Enum KeySubcommand 

pub enum KeySubcommand {
    List,
    Export {
        alias: String,
        passphrase: String,
        format: ExportFormat,
    },
    Delete {
        alias: String,
    },
    Import {
        alias: String,
        seed_file: PathBuf,
        controller_did: String,
    },
    CopyBackend {
        alias: String,
        dst_backend: String,
        dst_file: Option<PathBuf>,
        dst_passphrase: Option<String>,
    },
}

Variants

List

List aliases of all keys stored in the platform’s secure storage.

Export

Export a stored key in various formats (requires passphrase for some formats).

Fields

alias: String

Local alias of the key to export.

passphrase: String

Passphrase to decrypt the key (needed for ‘pem’/‘pub’ formats).

format: ExportFormat

Export format: pem (OpenSSH private), pub (OpenSSH public), enc (raw encrypted bytes).

Delete

Remove a key from the platform’s secure storage by alias.

Fields

alias: String

Local alias of the key to remove.

Import

Import an Ed25519 key from a 32-byte seed file and store it encrypted.

Fields

alias: String

Local alias to assign to the imported key.

seed_file: PathBuf

Path to the file containing the raw 32-byte Ed25519 seed.

controller_did: String

Controller DID (e.g., did:key:…) to associate with the imported key.

CopyBackend

Copy a key from the current keychain backend to a different backend.

Useful for creating a file-based keychain for headless CI environments without exposing the raw key material. The encrypted key bytes are copied as-is; the same passphrase used to store the key in the source backend must be used when loading it from the destination.

Examples:

Copy to file keychain (passphrase from env var)

AUTHS_PASSPHRASE=“$CI_PASS” auths key copy-backend
–alias ci-release-device –dst-backend file –dst-file /tmp/ci-keychain.enc

Copy to file keychain (passphrase from flag)

auths key copy-backend –alias ci-release-device
–dst-backend file –dst-file /tmp/ci-keychain.enc –dst-passphrase “$CI_PASS”

Fields

alias: String

Alias of the key to copy from the current (source) keychain.

dst_backend: String

Destination backend type. Currently supported: “file”.

dst_file: Option<PathBuf>

Path for the destination file keychain (required when –dst-backend is “file”).

dst_passphrase: Option<String>

Passphrase for the destination file keychain. If omitted, the AUTHS_PASSPHRASE environment variable is used.

Trait Implementations

impl Clone for KeySubcommand

fn clone(&self) -> KeySubcommand

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeySubcommand

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgMatches for KeySubcommand

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for KeySubcommand

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand