Enum AgentCommands

atomic-cli/src/commands/identity/agent/mod.rs:75–130

/// Available agent subcommands.
#[derive(Debug, Subcommand)]
pub enum AgentCommands {
    /// Create an agent identity and delegate to it.
    ///
    /// Generates a keypair, creates a delegated identity, signs a certificate
    /// with your key, enrolls it with the server, and binds it in config so
    /// hooks pick it up. One command, because every one of those steps is
    /// useless without the others.
    ///
    /// # Examples
    ///
    /// ```text
    /// # An agent that can record and push to two projects for 30 days
    /// atomic identity agent create claude \
    ///     --agent-type claude-code \
    ///     --projects acme/api,acme/web \
    ///     --can read,record,push
    ///
    /// # A read-only agent, no server enrollment
    /// atomic identity agent create reviewer --can read --local
    /// ```
    Create(Create),

    /// List agent identities and the state of their delegations.
    ///
    /// # Examples
    ///
    /// ```text
    /// atomic identity agent list
    /// atomic identity agent list --include-expired
    /// atomic identity agent list --json
    /// ```
    List(List),

    /// Show one agent in full: identity, certificate, scope, status.
    Show(Show),

    /// Reissue an agent's current scope with a new expiry.
    ///
    /// A convenience over `atomic identity grant new`: it carries the existing
    /// `--can` and `--projects` forward so you need only say how long. The key
    /// does not change, so nothing is re-enrolled, and like every issuance it
    /// reaches no server.
    Renew(Renew),

    /// Withdraw an agent's authority.
    ///
    /// Bumps the agent's epoch — killing every grant issued to it so far,
    /// including ones this machine has never seen — and deny-lists the grants
    /// it does know, each with a signed revocation.
    ///
    /// Unlike issuing, this must reach the server: a credential the holder
    /// possesses cannot prove its own withdrawal. The identity and its past
    /// work stay, so attribution for changes already recorded does not
    /// evaporate.
    Revoke(Revoke),
}

impl Command for Agent {