@zincapp/znvault-cli 4.0.3 → 4.1.0

package/dist/commands/kms/index.d.ts

@@ -5,6 +5,7 @@
  * - Key CRUD operations (list, get, create, delete)
  * - Cryptographic operations (encrypt, decrypt, generate-data-key)
  * - Key lifecycle management (rotate, enable, disable, versions)
+ * - Per-key authorization (policy put/list, grant create/list/retire/revoke)
  */
 import type { Command } from 'commander';
 import { type RegisterOptions } from '../../lib/command-context.js';

package/dist/commands/kms/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/kms/index.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,8BAA8B,CAAC;AAEtC,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,IAAI,CAgBjF;AAGD,cAAc,YAAY,CAAC;AAG3B,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/kms/index.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKzC,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,8BAA8B,CAAC;AAEtC,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,IAAI,CAiBjF;AAGD,cAAc,YAAY,CAAC;AAG3B,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC"}

package/dist/commands/kms/index.js

@@ -2,6 +2,7 @@
 import { registerCrudCommands } from './crud.js';
 import { registerCryptoCommands } from './crypto.js';
 import { registerLifecycleCommands } from './lifecycle.js';
+import { registerPolicyCommands } from './policy.js';
 import { resolveContext, withRegisterContext, } from '../../lib/command-context.js';
 export function registerKmsCommands(parent, opts) {
     const ctx = resolveContext(opts);
@@ -17,6 +18,7 @@ export function registerKmsCommands(parent, opts) {
         // of duties), so they are not threaded with the asSuperadmin flag.
         registerCryptoCommands(kms);
         registerLifecycleCommands(kms, asSuperadmin);
+        registerPolicyCommands(kms, asSuperadmin);
     });
 }
 // Re-export types for external use

package/dist/commands/kms/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/kms/index.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAYlC,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,cAAc,EACd,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,UAAU,mBAAmB,CAAC,MAAe,EAAE,IAAsB;IACzE,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,GAAG,KAAK,YAAY,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM;SACf,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,yCAAyC,CAAC,CAAC;IAE1D,6EAA6E;IAC7E,iFAAiF;IACjF,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE;QAC5B,oBAAoB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACxC,sEAAsE;QACtE,mEAAmE;QACnE,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5B,yBAAyB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mCAAmC;AACnC,cAAc,YAAY,CAAC;AAE3B,wCAAwC;AACxC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/kms/index.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAalC,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,cAAc,EACd,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,UAAU,mBAAmB,CAAC,MAAe,EAAE,IAAsB;IACzE,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,GAAG,KAAK,YAAY,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM;SACf,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,yCAAyC,CAAC,CAAC;IAE1D,6EAA6E;IAC7E,iFAAiF;IACjF,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE;QAC5B,oBAAoB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACxC,sEAAsE;QACtE,mEAAmE;QACnE,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5B,yBAAyB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC7C,sBAAsB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mCAAmC;AACnC,cAAc,YAAY,CAAC;AAE3B,wCAAwC;AACxC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC"}

package/dist/commands/kms/policy.d.ts

@@ -0,0 +1,34 @@
+/**
+ * KMS per-key policy and grant commands.
+ *
+ * These manage the *per-key* authorization layer, which is independent of
+ * the API-key RBAC permissions surfaced by `znvault api-key permissions`.
+ * A caller must clear BOTH layers to use a KMS key:
+ *
+ *   1. RBAC (api_key.permissions, e.g. `kms:decrypt`) — gates whether the
+ *      caller may invoke the KMS endpoint at all.
+ *   2. Per-key policy / grant (kms_key_policies / kms_key_grants) — gates
+ *      whether *this specific principal* may use *this specific key* for a
+ *      given KMS action (`kms:Encrypt`, `kms:Decrypt`, `kms:GenerateDataKey`,
+ *      ...).
+ *
+ * When a key is created the creator (`createdBy`) is auto-granted
+ * `kms:*` via a `default-owner` ALLOW policy. Any *other* principal that
+ * needs to use the key requires an explicit `policy put` or `grant create`.
+ *
+ * Server endpoints used:
+ *   PUT    /v1/kms/keys/:keyId/policy   (also under /v1/superadmin/...)
+ *   GET    /v1/kms/keys/:keyId/policies (also under /v1/superadmin/...)
+ *   GET    /v1/kms/keys/:keyId/grants   (also under /v1/superadmin/...)
+ *   POST   /v1/kms/grants               (tenant-only)
+ *   POST   /v1/kms/grants/:grantId/retire
+ *   DELETE /v1/kms/grants/:grantId
+ *
+ * Note: there is no server endpoint to DELETE a policy entry by sid today;
+ * the only way to remove one is to PUT a new policy with a non-matching
+ * action/principal (or, in an emergency, edit kms_key_policies directly).
+ * Tracked as a server-side gap.
+ */
+import type { Command } from 'commander';
+export declare function registerPolicyCommands(parent: Command, asSuperadmin?: boolean): void;
+//# sourceMappingURL=policy.d.ts.map

package/dist/commands/kms/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/commands/kms/policy.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkOzC,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,UAAQ,GAAG,IAAI,CAiElF"}

package/dist/commands/kms/policy.js

@@ -0,0 +1,250 @@
+// Path: src/commands/kms/policy.ts
+import Table from 'cli-table3';
+import { client } from '../../lib/client.js';
+import * as output from '../../lib/output.js';
+import { kmsKeysPath, kmsKeysQuery, withKmsContext } from './routing.js';
+// ============================================================================
+// Policy commands
+// ============================================================================
+async function listPolicies(keyId, options) {
+    const spinner = output.spinner('Loading key policies...').start();
+    try {
+        const result = await client.get(kmsKeysPath(options.tenant, `/${keyId}/policies`) + kmsKeysQuery(options.tenant));
+        spinner.stop();
+        if (options.json === true) {
+            output.json(result);
+            return;
+        }
+        if (result.policies.length === 0) {
+            output.info(`No per-key policies on ${keyId}.`);
+            output.info('Without a policy entry the creator is the only principal allowed (default-owner).');
+            return;
+        }
+        const table = new Table({
+            head: ['SID', 'Effect', 'Principal', 'Actions', 'Priority'],
+            style: { head: ['cyan'] },
+        });
+        for (const p of result.policies) {
+            table.push([
+                p.sid,
+                p.effect,
+                p.principal,
+                p.actions.join(', '),
+                String(p.priority),
+            ]);
+        }
+        console.log(table.toString());
+    }
+    catch (err) {
+        spinner.fail('Failed to list policies');
+        output.error(err.message);
+        process.exit(1);
+    }
+}
+async function putPolicy(keyId, options) {
+    const spinner = output.spinner(`Setting policy '${options.sid}' on ${keyId}...`).start();
+    try {
+        const priority = options.priority !== undefined ? parseInt(options.priority, 10) : 100;
+        if (Number.isNaN(priority)) {
+            throw new Error('--priority must be an integer');
+        }
+        const body = {
+            sid: options.sid,
+            effect: options.effect ?? 'ALLOW',
+            principal: options.principal,
+            // Send single-element array. The route currently joins actions with
+            // comma into a single string column and the evaluator does strict
+            // equality; multi-action policies via the API don't work today (server
+            // gap). Pass a single action here so the stored row matches at eval
+            // time.
+            actions: [options.action],
+            priority,
+        };
+        await client.put(kmsKeysPath(options.tenant, `/${keyId}/policy`) + kmsKeysQuery(options.tenant), body);
+        spinner.stop();
+        if (options.json === true) {
+            output.json({ success: true, sid: options.sid });
+            return;
+        }
+        output.success(`Policy '${options.sid}' applied to key ${keyId}.`);
+        console.log(`  Effect:    ${body.effect}`);
+        console.log(`  Principal: ${options.principal}`);
+        console.log(`  Action:    ${options.action}`);
+        console.log(`  Priority:  ${String(priority)}`);
+    }
+    catch (err) {
+        spinner.fail('Failed to set policy');
+        output.error(err.message);
+        process.exit(1);
+    }
+}
+// ============================================================================
+// Grant commands
+// ============================================================================
+async function listGrants(keyId, options) {
+    const spinner = output.spinner('Loading key grants...').start();
+    try {
+        const result = await client.get(kmsKeysPath(options.tenant, `/${keyId}/grants`) + kmsKeysQuery(options.tenant));
+        spinner.stop();
+        if (options.json === true) {
+            output.json(result);
+            return;
+        }
+        if (result.grants.length === 0) {
+            output.info(`No grants on ${keyId}.`);
+            return;
+        }
+        const table = new Table({
+            head: ['Grant ID', 'Grantee', 'Operations', 'Expires', 'Created'],
+            style: { head: ['cyan'] },
+        });
+        for (const g of result.grants) {
+            table.push([
+                g.grantId,
+                g.granteePrincipal,
+                g.operations.join(', '),
+                g.expiresAt ?? '—',
+                g.createdAt,
+            ]);
+        }
+        console.log(table.toString());
+    }
+    catch (err) {
+        spinner.fail('Failed to list grants');
+        output.error(err.message);
+        process.exit(1);
+    }
+}
+async function createGrant(keyId, options) {
+    const spinner = output.spinner('Creating grant...').start();
+    try {
+        const operations = options.operations
+            .split(',')
+            .map((s) => s.trim())
+            .filter((s) => s.length > 0);
+        if (operations.length === 0) {
+            throw new Error('--operations must list at least one action, e.g. kms:Decrypt');
+        }
+        const body = {
+            keyId,
+            granteePrincipal: options.grantee,
+            operations,
+        };
+        if (options.name !== undefined)
+            body.name = options.name;
+        if (options.retiringPrincipal !== undefined)
+            body.retiringPrincipal = options.retiringPrincipal;
+        if (options.expiresAt !== undefined)
+            body.expiresAt = options.expiresAt;
+        // Grants live under /v1/kms/grants (tenant-only — no superadmin route).
+        const result = await client.post('/v1/kms/grants', body);
+        spinner.stop();
+        if (options.json === true) {
+            output.json(result);
+            return;
+        }
+        output.success('Grant created.');
+        console.log(`  Grant ID:    ${result.grantId}`);
+        console.log(`  Grantee:     ${options.grantee}`);
+        console.log(`  Operations:  ${operations.join(', ')}`);
+        if (options.expiresAt !== undefined)
+            console.log(`  Expires:     ${options.expiresAt}`);
+        console.log(`  Grant token: ${result.grantToken}`);
+    }
+    catch (err) {
+        spinner.fail('Failed to create grant');
+        output.error(err.message);
+        process.exit(1);
+    }
+}
+async function retireGrant(grantId, options) {
+    const spinner = output.spinner(`Retiring grant ${grantId}...`).start();
+    try {
+        await client.post(`/v1/kms/grants/${grantId}/retire`, {});
+        spinner.stop();
+        if (options.json === true) {
+            output.json({ success: true, grantId });
+            return;
+        }
+        output.success(`Grant ${grantId} retired.`);
+    }
+    catch (err) {
+        spinner.fail('Failed to retire grant');
+        output.error(err.message);
+        process.exit(1);
+    }
+}
+async function revokeGrant(grantId, options) {
+    const spinner = output.spinner(`Revoking grant ${grantId}...`).start();
+    try {
+        await client.delete(`/v1/kms/grants/${grantId}`);
+        spinner.stop();
+        if (options.json === true) {
+            output.json({ success: true, grantId });
+            return;
+        }
+        output.success(`Grant ${grantId} revoked.`);
+    }
+    catch (err) {
+        spinner.fail('Failed to revoke grant');
+        output.error(err.message);
+        process.exit(1);
+    }
+}
+// ============================================================================
+// Registration
+// ============================================================================
+export function registerPolicyCommands(parent, asSuperadmin = false) {
+    // ---- policy <list|put> ----
+    const policy = parent
+        .command('policy')
+        .description('Manage per-key policies (independent of API-key RBAC permissions)');
+    policy
+        .command('list <keyId>')
+        .description('List per-key policies on a KMS key')
+        .option('-t, --tenant <id>', 'Tenant ID (superadmin only — routes via /v1/superadmin/kms/keys)')
+        .option('--json', 'Output as JSON')
+        .action((keyId, options) => withKmsContext(asSuperadmin, () => listPolicies(keyId, options)));
+    policy
+        .command('put <keyId>')
+        .description('Add or update a per-key policy entry (idempotent by sid)')
+        .requiredOption('--sid <sid>', 'Statement identifier (unique per key; used as upsert key)')
+        .requiredOption('--principal <principal>', 'Principal string, e.g. apikey:key_<hex>, user:<id>, or *')
+        .requiredOption('--action <action>', 'KMS action, e.g. kms:Decrypt, kms:Encrypt, kms:* (case-sensitive)')
+        .option('--effect <ALLOW|DENY>', 'ALLOW or DENY (default ALLOW; explicit DENY always wins)', 'ALLOW')
+        .option('--priority <n>', 'Priority integer (default 100; lower evaluated first, but DENY wins regardless)')
+        .option('-t, --tenant <id>', 'Tenant ID (superadmin only — routes via /v1/superadmin/kms/keys)')
+        .option('--json', 'Output as JSON')
+        .action((keyId, options) => withKmsContext(asSuperadmin, () => putPolicy(keyId, options)));
+    // ---- grant <list|create|retire|revoke> ----
+    const grant = parent
+        .command('grant')
+        .description('Manage per-key grants (revocable per-principal permissions)');
+    grant
+        .command('list <keyId>')
+        .description('List active grants on a KMS key')
+        .option('-t, --tenant <id>', 'Tenant ID (superadmin only — routes via /v1/superadmin/kms/keys)')
+        .option('--json', 'Output as JSON')
+        .action((keyId, options) => withKmsContext(asSuperadmin, () => listGrants(keyId, options)));
+    grant
+        .command('create <keyId>')
+        .description('Create a grant allowing a principal to perform operations on a key')
+        .requiredOption('--grantee <principal>', 'Principal to grant, e.g. apikey:key_<hex>')
+        .requiredOption('--operations <ops>', 'Comma-separated actions, e.g. kms:Decrypt,kms:Encrypt')
+        .option('--name <name>', 'Human-readable grant name')
+        .option('--retiring-principal <p>', 'Principal allowed to retire this grant')
+        .option('--expires-at <iso>', 'ISO-8601 expiration timestamp')
+        .option('--json', 'Output as JSON')
+        .action((keyId, options) => createGrant(keyId, options));
+    grant
+        .command('retire <grantId>')
+        .description('Retire a grant (intentional, by grantee or retiring principal)')
+        .option('--json', 'Output as JSON')
+        .action((grantId, options) => retireGrant(grantId, options));
+    grant
+        .command('revoke <grantId>')
+        .description('Revoke a grant (administrative removal)')
+        .option('--json', 'Output as JSON')
+        .action((grantId, options) => revokeGrant(grantId, options));
+}
+//# sourceMappingURL=policy.js.map

package/dist/commands/kms/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/commands/kms/policy.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAmCnC,OAAO,KAAK,MAAM,YAAY,CAAC;AAE/B,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAYzE,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,KAAK,UAAU,YAAY,CAAC,KAAa,EAAE,OAA0B;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC7B,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,WAAW,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CACjF,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,0BAA0B,KAAK,GAAG,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;YACtB,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC;YAC3D,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;SAC1B,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC;gBACT,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;aACnB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,OAAyB;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,OAAO,CAAC,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IAEzF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvF,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,GAAG;YACX,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO;YACjC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,oEAAoE;YACpE,kEAAkE;YAClE,uEAAuE;YACvE,oEAAoE;YACpE,QAAQ;YACR,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;YACzB,QAAQ;SACT,CAAC;QAEF,MAAM,MAAM,CAAC,GAAG,CACd,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAC9E,IAAI,CACL,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,WAAW,OAAO,CAAC,GAAG,oBAAoB,KAAK,GAAG,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,OAAyB;IAChE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC7B,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAC/E,CAAC;QACF,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,GAAG,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;YACtB,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC;YACjE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;SAC1B,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC;gBACT,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,CAAC,CAAC,SAAS,IAAI,GAAG;gBAClB,CAAC,CAAC,SAAS;aACZ,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,OAA2B;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC;IAE5D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU;aAClC,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,IAAI,GAA4B;YACpC,KAAK;YACL,gBAAgB,EAAE,OAAO,CAAC,OAAO;YACjC,UAAU;SACX,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzD,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS;YAAE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QAChG,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAExE,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAsB,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACxF,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,OAAiC;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,OAAO,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAuB,kBAAkB,OAAO,SAAS,EAAE,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/E,MAAM,CAAC,OAAO,CAAC,SAAS,OAAO,WAAW,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,OAAiC;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,OAAO,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAuB,kBAAkB,OAAO,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/E,MAAM,CAAC,OAAO,CAAC,SAAS,OAAO,WAAW,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,MAAM,UAAU,sBAAsB,CAAC,MAAe,EAAE,YAAY,GAAG,KAAK;IAC1E,8BAA8B;IAC9B,MAAM,MAAM,GAAG,MAAM;SAClB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,mEAAmE,CAAC,CAAC;IAEpF,MAAM;SACH,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,oCAAoC,CAAC;SACjD,MAAM,CAAC,mBAAmB,EAAE,kEAAkE,CAAC;SAC/F,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,KAAa,EAAE,OAA0B,EAAE,EAAE,CACpD,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CACjE,CAAC;IAEJ,MAAM;SACH,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,0DAA0D,CAAC;SACvE,cAAc,CAAC,aAAa,EAAE,2DAA2D,CAAC;SAC1F,cAAc,CAAC,yBAAyB,EAAE,0DAA0D,CAAC;SACrG,cAAc,CAAC,mBAAmB,EAAE,mEAAmE,CAAC;SACxG,MAAM,CAAC,uBAAuB,EAAE,0DAA0D,EAAE,OAAO,CAAC;SACpG,MAAM,CAAC,gBAAgB,EAAE,iFAAiF,CAAC;SAC3G,MAAM,CAAC,mBAAmB,EAAE,kEAAkE,CAAC;SAC/F,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,KAAa,EAAE,OAAyB,EAAE,EAAE,CACnD,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAC9D,CAAC;IAEJ,8CAA8C;IAC9C,MAAM,KAAK,GAAG,MAAM;SACjB,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,6DAA6D,CAAC,CAAC;IAE9E,KAAK;SACF,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,iCAAiC,CAAC;SAC9C,MAAM,CAAC,mBAAmB,EAAE,kEAAkE,CAAC;SAC/F,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,KAAa,EAAE,OAAyB,EAAE,EAAE,CACnD,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAC/D,CAAC;IAEJ,KAAK;SACF,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,oEAAoE,CAAC;SACjF,cAAc,CAAC,uBAAuB,EAAE,2CAA2C,CAAC;SACpF,cAAc,CAAC,oBAAoB,EAAE,uDAAuD,CAAC;SAC7F,MAAM,CAAC,eAAe,EAAE,2BAA2B,CAAC;SACpD,MAAM,CAAC,0BAA0B,EAAE,wCAAwC,CAAC;SAC5E,MAAM,CAAC,oBAAoB,EAAE,+BAA+B,CAAC;SAC7D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,KAAa,EAAE,OAA2B,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAEvF,KAAK;SACF,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,gEAAgE,CAAC;SAC7E,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,OAAe,EAAE,OAAiC,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAEjG,KAAK;SACF,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,OAAe,EAAE,OAAiC,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACnG,CAAC"}

package/dist/commands/kms/types.d.ts

@@ -103,4 +103,62 @@ export interface GenerateDataKeyOptions {
 export interface VersionsOptions {
     json?: boolean;
 }
+export interface KMSKeyPolicy {
+    sid: string;
+    effect: 'ALLOW' | 'DENY';
+    principal: string;
+    actions: string[];
+    condition?: unknown;
+    priority: number;
+}
+export interface ListPoliciesResponse {
+    policies: KMSKeyPolicy[];
+}
+export interface KMSKeyGrant {
+    grantId: string;
+    granteePrincipal: string;
+    operations: string[];
+    constraints?: unknown;
+    name?: string;
+    createdAt: string;
+    createdBy: string;
+    expiresAt?: string;
+}
+export interface ListGrantsResponse {
+    grants: KMSKeyGrant[];
+}
+export interface CreateGrantResponse {
+    grantId: string;
+    grantToken: string;
+}
+export interface PolicyPutOptions {
+    tenant?: string;
+    sid: string;
+    effect?: 'ALLOW' | 'DENY';
+    principal: string;
+    action: string;
+    priority?: string;
+    json?: boolean;
+}
+export interface PolicyListOptions {
+    tenant?: string;
+    json?: boolean;
+}
+export interface GrantCreateOptions {
+    tenant?: string;
+    grantee: string;
+    operations: string;
+    name?: string;
+    retiringPrincipal?: string;
+    expiresAt?: string;
+    json?: boolean;
+}
+export interface GrantListOptions {
+    tenant?: string;
+    json?: boolean;
+}
+export interface GrantRetireRevokeOptions {
+    tenant?: string;
+    json?: boolean;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/commands/kms/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/commands/kms/types.ts"],"names":[],"mappings":"AAEA;;GAEG;AAMH,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,UAAU,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAMD,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/commands/kms/types.ts"],"names":[],"mappings":"AAEA;;GAEG;AAMH,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,UAAU,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAMD,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAaD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zincapp/znvault-cli",
-  "version": "4.0.3",
+  "version": "4.1.0",
   "description": "Official CLI for ZnVault administration",
   "type": "module",
   "main": "dist/index.js",