure.etcd.status)}`);
+                }
+            }
+            console.log();
+        }
+        catch (err) {
+            spinner.fail('Failed to get cluster status');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+        finally {
+            await mode.closeLocalClient();
+        }
+    });
+    // Cluster takeover (API only)
+    cluster
+        .command('takeover')
+        .description('Force this node to become cluster leader')
+        .option('-y, --yes', 'Skip confirmation')
+        .action(async (options) => {
+        if (mode.getMode() === 'local') {
+            output.error('Cluster takeover requires API mode with authentication');
+            output.info('Use: znvault login first, or set ZNVAULT_API_KEY');
+            process.exit(1);
+        }
+        try {
+            if (!options.yes) {
+                const confirmed = await promptConfirm('Are you sure you want to force a leadership takeover?');
+                if (!confirmed) {
+                    output.info('Takeover cancelled');
+                    return;
+                }
+            }
+            const spinner = ora('Taking over leadership...').start();
+            try {
+                const result = await client.clusterTakeover();
+                spinner.succeed('Leadership takeover successful');
+                output.keyValue({
+                    'Success': result.success,
+                    'Message': result.message,
+                    'Node ID': result.nodeId,
+                });
+            }
+            catch (err) {
+                spinner.fail('Takeover failed');
+                throw err;
+            }
+        }
+        catch (err) {
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // Cluster promote (API only)
+    cluster
+        .command('promote <nodeId>')
+        .description('Promote a specific node to become leader')
+        .option('-y, --yes', 'Skip confirmation')
+        .action(async (nodeId, options) => {
+        if (mode.getMode() === 'local') {
+            output.error('Cluster promote requires API mode with authentication');
+            output.info('Use: znvault login first, or set ZNVAULT_API_KEY');
+            process.exit(1);
+        }
+        try {
+            if (!options.yes) {
+                const confirmed = await promptConfirm(`Are you sure you want to promote node '${nodeId}' to leader?`);
+                if (!confirmed) {
+                    output.info('Promotion cancelled');
+                    return;
+                }
+            }
+            const spinner = ora(`Promoting node ${nodeId}...`).start();
+            try {
+                const result = await client.clusterPromote(nodeId);
+                spinner.succeed('Node promoted successfully');
+                output.keyValue({
+                    'Success': result.success,
+                    'Message': result.message,
+                });
+            }
+            catch (err) {
+                spinner.fail('Promotion failed');
+                throw err;
+            }
+        }
+        catch (err) {
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // Cluster release (API only)
+    cluster
+        .command('release')
+        .description('Release leadership from this node')
+        .option('-y, --yes', 'Skip confirmation')
+        .action(async (options) => {
+        if (mode.getMode() === 'local') {
+            output.error('Cluster release requires API mode with authentication');
+            output.info('Use: znvault login first, or set ZNVAULT_API_KEY');
+            process.exit(1);
+        }
+        try {
+            if (!options.yes) {
+                const confirmed = await promptConfirm('Are you sure you want to release leadership?');
+                if (!confirmed) {
+                    output.info('Release cancelled');
+                    return;
+                }
+            }
+            const spinner = ora('Releasing leadership...').start();
+            try {
+                const result = await client.clusterRelease();
+                spinner.succeed('Leadership released');
+                output.keyValue({
+                    'Success': result.success,
+                    'Message': result.message,
+                });
+            }
+            catch (err) {
+                spinner.fail('Release failed');
+                throw err;
+            }
+        }
+        catch (err) {
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // Cluster maintenance (API only)
+    cluster
+        .command('maintenance <action>')
+        .description('Enable or disable maintenance mode (enable|disable)')
+        .option('-y, --yes', 'Skip confirmation')
+        .action(async (action, options) => {
+        if (mode.getMode() === 'local') {
+            output.error('Cluster maintenance requires API mode with authentication');
+            output.info('Use: znvault login first, or set ZNVAULT_API_KEY');
+            process.exit(1);
+        }
+        try {
+            if (!['enable', 'disable'].includes(action)) {
+                output.error('Action must be "enable" or "disable"');
+                process.exit(1);
+            }
+            const enable = action === 'enable';
+            if (!options.yes) {
+                const confirmed = await promptConfirm(`Are you sure you want to ${action} maintenance mode?`);
+                if (!confirmed) {
+                    output.info('Cancelled');
+                    return;
+                }
+            }
+            const spinner = ora(`${enable ? 'Enabling' : 'Disabling'} maintenance mode...`).start();
+            try {
+                const result = await client.clusterMaintenance(enable);
+                spinner.succeed(`Maintenance mode ${enable ? 'enabled' : 'disabled'}`);
+                output.keyValue({
+                    'Success': result.success,
+                    'Maintenance Mode': result.maintenanceMode,
+                });
+            }
+            catch (err) {
+                spinner.fail(`Failed to ${action} maintenance mode`);
+                throw err;
+            }
+        }
+        catch (err) {
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=cluster.js.map