bc-envelope-cli 0.35.0

use anyhow::Result;
use bc_envelope::known_values;
use bc_ur::prelude::*;
use bc_xid::{XIDDocument, XIDVerifySignature};
use clap::Args;

use crate::{
    EnvelopeArgs, EnvelopeArgsLike,
    xid::{
        ReadPasswordArgs, VerifyArgs, XIDDocumentReadable, get_private_key_ur,
        xid_document_envelope, xid_from_document_envelope,
    },
};

/// Retrieve all the XID document's keys.
#[derive(Debug, Args)]
#[group(skip)]
pub struct CommandArgs {
    /// Return private keys instead of public keys.
    ///
    /// For unencrypted keys, returns the PrivateKeys UR.
    /// For encrypted keys without --password, returns the encrypted envelope
    /// UR. For encrypted keys with --password, returns the decrypted
    /// PrivateKeys UR.
    #[arg(long)]
    private: bool,

    #[command(flatten)]
    password_args: ReadPasswordArgs,

    #[command(flatten)]
    verify_args: VerifyArgs,

    #[command(flatten)]
    envelope_args: EnvelopeArgs,
}

impl EnvelopeArgsLike for CommandArgs {
    fn envelope(&self) -> Option<&str> { self.envelope_args.envelope() }
}

impl XIDDocumentReadable for CommandArgs {}

impl crate::Exec for CommandArgs {
    fn exec(&self) -> Result<String> {
        if self.private {
            // Return private keys
            let xid_document = self.read_xid_document_with_verify(
                self.verify_args.verify_signature(),
            )?;
            let keys = xid_document
                .keys()
                .iter()
                .map(|key| get_private_key_ur(key, &self.password_args))
                .collect::<Result<Vec<String>>>()?
                .join("\n");
            Ok(keys)
        } else {
            let envelope = self.read_envelope()?;
            let inner_envelope = if self.verify_args.verify_signature()
                == XIDVerifySignature::None
            {
                xid_from_document_envelope(&envelope)?;
                xid_document_envelope(&envelope)?
            } else {
                XIDDocument::from_envelope(
                    &envelope,
                    None,
                    self.verify_args.verify_signature(),
                )?;
                xid_document_envelope(&envelope)?
            };
            let key_assertions =
                inner_envelope.assertions_with_predicate(known_values::KEY);
            let keys = key_assertions
                .iter()
                .map(|key| Ok(key.try_object()?.ur_string()))
                .collect::<Result<Vec<String>>>()?
                .join("\n");
            Ok(keys)
        }
    }
}