Enum AuthCommand 

pub enum AuthCommand {
    Init {
        owner_key: Option<PathBuf>,
        force: bool,
        no_passphrase: bool,
        keychain: bool,
    },
    Status {
        owner_key: Option<PathBuf>,
        node_key: Option<PathBuf>,
        node_ownership: Option<PathBuf>,
        trust_store: Option<PathBuf>,
    },
    SignNode {
        owner_key: Option<PathBuf>,
        node_key: Option<PathBuf>,
        out: Option<PathBuf>,
        hostname_hint: Option<String>,
        node_label: Option<String>,
        expires_in_hours: u64,
    },
    RenewNode {
        owner_key: Option<PathBuf>,
        node_key: Option<PathBuf>,
        out: Option<PathBuf>,
        hostname_hint: Option<String>,
        node_label: Option<String>,
        expires_in_hours: u64,
    },
    VerifyNode {
        file: Option<PathBuf>,
        node_id: Option<String>,
        trust_store: Option<PathBuf>,
        trust_policy: Option<TrustPolicy>,
    },
    RotateNode {
        owner_key: Option<PathBuf>,
        node_key: Option<PathBuf>,
        out: Option<PathBuf>,
        hostname_hint: Option<String>,
        node_label: Option<String>,
        expires_in_hours: u64,
        revoke_current: bool,
        reason: Option<String>,
        trust_store: Option<PathBuf>,
    },
    RevokeOwner {
        owner_id: String,
        reason: Option<String>,
        trust_store: Option<PathBuf>,
    },
    RevokeNode {
        cert_id: Option<String>,
        node_id: Option<String>,
        reason: Option<String>,
        trust_store: Option<PathBuf>,
    },
    RotateOwner {
        owner_key: Option<PathBuf>,
        no_passphrase: bool,
        force: bool,
    },
    Trust {
        command: TrustCommand,
    },
}

Variants

Init

Generate a new owner keypair and save to keystore.

Fields

owner_key: Option<PathBuf>

Path to the owner keystore.

force: bool

Overwrite an existing keystore.

no_passphrase: bool

Skip passphrase prompt (store keys unencrypted).

keychain: bool

Store a random unlock passphrase in the OS keychain (macOS Keychain, Windows Credential Manager, Linux Secret Service). New keystores already default to this when a backend is available; use this flag to force it when overwriting an existing keystore.

Status

Show current owner identity status.

Fields

owner_key: Option<PathBuf>

Path to the owner keystore.

node_key: Option<PathBuf>

Path to the node identity file (default: ~/.mesh-llm/key).

node_ownership: Option<PathBuf>

Path to the node ownership certificate.

trust_store: Option<PathBuf>

Path to the trust store file.

SignNode

Sign the current node identity with the existing owner keystore.

Fields

owner_key: Option<PathBuf>

Path to the owner keystore.

node_key: Option<PathBuf>

Path to the node identity file (default: ~/.mesh-llm/key).

out: Option<PathBuf>

Output path for the signed node certificate.

hostname_hint: Option<String>

Optional hostname hint attached to the certificate.

node_label: Option<String>

Optional human label attached to this node certificate.

expires_in_hours: u64

Certificate lifetime in hours.

RenewNode

Renew the local node ownership certificate in place.

Fields

owner_key: Option<PathBuf>

Path to the owner keystore.

node_key: Option<PathBuf>

Path to the node identity file (default: ~/.mesh-llm/key).

out: Option<PathBuf>

Output path for the signed node certificate.

hostname_hint: Option<String>

Optional hostname hint attached to the certificate.

node_label: Option<String>

Optional human label attached to this node certificate.

expires_in_hours: u64

Certificate lifetime in hours.

VerifyNode

Verify a node ownership certificate.

Fields

file: Option<PathBuf>

Path to the signed node certificate.

node_id: Option<String>

Override the node ID to verify against.

trust_store: Option<PathBuf>

Path to the trust store file.

trust_policy: Option<TrustPolicy>

Override trust policy used for verification.

RotateNode

Rotate the local node identity key.

Fields

owner_key: Option<PathBuf>

Path to the owner keystore.

node_key: Option<PathBuf>

Path to the node identity file (default: ~/.mesh-llm/key).

out: Option<PathBuf>

Output path for the signed node certificate.

hostname_hint: Option<String>

Optional hostname hint attached to the certificate.

node_label: Option<String>

Optional human label attached to this node certificate.

expires_in_hours: u64

Certificate lifetime in hours.

revoke_current: bool

Revoke the current certificate and node ID in the local trust store first.

reason: Option<String>

Optional revocation reason stored in the trust store.

trust_store: Option<PathBuf>

Path to the trust store file.

RevokeOwner

Revoke an owner in the local trust store.

Fields

owner_id: String

Owner ID to revoke.

reason: Option<String>

Optional reason stored in the trust store.

trust_store: Option<PathBuf>

Path to the trust store file.

RevokeNode

Revoke a node certificate or node ID in the local trust store.

Fields

cert_id: Option<String>

Certificate ID to revoke.

node_id: Option<String>

Node endpoint ID to revoke.

reason: Option<String>

Optional reason stored in the trust store.

trust_store: Option<PathBuf>

Path to the trust store file.

RotateOwner

Rotate the existing owner keystore identity.

Fields

owner_key: Option<PathBuf>

Path to the owner keystore.

no_passphrase: bool

Skip passphrase prompt (store keys unencrypted).

force: bool

Overwrite an existing backup file if present.

Trust

Manage the local trust store.

Fields

command: TrustCommand

Trait Implementations

impl Debug for AuthCommand

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgMatches for AuthCommand

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for AuthCommand

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand