Enum SecretAction 

pub enum SecretAction {
    Init {
        comment: Option<String>,
    },
    Encrypt {
        path: Utf8PathBuf,
        force: bool,
        rm_plaintext: bool,
    },
    Store {
        force: bool,
    },
    Unlock,
}

Variants

Init

Generate an X25519 keypair, write the secret to [secrets] identity (~/.config/yui/age.txt by default), and append the public key to [secrets] recipients in $DOTFILES/config.local.toml. Idempotent — refuses to overwrite an existing identity file.

Fields

comment: Option<String>

Append a comment block above the new recipient entry (defaults to “ ” — yui.host / yui.user).

Encrypt

Read <path> (absolute or relative to $DOTFILES) as plaintext, encrypt it to every recipient in [secrets] recipients, and write the ciphertext as <path>.age next to it. Refuses to clobber an existing .age without --force.

The plaintext sibling is added to the managed .gitignore section immediately so it can’t be staged accidentally before the next apply. Pass --rm-plaintext to also delete the plaintext after a successful encryption (works only when it lives under $DOTFILES).

Fields

path: Utf8PathBuf

force: bool

Replace an existing <path>.age.

rm_plaintext: bool

Delete the plaintext after a successful encryption (only works when the plaintext lives under $DOTFILES).

Store

Push the X25519 secret at [secrets].identity into the configured [secrets.vault] (Bitwarden or 1Password). Run this once on a machine that has the X25519; then on a new machine yui secret unlock recovers it through the vault provider’s own auth (master password, biometric, passkey, SSO — whatever the vault itself accepts).

Fields

force: bool

Overwrite the existing vault item without prompting.

Unlock

Fetch the X25519 secret from the configured [secrets.vault] and write it to [secrets].identity. The vault CLI (bw or op) handles its own auth, so any factor that CLI supports (passkey unlock in the BW web vault, Touch ID via 1Password, …) gates this command.

Trait Implementations

impl Debug for SecretAction

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgMatches for SecretAction

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for SecretAction

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand