a559b73e8e
- flag::define: variadic constraint args (key:value) instead of bracket string - flag::_parse_constraints_from_args: replaces flag::_parse_and_cache - flag::set_constraint: Option B syntax for post-definition constraints - choices separator: comma (choices:split,full) — no quoting needed - guard against empty _CURRENT_COMMAND in exclusive groups lookup - migrate all commands to new constraint syntax - add helpful error for unknown constraint args
52 lines
No EOL
2.3 KiB
Bash
52 lines
No EOL
2.3 KiB
Bash
#!/usr/bin/env bash
|
|
# commands/unblock/show.sh
|
|
|
|
function cmd::unblock::show::on_load() {
|
|
help::section "Target"
|
|
flag::define --name value "Peer name to unblock" label:name section:Target
|
|
flag::define --identity value "Unblock all peers in identity" label:identity section:Target
|
|
flag::define --type value "Filter by device type" label:type section:Target
|
|
|
|
help::section "Rules"
|
|
flag::define --ip[] "Unblock specific IP" label:ip section:Rules
|
|
flag::define --subnet[] "Unblock specific subnet" label:subnet section:Rules
|
|
flag::define --port[] "Unblock specific port (ip:port:proto)" label:port section:Rules
|
|
flag::define --service[] "Unblock by service name" label:service section:Rules
|
|
flag::define --all bool "Unblock all rules" section:Rules
|
|
|
|
help::section "Options"
|
|
flag::define --reason value "Reason for unblock (recorded in history)" label:reason section:Options
|
|
flag::define --force bool "Skip confirmation" section:Options
|
|
flag::define --quiet bool "Suppress output" section:Options
|
|
|
|
flag::exclusive --name --identity
|
|
}
|
|
|
|
function cmd::unblock::show::run() {
|
|
flag::parse "$@" || return 1
|
|
|
|
local name; name=$(flag::value --name)
|
|
local identity; identity=$(flag::value --identity)
|
|
local type; type=$(flag::value --type)
|
|
local reason; reason=$(flag::value --reason)
|
|
local all=false quiet=false force=false
|
|
flag::bool --all && all=true
|
|
flag::bool --quiet && quiet=true
|
|
flag::bool --force && force=true
|
|
|
|
local -a ips=() subnets=() ports=() services=()
|
|
while IFS= read -r v; do [[ -n "$v" ]] && ips+=("$v"); done < <(flag::array --ip)
|
|
while IFS= read -r v; do [[ -n "$v" ]] && subnets+=("$v"); done < <(flag::array --subnet)
|
|
while IFS= read -r v; do [[ -n "$v" ]] && ports+=("$v"); done < <(flag::array --port)
|
|
while IFS= read -r v; do [[ -n "$v" ]] && services+=("$v"); done < <(flag::array --service)
|
|
|
|
if [[ -z "$name" && -z "$identity" ]]; then
|
|
log::error "Missing required flag: --name or --identity"
|
|
return 1
|
|
fi
|
|
|
|
cmd::unblock::_impl \
|
|
"$name" "$identity" "$type" "$reason" \
|
|
"$all" "$quiet" "$force" \
|
|
ips subnets ports services
|
|
} |