Code Update

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2023-2024 Warén Group
+Copyright (c) 2023-2025 Warén Group
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -5,4 +5,11 @@
 mkdir $HOME/bin &> /dev/null
 curl https://git.waren.io/warengroup/wx/raw/branch/master/wx -o $HOME/bin/wx &> /dev/null
 chmod +x $HOME/bin/wx &> /dev/null
+export PATH=$HOME/bin:$PATH
+```
+
+## Schedule
+```
+# Warén CLI
+*/30 * * * * $HOME/bin/wx auto
 ```

maintainer.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+
+if [ ! "$BASH_VERSION" ] ; then
+    bash $0 $1 $2 $3 $4 $5 $6 $7 $8 $9
+    exit 1
+fi
+
+if [[ -f "./wx" ]] && [[ -d "./src" ]]
+then
+    podman run -it --rm -v "$PWD":/usr/src/myapp -w /usr/src/myapp docker.io/library/php:8-cli php generator.php &> /dev/null
+    mv wx.tmp wx &> /dev/null
+    chmod +x wx &> /dev/null
+fi

src/base.sh

@@ -22,7 +22,6 @@ declare -Ax config
 {{ FUNCTIONS }}
 {{ COMMANDS }}
 
-wx-start
 if [[ ! -z $1 ]] && [[ $(type -t wx-$1) == function ]]
 then
     wx-$1 $2 $3 $4 $5 $6 $7 $8 $9

src/commands/auth/login.sh

@@ -1,18 +1,9 @@
 wx-login(){
-    ORG=$1
-
-    if [[ -z "$HOSTNAME" || ${#HOSTNAME} -lt 5 ]]
-    then
-        echo "          >> Login <<         "
-        echo "------------------------------"
-
-        echo "Status: Hostname Required"
-        wx-stop
-    fi
-
     if [[ ! -z $1 ]]
     then
         ORG=$1
+        jq '.org = "'$ORG'"' $HOME/.warengroup/config.json 1> $HOME/.warengroup/config.json.tmp
+        mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
     elif [[ $(hostname -d) = *"devices.waren.io" ]]
     then
         ORG=warengroup
@@ -22,10 +13,11 @@ wx-login(){
     elif [[ $(hostname -d) = *"devices.christerwaren.fi" ]]
     then
         ORG=cwchristerw
+    elif [[ $USER != "root" && $USER != "local" && -f "$HOME/.warengroup/config.json" && $(cat $HOME/.warengroup/config.json | jq -r .org) != "null" ]]
+    then
+        ORG=$(cat $HOME/.warengroup/config.json | jq -r .org)
     else
-        echo "          >> Login <<         "
-        echo "------------------------------"
-
+        wx-header "Login"
         echo "Status: Organization Required"
         wx-stop
     fi
@@ -40,83 +32,75 @@ wx-login(){
     then
         DOMAIN=christerwaren.fi
     else
-        echo "          >> Login <<         "
-        echo "------------------------------"
-
+        wx-header "Login"
         echo "Status: Organization Unsupported"
         wx-stop
     fi
 
     FOLDER=$ORG
     DEVICE_DOMAIN="devices.$DOMAIN"
-    IDM_DOMAIN="idm.cwinfo.net"
+    IDM_DOMAIN="idm.waren.io"
     VAULT_DOMAIN="vault.cwinfo.net"
 
-    if [[ ! -z $2 ]]
-    then
-        HOSTNAME="$2.$DEVICE_DOMAIN"
-    elif [[ $(hostname -d) ]]
-    then
-        HOSTNAME=$(hostname --fqdn)
-    else
-        echo "          >> Login <<         "
-        echo "------------------------------"
-
-        echo "Status: Hostname Required"
-        wx-stop
-    fi
-
     if [[ -z $USER || $USER == "root" || $USER == "local" ]]
     then
         if [[ -z $SUDO_USER ]]
         then
             if [[ -z LOGNAME ]]
             then
-                echo "          >> Login <<         "
-                echo "------------------------------"
-
+                wx-header "Login"
                 echo "Status: Username Required"
                 wx-stop
             else
-                USER=$LOGNAME
+                USERNAME=$LOGNAME
             fi
         else
-            USER=$SUDO_USER
+            USERNAME=$SUDO_USER
         fi
+    else
+        USERNAME=$USER
     fi
 
     VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/sys/health)
     if [[ $VAULT_STATUS -eq 200 ]]
     then
-        if [[ -f "$HOME/.config/warengroup/config.json" ]]
+
+        if [[ $USER != "root" && $USER != "local" && -f "$HOME/.warengroup/config.json" ]]
         then
-            TOKEN="$(cat $HOME/.config/warengroup/config.json | jq -r .login.$ORG)"
+            if [[ $(cat $HOME/.warengroup/config.json | jq -r .login.$ORG.username) != "null" ]]
+            then
+                USERNAME="$(cat $HOME/.warengroup/config.json | jq -r .login.$ORG.username)"
+            fi
+            TOKEN="$(cat $HOME/.warengroup/config.json | jq -r .login.$ORG.token)"
         fi
 
         VAULT_LOGIN=$(curl https://$VAULT_DOMAIN/v1/auth/token/renew -X POST --header "X-Vault-Token: $TOKEN" -d '{ "token": "'$TOKEN'" }' -s | jq -r '.auth.client_token')
         if [[ ! -z $VAULT_LOGIN && ${#VAULT_LOGIN} == 95 ]]
         then
             config["login",${ORG}]=$VAULT_LOGIN
-            jq '.login.'$ORG' = "'$VAULT_LOGIN'"' $HOME/.config/warengroup/config.json &> $HOME/.config/warengroup/config.json.tmp
-            mv $HOME/.config/warengroup/config.json.tmp $HOME/.config/warengroup/config.json &> /dev/null
+            if [[ $USER != "root" && $USER != "local" ]]
+            then
+                jq '.login.'$ORG'.token = "'$VAULT_LOGIN'"' $HOME/.warengroup/config.json 1> $HOME/.warengroup/config.json.tmp
+                mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
+            fi
         else
             IDM_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$IDM_DOMAIN)
             if [[ $IDM_STATUS -eq 301 ]]
             then
-                echo "          >> Login <<         "
-                echo "------------------------------"
-
+                wx-header "Login"
                 echo $wxBold$ORG$wxNormal
 
-                if [[ -z $USER || $USER == "root" || $USER == "local" ]]
+                if [[ -z $USERNAME || $USERNAME == "root" || $USERNAME == "local" || $USERNAME == "nobody" ]]
                 then
                     echo -n "Username: "
                     read USERNAME
                 else
-                    echo "Username: $USER"
-                    USERNAME=$USER
+                    echo "Username: $USERNAME"
                 fi
 
+                jq '.login.'$ORG'.username = "'$USERNAME'"' $HOME/.warengroup/config.json 1> $HOME/.warengroup/config.json.tmp
+                mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
+
                 echo -n "Password: "
                 read -s PASSWORD
                 echo "****************"
@@ -134,15 +118,15 @@ wx-login(){
                     fi
 
                     config["login",${ORG}]=$VAULT_LOGIN
-                    jq '.login.'$ORG' = "'$VAULT_LOGIN'"' $HOME/.config/warengroup/config.json &> $HOME/.config/warengroup/config.json.tmp
-                    mv $HOME/.config/warengroup/config.json.tmp $HOME/.config/warengroup/config.json &> /dev/null
 
-                    wx-start
+                    if [[ $USER != "root" && $USER != "local" ]]
+                    then
+                        jq '.login.'$ORG'.token = "'$VAULT_LOGIN'"' $HOME/.warengroup/config.json &> $HOME/.warengroup/config.json.tmp
+                        mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
+                    fi
                 fi
             else
-                echo "          >> Login <<         "
-                echo "------------------------------"
-
+                wx-header "Login"
                 echo $wxBold$ORG$wxNormal
 
                 echo -n "Token: "
@@ -163,18 +147,17 @@ wx-login(){
                 fi
 
                 config["login",${ORG}]=$VAULT_LOGIN
-                jq '.login.'$ORG' = "'$VAULT_LOGIN'"' $HOME/.config/warengroup/config.json &> $HOME/.config/warengroup/config.json.tmp
-                mv $HOME/.config/warengroup/config.json.tmp $HOME/.config/warengroup/config.json &> /dev/null
 
-                wx-start
+                if [[ $USER != "root" && $USER != "local" ]]
+                then
+                    jq '.login.'$ORG'.token = "'$VAULT_LOGIN'"' $HOME/.warengroup/config.json &> $HOME/.warengroup/config.json.tmp
+                    mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
+                fi
             fi
         fi
     else
-        echo "          >> Login <<         "
-        echo "------------------------------"
-
+        wx-header "Login"
         echo $wxBold$ORG$wxNormal
-
         echo "Status: Vault Offline"
         wx-stop
     fi

src/commands/auth/logout.sh

@@ -0,0 +1,13 @@
+wx-logout(){
+    wx-header "Logout"
+    if [[ $USER != "root" && $USER != "local" && -f "$HOME/.warengroup/config.json" ]]
+    then
+        VAULT_LOGIN=$(cat $HOME/.warengroup/config.json | jq -r .login)
+        if [[ $VAULT_LOGIN != null && $VAULT_LOGIN != "{}" ]]
+        then
+            wx-clean &> /dev/null
+            jq '.login = {}' $HOME/.warengroup/config.json &> $HOME/.warengroup/config.json.tmp
+            mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
+        fi
+    fi
+}

src/commands/help.sh

@@ -1,19 +1,40 @@
 wx-help(){
 
-echo "          >> Help <<          "
-echo "------------------------------"
+wx-header "Help"
 
 echo -n "
 Usage: $0 COMMAND [OPTIONS]
 
 Common Commands:
   init       Init
+  help       Help
   ssh        SSH
     config      Config
-    sign        Certificates
+      edit        Edit
+      save        Save
+      sync        Sync
+      clean       Clean
+    keys        Keys
+      generate    Generate
+      sign        Sign
+      retrieve    Retrieve
+      save        Save
+      sync        Sync
+      delete      Delete
+      clean       Clean
+
+Authentication Commands:
+  login      Login
+  logout     Logout
 
 Management Commands:
+  auto       Auto
+  clean      Clean
   settings   Settings
+
+Maintenance Commands:
+  install    Install
+  update     Update
 ";
 
 }

src/commands/infra.sh

@@ -1,12 +1,41 @@
 wx-infra(){
     wx-login
-    wx-ssh-sign &> /dev/null
+    wx-auto &> /dev/null
 
-    echo "          >> Infra <<         "
-    echo "------------------------------"
+    wx-header "Infra"
+    wx-restricted
 
-    case $USER in
+    case $USERNAME in
         cwchristerw)
+            if [[ -d "$HOME/Desktop/Work in Progress/Programming/warengroup/infra" ]]
+            then
+                INFRA_PATH="$HOME/Desktop/Work in Progress/Programming/warengroup/infra"
+            else
+                if [[ -d "$HOME/.warengroup/infra" ]]
+                then
+                    INFRA_PATH="$HOME/.warengroup/infra"
+                else
+                    INFRA_PATH="$HOME/.warengroup/infra"
+                    mkdir -p "$INFRA_PATH" &> /dev/null
+                    git clone ssh://git@git.waren.io:2222/warengroup-private/infra.git --config core.sshCommand="ssh -i $HOME/.ssh/keys/warengroup-legacy -o ProxyJump=none" "$INFRA_PATH" &> /dev/null
+                fi
+            fi
+
+            if [[ ! -f "$INFRA_PATH/vault/cwchristerw" || ! -f "$INFRA_PATH/vault/warengroup" ]]
+            then
+                mkdir -p "$INFRA_PATH/vault" &> /dev/null
+
+                curl \
+                    -H "X-Vault-Token: ${config["login",$ORG]}" \
+                    -X GET \
+                    https://$VAULT_DOMAIN/v1/cli/data/cwchristerw/settings/infra -s | jq -r '.data.data.cwchristerw' > "$INFRA_PATH/vault/cwchristerw"
+
+                curl \
+                    -H "X-Vault-Token: ${config["login",$ORG]}" \
+                    -X GET \
+                    https://$VAULT_DOMAIN/v1/cli/data/cwchristerw/settings/infra -s | jq -r '.data.data.warengroup' > "$INFRA_PATH/vault/warengroup"
+            fi
+
             if [[ -z $1 ]]
             then
                 echo "Tag Required"
@@ -15,15 +44,26 @@ wx-infra(){
                 then
                     if [[ -z $2 ]]
                     then
-                        echo "Tag Required"
-                    else
-                        cd "/home/cwchristerw/Desktop/Work in Progress/Programming/warengroup/infra"
-                        ansible-playbook --vault-id warengroup@vault/warengroup playbooks/init.yml -t $2 $3 $4 $5 $6 $7 $8 $9
-                        cd "$OLDPWD"
+                        2=init
                     fi
+
+                    cd "$INFRA_PATH"
+                    git pull &> /dev/null
+                    ansible-galaxy collection install -r requirements.yml --upgrade &> /dev/null
+                    ansible-playbook --vault-id warengroup@vault/warengroup --vault-id cwchristerw@vault/cwchristerw playbooks/init.yml -t $2 $3 $4 $5 $6 $7 $8 $9
+                    cd "$OLDPWD"
+                elif [[ $1 == "manager" ]]
+                then
+                    cd "$INFRA_PATH"
+                    git pull &> /dev/null
+                    ansible-galaxy collection install -r requirements.yml --upgrade &> /dev/null
+                    ansible-playbook --vault-id warengroup@vault/warengroup --vault-id cwchristerw@vault/cwchristerw manager.yml $2 $3 $4 $5 $6 $7 $8 $9
+                    cd "$OLDPWD"
                 else
-                    cd "/home/cwchristerw/Desktop/Work in Progress/Programming/warengroup/infra"
-                    ansible-playbook --vault-id warengroup@vault/warengroup playbooks.yml -t $1 $2 $3 $4 $5 $6 $7 $8 $9
+                    cd "$INFRA_PATH"
+                    git pull &> /dev/null
+                    ansible-galaxy collection install -r requirements.yml --upgrade &> /dev/null
+                    ansible-playbook --vault-id warengroup@vault/warengroup --vault-id cwchristerw@vault/cwchristerw playbooks.yml -t $1 $2 $3 $4 $5 $6 $7 $8 $9
                     cd "$OLDPWD"
                 fi
             fi

src/commands/maintenance/install.sh

@@ -0,0 +1,19 @@
+wx-install(){
+    if [[ -z $1 ]]
+    then
+        wx-header "Install"
+    fi
+
+    wx-restricted
+
+    if [[ -f "./wx" ]] && [[ -d "./src" ]]
+    then
+        podman run -it --rm -v "$PWD":/usr/src/myapp -w /usr/src/myapp docker.io/library/php:8-cli php generator.php &> /dev/null
+        mv wx.tmp wx &> /dev/null
+        chmod +x wx &> /dev/null
+    fi
+
+    mkdir $HOME/bin &> /dev/null
+    curl https://git.waren.io/warengroup/wx/raw/branch/master/wx -o $HOME/bin/wx &> /dev/null
+    chmod +x $HOME/bin/wx &> /dev/null
+}

src/commands/maintenance/uninstall.sh

@@ -0,0 +1,8 @@
+wx-uninstall(){
+    wx-header "Uninstall"
+    wx-logout
+    if [[ ! -d "$HOME/.warengroup" ]]
+    then
+        rm "$HOME/.warengroup" -rf
+    fi
+}

src/commands/maintenance/update.sh

@@ -0,0 +1,4 @@
+wx-update(){
+    wx-header "Update"
+    wx-install --update
+}

src/commands/management/auto.sh

@@ -0,0 +1,8 @@
+wx-auto(){
+    wx-login
+    wx-header "Auto"
+
+    wx-ssh-config-sync
+    wx-ssh-keys-sync
+    wx-ssh-keys-sign
+}

src/commands/management/clean.sh

@@ -0,0 +1,6 @@
+wx-clean(){
+    wx-login
+    wx-header "Clean"
+    wx-ssh-config-clean
+    wx-ssh-keys-clean
+}

src/commands/management/settings.sh

@@ -0,0 +1,4 @@
+wx-settings(){
+    wx-login
+    wx-header "Settings"
+}

src/commands/settings.sh

@@ -1,6 +0,0 @@
-wx-settings(){
-    wx-login
-
-    echo "        >> Settings <<        "
-    echo "------------------------------"
-}

src/commands/ssh.sh

@@ -2,16 +2,14 @@ wx-ssh(){
     wx-login
 
     case $1 in
-        sign)
-            wx-ssh-sign
+        keys)
+            wx-ssh-keys $2 $3
             ;;
         config)
             wx-ssh-config $2
             ;;
         *)
-            echo "           >> SSH <<          "
-            echo "------------------------------"
-
+            wx-header "SSH"
             wx-stop
             ;;
     esac

src/commands/ssh/config.sh

@@ -1,6 +1,5 @@
 wx-ssh-config(){
-    echo "      >> SSH / Config <<      "
-    echo "------------------------------"
+    wx-restricted
 
     case $1 in
         edit)
@@ -14,23 +13,51 @@ wx-ssh-config(){
         sync)
             wx-ssh-config-sync
             ;;
+        clean)
+            wx-ssh-config-clean
+            ;;
         *)
             wx-ssh-config-sync
             wx-stop
             ;;
     esac
-
-
 }
 
 wx-ssh-config-edit(){
+    wx-header "SSH / Config / Edit"
+    wx-restricted
     nano ~/.ssh/config
 }
 
 wx-ssh-config-save(){
-    curl https://$VAULT_DOMAIN/v1/cli/data/$USER -X POST --header "X-Vault-Token: ${config["login",$ORG]}" -d "{ \"data\": { \"settings/ssh/config\": \"$(cat ~/.ssh/config | base64 -w 0)\" } }" -s &> /dev/null
+    wx-header "SSH / Config / Save"
+    wx-restricted
+    curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/config -X POST --header "X-Vault-Token: ${config["login",$ORG]}" -d "{ \"data\": { \"data\": \"$(cat ~/.ssh/config | base64 -w 0)\" } }" -s &> /dev/null
 }
 
 wx-ssh-config-sync(){
-    echo $(curl https://$VAULT_DOMAIN/v1/cli/data/$USER -X GET --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.data["settings/ssh/config"]') | base64 -d > ~/.ssh/config 2>&1
+    wx-header "SSH / Config / Sync"
+    wx-restricted
+    VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/config -X GET --header "X-Vault-Token: ${config["login",$ORG]}")
+    if [[ $VAULT_STATUS -eq 200 ]]
+    then
+        touch ~/.ssh/config
+        SSH1_CONFIG_MD5=$(curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/config -X GET --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.data.data' | base64 -d | md5sum | base64)
+        SSH2_CONFIG_MD5=$(cat ~/.ssh/config | md5sum | base64)
+        if [[ $SSH1_CONFIG_MD5 != $SSH2_CONFIG_MD5 ]]
+        then
+            echo $(curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/config -X GET --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.data.data') | base64 -d > ~/.ssh/config 2>&1
+            chmod 700 ~/.ssh/config
+        fi
+    fi
+}
+
+wx-ssh-config-clean(){
+    wx-header "SSH / Config / Clean"
+    wx-restricted
+    VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/config -X GET --header "X-Vault-Token: ${config["login",$ORG]}")
+    if [[ -f "$HOME/.ssh/config" && $VAULT_STATUS -eq 200 ]]
+    then
+        rm "$HOME/.ssh/config"
+    fi
 }

src/commands/ssh/keys.sh

@@ -0,0 +1,169 @@
+wx-ssh-keys(){
+    wx-restricted
+
+    case $1 in
+        generate)
+            wx-ssh-keys-retrieve $2
+            wx-ssh-keys-generate $2
+            wx-ssh-keys-save $2
+            ;;
+        sign)
+            wx-ssh-keys-sign
+            ;;
+        retrieve)
+            wx-ssh-keys-retrieve $2
+            ;;
+        save)
+            wx-ssh-keys-save $2
+            ;;
+        sync)
+            wx-ssh-keys-sync $2
+            ;;
+        delete)
+            wx-ssh-keys-delete $2
+            ;;
+        clean)
+            wx-ssh-keys-clean $2
+            ;;
+        *)
+            wx-stop
+            ;;
+    esac
+}
+
+wx-ssh-keys-generate(){
+    wx-header "SSH / Keys / Generate"
+    wx-restricted
+    if [[ ! -z $1 ]]
+    then
+        if [[ ! -f "$HOME/.ssh/keys/$1" ]]
+        then
+            ssh-keygen -t ed25519 -f $HOME/.ssh/keys/$1 -q -N "" -C "$USERNAME" &> /dev/null
+        fi
+    fi
+}
+
+wx-ssh-keys-sign(){
+    wx-header "SSH / Keys / Sign"
+    wx-restricted
+
+    if [[ $ORG == "warengroup" && $USERNAME != "cwchristerw" ]]
+    then
+        wx-ssh-keys-sign-create warengroup sysadmin 3600
+    elif [[ $ORG == "cwinfo" && $USERNAME != "cwchristerw" ]]
+    then
+        wx-ssh-keys-sign-create cwinfo sysadmin 3600
+    elif [[ $ORG == "cwchristerw" || $USERNAME == "cwchristerw" ]]
+    then
+        wx-ssh-keys-sign-create warengroup sysadmin 3600
+        wx-ssh-keys-sign-create cwinfo sysadmin 3600
+        wx-ssh-keys-sign-create cwchristerw sysadmin 3600
+    fi
+}
+
+wx-ssh-keys-sign-create(){
+    wx-restricted
+
+    NAME=$1
+    ROLE=$2
+    PRINCIPALS=$2
+    TTL=$3
+
+    if [[ ! -f "$HOME/.ssh/keys/$NAME" ]]
+    then
+        ssh-keygen -t ed25519 -f $HOME/.ssh/keys/$NAME -q -N "" -C "$USERNAME" &> /dev/null
+    fi
+
+    if [[ -f "$HOME/.ssh/keys/$NAME" ]]
+    then
+        echo "$NAME/$ROLE"
+        echo $(curl https://$VAULT_DOMAIN/v1/ssh/sign/$ROLE -X POST --header "X-Vault-Token: ${config["login",$ORG]}" -d "{ \"public_key\": \"$(cat $HOME/.ssh/keys/$NAME.pub)\", \"valid_principals\": \"$PRINCIPALS,$USERNAME\", \"ttl\": \"$TTL\" }" -s | jq -r '.data.signed_key') > ~/.ssh/keys/$NAME.sig 2>&1
+    fi
+}
+
+wx-ssh-keys-retrieve(){
+    if [[ -z $2 ]]
+    then
+        wx-header "SSH / Keys / Retrieve"
+    fi
+
+    wx-restricted
+    if [[ ! -z $1 ]]
+    then
+        VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X GET --header "X-Vault-Token: ${config["login",$ORG]}")
+        if [[ $VAULT_STATUS -eq 200 ]]
+        then
+            echo $(curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X GET --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.data.private') | base64 -d > ~/.ssh/keys/$1 2>&1
+            chmod 700 ~/.ssh/keys/$1
+            echo $(curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X GET --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.data.public') | base64 -d > ~/.ssh/keys/$1.pub 2>&1
+            chmod 700 ~/.ssh/keys/$1.pub
+        fi
+    fi
+}
+
+wx-ssh-keys-save(){
+    wx-header "SSH / Keys / Save"
+    wx-restricted
+    if [[ ! -z $1 ]]
+    then
+        if [[ -f "$HOME/.ssh/keys/$1" ]]
+        then
+            curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X POST --header "X-Vault-Token: ${config["login",$ORG]}" -d "{ \"data\": { \"private\": \"$(cat ~/.ssh/keys/$1 | base64 -w 0)\", \"public\": \"$(cat ~/.ssh/keys/$1.pub | base64 -w 0)\" } }" -s &> /dev/null
+        fi
+    fi
+}
+
+wx-ssh-keys-sync(){
+    wx-header "SSH / Keys / Sync"
+    wx-restricted
+
+    VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/metadata/$USERNAME/settings/ssh/keys -X LIST --header "X-Vault-Token: ${config["login",$ORG]}")
+    if [[ $VAULT_STATUS -eq 200 ]]
+    then
+        for name in $(curl https://$VAULT_DOMAIN/v1/cli/metadata/$USERNAME/settings/ssh/keys -X LIST --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.keys | @sh' | tr -d \')
+        do
+            echo $name
+            wx-ssh-keys-retrieve $name --multiple
+        done
+    fi
+}
+
+wx-ssh-keys-clean(){
+    if [[ -z $1 ]]
+    then
+        wx-header "SSH / Keys / Clean"
+    fi
+    wx-restricted
+
+    if [[ ! -z $1 ]]
+    then
+        if [[ -f "$HOME/.ssh/keys/$1" && $(basename "$HOME/.ssh/keys/$1") != "legacy" ]]
+        then
+            rm "$HOME/.ssh/keys/$1" &> /dev/null
+            rm "$HOME/.ssh/keys/$1.pub" &> /dev/null
+            rm "$HOME/.ssh/keys/$1.sig" &> /dev/null
+        fi
+    else
+        if [[ $ORG == "warengroup" && $USERNAME != "cwchristerw" ]]
+        then
+            wx-ssh-keys-clean warengroup
+        elif [[ $ORG == "cwinfo" && $USERNAME != "cwchristerw" ]]
+        then
+            wx-ssh-keys-clean cwinfo
+        elif [[ $ORG == "cwchristerw" || $USERNAME == "cwchristerw" ]]
+        then
+            wx-ssh-keys-clean warengroup
+            wx-ssh-keys-clean cwinfo
+            wx-ssh-keys-clean cwchristerw
+        fi
+
+        for file in ~/.ssh/keys/*
+        do
+            VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$(basename "$file" .pub) -X GET --header "X-Vault-Token: ${config["login",$ORG]}")
+            if [[ $(basename "$file") != "legacy" && $VAULT_STATUS -eq 200 ]]
+            then
+                rm "$file" &> /dev/null
+            fi
+        done
+    fi
+}

src/commands/ssh/sign.sh

@@ -1,39 +0,0 @@
-wx-ssh-sign(){
-    echo "       >> SSH / Sign <<       "
-    echo "------------------------------"
-
-    if [[ $ORG == "warengroup" ]]
-    then
-        wx-ssh-sign-create warengroup sysadmin 3600
-    elif [[ $ORG == "cwinfo" ]]
-    then
-        wx-ssh-sign-create cwinfo sysadmin 3600
-    elif [[ $ORG == "cwchristerw" ]]
-    then
-        wx-ssh-sign-create warengroup sysadmin 3600
-        wx-ssh-sign-create cwinfo sysadmin 3600
-        wx-ssh-sign-create cwchristerw sysadmin 3600
-    fi
-}
-
-wx-ssh-sign-create(){
-    mkdir -p $HOME/.ssh/keys
-    chmod 700 $HOME/.ssh/keys
-    chmod 600 $HOME/.ssh/keys/*
-
-    NAME=$1
-    ROLE=$2
-    PRINCIPALS=$2
-    TTL=$3
-
-    if [[ ! -f "$HOME/.ssh/keys/$NAME-ed25519" ]]
-    then
-        ssh-keygen -t ed25519 -f $HOME/.ssh/keys/$NAME-ed25519 -q -N "" &> /dev/null
-    fi
-
-    if [[ -f "$HOME/.ssh/keys/$NAME-ed25519" ]]
-    then
-        echo "$NAME/$ROLE"
-        echo $(curl https://$VAULT_DOMAIN/v1/ssh/sign/$ROLE -X POST --header "X-Vault-Token: ${config["login",$ORG]}" -d "{ \"public_key\": \"$(cat $HOME/.ssh/keys/$NAME-ed25519.pub)\", \"valid_principals\": \"$PRINCIPALS,$USER\", \"ttl\": \"$TTL\" }" -s | jq -r '.data.signed_key') > ~/.ssh/keys/$NAME-ed25519.sig 2>&1
-    fi
-}

src/commands/welcome.sh

@@ -1,4 +1,3 @@
 wx-welcome(){
-    echo "         >> Welcome <<        "
-    echo "------------------------------"
+    wx-header "Welcome"
 }

src/functions/header.sh

@@ -0,0 +1,24 @@
+wx-header(){
+    if [[ $2 == "h1" ]]
+    then
+        echo ""
+        echo ""
+        echo ""
+        echo "=============================="
+        wx-repeat " " $((30/2-${#1}/2))
+        echo -n "$wxBold"
+        echo -n "$1"
+        echo -n "$wxNormal"
+        echo ""
+        echo "=============================="
+    fi
+
+    if [[ $2 == "h2" || -z $2 ]]
+    then
+        wx-start
+        wx-repeat " " $((30/2-6/2-${#1}/2))
+        echo -n ">> $1 <<"
+        echo ""
+        echo "------------------------------"
+    fi
+}

src/functions/repeat.sh

@@ -0,0 +1,5 @@
+wx-repeat() {
+    local str=$1 n=$2 spaces
+    printf -v spaces "%*s" $n " "
+    printf "%s" "${spaces// /$str}"
+}

src/functions/restricted.sh

@@ -0,0 +1,10 @@
+wx-restricted(){
+    if [[ $USER == "root" || $USER == "local" ]]
+    then
+        echo "Status: Command Restricted"
+        echo " "
+        echo " "
+        echo " "
+        exit 1
+    fi
+}

src/functions/start.sh

@@ -1,17 +1,15 @@
 wx-start(){
-    echo ""
-    echo ""
-    echo ""
-    echo "=============================="
-    echo -n "$wxBold"
-    echo "           Warén CLI          "
-    echo -n "$wxNormal"
-    echo "=============================="
+    wx-header "Warén CLI" h1
 
-    mkdir -p $HOME/.config/warengroup &> /dev/null
+    mkdir -p $HOME/.warengroup &> /dev/null
 
-    if [[ ! -f "$HOME/.config/warengroup/config.json" ]]
+    if [[ ! -f "$HOME/.warengroup/config.json" || $(jq -e . < $HOME/.warengroup/config.json &>/dev/null; echo $?) -gt 0 ]]
     then
-        echo '{}' | jq > $HOME/.config/warengroup/config.json
+        echo '{}' | jq > $HOME/.warengroup/config.json
     fi
+
+    mkdir -p $HOME/.ssh/keys
+    chmod 700 -R $HOME/.ssh/keys
+    mkdir -p $HOME/.ssh/multiplex
+    chmod 700 -R $HOME/.ssh/multiplex
 }

src/functions/stop.sh

@@ -2,16 +2,13 @@ wx-stop (){
     echo " "
     echo " "
     echo " "
-    if [[ -f "./wx" ]] && [[ -d "./src" ]]
-    then
-        podman run -it --rm -v "$PWD":/usr/src/myapp -w /usr/src/myapp docker.io/library/php:8-cli php generator.php &> /dev/null
-        mv wx.tmp wx &> /dev/null
-        chmod +x wx &> /dev/null
-    fi
 
-    mkdir $HOME/bin &> /dev/null
-    curl https://git.waren.io/warengroup/wx/raw/branch/master/wx -o $HOME/bin/wx &> /dev/null
-    chmod +x $HOME/bin/wx &> /dev/null
+    wx-install --auto
+
+    if [[ $USERNAME != $USER && $USERNAME != $SUDO_USER && $USERNAME != $LOGNAME ]]
+    then
+        wx-logout
+    fi
 
     exit 1
 }

wx

@@ -19,21 +19,223 @@ wxNormal=$(tput sgr0)
 
 declare -Ax config
 
-wx-login(){
-    ORG=$1
-
-    if [[ -z "$HOSTNAME" || ${#HOSTNAME} -lt 5 ]]
+wx-header(){
+    if [[ $2 == "h1" ]]
     then
-        echo "          >> Login <<         "
-        echo "------------------------------"
-
-        echo "Status: Hostname Required"
-        wx-stop
+        echo ""
+        echo ""
+        echo ""
+        echo "=============================="
+        wx-repeat " " $((30/2-${#1}/2))
+        echo -n "$wxBold"
+        echo -n "$1"
+        echo -n "$wxNormal"
+        echo ""
+        echo "=============================="
     fi
 
+    if [[ $2 == "h2" || -z $2 ]]
+    then
+        wx-start
+        wx-repeat " " $((30/2-6/2-${#1}/2))
+        echo -n ">> $1 <<"
+        echo ""
+        echo "------------------------------"
+    fi
+}
+
+wx-repeat() {
+    local str=$1 n=$2 spaces
+    printf -v spaces "%*s" $n " "
+    printf "%s" "${spaces// /$str}"
+}
+
+wx-restricted(){
+    if [[ $USER == "root" || $USER == "local" ]]
+    then
+        echo "Status: Command Restricted"
+        echo " "
+        echo " "
+        echo " "
+        exit 1
+    fi
+}
+
+wx-start(){
+    wx-header "Warén CLI" h1
+
+    mkdir -p $HOME/.warengroup &> /dev/null
+
+    if [[ ! -f "$HOME/.warengroup/config.json" || $(jq -e . < $HOME/.warengroup/config.json &>/dev/null; echo $?) -gt 0 ]]
+    then
+        echo '{}' | jq > $HOME/.warengroup/config.json
+    fi
+
+    mkdir -p $HOME/.ssh/keys
+    chmod 700 -R $HOME/.ssh/keys
+    mkdir -p $HOME/.ssh/multiplex
+    chmod 700 -R $HOME/.ssh/multiplex
+}
+
+wx-stop (){
+    echo " "
+    echo " "
+    echo " "
+
+    wx-install --auto
+
+    if [[ $USERNAME != $USER && $USERNAME != $SUDO_USER && $USERNAME != $LOGNAME ]]
+    then
+        wx-logout
+    fi
+
+    exit 1
+}
+
+wx-help(){
+
+wx-header "Help"
+
+echo -n "
+Usage: $0 COMMAND [OPTIONS]
+
+Common Commands:
+  init       Init
+  help       Help
+  ssh        SSH
+    config      Config
+      edit        Edit
+      save        Save
+      sync        Sync
+      clean       Clean
+    keys        Keys
+      generate    Generate
+      sign        Sign
+      retrieve    Retrieve
+      save        Save
+      sync        Sync
+      delete      Delete
+      clean       Clean
+
+Authentication Commands:
+  login      Login
+  logout     Logout
+
+Management Commands:
+  auto       Auto
+  clean      Clean
+  settings   Settings
+
+Maintenance Commands:
+  install    Install
+  update     Update
+";
+
+}
+
+wx-infra(){
+    wx-login
+    wx-auto &> /dev/null
+
+    wx-header "Infra"
+    wx-restricted
+
+    case $USERNAME in
+        cwchristerw)
+            if [[ -d "$HOME/Desktop/Work in Progress/Programming/warengroup/infra" ]]
+            then
+                INFRA_PATH="$HOME/Desktop/Work in Progress/Programming/warengroup/infra"
+            else
+                if [[ -d "$HOME/.warengroup/infra" ]]
+                then
+                    INFRA_PATH="$HOME/.warengroup/infra"
+                else
+                    INFRA_PATH="$HOME/.warengroup/infra"
+                    mkdir -p "$INFRA_PATH" &> /dev/null
+                    git clone ssh://git@git.waren.io:2222/warengroup-private/infra.git --config core.sshCommand="ssh -i $HOME/.ssh/keys/warengroup-legacy -o ProxyJump=none" "$INFRA_PATH" &> /dev/null
+                fi
+            fi
+
+            if [[ ! -f "$INFRA_PATH/vault/cwchristerw" || ! -f "$INFRA_PATH/vault/warengroup" ]]
+            then
+                mkdir -p "$INFRA_PATH/vault" &> /dev/null
+
+                curl \
+                    -H "X-Vault-Token: ${config["login",$ORG]}" \
+                    -X GET \
+                    https://$VAULT_DOMAIN/v1/cli/data/cwchristerw/settings/infra -s | jq -r '.data.data.cwchristerw' > "$INFRA_PATH/vault/cwchristerw"
+
+                curl \
+                    -H "X-Vault-Token: ${config["login",$ORG]}" \
+                    -X GET \
+                    https://$VAULT_DOMAIN/v1/cli/data/cwchristerw/settings/infra -s | jq -r '.data.data.warengroup' > "$INFRA_PATH/vault/warengroup"
+            fi
+
+            if [[ -z $1 ]]
+            then
+                echo "Tag Required"
+            else
+                if [[ $1 == "init" ]]
+                then
+                    if [[ -z $2 ]]
+                    then
+                        2=init
+                    fi
+
+                    cd "$INFRA_PATH"
+                    git pull &> /dev/null
+                    ansible-galaxy collection install -r requirements.yml --upgrade &> /dev/null
+                    ansible-playbook --vault-id warengroup@vault/warengroup --vault-id cwchristerw@vault/cwchristerw playbooks/init.yml -t $2 $3 $4 $5 $6 $7 $8 $9
+                    cd "$OLDPWD"
+                elif [[ $1 == "manager" ]]
+                then
+                    cd "$INFRA_PATH"
+                    git pull &> /dev/null
+                    ansible-galaxy collection install -r requirements.yml --upgrade &> /dev/null
+                    ansible-playbook --vault-id warengroup@vault/warengroup --vault-id cwchristerw@vault/cwchristerw manager.yml $2 $3 $4 $5 $6 $7 $8 $9
+                    cd "$OLDPWD"
+                else
+                    cd "$INFRA_PATH"
+                    git pull &> /dev/null
+                    ansible-galaxy collection install -r requirements.yml --upgrade &> /dev/null
+                    ansible-playbook --vault-id warengroup@vault/warengroup --vault-id cwchristerw@vault/cwchristerw playbooks.yml -t $1 $2 $3 $4 $5 $6 $7 $8 $9
+                    cd "$OLDPWD"
+                fi
+            fi
+            ;;
+        *)
+            echo "User Unsupported"
+            ;;
+    esac
+}
+
+wx-ssh(){
+    wx-login
+
+    case $1 in
+        keys)
+            wx-ssh-keys $2 $3
+            ;;
+        config)
+            wx-ssh-config $2
+            ;;
+        *)
+            wx-header "SSH"
+            wx-stop
+            ;;
+    esac
+}
+
+wx-welcome(){
+    wx-header "Welcome"
+}
+
+wx-login(){
     if [[ ! -z $1 ]]
     then
         ORG=$1
+        jq '.org = "'$ORG'"' $HOME/.warengroup/config.json 1> $HOME/.warengroup/config.json.tmp
+        mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
     elif [[ $(hostname -d) = *"devices.waren.io" ]]
     then
         ORG=warengroup
@@ -43,10 +245,11 @@ wx-login(){
     elif [[ $(hostname -d) = *"devices.christerwaren.fi" ]]
     then
         ORG=cwchristerw
+    elif [[ $USER != "root" && $USER != "local" && -f "$HOME/.warengroup/config.json" && $(cat $HOME/.warengroup/config.json | jq -r .org) != "null" ]]
+    then
+        ORG=$(cat $HOME/.warengroup/config.json | jq -r .org)
     else
-        echo "          >> Login <<         "
-        echo "------------------------------"
-
+        wx-header "Login"
         echo "Status: Organization Required"
         wx-stop
     fi
@@ -61,83 +264,75 @@ wx-login(){
     then
         DOMAIN=christerwaren.fi
     else
-        echo "          >> Login <<         "
-        echo "------------------------------"
-
+        wx-header "Login"
         echo "Status: Organization Unsupported"
         wx-stop
     fi
 
     FOLDER=$ORG
     DEVICE_DOMAIN="devices.$DOMAIN"
-    IDM_DOMAIN="idm.cwinfo.net"
+    IDM_DOMAIN="idm.waren.io"
     VAULT_DOMAIN="vault.cwinfo.net"
 
-    if [[ ! -z $2 ]]
-    then
-        HOSTNAME="$2.$DEVICE_DOMAIN"
-    elif [[ $(hostname -d) ]]
-    then
-        HOSTNAME=$(hostname --fqdn)
-    else
-        echo "          >> Login <<         "
-        echo "------------------------------"
-
-        echo "Status: Hostname Required"
-        wx-stop
-    fi
-
     if [[ -z $USER || $USER == "root" || $USER == "local" ]]
     then
         if [[ -z $SUDO_USER ]]
         then
             if [[ -z LOGNAME ]]
             then
-                echo "          >> Login <<         "
-                echo "------------------------------"
-
+                wx-header "Login"
                 echo "Status: Username Required"
                 wx-stop
             else
-                USER=$LOGNAME
+                USERNAME=$LOGNAME
             fi
         else
-            USER=$SUDO_USER
+            USERNAME=$SUDO_USER
         fi
+    else
+        USERNAME=$USER
     fi
 
     VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/sys/health)
     if [[ $VAULT_STATUS -eq 200 ]]
     then
-        if [[ -f "$HOME/.config/warengroup/config.json" ]]
+
+        if [[ $USER != "root" && $USER != "local" && -f "$HOME/.warengroup/config.json" ]]
         then
-            TOKEN="$(cat $HOME/.config/warengroup/config.json | jq -r .login.$ORG)"
+            if [[ $(cat $HOME/.warengroup/config.json | jq -r .login.$ORG.username) != "null" ]]
+            then
+                USERNAME="$(cat $HOME/.warengroup/config.json | jq -r .login.$ORG.username)"
+            fi
+            TOKEN="$(cat $HOME/.warengroup/config.json | jq -r .login.$ORG.token)"
         fi
 
         VAULT_LOGIN=$(curl https://$VAULT_DOMAIN/v1/auth/token/renew -X POST --header "X-Vault-Token: $TOKEN" -d '{ "token": "'$TOKEN'" }' -s | jq -r '.auth.client_token')
         if [[ ! -z $VAULT_LOGIN && ${#VAULT_LOGIN} == 95 ]]
         then
             config["login",${ORG}]=$VAULT_LOGIN
-            jq '.login.'$ORG' = "'$VAULT_LOGIN'"' $HOME/.config/warengroup/config.json &> $HOME/.config/warengroup/config.json.tmp
-            mv $HOME/.config/warengroup/config.json.tmp $HOME/.config/warengroup/config.json &> /dev/null
+            if [[ $USER != "root" && $USER != "local" ]]
+            then
+                jq '.login.'$ORG'.token = "'$VAULT_LOGIN'"' $HOME/.warengroup/config.json 1> $HOME/.warengroup/config.json.tmp
+                mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
+            fi
         else
             IDM_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$IDM_DOMAIN)
             if [[ $IDM_STATUS -eq 301 ]]
             then
-                echo "          >> Login <<         "
-                echo "------------------------------"
-
+                wx-header "Login"
                 echo $wxBold$ORG$wxNormal
 
-                if [[ -z $USER || $USER == "root" || $USER == "local" ]]
+                if [[ -z $USERNAME || $USERNAME == "root" || $USERNAME == "local" || $USERNAME == "nobody" ]]
                 then
                     echo -n "Username: "
                     read USERNAME
                 else
-                    echo "Username: $USER"
-                    USERNAME=$USER
+                    echo "Username: $USERNAME"
                 fi
 
+                jq '.login.'$ORG'.username = "'$USERNAME'"' $HOME/.warengroup/config.json 1> $HOME/.warengroup/config.json.tmp
+                mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
+
                 echo -n "Password: "
                 read -s PASSWORD
                 echo "****************"
@@ -155,15 +350,15 @@ wx-login(){
                     fi
 
                     config["login",${ORG}]=$VAULT_LOGIN
-                    jq '.login.'$ORG' = "'$VAULT_LOGIN'"' $HOME/.config/warengroup/config.json &> $HOME/.config/warengroup/config.json.tmp
-                    mv $HOME/.config/warengroup/config.json.tmp $HOME/.config/warengroup/config.json &> /dev/null
 
-                    wx-start
+                    if [[ $USER != "root" && $USER != "local" ]]
+                    then
+                        jq '.login.'$ORG'.token = "'$VAULT_LOGIN'"' $HOME/.warengroup/config.json &> $HOME/.warengroup/config.json.tmp
+                        mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
+                    fi
                 fi
             else
-                echo "          >> Login <<         "
-                echo "------------------------------"
-
+                wx-header "Login"
                 echo $wxBold$ORG$wxNormal
 
                 echo -n "Token: "
@@ -184,45 +379,44 @@ wx-login(){
                 fi
 
                 config["login",${ORG}]=$VAULT_LOGIN
-                jq '.login.'$ORG' = "'$VAULT_LOGIN'"' $HOME/.config/warengroup/config.json &> $HOME/.config/warengroup/config.json.tmp
-                mv $HOME/.config/warengroup/config.json.tmp $HOME/.config/warengroup/config.json &> /dev/null
 
-                wx-start
+                if [[ $USER != "root" && $USER != "local" ]]
+                then
+                    jq '.login.'$ORG'.token = "'$VAULT_LOGIN'"' $HOME/.warengroup/config.json &> $HOME/.warengroup/config.json.tmp
+                    mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
+                fi
             fi
         fi
     else
-        echo "          >> Login <<         "
-        echo "------------------------------"
-
+        wx-header "Login"
         echo $wxBold$ORG$wxNormal
-
         echo "Status: Vault Offline"
         wx-stop
     fi
 }
 
-wx-start(){
-    echo ""
-    echo ""
-    echo ""
-    echo "=============================="
-    echo -n "$wxBold"
-    echo "           Warén CLI          "
-    echo -n "$wxNormal"
-    echo "=============================="
-
-    mkdir -p $HOME/.config/warengroup &> /dev/null
-
-    if [[ ! -f "$HOME/.config/warengroup/config.json" ]]
+wx-logout(){
+    wx-header "Logout"
+    if [[ $USER != "root" && $USER != "local" && -f "$HOME/.warengroup/config.json" ]]
     then
-        echo '{}' | jq > $HOME/.config/warengroup/config.json
+        VAULT_LOGIN=$(cat $HOME/.warengroup/config.json | jq -r .login)
+        if [[ $VAULT_LOGIN != null && $VAULT_LOGIN != "{}" ]]
+        then
+            wx-clean &> /dev/null
+            jq '.login = {}' $HOME/.warengroup/config.json &> $HOME/.warengroup/config.json.tmp
+            mv $HOME/.warengroup/config.json.tmp $HOME/.warengroup/config.json &> /dev/null
+        fi
     fi
 }
 
-wx-stop (){
-    echo " "
-    echo " "
-    echo " "
+wx-install(){
+    if [[ -z $1 ]]
+    then
+        wx-header "Install"
+    fi
+
+    wx-restricted
+
     if [[ -f "./wx" ]] && [[ -d "./src" ]]
     then
         podman run -it --rm -v "$PWD":/usr/src/myapp -w /usr/src/myapp docker.io/library/php:8-cli php generator.php &> /dev/null
@@ -233,100 +427,45 @@ wx-stop (){
     mkdir $HOME/bin &> /dev/null
     curl https://git.waren.io/warengroup/wx/raw/branch/master/wx -o $HOME/bin/wx &> /dev/null
     chmod +x $HOME/bin/wx &> /dev/null
-
-    exit 1
 }
 
-wx-help(){
-
-echo "          >> Help <<          "
-echo "------------------------------"
-
-echo -n "
-Usage: $0 COMMAND [OPTIONS]
-
-Common Commands:
-  init       Init
-  ssh        SSH
-    config      Config
-    sign        Certificates
-
-Management Commands:
-  settings   Settings
-";
-
+wx-uninstall(){
+    wx-header "Uninstall"
+    wx-logout
+    if [[ ! -d "$HOME/.warengroup" ]]
+    then
+        rm "$HOME/.warengroup" -rf
+    fi
 }
 
-wx-infra(){
+wx-update(){
+    wx-header "Update"
+    wx-install --update
+}
+
+wx-auto(){
     wx-login
-    wx-ssh-sign &> /dev/null
+    wx-header "Auto"
 
-    echo "          >> Infra <<         "
-    echo "------------------------------"
+    wx-ssh-config-sync
+    wx-ssh-keys-sync
+    wx-ssh-keys-sign
+}
 
-    case $USER in
-        cwchristerw)
-            if [[ -z $1 ]]
-            then
-                echo "Tag Required"
-            else
-                if [[ $1 == "init" ]]
-                then
-                    if [[ -z $2 ]]
-                    then
-                        echo "Tag Required"
-                    else
-                        cd "/home/cwchristerw/Desktop/Work in Progress/Programming/warengroup/infra"
-                        ansible-playbook --vault-id warengroup@vault/warengroup playbooks/init.yml -t $2 $3 $4 $5 $6 $7 $8 $9
-                        cd "$OLDPWD"
-                    fi
-                else
-                    cd "/home/cwchristerw/Desktop/Work in Progress/Programming/warengroup/infra"
-                    ansible-playbook --vault-id warengroup@vault/warengroup playbooks.yml -t $1 $2 $3 $4 $5 $6 $7 $8 $9
-                    cd "$OLDPWD"
-                fi
-            fi
-            ;;
-        *)
-            echo "User Unsupported"
-            ;;
-    esac
+wx-clean(){
+    wx-login
+    wx-header "Clean"
+    wx-ssh-config-clean
+    wx-ssh-keys-clean
 }
 
 wx-settings(){
     wx-login
-
-    echo "        >> Settings <<        "
-    echo "------------------------------"
-}
-
-wx-ssh(){
-    wx-login
-
-    case $1 in
-        sign)
-            wx-ssh-sign
-            ;;
-        config)
-            wx-ssh-config $2
-            ;;
-        *)
-            echo "           >> SSH <<          "
-            echo "------------------------------"
-
-            wx-stop
-            ;;
-    esac
-}
-
-wx-welcome(){
-    echo "         >> Welcome <<        "
-    echo "------------------------------"
+    wx-header "Settings"
 }
 
 wx-ssh-config(){
-    echo "      >> SSH / Config <<      "
-    echo "------------------------------"
+    wx-restricted
 
     case $1 in
         edit)
@@ -340,69 +479,226 @@ wx-ssh-config(){
         sync)
             wx-ssh-config-sync
             ;;
+        clean)
+            wx-ssh-config-clean
+            ;;
         *)
             wx-ssh-config-sync
             wx-stop
             ;;
     esac
-
-
 }
 
 wx-ssh-config-edit(){
+    wx-header "SSH / Config / Edit"
+    wx-restricted
     nano ~/.ssh/config
 }
 
 wx-ssh-config-save(){
-    curl https://$VAULT_DOMAIN/v1/cli/data/$USER -X POST --header "X-Vault-Token: ${config["login",$ORG]}" -d "{ \"data\": { \"settings/ssh/config\": \"$(cat ~/.ssh/config | base64 -w 0)\" } }" -s &> /dev/null
+    wx-header "SSH / Config / Save"
+    wx-restricted
+    curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/config -X POST --header "X-Vault-Token: ${config["login",$ORG]}" -d "{ \"data\": { \"data\": \"$(cat ~/.ssh/config | base64 -w 0)\" } }" -s &> /dev/null
 }
 
 wx-ssh-config-sync(){
-    echo $(curl https://$VAULT_DOMAIN/v1/cli/data/$USER -X GET --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.data["settings/ssh/config"]') | base64 -d > ~/.ssh/config 2>&1
-}
-
-wx-ssh-sign(){
-    echo "       >> SSH / Sign <<       "
-    echo "------------------------------"
-
-    if [[ $ORG == "warengroup" ]]
+    wx-header "SSH / Config / Sync"
+    wx-restricted
+    VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/config -X GET --header "X-Vault-Token: ${config["login",$ORG]}")
+    if [[ $VAULT_STATUS -eq 200 ]]
     then
-        wx-ssh-sign-create warengroup sysadmin 3600
-    elif [[ $ORG == "cwinfo" ]]
-    then
-        wx-ssh-sign-create cwinfo sysadmin 3600
-    elif [[ $ORG == "cwchristerw" ]]
-    then
-        wx-ssh-sign-create warengroup sysadmin 3600
-        wx-ssh-sign-create cwinfo sysadmin 3600
-        wx-ssh-sign-create cwchristerw sysadmin 3600
+        touch ~/.ssh/config
+        SSH1_CONFIG_MD5=$(curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/config -X GET --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.data.data' | base64 -d | md5sum | base64)
+        SSH2_CONFIG_MD5=$(cat ~/.ssh/config | md5sum | base64)
+        if [[ $SSH1_CONFIG_MD5 != $SSH2_CONFIG_MD5 ]]
+        then
+            echo $(curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/config -X GET --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.data.data') | base64 -d > ~/.ssh/config 2>&1
+            chmod 700 ~/.ssh/config
+        fi
     fi
 }
 
-wx-ssh-sign-create(){
-    mkdir -p $HOME/.ssh/keys
-    chmod 700 $HOME/.ssh/keys
-    chmod 600 $HOME/.ssh/keys/*
+wx-ssh-config-clean(){
+    wx-header "SSH / Config / Clean"
+    wx-restricted
+    VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/config -X GET --header "X-Vault-Token: ${config["login",$ORG]}")
+    if [[ -f "$HOME/.ssh/config" && $VAULT_STATUS -eq 200 ]]
+    then
+        rm "$HOME/.ssh/config"
+    fi
+}
+
+wx-ssh-keys(){
+    wx-restricted
+
+    case $1 in
+        generate)
+            wx-ssh-keys-retrieve $2
+            wx-ssh-keys-generate $2
+            wx-ssh-keys-save $2
+            ;;
+        sign)
+            wx-ssh-keys-sign
+            ;;
+        retrieve)
+            wx-ssh-keys-retrieve $2
+            ;;
+        save)
+            wx-ssh-keys-save $2
+            ;;
+        sync)
+            wx-ssh-keys-sync $2
+            ;;
+        delete)
+            wx-ssh-keys-delete $2
+            ;;
+        clean)
+            wx-ssh-keys-clean $2
+            ;;
+        *)
+            wx-stop
+            ;;
+    esac
+}
+
+wx-ssh-keys-generate(){
+    wx-header "SSH / Keys / Generate"
+    wx-restricted
+    if [[ ! -z $1 ]]
+    then
+        if [[ ! -f "$HOME/.ssh/keys/$1" ]]
+        then
+            ssh-keygen -t ed25519 -f $HOME/.ssh/keys/$1 -q -N "" -C "$USERNAME" &> /dev/null
+        fi
+    fi
+}
+
+wx-ssh-keys-sign(){
+    wx-header "SSH / Keys / Sign"
+    wx-restricted
+
+    if [[ $ORG == "warengroup" && $USERNAME != "cwchristerw" ]]
+    then
+        wx-ssh-keys-sign-create warengroup sysadmin 3600
+    elif [[ $ORG == "cwinfo" && $USERNAME != "cwchristerw" ]]
+    then
+        wx-ssh-keys-sign-create cwinfo sysadmin 3600
+    elif [[ $ORG == "cwchristerw" || $USERNAME == "cwchristerw" ]]
+    then
+        wx-ssh-keys-sign-create warengroup sysadmin 3600
+        wx-ssh-keys-sign-create cwinfo sysadmin 3600
+        wx-ssh-keys-sign-create cwchristerw sysadmin 3600
+    fi
+}
+
+wx-ssh-keys-sign-create(){
+    wx-restricted
 
     NAME=$1
     ROLE=$2
     PRINCIPALS=$2
     TTL=$3
 
-    if [[ ! -f "$HOME/.ssh/keys/$NAME-ed25519" ]]
+    if [[ ! -f "$HOME/.ssh/keys/$NAME" ]]
     then
-        ssh-keygen -t ed25519 -f $HOME/.ssh/keys/$NAME-ed25519 -q -N "" &> /dev/null
+        ssh-keygen -t ed25519 -f $HOME/.ssh/keys/$NAME -q -N "" -C "$USERNAME" &> /dev/null
     fi
 
-    if [[ -f "$HOME/.ssh/keys/$NAME-ed25519" ]]
+    if [[ -f "$HOME/.ssh/keys/$NAME" ]]
     then
         echo "$NAME/$ROLE"
-        echo $(curl https://$VAULT_DOMAIN/v1/ssh/sign/$ROLE -X POST --header "X-Vault-Token: ${config["login",$ORG]}" -d "{ \"public_key\": \"$(cat $HOME/.ssh/keys/$NAME-ed25519.pub)\", \"valid_principals\": \"$PRINCIPALS,$USER\", \"ttl\": \"$TTL\" }" -s | jq -r '.data.signed_key') > ~/.ssh/keys/$NAME-ed25519.sig 2>&1
+        echo $(curl https://$VAULT_DOMAIN/v1/ssh/sign/$ROLE -X POST --header "X-Vault-Token: ${config["login",$ORG]}" -d "{ \"public_key\": \"$(cat $HOME/.ssh/keys/$NAME.pub)\", \"valid_principals\": \"$PRINCIPALS,$USERNAME\", \"ttl\": \"$TTL\" }" -s | jq -r '.data.signed_key') > ~/.ssh/keys/$NAME.sig 2>&1
+    fi
+}
+
+wx-ssh-keys-retrieve(){
+    if [[ -z $2 ]]
+    then
+        wx-header "SSH / Keys / Retrieve"
+    fi
+
+    wx-restricted
+    if [[ ! -z $1 ]]
+    then
+        VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X GET --header "X-Vault-Token: ${config["login",$ORG]}")
+        if [[ $VAULT_STATUS -eq 200 ]]
+        then
+            echo $(curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X GET --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.data.private') | base64 -d > ~/.ssh/keys/$1 2>&1
+            chmod 700 ~/.ssh/keys/$1
+            echo $(curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X GET --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.data.public') | base64 -d > ~/.ssh/keys/$1.pub 2>&1
+            chmod 700 ~/.ssh/keys/$1.pub
+        fi
+    fi
+}
+
+wx-ssh-keys-save(){
+    wx-header "SSH / Keys / Save"
+    wx-restricted
+    if [[ ! -z $1 ]]
+    then
+        if [[ -f "$HOME/.ssh/keys/$1" ]]
+        then
+            curl https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$1 -X POST --header "X-Vault-Token: ${config["login",$ORG]}" -d "{ \"data\": { \"private\": \"$(cat ~/.ssh/keys/$1 | base64 -w 0)\", \"public\": \"$(cat ~/.ssh/keys/$1.pub | base64 -w 0)\" } }" -s &> /dev/null
+        fi
+    fi
+}
+
+wx-ssh-keys-sync(){
+    wx-header "SSH / Keys / Sync"
+    wx-restricted
+
+    VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/metadata/$USERNAME/settings/ssh/keys -X LIST --header "X-Vault-Token: ${config["login",$ORG]}")
+    if [[ $VAULT_STATUS -eq 200 ]]
+    then
+        for name in $(curl https://$VAULT_DOMAIN/v1/cli/metadata/$USERNAME/settings/ssh/keys -X LIST --header "X-Vault-Token: ${config["login",$ORG]}" -s | jq -r '.data.keys | @sh' | tr -d \')
+        do
+            echo $name
+            wx-ssh-keys-retrieve $name --multiple
+        done
+    fi
+}
+
+wx-ssh-keys-clean(){
+    if [[ -z $1 ]]
+    then
+        wx-header "SSH / Keys / Clean"
+    fi
+    wx-restricted
+
+    if [[ ! -z $1 ]]
+    then
+        if [[ -f "$HOME/.ssh/keys/$1" && $(basename "$HOME/.ssh/keys/$1") != "legacy" ]]
+        then
+            rm "$HOME/.ssh/keys/$1" &> /dev/null
+            rm "$HOME/.ssh/keys/$1.pub" &> /dev/null
+            rm "$HOME/.ssh/keys/$1.sig" &> /dev/null
+        fi
+    else
+        if [[ $ORG == "warengroup" && $USERNAME != "cwchristerw" ]]
+        then
+            wx-ssh-keys-clean warengroup
+        elif [[ $ORG == "cwinfo" && $USERNAME != "cwchristerw" ]]
+        then
+            wx-ssh-keys-clean cwinfo
+        elif [[ $ORG == "cwchristerw" || $USERNAME == "cwchristerw" ]]
+        then
+            wx-ssh-keys-clean warengroup
+            wx-ssh-keys-clean cwinfo
+            wx-ssh-keys-clean cwchristerw
+        fi
+
+        for file in ~/.ssh/keys/*
+        do
+            VAULT_STATUS=$(curl -s -o /dev/null -w "%{http_code}" https://$VAULT_DOMAIN/v1/cli/data/$USERNAME/settings/ssh/keys/$(basename "$file" .pub) -X GET --header "X-Vault-Token: ${config["login",$ORG]}")
+            if [[ $(basename "$file") != "legacy" && $VAULT_STATUS -eq 200 ]]
+            then
+                rm "$file" &> /dev/null
+            fi
+        done
     fi
 }
 
 
-wx-start
 if [[ ! -z $1 ]] && [[ $(type -t wx-$1) == function ]]
 then
     wx-$1 $2 $3 $4 $5 $6 $7 $8 $9