#!/bin/bash
set -euo pipefail
ZARYA_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
source "${ZARYA_DIR}/lib/common.sh"
SUBCMD="${1:-}"
shift || true
case "${SUBCMD}" in
    perimeter|srv)
        NODE="${1:-}"
        ACTION="${2:-ensure}"
        if [[ -z "${NODE}" ]]; then
            log_err "Использование: z secret perimeter <нода> [ensure|show|rotate]"
            exit 1
        fi
        run_isolated python3 "${ZARYA_DIR}/lib/perimeter_secrets.py" "${ACTION}" "${NODE}"
        ;;
    *)
        log_err "Использование: z secret perimeter <нода> [ensure|show|rotate]"
        exit 1
        ;;
esac