@zincapp/znvault-cli 2.26.5 → 2.29.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commands/group.d.ts +3 -0
- package/dist/commands/group.d.ts.map +1 -0
- package/dist/commands/group.js +319 -0
- package/dist/commands/group.js.map +1 -0
- package/dist/commands/host/bootstrap-token.d.ts.map +1 -1
- package/dist/commands/host/bootstrap-token.js +28 -10
- package/dist/commands/host/bootstrap-token.js.map +1 -1
- package/dist/commands/ssh-ca/ca.d.ts +14 -0
- package/dist/commands/ssh-ca/ca.d.ts.map +1 -0
- package/dist/commands/ssh-ca/ca.js +169 -0
- package/dist/commands/ssh-ca/ca.js.map +1 -0
- package/dist/commands/ssh-ca/certificates.d.ts +7 -0
- package/dist/commands/ssh-ca/certificates.d.ts.map +1 -0
- package/dist/commands/ssh-ca/certificates.js +131 -0
- package/dist/commands/ssh-ca/certificates.js.map +1 -0
- package/dist/commands/ssh-ca/helpers.d.ts +37 -0
- package/dist/commands/ssh-ca/helpers.d.ts.map +1 -0
- package/dist/commands/ssh-ca/helpers.js +104 -0
- package/dist/commands/ssh-ca/helpers.js.map +1 -0
- package/dist/commands/ssh-ca/index.d.ts +7 -0
- package/dist/commands/ssh-ca/index.d.ts.map +1 -0
- package/dist/commands/ssh-ca/index.js +180 -0
- package/dist/commands/ssh-ca/index.js.map +1 -0
- package/dist/commands/ssh-ca/mappings.d.ts +11 -0
- package/dist/commands/ssh-ca/mappings.d.ts.map +1 -0
- package/dist/commands/ssh-ca/mappings.js +178 -0
- package/dist/commands/ssh-ca/mappings.js.map +1 -0
- package/dist/commands/ssh-ca/server-groups.d.ts +21 -0
- package/dist/commands/ssh-ca/server-groups.d.ts.map +1 -0
- package/dist/commands/ssh-ca/server-groups.js +252 -0
- package/dist/commands/ssh-ca/server-groups.js.map +1 -0
- package/dist/commands/ssh-ca/sign.d.ts +3 -0
- package/dist/commands/ssh-ca/sign.d.ts.map +1 -0
- package/dist/commands/ssh-ca/sign.js +79 -0
- package/dist/commands/ssh-ca/sign.js.map +1 -0
- package/dist/commands/ssh-ca/types.d.ts +135 -0
- package/dist/commands/ssh-ca/types.d.ts.map +1 -0
- package/dist/commands/ssh-ca/types.js +3 -0
- package/dist/commands/ssh-ca/types.js.map +1 -0
- package/dist/commands/ssh-ca.d.ts +7 -0
- package/dist/commands/ssh-ca.d.ts.map +1 -0
- package/dist/commands/ssh-ca.js +7 -0
- package/dist/commands/ssh-ca.js.map +1 -0
- package/dist/commands/ssh.d.ts +3 -0
- package/dist/commands/ssh.d.ts.map +1 -0
- package/dist/commands/ssh.js +814 -0
- package/dist/commands/ssh.js.map +1 -0
- package/dist/index.js +6 -0
- package/dist/index.js.map +1 -1
- package/dist/lib/client/tenants.d.ts.map +1 -1
- package/dist/lib/client/tenants.js +3 -6
- package/dist/lib/client/tenants.js.map +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1,135 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Type definitions for SSH CA commands
|
|
3
|
+
*/
|
|
4
|
+
export interface SSHCAStatus {
|
|
5
|
+
initialized: boolean;
|
|
6
|
+
publicKey?: string;
|
|
7
|
+
fingerprint?: string;
|
|
8
|
+
keyType?: string;
|
|
9
|
+
defaultTtlSeconds?: number;
|
|
10
|
+
maxTtlSeconds?: number;
|
|
11
|
+
allowedExtensions?: string[];
|
|
12
|
+
totalCertificatesIssued?: number;
|
|
13
|
+
activeCertificates?: number;
|
|
14
|
+
}
|
|
15
|
+
export interface SSHCA {
|
|
16
|
+
id: string;
|
|
17
|
+
publicKey: string;
|
|
18
|
+
fingerprint: string;
|
|
19
|
+
keyType: string;
|
|
20
|
+
defaultTtlSeconds: number;
|
|
21
|
+
maxTtlSeconds: number;
|
|
22
|
+
allowedExtensions: string[];
|
|
23
|
+
createdAt: string;
|
|
24
|
+
}
|
|
25
|
+
export interface PrincipalMapping {
|
|
26
|
+
id: string;
|
|
27
|
+
groupId: string;
|
|
28
|
+
groupName?: string;
|
|
29
|
+
groupDisplayName?: string;
|
|
30
|
+
principals: string[];
|
|
31
|
+
createdAt: string;
|
|
32
|
+
createdBy?: string;
|
|
33
|
+
}
|
|
34
|
+
export interface ServerGroup {
|
|
35
|
+
id: string;
|
|
36
|
+
name: string;
|
|
37
|
+
description?: string | null;
|
|
38
|
+
createdAt: string;
|
|
39
|
+
createdBy?: string;
|
|
40
|
+
}
|
|
41
|
+
export interface AccessRule {
|
|
42
|
+
linuxUser: string;
|
|
43
|
+
allowedPrincipals: string[];
|
|
44
|
+
}
|
|
45
|
+
export interface SSHCertificate {
|
|
46
|
+
id: string;
|
|
47
|
+
serial: string;
|
|
48
|
+
userId: string;
|
|
49
|
+
username?: string;
|
|
50
|
+
fingerprint: string;
|
|
51
|
+
principals: string[];
|
|
52
|
+
extensions?: string[];
|
|
53
|
+
validAfter: string;
|
|
54
|
+
validBefore: string;
|
|
55
|
+
revoked: boolean;
|
|
56
|
+
revokedAt?: string;
|
|
57
|
+
revokedBy?: string;
|
|
58
|
+
revocationReason?: string;
|
|
59
|
+
requestIp?: string;
|
|
60
|
+
createdAt: string;
|
|
61
|
+
}
|
|
62
|
+
export interface SignedCertificate {
|
|
63
|
+
certificate: string;
|
|
64
|
+
serial: string;
|
|
65
|
+
principals: string[];
|
|
66
|
+
validAfter: string;
|
|
67
|
+
validBefore: string;
|
|
68
|
+
fingerprint: string;
|
|
69
|
+
}
|
|
70
|
+
export interface InitCAOptions {
|
|
71
|
+
keyType?: string;
|
|
72
|
+
defaultTtl?: string;
|
|
73
|
+
maxTtl?: string;
|
|
74
|
+
extensions?: string;
|
|
75
|
+
json?: boolean;
|
|
76
|
+
}
|
|
77
|
+
export interface MappingCreateOptions {
|
|
78
|
+
groupId?: string;
|
|
79
|
+
principals?: string;
|
|
80
|
+
json?: boolean;
|
|
81
|
+
}
|
|
82
|
+
export interface MappingUpdateOptions {
|
|
83
|
+
principals?: string;
|
|
84
|
+
json?: boolean;
|
|
85
|
+
}
|
|
86
|
+
export interface ServerGroupCreateOptions {
|
|
87
|
+
name?: string;
|
|
88
|
+
description?: string;
|
|
89
|
+
json?: boolean;
|
|
90
|
+
}
|
|
91
|
+
export interface AccessRuleOptions {
|
|
92
|
+
linuxUser?: string;
|
|
93
|
+
principals?: string;
|
|
94
|
+
json?: boolean;
|
|
95
|
+
}
|
|
96
|
+
export interface SignOptions {
|
|
97
|
+
publicKey?: string;
|
|
98
|
+
file?: string;
|
|
99
|
+
ttl?: string;
|
|
100
|
+
/**
|
|
101
|
+
* Direct principal specification (admin override).
|
|
102
|
+
* Requires ssh:ca:admin permission OR admin crypto access.
|
|
103
|
+
* Bypasses SSO group → principal mapping resolution.
|
|
104
|
+
*/
|
|
105
|
+
principals?: string;
|
|
106
|
+
json?: boolean;
|
|
107
|
+
}
|
|
108
|
+
export interface CertListOptions {
|
|
109
|
+
activeOnly?: boolean;
|
|
110
|
+
revoked?: boolean;
|
|
111
|
+
userId?: string;
|
|
112
|
+
limit?: string;
|
|
113
|
+
json?: boolean;
|
|
114
|
+
}
|
|
115
|
+
export interface RevokeOptions {
|
|
116
|
+
reason?: string;
|
|
117
|
+
force?: boolean;
|
|
118
|
+
json?: boolean;
|
|
119
|
+
}
|
|
120
|
+
export interface MappingsListResponse {
|
|
121
|
+
items: PrincipalMapping[];
|
|
122
|
+
}
|
|
123
|
+
export interface ServerGroupsListResponse {
|
|
124
|
+
items: ServerGroup[];
|
|
125
|
+
}
|
|
126
|
+
export interface CertificatesListResponse {
|
|
127
|
+
items: SSHCertificate[];
|
|
128
|
+
pagination: {
|
|
129
|
+
total: number;
|
|
130
|
+
limit: number;
|
|
131
|
+
offset: number;
|
|
132
|
+
hasMore: boolean;
|
|
133
|
+
};
|
|
134
|
+
}
|
|
135
|
+
//# sourceMappingURL=types.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/commands/ssh-ca/types.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAGD,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAGD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,gBAAgB,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,UAAU,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/commands/ssh-ca/types.ts"],"names":[],"mappings":"AAAA,qCAAqC"}
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* SSH CA command re-exports for backward compatibility.
|
|
3
|
+
* The actual implementation has been modularized into src/commands/ssh-ca/
|
|
4
|
+
*/
|
|
5
|
+
export { registerSSHCACommands } from './ssh-ca/index.js';
|
|
6
|
+
export type { SSHCAStatus, SSHCA, PrincipalMapping, ServerGroup, AccessRule, SSHCertificate, SignedCertificate, } from './ssh-ca/types.js';
|
|
7
|
+
//# sourceMappingURL=ssh-ca.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ssh-ca.d.ts","sourceRoot":"","sources":["../../src/commands/ssh-ca.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAG1D,YAAY,EACV,WAAW,EACX,KAAK,EACL,gBAAgB,EAChB,WAAW,EACX,UAAU,EACV,cAAc,EACd,iBAAiB,GAClB,MAAM,mBAAmB,CAAC"}
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
// Path: src/commands/ssh-ca.ts
|
|
2
|
+
/**
|
|
3
|
+
* SSH CA command re-exports for backward compatibility.
|
|
4
|
+
* The actual implementation has been modularized into src/commands/ssh-ca/
|
|
5
|
+
*/
|
|
6
|
+
export { registerSSHCACommands } from './ssh-ca/index.js';
|
|
7
|
+
//# sourceMappingURL=ssh-ca.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ssh-ca.js","sourceRoot":"","sources":["../../src/commands/ssh-ca.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAE/B;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ssh.d.ts","sourceRoot":"","sources":["../../src/commands/ssh.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AA6KzC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAg2B1D"}
|