@zincapp/znvault-cli 2.22.6 → 2.24.0

package/dist/commands/host/types.d.ts

@@ -0,0 +1,197 @@
+/**
+ * Host configuration status
+ */
+export type HostStatus = 'active' | 'disabled' | 'pending';
+/**
+ * Host configuration from vault server
+ */
+export interface HostConfig {
+    id: string;
+    tenantId: string;
+    hostname: string;
+    description?: string;
+    config: {
+        targets?: CertTarget[];
+        secretTargets?: SecretTarget[];
+        plugins?: PluginConfig[];
+        exec?: ExecConfig;
+        globalReloadCmd?: string;
+        pollInterval?: number;
+        verbose?: boolean;
+        insecure?: boolean;
+    };
+    version: number;
+    managedKeyName?: string;
+    status: HostStatus;
+    lastPulledAt?: string;
+    lastPulledByAgentId?: string;
+    createdAt: string;
+    updatedAt: string;
+    createdBy: string;
+    updatedBy?: string;
+}
+/**
+ * Certificate target configuration
+ */
+export interface CertTarget {
+    certId: string;
+    name: string;
+    outputs: {
+        combined?: string;
+        cert?: string;
+        key?: string;
+        chain?: string;
+        fullchain?: string;
+    };
+    owner?: string;
+    mode?: string;
+    reloadCmd?: string;
+    healthCheckCmd?: string;
+}
+/**
+ * Secret target configuration
+ */
+export interface SecretTarget {
+    secretId: string;
+    name: string;
+    format: 'env' | 'json' | 'yaml' | 'raw' | 'template' | 'none';
+    output?: string;
+    key?: string;
+    templatePath?: string;
+    envPrefix?: string;
+    owner?: string;
+    mode?: string;
+    reloadCmd?: string;
+}
+/**
+ * Plugin configuration
+ */
+export interface PluginConfig {
+    package?: string;
+    path?: string;
+    enabled?: boolean;
+    config?: Record<string, unknown>;
+    autoUpdate?: {
+        enabled?: boolean;
+        channel?: string;
+    };
+}
+/**
+ * Exec mode configuration
+ */
+export interface ExecConfig {
+    command: string[];
+    secrets: ExecSecret[];
+    inheritEnv?: boolean;
+    restartOnChange?: boolean;
+    restartDelayMs?: number;
+    maxRestarts?: number;
+    restartWindowMs?: number;
+    envFile?: string;
+}
+/**
+ * Exec secret mapping
+ */
+export interface ExecSecret {
+    env: string;
+    secret?: string;
+    literal?: string;
+    apiKey?: string;
+    outputToFile?: boolean;
+}
+/**
+ * Host list response
+ */
+export interface HostListResponse {
+    items: HostConfig[];
+    pagination: {
+        page: number;
+        pageSize: number;
+        totalItems: number;
+        totalPages: number;
+    };
+}
+/**
+ * Host stats response
+ */
+export interface HostStatsResponse {
+    total: number;
+    byStatus: Record<HostStatus, number>;
+    recentlyPulled: number;
+    averageVersion: number;
+}
+/**
+ * Host config response (for agents)
+ */
+export interface HostAgentConfigResponse {
+    version: number;
+    tenantId: string;
+    config: HostConfig['config'];
+    managedKeyName: string | null;
+    vaultUrl: string;
+}
+/**
+ * Bootstrap token response
+ */
+export interface BootstrapTokenResponse {
+    token: string;
+    expiresAt: string;
+    bootstrapUrl: string;
+    hostConfigId: string;
+    hostname: string;
+}
+/**
+ * Sync response
+ */
+export interface SyncResponse {
+    success: boolean;
+    hostname: string;
+    version: number;
+    linkedAgents: number;
+    notifiedAgents: number;
+}
+/**
+ * Outdated agents response
+ */
+export interface OutdatedAgentsResponse {
+    hostname: string;
+    currentVersion: number;
+    agents: Array<{
+        agentId: string;
+        configVersion: number | null;
+        versionsBehind: number;
+    }>;
+}
+export interface ListOptions {
+    status?: string;
+    tenant?: string;
+    json?: boolean;
+    page?: number;
+    pageSize?: number;
+}
+export interface CreateOptions {
+    managedKey?: string;
+    description?: string;
+    configFile?: string;
+    json?: boolean;
+}
+export interface GetOptions {
+    json?: boolean;
+}
+export interface ConfigOptions {
+    edit?: boolean;
+    import?: string;
+    json?: boolean;
+}
+export interface DeleteOptions {
+    yes?: boolean;
+}
+export interface BootstrapTokenOptions {
+    expires?: string;
+    json?: boolean;
+}
+export interface SyncOptions {
+    force?: boolean;
+    json?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/commands/host/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/commands/host/types.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE;QACN,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;QACvB,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;QAC/B,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,UAAU,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,UAAU,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE;QACP,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,UAAU,GAAG,MAAM,CAAC;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;CACJ;AAMD,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB"}

package/dist/commands/host/types.js

@@ -0,0 +1,4 @@
+// Path: src/commands/host/types.ts
+// Type definitions for host management commands
+export {};
+//# sourceMappingURL=types.js.map

package/dist/commands/host/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/commands/host/types.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,gDAAgD"}

package/dist/commands/quarantine.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerQuarantineCommands(program: Command): void;
+//# sourceMappingURL=quarantine.d.ts.map

package/dist/commands/quarantine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine.d.ts","sourceRoot":"","sources":["../../src/commands/quarantine.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqDzC,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmbjE"}

package/dist/commands/quarantine.js

@@ -0,0 +1,400 @@
+// Path: src/commands/quarantine.ts
+import ora from 'ora';
+import { client } from '../lib/client.js';
+import { promptConfirm } from '../lib/prompts.js';
+import * as output from '../lib/output.js';
+function formatBackoffLevel(level) {
+    const labels = ['', '1m', '5m', '30m', '4h', '24h'];
+    return labels[level] ?? `Level ${level}`;
+}
+function formatDuration(seconds) {
+    if (seconds < 60)
+        return `${seconds}s`;
+    if (seconds < 3600)
+        return `${Math.floor(seconds / 60)}m`;
+    if (seconds < 86400)
+        return `${Math.floor(seconds / 3600)}h`;
+    return `${Math.floor(seconds / 86400)}d`;
+}
+export function registerQuarantineCommands(program) {
+    const quarantine = program
+        .command('quarantine')
+        .description('IP quarantine management commands');
+    // List quarantined IPs
+    quarantine
+        .command('list')
+        .description('List quarantined IPs')
+        .option('-s, --status <status>', 'Filter by status (active, released, expired)')
+        .option('-t, --tenant <tenant>', 'Filter by tenant ID')
+        .option('--include-expired', 'Include expired quarantines')
+        .option('--limit <number>', 'Number of entries to show', '50')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const spinner = ora('Fetching quarantined IPs...').start();
+        try {
+            const result = await client.listQuarantines({
+                status: options.status,
+                tenantId: options.tenant,
+                includeExpired: options.includeExpired,
+                limit: parseInt(options.limit, 10),
+            });
+            spinner.stop();
+            if (options.json) {
+                output.json(result);
+                return;
+            }
+            if (result.items.length === 0) {
+                output.info('No quarantined IPs found');
+                return;
+            }
+            output.table(['IP Address', 'Status', 'Failures', 'Level', 'Blocked Until', 'Tenant', 'Reason'], result.items.map(q => [
+                q.ipAddress,
+                output.formatStatus(q.status),
+                q.failureCount,
+                formatBackoffLevel(q.backoffLevel),
+                q.status === 'active' ? output.formatRelativeTime(q.blockedUntil) : '-',
+                q.tenantId ?? '-',
+                q.reason.substring(0, 30),
+            ]));
+            output.info(`Showing ${result.items.length} of ${result.pagination.total} quarantines`);
+        }
+        catch (err) {
+            spinner.fail('Failed to list quarantines');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // Get quarantine details
+    quarantine
+        .command('get <id>')
+        .description('Get quarantine details by ID')
+        .option('--json', 'Output as JSON')
+        .action(async (id, options) => {
+        const spinner = ora('Fetching quarantine details...').start();
+        try {
+            const q = await client.getQuarantine(id);
+            spinner.stop();
+            if (options.json) {
+                output.json(q);
+                return;
+            }
+            output.section('Quarantine Details');
+            output.keyValue({
+                'ID': q.id,
+                'IP Address': q.ipAddress,
+                'Status': output.formatStatus(q.status),
+                'Tenant': q.tenantId ?? 'N/A (System)',
+                'Failure Count': q.failureCount,
+                'Backoff Level': `${q.backoffLevel} (${formatBackoffLevel(q.backoffLevel)})`,
+                'Blocked Until': q.status === 'active' ? output.formatDate(q.blockedUntil) : '-',
+                'Reason': q.reason,
+                'First Failure': output.formatDate(q.firstFailureAt),
+                'Last Failure': output.formatDate(q.lastFailureAt),
+            });
+            if (q.lastFailurePath) {
+                output.section('Last Request');
+                output.keyValue({
+                    'Path': q.lastFailurePath,
+                    'Method': q.lastFailureMethod ?? '-',
+                    'User Agent': q.userAgent?.substring(0, 50) ?? '-',
+                    'API Key ID': q.apiKeyId ?? '-',
+                    'Agent ID': q.agentId ?? '-',
+                });
+            }
+            if (q.releasedAt) {
+                output.section('Release Info');
+                output.keyValue({
+                    'Released At': output.formatDate(q.releasedAt),
+                    'Released By': q.releasedBy ?? '-',
+                    'Release Reason': q.releaseReason ?? '-',
+                });
+            }
+            console.log();
+        }
+        catch (err) {
+            spinner.fail('Failed to get quarantine');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // Release a quarantine by ID
+    quarantine
+        .command('release <id> <reason>')
+        .description('Release a quarantine by ID')
+        .option('-y, --yes', 'Skip confirmation')
+        .option('--json', 'Output as JSON')
+        .action(async (id, reason, options) => {
+        try {
+            // Get quarantine info first
+            const q = await client.getQuarantine(id);
+            if (!options.yes) {
+                const confirmed = await promptConfirm(`Are you sure you want to release quarantine for IP ${q.ipAddress}?`);
+                if (!confirmed) {
+                    output.info('Cancelled');
+                    return;
+                }
+            }
+            const spinner = ora('Releasing quarantine...').start();
+            try {
+                const result = await client.releaseQuarantine(id, reason);
+                spinner.succeed('Quarantine released');
+                if (options.json) {
+                    output.json(result);
+                    return;
+                }
+                output.success(result.message);
+            }
+            catch (err) {
+                spinner.fail('Failed to release quarantine');
+                throw err;
+            }
+        }
+        catch (err) {
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // Release all quarantines for an IP
+    quarantine
+        .command('release-ip <ip> <reason>')
+        .description('Release all quarantines for an IP address')
+        .option('-t, --tenant <tenant>', 'Filter by tenant ID')
+        .option('-y, --yes', 'Skip confirmation')
+        .option('--json', 'Output as JSON')
+        .action(async (ip, reason, options) => {
+        try {
+            if (!options.yes) {
+                const confirmed = await promptConfirm(`Are you sure you want to release all quarantines for IP ${ip}?`);
+                if (!confirmed) {
+                    output.info('Cancelled');
+                    return;
+                }
+            }
+            const spinner = ora('Releasing IP quarantines...').start();
+            try {
+                const result = await client.releaseQuarantineIp(ip, reason, options.tenant);
+                spinner.succeed('Quarantine(s) released');
+                if (options.json) {
+                    output.json(result);
+                    return;
+                }
+                output.success(result.message);
+                if (result.releasedCount !== undefined) {
+                    output.info(`Released ${result.releasedCount} quarantine(s)`);
+                }
+            }
+            catch (err) {
+                spinner.fail('Failed to release IP quarantines');
+                throw err;
+            }
+        }
+        catch (err) {
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // Get failure history for an IP
+    quarantine
+        .command('history <ip>')
+        .description('Get failure history for an IP address')
+        .option('-t, --tenant <tenant>', 'Filter by tenant ID')
+        .option('--limit <number>', 'Number of entries to show', '100')
+        .option('--json', 'Output as JSON')
+        .action(async (ip, options) => {
+        const spinner = ora('Fetching failure history...').start();
+        try {
+            const result = await client.getQuarantineHistory(ip, {
+                limit: parseInt(options.limit, 10),
+                tenantId: options.tenant,
+            });
+            spinner.stop();
+            if (options.json) {
+                output.json(result);
+                return;
+            }
+            if (result.failures.length === 0) {
+                output.info(`No failure history found for IP ${ip}`);
+                return;
+            }
+            output.section(`Failure History for ${ip}`);
+            output.table(['Time', 'Type', 'Path', 'Method', 'Username', 'API Key', 'Quarantine'], result.failures.map(f => [
+                output.formatRelativeTime(f.ts),
+                f.failureType,
+                f.path?.substring(0, 25) ?? '-',
+                f.method ?? '-',
+                f.username ?? '-',
+                f.apiKeyPrefix ?? '-',
+                f.quarantineId ? 'Yes' : '-',
+            ]));
+            output.info(`Showing ${result.failures.length} entries`);
+        }
+        catch (err) {
+            spinner.fail('Failed to get failure history');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // Get quarantine statistics
+    quarantine
+        .command('stats')
+        .description('Get quarantine statistics')
+        .option('-t, --tenant <tenant>', 'Filter by tenant ID')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const spinner = ora('Fetching statistics...').start();
+        try {
+            const stats = await client.getQuarantineStats(options.tenant);
+            spinner.stop();
+            if (options.json) {
+                output.json(stats);
+                return;
+            }
+            output.section('Quarantine Statistics');
+            output.keyValue({
+                'Active Quarantines': stats.activeQuarantines,
+                'Quarantines (24h)': stats.totalQuarantines24h,
+                'Unique IPs (24h)': stats.uniqueIpsQuarantined24h,
+                'Failures (1h)': stats.failuresLast1h,
+                'Failures (24h)': stats.failuresLast24h,
+            });
+            if (stats.topFailingIps.length > 0) {
+                output.section('Top Failing IPs (24h)');
+                output.table(['IP Address', 'Failures'], stats.topFailingIps.map(ip => [ip.ip, ip.count]));
+            }
+            console.log();
+        }
+        catch (err) {
+            spinner.fail('Failed to get statistics');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // Get quarantine configuration
+    quarantine
+        .command('config')
+        .description('Get quarantine configuration')
+        .option('-t, --tenant <tenant>', 'Tenant ID (superadmin only)')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const spinner = ora('Fetching configuration...').start();
+        try {
+            const config = await client.getQuarantineConfig(options.tenant);
+            spinner.stop();
+            if (options.json) {
+                output.json(config);
+                return;
+            }
+            output.section('Quarantine Configuration');
+            output.keyValue({
+                'Enabled': config.enabled ? 'Yes' : 'No',
+                'Failures Before Quarantine': config.failuresBeforeQuarantine,
+                'Lockdown Threshold (IPs)': config.lockdownThresholdIps,
+                'Lockdown Window': formatDuration(config.lockdownThresholdWindowSeconds),
+                'Auto-Expire After': formatDuration(config.autoExpireAfterSeconds),
+            });
+            output.section('Backoff Durations');
+            output.keyValue({
+                'Level 1': formatDuration(config.backoffLevel1Seconds),
+                'Level 2': formatDuration(config.backoffLevel2Seconds),
+                'Level 3': formatDuration(config.backoffLevel3Seconds),
+                'Level 4': formatDuration(config.backoffLevel4Seconds),
+                'Level 5': formatDuration(config.backoffLevel5Seconds),
+            });
+            if (config.ipAllowlist.length > 0) {
+                output.section('IP Allowlist');
+                config.ipAllowlist.forEach(ip => output.info(`  ${ip}`));
+            }
+            console.log();
+        }
+        catch (err) {
+            spinner.fail('Failed to get configuration');
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    // Set quarantine configuration
+    quarantine
+        .command('set-config')
+        .description('Update quarantine configuration')
+        .option('-t, --tenant <tenant>', 'Tenant ID (superadmin only)')
+        .option('--enabled <bool>', 'Enable/disable quarantine')
+        .option('--failures <num>', 'Failures before quarantine')
+        .option('--lockdown-ips <num>', 'Number of IPs to trigger lockdown')
+        .option('--lockdown-window <sec>', 'Lockdown threshold window (seconds)')
+        .option('--level1 <sec>', 'Level 1 backoff (seconds)')
+        .option('--level2 <sec>', 'Level 2 backoff (seconds)')
+        .option('--level3 <sec>', 'Level 3 backoff (seconds)')
+        .option('--level4 <sec>', 'Level 4 backoff (seconds)')
+        .option('--level5 <sec>', 'Level 5 backoff (seconds)')
+        .option('--auto-expire <sec>', 'Auto-expire after (seconds)')
+        .option('-y, --yes', 'Skip confirmation')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        const updates = {};
+        if (options.enabled !== undefined) {
+            updates.enabled = options.enabled === 'true';
+        }
+        if (options.failures !== undefined) {
+            updates.failuresBeforeQuarantine = parseInt(options.failures, 10);
+        }
+        if (options.lockdownIps !== undefined) {
+            updates.lockdownThresholdIps = parseInt(options.lockdownIps, 10);
+        }
+        if (options.lockdownWindow !== undefined) {
+            updates.lockdownThresholdWindowSeconds = parseInt(options.lockdownWindow, 10);
+        }
+        if (options.level1 !== undefined) {
+            updates.backoffLevel1Seconds = parseInt(options.level1, 10);
+        }
+        if (options.level2 !== undefined) {
+            updates.backoffLevel2Seconds = parseInt(options.level2, 10);
+        }
+        if (options.level3 !== undefined) {
+            updates.backoffLevel3Seconds = parseInt(options.level3, 10);
+        }
+        if (options.level4 !== undefined) {
+            updates.backoffLevel4Seconds = parseInt(options.level4, 10);
+        }
+        if (options.level5 !== undefined) {
+            updates.backoffLevel5Seconds = parseInt(options.level5, 10);
+        }
+        if (options.autoExpire !== undefined) {
+            updates.autoExpireAfterSeconds = parseInt(options.autoExpire, 10);
+        }
+        if (Object.keys(updates).length === 0) {
+            output.error('No configuration options provided');
+            output.info('Use --help to see available options');
+            process.exit(1);
+        }
+        try {
+            if (!options.yes) {
+                output.section('Configuration Changes');
+                output.keyValue(updates);
+                const confirmed = await promptConfirm('Apply these changes?');
+                if (!confirmed) {
+                    output.info('Cancelled');
+                    return;
+                }
+            }
+            const spinner = ora('Updating configuration...').start();
+            try {
+                const result = await client.updateQuarantineConfig(updates, options.tenant);
+                spinner.succeed('Configuration updated');
+                if (options.json) {
+                    output.json(result);
+                    return;
+                }
+                output.success('Quarantine configuration updated successfully');
+            }
+            catch (err) {
+                spinner.fail('Failed to update configuration');
+                throw err;
+            }
+        }
+        catch (err) {
+            output.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=quarantine.js.map

package/dist/commands/quarantine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine.js","sourceRoot":"","sources":["../../src/commands/quarantine.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAGnC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,KAAK,MAAM,MAAM,kBAAkB,CAAC;AAqC3C,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,GAAG,CAAC;IACvC,IAAI,OAAO,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC;IAC1D,IAAI,OAAO,GAAG,KAAK;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;IAC7D,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,MAAM,UAAU,GAAG,OAAO;SACvB,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,mCAAmC,CAAC,CAAC;IAEpD,uBAAuB;IACvB,UAAU;SACP,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,uBAAuB,EAAE,8CAA8C,CAAC;SAC/E,MAAM,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;SACtD,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;SAC1D,MAAM,CAAC,kBAAkB,EAAE,2BAA2B,EAAE,IAAI,CAAC;SAC7D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAAoB,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;QAE3D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,MAAM;gBACxB,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;aACnC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YAED,MAAM,CAAC,KAAK,CACV,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAClF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpB,CAAC,CAAC,SAAS;gBACX,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC7B,CAAC,CAAC,YAAY;gBACd,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC;gBAClC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG;gBACvE,CAAC,CAAC,QAAQ,IAAI,GAAG;gBACjB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;aAC1B,CAAC,CACH,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,MAAM,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,cAAc,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC3C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,yBAAyB;IACzB,UAAU;SACP,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,OAA2B,EAAE,EAAE;QACxD,MAAM,OAAO,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAC,KAAK,EAAE,CAAC;QAE9D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACrC,MAAM,CAAC,QAAQ,CAAC;gBACd,IAAI,EAAE,CAAC,CAAC,EAAE;gBACV,YAAY,EAAE,CAAC,CAAC,SAAS;gBACzB,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;gBACvC,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,cAAc;gBACtC,eAAe,EAAE,CAAC,CAAC,YAAY;gBAC/B,eAAe,EAAE,GAAG,CAAC,CAAC,YAAY,KAAK,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG;gBAC5E,eAAe,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG;gBAChF,QAAQ,EAAE,CAAC,CAAC,MAAM;gBAClB,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;gBACpD,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;aACnD,CAAC,CAAC;YAEH,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;gBACtB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC/B,MAAM,CAAC,QAAQ,CAAC;oBACd,MAAM,EAAE,CAAC,CAAC,eAAe;oBACzB,QAAQ,EAAE,CAAC,CAAC,iBAAiB,IAAI,GAAG;oBACpC,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG;oBAClD,YAAY,EAAE,CAAC,CAAC,QAAQ,IAAI,GAAG;oBAC/B,UAAU,EAAE,CAAC,CAAC,OAAO,IAAI,GAAG;iBAC7B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;gBACjB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC/B,MAAM,CAAC,QAAQ,CAAC;oBACd,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;oBAC9C,aAAa,EAAE,CAAC,CAAC,UAAU,IAAI,GAAG;oBAClC,gBAAgB,EAAE,CAAC,CAAC,aAAa,IAAI,GAAG;iBACzC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6BAA6B;IAC7B,UAAU;SACP,OAAO,CAAC,uBAAuB,CAAC;SAChC,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC;SACxC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,MAAc,EAAE,OAAuB,EAAE,EAAE;QACpE,IAAI,CAAC;YACH,4BAA4B;YAC5B,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAEzC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC,sDAAsD,CAAC,CAAC,SAAS,GAAG,CACrE,CAAC;gBACF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBACzB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;YAEvD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC1D,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;gBAEvC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpB,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBAC7C,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,oCAAoC;IACpC,UAAU;SACP,OAAO,CAAC,0BAA0B,CAAC;SACnC,WAAW,CAAC,2CAA2C,CAAC;SACxD,MAAM,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;SACtD,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC;SACxC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,MAAc,EAAE,OAA6C,EAAE,EAAE;QAC1F,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC,2DAA2D,EAAE,GAAG,CACjE,CAAC;gBACF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBACzB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;YAE3D,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC5E,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;gBAE1C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpB,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC/B,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBACvC,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,aAAa,gBAAgB,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBACjD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,gCAAgC;IAChC,UAAU;SACP,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;SACtD,MAAM,CAAC,kBAAkB,EAAE,2BAA2B,EAAE,KAAK,CAAC;SAC9D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,OAAuB,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;QAE3D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE;gBACnD,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;gBAClC,QAAQ,EAAE,OAAO,CAAC,MAAM;aACzB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;YAE5C,MAAM,CAAC,KAAK,CACV,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,EACvE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/B,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG;gBAC/B,CAAC,CAAC,MAAM,IAAI,GAAG;gBACf,CAAC,CAAC,QAAQ,IAAI,GAAG;gBACjB,CAAC,CAAC,YAAY,IAAI,GAAG;gBACrB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG;aAC7B,CAAC,CACH,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,QAAQ,CAAC,MAAM,UAAU,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,4BAA4B;IAC5B,UAAU;SACP,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAAqB,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEtD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC;gBACd,oBAAoB,EAAE,KAAK,CAAC,iBAAiB;gBAC7C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,kBAAkB,EAAE,KAAK,CAAC,uBAAuB;gBACjD,eAAe,EAAE,KAAK,CAAC,cAAc;gBACrC,gBAAgB,EAAE,KAAK,CAAC,eAAe;aACxC,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;gBACxC,MAAM,CAAC,KAAK,CACV,CAAC,YAAY,EAAE,UAAU,CAAC,EAC1B,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CACjD,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,+BAA+B;IAC/B,UAAU;SACP,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;SAC9D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAAsB,EAAE,EAAE;QACvC,MAAM,OAAO,GAAG,GAAG,CAAC,2BAA2B,CAAC,CAAC,KAAK,EAAE,CAAC;QAEzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChE,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;YAC3C,MAAM,CAAC,QAAQ,CAAC;gBACd,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBACxC,4BAA4B,EAAE,MAAM,CAAC,wBAAwB;gBAC7D,0BAA0B,EAAE,MAAM,CAAC,oBAAoB;gBACvD,iBAAiB,EAAE,cAAc,CAAC,MAAM,CAAC,8BAA8B,CAAC;gBACxE,mBAAmB,EAAE,cAAc,CAAC,MAAM,CAAC,sBAAsB,CAAC;aACnE,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC;gBACd,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,oBAAoB,CAAC;gBACtD,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,oBAAoB,CAAC;gBACtD,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,oBAAoB,CAAC;gBACtD,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,oBAAoB,CAAC;gBACtD,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,oBAAoB,CAAC;aACvD,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YAED,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,+BAA+B;IAC/B,UAAU;SACP,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,iCAAiC,CAAC;SAC9C,MAAM,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;SAC9D,MAAM,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;SACvD,MAAM,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;SACxD,MAAM,CAAC,sBAAsB,EAAE,mCAAmC,CAAC;SACnE,MAAM,CAAC,yBAAyB,EAAE,qCAAqC,CAAC;SACxE,MAAM,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;SACrD,MAAM,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;SACrD,MAAM,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;SACrD,MAAM,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;SACrD,MAAM,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;SACrD,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;SAC5D,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC;SACxC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAA8D,EAAE,EAAE;QAC/E,MAAM,OAAO,GAA4B,EAAE,CAAC;QAE5C,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,CAAC,wBAAwB,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,oBAAoB,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,CAAC,8BAA8B,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,oBAAoB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,oBAAoB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,oBAAoB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,oBAAoB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,oBAAoB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,CAAC,sBAAsB,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjB,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;gBACxC,MAAM,CAAC,QAAQ,CAAC,OAAoD,CAAC,CAAC;gBAEtE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,sBAAsB,CAAC,CAAC;gBAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBACzB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,2BAA2B,CAAC,CAAC,KAAK,EAAE,CAAC;YAEzD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC5E,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;gBAEzC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpB,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAC/C,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}