maincopy-cli 0.1.0

Operator command-line client for the Maincopy administration API
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

use clap::{Args, Subcommand};
use maincopy_shared::auth::AdminScope;
use time::OffsetDateTime;
use uuid::Uuid;

use super::parse_utc_rfc3339;

#[derive(Debug, Subcommand)]
pub(crate) enum AgentCommand {
    /// Fetch at most 100 grants, ordered by UUID.
    List {
        #[arg(long)]
        cursor: Option<Uuid>,
    },
    /// Inspect public key, fingerprint, ownership, scopes, and lifecycle state.
    Inspect { agent_id: Uuid },
    /// Register a public key with selected permissions. Requires fresh authentication.
    Register {
        #[arg(long)]
        owner_user_id: Uuid,
        #[arg(long)]
        public_key: Box<str>,
        #[arg(long)]
        label: Box<str>,
        #[arg(long, required = true, num_args = 1..=12, value_delimiter = ',', value_parser = parse_scope)]
        scopes: Vec<AdminScope>,
        #[arg(long, value_name = "UTC_RFC3339", value_parser = parse_utc_rfc3339)]
        expires_at: Option<OffsetDateTime>,
        /// Retry identity; generated when omitted. Reuse only for the identical command.
        #[arg(long)]
        idempotency_key: Option<Uuid>,
    },
    /// Replace all requested scopes at the inspected grant version.
    Scopes {
        #[command(flatten)]
        target: AgentTarget,
        #[arg(long, required = true, num_args = 1..=12, value_delimiter = ',', value_parser = parse_scope)]
        scopes: Vec<AdminScope>,
    },
    /// Revoke agent access at the inspected grant version.
    Revoke(AgentTarget),
}

#[derive(Debug, Args)]
pub(crate) struct AgentTarget {
    pub(crate) agent_id: Uuid,
    /// Exact grant version from agents inspect.
    #[arg(long, value_parser = clap::value_parser!(u64).range(1..i64::MAX as u64))]
    pub(crate) expected_version: u64,
    #[arg(long)]
    pub(crate) idempotency_key: Option<Uuid>,
}

fn parse_scope(value: &str) -> Result<AdminScope, clap::Error> {
    AdminScope::parse(value).ok_or_else(|| {
        clap::Error::raw(
            clap::error::ErrorKind::InvalidValue,
            "scope must be a supported administration scope",
        )
    })
}