Enum IdentityAction 

pub enum IdentityAction {
    Generate {
        agent_id: Option<String>,
        force: bool,
        no_overwrite: bool,
    },
    Import {
        agent_id: String,
        public: PathBuf,
        private: Option<PathBuf>,
    },
    List,
    ExportPub {
        agent_id: String,
    },
}

Variants

Generate

Generate a fresh Ed25519 keypair for --agent-id (or the NHI-hardened default if omitted) and persist it under the key storage directory with strict 0600/0644 modes on Unix.

Fields

agent_id: Option<String>

Agent identifier. Defaults to the same NHI-hardened id the rest of the CLI synthesizes (e.g. host:<host>:pid-<pid>-<uuid8>).

force: bool

Allow overwriting an existing keypair for --agent-id. Without this flag, generate refuses on an existing id — the safe default to prevent a typo from silently rotating (and irrecoverably destroying) a daemon or peer key. Pass --force only when you intend to rotate.

no_overwrite: bool

Deprecated alias retained for backward compatibility with the v0.7.0 pre-Round-4 flag surface. The default behavior is now refuse-on-existing; this flag is a no-op. Use --force to opt INTO overwrite.

Import

Import a keypair from on-disk files written by another tool. --pub is required; --priv is optional (omit it to import a public-only handle for verification, e.g., a peer’s allowlist entry).

Fields

agent_id: String

Agent identifier the imported material will be saved under.

public: PathBuf

Path to a 32-byte raw Ed25519 public key file.

private: Option<PathBuf>

Optional path to a 32-byte raw Ed25519 private key file.

List

List every keypair stored under the key storage directory. Private keys are never loaded — list is safe to wire into dashboards and shell autocompletion.

ExportPub

Print a base64-encoded public key for --agent-id to stdout. Stable URL-safe-no-padding form so the output can be pasted into a Slack message or a peer allowlist file without binary hazards.

Fields

agent_id: String

Agent identifier whose public key should be exported.

Trait Implementations

impl FromArgMatches for IdentityAction

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for IdentityAction

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand