@zincapp/znvault-cli 2.29.0 → 2.29.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (269) hide show
  1. package/dist/commands/agent/direct/update-all.d.ts.map +1 -1
  2. package/dist/commands/agent/direct/update-all.js +13 -8
  3. package/dist/commands/agent/direct/update-all.js.map +1 -1
  4. package/dist/commands/agent/helpers.d.ts +3 -6
  5. package/dist/commands/agent/helpers.d.ts.map +1 -1
  6. package/dist/commands/agent/helpers.js +13 -21
  7. package/dist/commands/agent/helpers.js.map +1 -1
  8. package/dist/commands/apikey/helpers.d.ts +1 -2
  9. package/dist/commands/apikey/helpers.d.ts.map +1 -1
  10. package/dist/commands/apikey/helpers.js +2 -12
  11. package/dist/commands/apikey/helpers.js.map +1 -1
  12. package/dist/commands/backup/helpers.d.ts +1 -3
  13. package/dist/commands/backup/helpers.d.ts.map +1 -1
  14. package/dist/commands/backup/helpers.js +2 -23
  15. package/dist/commands/backup/helpers.js.map +1 -1
  16. package/dist/commands/device.d.ts.map +1 -1
  17. package/dist/commands/device.js +10 -6
  18. package/dist/commands/device.js.map +1 -1
  19. package/dist/commands/dynamic-secrets/helpers.d.ts +3 -2
  20. package/dist/commands/dynamic-secrets/helpers.d.ts.map +1 -1
  21. package/dist/commands/dynamic-secrets/helpers.js +6 -15
  22. package/dist/commands/dynamic-secrets/helpers.js.map +1 -1
  23. package/dist/commands/kms/crud.d.ts +6 -0
  24. package/dist/commands/kms/crud.d.ts.map +1 -0
  25. package/dist/commands/kms/crud.js +226 -0
  26. package/dist/commands/kms/crud.js.map +1 -0
  27. package/dist/commands/kms/crypto.d.ts +6 -0
  28. package/dist/commands/kms/crypto.d.ts.map +1 -0
  29. package/dist/commands/kms/crypto.js +190 -0
  30. package/dist/commands/kms/crypto.js.map +1 -0
  31. package/dist/commands/kms/helpers.d.ts +10 -0
  32. package/dist/commands/kms/helpers.d.ts.map +1 -0
  33. package/dist/commands/kms/helpers.js +44 -0
  34. package/dist/commands/kms/helpers.js.map +1 -0
  35. package/dist/commands/kms/index.d.ts +13 -0
  36. package/dist/commands/kms/index.d.ts.map +1 -0
  37. package/dist/commands/kms/index.js +18 -0
  38. package/dist/commands/kms/index.js.map +1 -0
  39. package/dist/commands/kms/lifecycle.d.ts +6 -0
  40. package/dist/commands/kms/lifecycle.d.ts.map +1 -0
  41. package/dist/commands/kms/lifecycle.js +124 -0
  42. package/dist/commands/kms/lifecycle.js.map +1 -0
  43. package/dist/commands/kms/types.d.ts +102 -0
  44. package/dist/commands/kms/types.d.ts.map +1 -0
  45. package/dist/commands/kms/types.js +3 -0
  46. package/dist/commands/kms/types.js.map +1 -0
  47. package/dist/commands/plugin/enable-disable.d.ts +6 -0
  48. package/dist/commands/plugin/enable-disable.d.ts.map +1 -0
  49. package/dist/commands/plugin/enable-disable.js +64 -0
  50. package/dist/commands/plugin/enable-disable.js.map +1 -0
  51. package/dist/commands/plugin/helpers.d.ts +63 -0
  52. package/dist/commands/plugin/helpers.d.ts.map +1 -0
  53. package/dist/commands/plugin/helpers.js +204 -0
  54. package/dist/commands/plugin/helpers.js.map +1 -0
  55. package/dist/commands/plugin/index.d.ts +10 -0
  56. package/dist/commands/plugin/index.d.ts.map +1 -0
  57. package/dist/commands/plugin/index.js +24 -0
  58. package/dist/commands/plugin/index.js.map +1 -0
  59. package/dist/commands/plugin/info.d.ts +6 -0
  60. package/dist/commands/plugin/info.d.ts.map +1 -0
  61. package/dist/commands/plugin/info.js +108 -0
  62. package/dist/commands/plugin/info.js.map +1 -0
  63. package/dist/commands/plugin/install.d.ts +6 -0
  64. package/dist/commands/plugin/install.d.ts.map +1 -0
  65. package/dist/commands/plugin/install.js +96 -0
  66. package/dist/commands/plugin/install.js.map +1 -0
  67. package/dist/commands/plugin/list.d.ts +6 -0
  68. package/dist/commands/plugin/list.d.ts.map +1 -0
  69. package/dist/commands/plugin/list.js +60 -0
  70. package/dist/commands/plugin/list.js.map +1 -0
  71. package/dist/commands/plugin/types.d.ts +37 -0
  72. package/dist/commands/plugin/types.d.ts.map +1 -0
  73. package/dist/commands/plugin/types.js +7 -0
  74. package/dist/commands/plugin/types.js.map +1 -0
  75. package/dist/commands/plugin/uninstall.d.ts +6 -0
  76. package/dist/commands/plugin/uninstall.d.ts.map +1 -0
  77. package/dist/commands/plugin/uninstall.js +50 -0
  78. package/dist/commands/plugin/uninstall.js.map +1 -0
  79. package/dist/commands/plugin/update.d.ts +6 -0
  80. package/dist/commands/plugin/update.d.ts.map +1 -0
  81. package/dist/commands/plugin/update.js +84 -0
  82. package/dist/commands/plugin/update.js.map +1 -0
  83. package/dist/commands/policy/attachments.d.ts.map +1 -1
  84. package/dist/commands/policy/attachments.js +14 -20
  85. package/dist/commands/policy/attachments.js.map +1 -1
  86. package/dist/commands/policy/crud.d.ts.map +1 -1
  87. package/dist/commands/policy/crud.js +13 -23
  88. package/dist/commands/policy/crud.js.map +1 -1
  89. package/dist/commands/policy/io.d.ts.map +1 -1
  90. package/dist/commands/policy/io.js +4 -5
  91. package/dist/commands/policy/io.js.map +1 -1
  92. package/dist/commands/policy/list.d.ts.map +1 -1
  93. package/dist/commands/policy/list.js +7 -8
  94. package/dist/commands/policy/list.js.map +1 -1
  95. package/dist/commands/quarantine.d.ts.map +1 -1
  96. package/dist/commands/quarantine.js +1 -9
  97. package/dist/commands/quarantine.js.map +1 -1
  98. package/dist/commands/role.d.ts.map +1 -1
  99. package/dist/commands/role.js +4 -10
  100. package/dist/commands/role.js.map +1 -1
  101. package/dist/commands/secret/helpers.d.ts +1 -2
  102. package/dist/commands/secret/helpers.d.ts.map +1 -1
  103. package/dist/commands/secret/helpers.js +2 -14
  104. package/dist/commands/secret/helpers.js.map +1 -1
  105. package/dist/commands/secret/list.d.ts.map +1 -1
  106. package/dist/commands/secret/list.js +3 -4
  107. package/dist/commands/secret/list.js.map +1 -1
  108. package/dist/commands/ssh/bookmark.d.ts +11 -0
  109. package/dist/commands/ssh/bookmark.d.ts.map +1 -0
  110. package/dist/commands/ssh/bookmark.js +210 -0
  111. package/dist/commands/ssh/bookmark.js.map +1 -0
  112. package/dist/commands/ssh/ca.d.ts +6 -0
  113. package/dist/commands/ssh/ca.d.ts.map +1 -0
  114. package/dist/commands/ssh/ca.js +162 -0
  115. package/dist/commands/ssh/ca.js.map +1 -0
  116. package/dist/commands/ssh/cert.d.ts +6 -0
  117. package/dist/commands/ssh/cert.d.ts.map +1 -0
  118. package/dist/commands/ssh/cert.js +303 -0
  119. package/dist/commands/ssh/cert.js.map +1 -0
  120. package/dist/commands/ssh/config.d.ts +6 -0
  121. package/dist/commands/ssh/config.d.ts.map +1 -0
  122. package/dist/commands/ssh/config.js +95 -0
  123. package/dist/commands/ssh/config.js.map +1 -0
  124. package/dist/commands/ssh/connect.d.ts +6 -0
  125. package/dist/commands/ssh/connect.d.ts.map +1 -0
  126. package/dist/commands/ssh/connect.js +219 -0
  127. package/dist/commands/ssh/connect.js.map +1 -0
  128. package/dist/commands/ssh/exec.d.ts +6 -0
  129. package/dist/commands/ssh/exec.d.ts.map +1 -0
  130. package/dist/commands/ssh/exec.js +218 -0
  131. package/dist/commands/ssh/exec.js.map +1 -0
  132. package/dist/commands/ssh/helpers.d.ts +46 -0
  133. package/dist/commands/ssh/helpers.d.ts.map +1 -0
  134. package/dist/commands/ssh/helpers.js +175 -0
  135. package/dist/commands/ssh/helpers.js.map +1 -0
  136. package/dist/commands/ssh/hosts.d.ts +6 -0
  137. package/dist/commands/ssh/hosts.d.ts.map +1 -0
  138. package/dist/commands/ssh/hosts.js +101 -0
  139. package/dist/commands/ssh/hosts.js.map +1 -0
  140. package/dist/commands/ssh/index.d.ts +20 -0
  141. package/dist/commands/ssh/index.d.ts.map +1 -0
  142. package/dist/commands/ssh/index.js +34 -0
  143. package/dist/commands/ssh/index.js.map +1 -0
  144. package/dist/commands/ssh/mapping.d.ts +6 -0
  145. package/dist/commands/ssh/mapping.d.ts.map +1 -0
  146. package/dist/commands/ssh/mapping.js +130 -0
  147. package/dist/commands/ssh/mapping.js.map +1 -0
  148. package/dist/commands/ssh/scp.d.ts +6 -0
  149. package/dist/commands/ssh/scp.d.ts.map +1 -0
  150. package/dist/commands/ssh/scp.js +219 -0
  151. package/dist/commands/ssh/scp.js.map +1 -0
  152. package/dist/commands/ssh/server-group.d.ts +6 -0
  153. package/dist/commands/ssh/server-group.d.ts.map +1 -0
  154. package/dist/commands/ssh/server-group.js +249 -0
  155. package/dist/commands/ssh/server-group.js.map +1 -0
  156. package/dist/commands/ssh/types.d.ts +150 -0
  157. package/dist/commands/ssh/types.d.ts.map +1 -0
  158. package/dist/commands/ssh/types.js +3 -0
  159. package/dist/commands/ssh/types.js.map +1 -0
  160. package/dist/commands/ssh-ca/helpers.d.ts +1 -8
  161. package/dist/commands/ssh-ca/helpers.d.ts.map +1 -1
  162. package/dist/commands/ssh-ca/helpers.js +2 -23
  163. package/dist/commands/ssh-ca/helpers.js.map +1 -1
  164. package/dist/commands/ssh-ca/index.js +1 -1
  165. package/dist/commands/ssh-ca/index.js.map +1 -1
  166. package/dist/commands/ssh-ca/types.d.ts +1 -1
  167. package/dist/commands/sso/crud.d.ts +6 -0
  168. package/dist/commands/sso/crud.d.ts.map +1 -0
  169. package/dist/commands/sso/crud.js +360 -0
  170. package/dist/commands/sso/crud.js.map +1 -0
  171. package/dist/commands/sso/helpers.d.ts +9 -0
  172. package/dist/commands/sso/helpers.d.ts.map +1 -0
  173. package/dist/commands/sso/helpers.js +13 -0
  174. package/dist/commands/sso/helpers.js.map +1 -0
  175. package/dist/commands/sso/index.d.ts +13 -0
  176. package/dist/commands/sso/index.d.ts.map +1 -0
  177. package/dist/commands/sso/index.js +16 -0
  178. package/dist/commands/sso/index.js.map +1 -0
  179. package/dist/commands/sso/types.d.ts +119 -0
  180. package/dist/commands/sso/types.d.ts.map +1 -0
  181. package/dist/commands/sso/types.js +3 -0
  182. package/dist/commands/sso/types.js.map +1 -0
  183. package/dist/commands/sso/users.d.ts +6 -0
  184. package/dist/commands/sso/users.d.ts.map +1 -0
  185. package/dist/commands/sso/users.js +128 -0
  186. package/dist/commands/sso/users.js.map +1 -0
  187. package/dist/commands/unseal.d.ts.map +1 -1
  188. package/dist/commands/unseal.js +10 -20
  189. package/dist/commands/unseal.js.map +1 -1
  190. package/dist/index.js +4 -4
  191. package/dist/index.js.map +1 -1
  192. package/dist/lib/cli-update.d.ts.map +1 -1
  193. package/dist/lib/cli-update.js +18 -14
  194. package/dist/lib/cli-update.js.map +1 -1
  195. package/dist/lib/client/http.d.ts +3 -1
  196. package/dist/lib/client/http.d.ts.map +1 -1
  197. package/dist/lib/client/http.js +41 -8
  198. package/dist/lib/client/http.js.map +1 -1
  199. package/dist/lib/config/autounseal.d.ts +4 -0
  200. package/dist/lib/config/autounseal.d.ts.map +1 -1
  201. package/dist/lib/config/autounseal.js +102 -6
  202. package/dist/lib/config/autounseal.js.map +1 -1
  203. package/dist/lib/config/credentials.d.ts.map +1 -1
  204. package/dist/lib/config/credentials.js +3 -2
  205. package/dist/lib/config/credentials.js.map +1 -1
  206. package/dist/lib/config/index.d.ts +2 -1
  207. package/dist/lib/config/index.d.ts.map +1 -1
  208. package/dist/lib/config/index.js +3 -1
  209. package/dist/lib/config/index.js.map +1 -1
  210. package/dist/lib/config/keychain.d.ts +27 -0
  211. package/dist/lib/config/keychain.d.ts.map +1 -0
  212. package/dist/lib/config/keychain.js +194 -0
  213. package/dist/lib/config/keychain.js.map +1 -0
  214. package/dist/lib/config/types.d.ts +12 -0
  215. package/dist/lib/config/types.d.ts.map +1 -1
  216. package/dist/lib/config/types.js +3 -2
  217. package/dist/lib/config/types.js.map +1 -1
  218. package/dist/lib/constants.d.ts +24 -0
  219. package/dist/lib/constants.d.ts.map +1 -1
  220. package/dist/lib/constants.js +34 -1
  221. package/dist/lib/constants.js.map +1 -1
  222. package/dist/lib/db/health.d.ts.map +1 -1
  223. package/dist/lib/db/health.js +14 -7
  224. package/dist/lib/db/health.js.map +1 -1
  225. package/dist/lib/debug.d.ts +17 -0
  226. package/dist/lib/debug.d.ts.map +1 -0
  227. package/dist/lib/debug.js +50 -0
  228. package/dist/lib/debug.js.map +1 -0
  229. package/dist/lib/format-helpers.d.ts +43 -0
  230. package/dist/lib/format-helpers.d.ts.map +1 -1
  231. package/dist/lib/format-helpers.js +85 -0
  232. package/dist/lib/format-helpers.js.map +1 -1
  233. package/dist/lib/local.d.ts.map +1 -1
  234. package/dist/lib/local.js +12 -8
  235. package/dist/lib/local.js.map +1 -1
  236. package/dist/lib/mode.d.ts.map +1 -1
  237. package/dist/lib/mode.js +2 -1
  238. package/dist/lib/mode.js.map +1 -1
  239. package/dist/lib/output.d.ts +10 -0
  240. package/dist/lib/output.d.ts.map +1 -1
  241. package/dist/lib/output.js +21 -0
  242. package/dist/lib/output.js.map +1 -1
  243. package/dist/services/auto-update-daemon.d.ts.map +1 -1
  244. package/dist/services/auto-update-daemon.js +10 -6
  245. package/dist/services/auto-update-daemon.js.map +1 -1
  246. package/dist/services/update-checker.d.ts.map +1 -1
  247. package/dist/services/update-checker.js +2 -1
  248. package/dist/services/update-checker.js.map +1 -1
  249. package/dist/services/update-installer.d.ts +8 -0
  250. package/dist/services/update-installer.d.ts.map +1 -1
  251. package/dist/services/update-installer.js +47 -18
  252. package/dist/services/update-installer.js.map +1 -1
  253. package/package.json +4 -4
  254. package/dist/commands/kms.d.ts +0 -3
  255. package/dist/commands/kms.d.ts.map +0 -1
  256. package/dist/commands/kms.js +0 -555
  257. package/dist/commands/kms.js.map +0 -1
  258. package/dist/commands/plugin.d.ts +0 -8
  259. package/dist/commands/plugin.d.ts.map +0 -1
  260. package/dist/commands/plugin.js +0 -637
  261. package/dist/commands/plugin.js.map +0 -1
  262. package/dist/commands/ssh.d.ts +0 -3
  263. package/dist/commands/ssh.d.ts.map +0 -1
  264. package/dist/commands/ssh.js +0 -814
  265. package/dist/commands/ssh.js.map +0 -1
  266. package/dist/commands/sso.d.ts +0 -3
  267. package/dist/commands/sso.d.ts.map +0 -1
  268. package/dist/commands/sso.js +0 -486
  269. package/dist/commands/sso.js.map +0 -1
@@ -0,0 +1,303 @@
1
+ // Path: src/commands/ssh/cert.ts
2
+ import ora from 'ora';
3
+ import { client } from '../../lib/client.js';
4
+ import { promptConfirm } from '../../lib/prompts.js';
5
+ import * as output from '../../lib/output.js';
6
+ import { getCurrentProfile } from '../../lib/config.js';
7
+ import { parseTtl, isExpired, buildTenantQuery, getDefaultKeyPath, getCertificatePath, parseCertificateInfo, formatRemainingTime, } from './helpers.js';
8
+ export function registerCertCommands(parent) {
9
+ const cert = parent
10
+ .command('cert')
11
+ .description('SSH certificate management');
12
+ // Local Certificate Status
13
+ cert
14
+ .command('status')
15
+ .description('Show local certificate status')
16
+ .option('-i, --identity <file>', 'Path to SSH private key')
17
+ .option('--json', 'Output as JSON')
18
+ .action(async (options) => {
19
+ const fs = await import('fs');
20
+ const path = await import('path');
21
+ const profile = getCurrentProfile();
22
+ try {
23
+ // Find key
24
+ let keyPath;
25
+ if (options.identity) {
26
+ keyPath = path.resolve(options.identity.replace(/^~/, process.env.HOME ?? ''));
27
+ }
28
+ else if (profile.sshIdentity && fs.existsSync(profile.sshIdentity)) {
29
+ keyPath = profile.sshIdentity;
30
+ }
31
+ else {
32
+ const defaultKey = await getDefaultKeyPath();
33
+ if (!defaultKey) {
34
+ output.error('No SSH key found');
35
+ output.info('Generate one with: ssh-keygen -t ed25519');
36
+ process.exit(1);
37
+ }
38
+ keyPath = defaultKey;
39
+ }
40
+ const certPath = await getCertificatePath(keyPath);
41
+ const certExists = fs.existsSync(certPath);
42
+ if (!certExists) {
43
+ if (options.json) {
44
+ output.json({ exists: false, path: certPath, keyPath });
45
+ return;
46
+ }
47
+ output.section('Certificate Status');
48
+ output.keyValue({
49
+ 'Key': keyPath,
50
+ 'Certificate': certPath,
51
+ 'Status': '✗ No certificate',
52
+ });
53
+ console.log();
54
+ output.info('Sign your key: znvault ssh connect <host> --force-sign');
55
+ output.info('Or: znvault ssh cert sign ~/.ssh/id_ed25519.pub -o ~/.ssh/id_ed25519-cert.pub');
56
+ return;
57
+ }
58
+ // Parse certificate details
59
+ const info = await parseCertificateInfo(certPath);
60
+ if (options.json) {
61
+ output.json({
62
+ exists: true,
63
+ path: certPath,
64
+ keyPath,
65
+ valid: info.valid,
66
+ principals: info.principals,
67
+ validAfter: info.validAfter?.toISOString(),
68
+ validBefore: info.validBefore?.toISOString(),
69
+ fingerprint: info.fingerprint,
70
+ keyId: info.keyId,
71
+ serial: info.serial,
72
+ remainingTime: info.validBefore ? formatRemainingTime(info.validBefore) : null,
73
+ });
74
+ return;
75
+ }
76
+ output.section('Certificate Status');
77
+ output.keyValue({
78
+ 'Key': keyPath,
79
+ 'Certificate': certPath,
80
+ 'Status': info.valid ? '✓ Valid' : '✗ Expired',
81
+ 'Principals': info.principals.length > 0 ? info.principals.join(', ') : '-',
82
+ 'Valid From': info.validAfter ? output.formatDate(info.validAfter.toISOString()) : '-',
83
+ 'Valid Until': info.validBefore ? output.formatDate(info.validBefore.toISOString()) : '-',
84
+ 'Remaining': info.validBefore ? formatRemainingTime(info.validBefore) : '-',
85
+ 'Fingerprint': info.fingerprint ?? '-',
86
+ 'Key ID': info.keyId ?? '-',
87
+ 'Serial': info.serial ?? '-',
88
+ });
89
+ if (!info.valid) {
90
+ console.log();
91
+ output.warn('Certificate is expired or expiring soon');
92
+ output.info('Re-sign with: znvault ssh connect <host> --force-sign');
93
+ }
94
+ }
95
+ catch (err) {
96
+ output.error(err instanceof Error ? err.message : String(err));
97
+ process.exit(1);
98
+ }
99
+ });
100
+ // Sign Public Key
101
+ cert
102
+ .command('sign <publicKeyFile>')
103
+ .description('Sign SSH public key to create certificate')
104
+ .option('--tenant <id>', 'Tenant ID (superadmin only)')
105
+ .option('--ttl <ttl>', 'Certificate TTL (e.g., 8h, 1d)')
106
+ .option('-o, --output <file>', 'Output certificate to file')
107
+ .option('--json', 'Output as JSON')
108
+ .action(async (publicKeyFile, options) => {
109
+ const spinner = ora('Signing certificate...').start();
110
+ try {
111
+ const fs = await import('fs');
112
+ const path = await import('path');
113
+ // Read public key
114
+ const publicKeyPath = path.resolve(publicKeyFile);
115
+ if (!fs.existsSync(publicKeyPath)) {
116
+ spinner.fail('Public key file not found');
117
+ output.error(`File not found: ${publicKeyPath}`);
118
+ process.exit(1);
119
+ }
120
+ const publicKey = fs.readFileSync(publicKeyPath, 'utf8').trim();
121
+ const query = buildTenantQuery(options.tenant);
122
+ const body = { publicKey };
123
+ if (options.ttl) {
124
+ body.ttlSeconds = parseTtl(options.ttl);
125
+ }
126
+ const result = await client.post(`/v1/ssh/sign${query}`, body);
127
+ spinner.succeed('Certificate signed successfully');
128
+ // Write certificate to file if requested
129
+ if (options.output) {
130
+ const outputPath = path.resolve(options.output);
131
+ fs.writeFileSync(outputPath, result.certificate + '\n');
132
+ output.success(`Certificate written to ${outputPath}`);
133
+ }
134
+ if (options.json) {
135
+ output.json(result);
136
+ return;
137
+ }
138
+ output.section('Certificate Details');
139
+ output.keyValue({
140
+ 'Serial': result.serial,
141
+ 'Fingerprint': result.fingerprint,
142
+ 'Principals': result.principals.join(', '),
143
+ 'Valid From': output.formatDate(result.validAfter),
144
+ 'Valid Until': output.formatDate(result.validBefore),
145
+ });
146
+ if (!options.output) {
147
+ output.section('Certificate');
148
+ console.log(result.certificate);
149
+ console.log();
150
+ output.info('Save this certificate alongside your private key (e.g., id_ed25519-cert.pub)');
151
+ }
152
+ }
153
+ catch (err) {
154
+ spinner.fail('Failed to sign certificate');
155
+ output.error(err instanceof Error ? err.message : String(err));
156
+ process.exit(1);
157
+ }
158
+ });
159
+ // List Certificates
160
+ cert
161
+ .command('list')
162
+ .description('List issued certificates')
163
+ .option('--tenant <id>', 'Tenant ID (superadmin only)')
164
+ .option('--limit <n>', 'Maximum number of results', '50')
165
+ .option('--offset <n>', 'Offset for pagination', '0')
166
+ .option('--active-only', 'Show only non-expired certificates')
167
+ .option('--revoked', 'Show only revoked certificates')
168
+ .option('--user-id <id>', 'Filter by user ID')
169
+ .option('--json', 'Output as JSON')
170
+ .action(async (options) => {
171
+ const spinner = ora('Fetching certificates...').start();
172
+ try {
173
+ const params = new URLSearchParams();
174
+ if (options.tenant)
175
+ params.set('tenantId', options.tenant);
176
+ if (options.limit)
177
+ params.set('limit', options.limit);
178
+ if (options.offset)
179
+ params.set('offset', options.offset);
180
+ if (options.activeOnly)
181
+ params.set('activeOnly', 'true');
182
+ if (options.revoked !== undefined)
183
+ params.set('revoked', String(options.revoked));
184
+ if (options.userId)
185
+ params.set('userId', options.userId);
186
+ const queryString = params.toString();
187
+ const response = await client.get(`/v1/ssh/certificates${queryString ? `?${queryString}` : ''}`);
188
+ spinner.stop();
189
+ if (options.json) {
190
+ output.json(response);
191
+ return;
192
+ }
193
+ if (response.items.length === 0) {
194
+ output.info('No certificates found');
195
+ return;
196
+ }
197
+ output.table(['Serial', 'User', 'Principals', 'Valid Until', 'Status'], response.items.map(certItem => [
198
+ certItem.serial.substring(0, 16) + (certItem.serial.length > 16 ? '...' : ''),
199
+ certItem.username ?? certItem.userId.substring(0, 8),
200
+ certItem.principals.slice(0, 3).join(', ') + (certItem.principals.length > 3 ? '...' : ''),
201
+ output.formatDate(certItem.validBefore),
202
+ certItem.revoked
203
+ ? '✗ Revoked'
204
+ : isExpired(certItem.validBefore)
205
+ ? '○ Expired'
206
+ : '✓ Active',
207
+ ]));
208
+ output.info(`Total: ${response.pagination.total} certificate(s)`);
209
+ if (response.pagination.hasMore) {
210
+ output.info(`Use --offset to see more results`);
211
+ }
212
+ }
213
+ catch (err) {
214
+ spinner.fail('Failed to list certificates');
215
+ output.error(err instanceof Error ? err.message : String(err));
216
+ process.exit(1);
217
+ }
218
+ });
219
+ // Get Certificate
220
+ cert
221
+ .command('get <id>')
222
+ .description('Get certificate details')
223
+ .option('--tenant <id>', 'Tenant ID (superadmin only)')
224
+ .option('--json', 'Output as JSON')
225
+ .action(async (id, options) => {
226
+ const spinner = ora('Fetching certificate...').start();
227
+ try {
228
+ const query = buildTenantQuery(options.tenant);
229
+ const certItem = await client.get(`/v1/ssh/certificates/${encodeURIComponent(id)}${query}`);
230
+ spinner.stop();
231
+ if (options.json) {
232
+ output.json(certItem);
233
+ return;
234
+ }
235
+ output.section('Certificate Details');
236
+ output.keyValue({
237
+ 'ID': certItem.id,
238
+ 'Serial': certItem.serial,
239
+ 'User ID': certItem.userId,
240
+ 'Fingerprint': certItem.fingerprint,
241
+ 'Principals': certItem.principals.join(', '),
242
+ 'Extensions': certItem.extensions?.join(', ') ?? '-',
243
+ 'Valid From': output.formatDate(certItem.validAfter),
244
+ 'Valid Until': output.formatDate(certItem.validBefore),
245
+ 'Status': certItem.revoked
246
+ ? '✗ Revoked'
247
+ : isExpired(certItem.validBefore)
248
+ ? '○ Expired'
249
+ : '✓ Active',
250
+ 'Request IP': certItem.requestIp ?? '-',
251
+ 'Created': output.formatDate(certItem.createdAt),
252
+ });
253
+ if (certItem.revoked) {
254
+ output.section('Revocation');
255
+ output.keyValue({
256
+ 'Revoked At': certItem.revokedAt ? output.formatDate(certItem.revokedAt) : '-',
257
+ 'Revoked By': certItem.revokedBy ?? '-',
258
+ 'Reason': certItem.revocationReason ?? '-',
259
+ });
260
+ }
261
+ }
262
+ catch (err) {
263
+ spinner.fail('Failed to get certificate');
264
+ output.error(err instanceof Error ? err.message : String(err));
265
+ process.exit(1);
266
+ }
267
+ });
268
+ // Revoke Certificate
269
+ cert
270
+ .command('revoke <id>')
271
+ .description('Revoke a certificate')
272
+ .option('--tenant <id>', 'Tenant ID (superadmin only)')
273
+ .option('--reason <reason>', 'Revocation reason')
274
+ .option('-y, --yes', 'Skip confirmation')
275
+ .action(async (id, options) => {
276
+ try {
277
+ const query = buildTenantQuery(options.tenant);
278
+ if (!options.yes) {
279
+ const confirmed = await promptConfirm(`Revoke certificate ${id}?`);
280
+ if (!confirmed) {
281
+ output.info('Revoke cancelled');
282
+ return;
283
+ }
284
+ }
285
+ const spinner = ora('Revoking certificate...').start();
286
+ try {
287
+ await client.post(`/v1/ssh/certificates/${encodeURIComponent(id)}/revoke${query}`, {
288
+ reason: options.reason,
289
+ });
290
+ spinner.succeed('Certificate revoked successfully');
291
+ }
292
+ catch (err) {
293
+ spinner.fail('Failed to revoke certificate');
294
+ throw err;
295
+ }
296
+ }
297
+ catch (err) {
298
+ output.error(err instanceof Error ? err.message : String(err));
299
+ process.exit(1);
300
+ }
301
+ });
302
+ }
303
+ //# sourceMappingURL=cert.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cert.js","sourceRoot":"","sources":["../../../src/commands/ssh/cert.ts"],"names":[],"mappings":"AAAA,iCAAiC;AAOjC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,MAAM,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EACL,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,MAAM,IAAI,GAAG,MAAM;SAChB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAE7C,2BAA2B;IAC3B,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,uBAAuB,EAAE,yBAAyB,CAAC;SAC1D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAA8C,EAAE,EAAE;QAC/D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,WAAW;YACX,IAAI,OAAe,CAAC;YACpB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YACjF,CAAC;iBAAM,IAAI,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAC;gBAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;oBACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,OAAO,GAAG,UAAU,CAAC;YACvB,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAE3C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBACxD,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;gBACrC,MAAM,CAAC,QAAQ,CAAC;oBACd,KAAK,EAAE,OAAO;oBACd,aAAa,EAAE,QAAQ;oBACvB,QAAQ,EAAE,kBAAkB;iBAC7B,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;gBAC7F,OAAO;YACT,CAAC;YAED,4BAA4B;YAC5B,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAElD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,QAAQ;oBACd,OAAO;oBACP,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE;oBAC1C,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE;oBAC5C,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;iBAC/E,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACrC,MAAM,CAAC,QAAQ,CAAC;gBACd,KAAK,EAAE,OAAO;gBACd,aAAa,EAAE,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;gBAC9C,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG;gBAC3E,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG;gBACtF,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG;gBACzF,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG;gBAC3E,aAAa,EAAE,IAAI,CAAC,WAAW,IAAI,GAAG;gBACtC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG;gBAC3B,QAAQ,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG;aAC7B,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,kBAAkB;IAClB,IAAI;SACD,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,2CAA2C,CAAC;SACxD,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,aAAa,EAAE,gCAAgC,CAAC;SACvD,MAAM,CAAC,qBAAqB,EAAE,4BAA4B,CAAC;SAC3D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,aAAqB,EAAE,OAAoB,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEtD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAElC,kBAAkB;YAClB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAE/C,MAAM,IAAI,GAA+C,EAAE,SAAS,EAAE,CAAC;YACvE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAa,eAAe,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;YAC3E,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;YAEnD,yCAAyC;YACzC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;gBACxD,MAAM,CAAC,OAAO,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC;gBACd,QAAQ,EAAE,MAAM,CAAC,MAAM;gBACvB,aAAa,EAAE,MAAM,CAAC,WAAW;gBACjC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1C,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC;gBAClD,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC;aACrD,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAChC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC3C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,oBAAoB;IACpB,IAAI;SACD,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,aAAa,EAAE,2BAA2B,EAAE,IAAI,CAAC;SACxD,MAAM,CAAC,cAAc,EAAE,uBAAuB,EAAE,GAAG,CAAC;SACpD,MAAM,CAAC,eAAe,EAAE,oCAAoC,CAAC;SAC7D,MAAM,CAAC,WAAW,EAAE,gCAAgC,CAAC;SACrD,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;SAC7C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAAwB,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,GAAG,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,OAAO,CAAC,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,OAAO,CAAC,UAAU;gBAAE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACzD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAClF,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAEzD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,uBAAuB,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9D,CAAC;YACF,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,MAAM,CAAC,KAAK,CACV,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,CAAC,EACzD,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpD,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1F,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACvC,QAAQ,CAAC,OAAO;oBACd,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;wBAC/B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU;aACjB,CAAC,CACH,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,UAAU,CAAC,KAAK,iBAAiB,CAAC,CAAC;YAClE,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,kBAAkB;IAClB,IAAI;SACD,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,yBAAyB,CAAC;SACtC,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,OAAmB,EAAE,EAAE;QAChD,MAAM,OAAO,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAc,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;YACzG,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YAED,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC;gBACd,IAAI,EAAE,QAAQ,CAAC,EAAE;gBACjB,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,SAAS,EAAE,QAAQ,CAAC,MAAM;gBAC1B,aAAa,EAAE,QAAQ,CAAC,WAAW;gBACnC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5C,YAAY,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG;gBACpD,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACpD,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACtD,QAAQ,EAAE,QAAQ,CAAC,OAAO;oBACxB,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;wBAC/B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU;gBAChB,YAAY,EAAE,QAAQ,CAAC,SAAS,IAAI,GAAG;gBACvC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;aACjD,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC7B,MAAM,CAAC,QAAQ,CAAC;oBACd,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG;oBAC9E,YAAY,EAAE,QAAQ,CAAC,SAAS,IAAI,GAAG;oBACvC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,IAAI,GAAG;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,qBAAqB;IACrB,IAAI;SACD,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;SAChD,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC;SACxC,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,OAA4D,EAAE,EAAE;QACzF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAE/C,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;gBACnE,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;oBAChC,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;YAEvD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,UAAU,KAAK,EAAE,EAAE;oBACjF,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;gBACH,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBAC7C,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
@@ -0,0 +1,6 @@
1
+ /**
2
+ * SSH local configuration commands
3
+ */
4
+ import type { Command } from 'commander';
5
+ export declare function registerConfigCommands(parent: Command): void;
6
+ //# sourceMappingURL=config.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/commands/ssh/config.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAyG5D"}
@@ -0,0 +1,95 @@
1
+ // Path: src/commands/ssh/config.ts
2
+ import * as output from '../../lib/output.js';
3
+ import { getCurrentProfile, saveProfile, getActiveProfileName } from '../../lib/config.js';
4
+ export function registerConfigCommands(parent) {
5
+ const config = parent
6
+ .command('config')
7
+ .description('Configure local SSH settings for this profile');
8
+ // Show Config
9
+ config
10
+ .command('show')
11
+ .description('Show current SSH configuration')
12
+ .option('--json', 'Output as JSON')
13
+ .action(async (options) => {
14
+ const profile = getCurrentProfile();
15
+ const profileName = getActiveProfileName();
16
+ const sshConfig = {
17
+ user: profile.sshUser ?? null,
18
+ identity: profile.sshIdentity ?? null,
19
+ };
20
+ if (options.json) {
21
+ output.json(sshConfig);
22
+ return;
23
+ }
24
+ output.section(`SSH Config (profile: ${profileName})`);
25
+ output.keyValue({
26
+ 'Default User': profile.sshUser ?? '(not set)',
27
+ 'Default Identity': profile.sshIdentity ?? '(auto-detect)',
28
+ });
29
+ if (!profile.sshUser) {
30
+ console.log();
31
+ output.info('Set default user: znvault ssh config set user sysadmin');
32
+ }
33
+ });
34
+ // Set Config
35
+ config
36
+ .command('set <key> <value>')
37
+ .description('Set SSH configuration value (user, identity)')
38
+ .action(async (key, value) => {
39
+ const profile = getCurrentProfile();
40
+ const profileName = getActiveProfileName();
41
+ switch (key.toLowerCase()) {
42
+ case 'user':
43
+ case 'username':
44
+ profile.sshUser = value;
45
+ saveProfile(profileName, profile);
46
+ output.success(`Default SSH user set to: ${value}`);
47
+ break;
48
+ case 'identity':
49
+ case 'key': {
50
+ // Resolve to absolute path
51
+ const path = await import('path');
52
+ const fs = await import('fs');
53
+ const resolvedPath = path.resolve(value.replace(/^~/, process.env.HOME ?? ''));
54
+ if (!fs.existsSync(resolvedPath)) {
55
+ output.warn(`Warning: Identity file not found: ${resolvedPath}`);
56
+ }
57
+ profile.sshIdentity = resolvedPath;
58
+ saveProfile(profileName, profile);
59
+ output.success(`Default SSH identity set to: ${resolvedPath}`);
60
+ break;
61
+ }
62
+ default:
63
+ output.error(`Unknown config key: ${key}`);
64
+ output.info('Valid keys: user, identity');
65
+ process.exit(1);
66
+ }
67
+ });
68
+ // Unset Config
69
+ config
70
+ .command('unset <key>')
71
+ .description('Clear SSH configuration value')
72
+ .action(async (key) => {
73
+ const profile = getCurrentProfile();
74
+ const profileName = getActiveProfileName();
75
+ switch (key.toLowerCase()) {
76
+ case 'user':
77
+ case 'username':
78
+ delete profile.sshUser;
79
+ saveProfile(profileName, profile);
80
+ output.success('Default SSH user cleared');
81
+ break;
82
+ case 'identity':
83
+ case 'key':
84
+ delete profile.sshIdentity;
85
+ saveProfile(profileName, profile);
86
+ output.success('Default SSH identity cleared');
87
+ break;
88
+ default:
89
+ output.error(`Unknown config key: ${key}`);
90
+ output.info('Valid keys: user, identity');
91
+ process.exit(1);
92
+ }
93
+ });
94
+ }
95
+ //# sourceMappingURL=config.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/commands/ssh/config.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAOnC,OAAO,KAAK,MAAM,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3F,MAAM,UAAU,sBAAsB,CAAC,MAAe;IACpD,MAAM,MAAM,GAAG,MAAM;SAClB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+CAA+C,CAAC,CAAC;IAEhE,cAAc;IACd,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,oBAAoB,EAAE,CAAC;QAE3C,MAAM,SAAS,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;YAC7B,QAAQ,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;SACtC,CAAC;QAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,wBAAwB,WAAW,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,CAAC;YACd,cAAc,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW;YAC9C,kBAAkB,EAAE,OAAO,CAAC,WAAW,IAAI,eAAe;SAC3D,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,aAAa;IACb,MAAM;SACH,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,KAAa,EAAE,EAAE;QAC3C,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,oBAAoB,EAAE,CAAC;QAE3C,QAAQ,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC;YACZ,KAAK,UAAU;gBACb,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;gBACxB,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;gBACpD,MAAM;YAER,KAAK,UAAU,CAAC;YAChB,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,2BAA2B;gBAC3B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;gBAE/E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,qCAAqC,YAAY,EAAE,CAAC,CAAC;gBACnE,CAAC;gBAED,OAAO,CAAC,WAAW,GAAG,YAAY,CAAC;gBACnC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,gCAAgC,YAAY,EAAE,CAAC,CAAC;gBAC/D,MAAM;YACR,CAAC;YAED;gBACE,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,eAAe;IACf,MAAM;SACH,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QAC5B,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,oBAAoB,EAAE,CAAC;QAE3C,QAAQ,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC;YACZ,KAAK,UAAU;gBACb,OAAO,OAAO,CAAC,OAAO,CAAC;gBACvB,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;gBAC3C,MAAM;YAER,KAAK,UAAU,CAAC;YAChB,KAAK,KAAK;gBACR,OAAO,OAAO,CAAC,WAAW,CAAC;gBAC3B,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;gBAC/C,MAAM;YAER;gBACE,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
@@ -0,0 +1,6 @@
1
+ /**
2
+ * SSH connect convenience command
3
+ */
4
+ import type { Command } from 'commander';
5
+ export declare function registerConnectCommand(parent: Command): void;
6
+ //# sourceMappingURL=connect.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../../src/commands/ssh/connect.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAazC,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAkO5D"}