Method revoke_everything

atomic-cli/src/commands/identity/delegation.rs:562–599

Bump the delegator's epoch: everything they have issued, to anyone, dies. There is nothing to sign per-grant here and nothing to record locally, because the whole point is to reach grants this machine has never seen. It is purely a server-side statement about time, so unlike a targeted revocation it is useless offline — and says so rather than pretending.

(&self, store: &IdentityStore)

    /// It is purely a server-side statement about time, so unlike a targeted
    /// revocation it is useless offline — and says so rather than pretending.
    async fn revoke_everything(&self, store: &IdentityStore) -> CliResult<()> {
        if self.local {
            return Err(CliError::InvalidArgument {
                message: "--all-mine cannot be done locally: it is a statement the server \
                          makes about every grant you have issued, including ones this \
                          machine has never seen."
                    .to_string(),
            });
        }

        let delegator = super::load_identity_or_default(store, None)?;
        let (client, url) =
            crate::commands::client::build_apex_client_as(&delegator, self.server.as_deref())
                .await?;

        let result = client
            .set_delegator_epoch()
            .await
            .map_err(|e| CliError::RemoteError {
                message: format!("Could not set the epoch: {e}"),
                url: Some(url.clone()),
            })?;

        print_success(&format!(
            "Every grant issued by '{}' is now invalid at {url}",
            delegator.name
        ));
        if let Some(at) = result.delegations_valid_from {
            println!("  Epoch         {}", at.format("%Y-%m-%d %H:%M:%S UTC"));
        }
        println!();
        print_hint(
            "Your agents will stop working until you issue fresh grants:  \
             atomic identity grant new <agent>",
        );

        Ok(())
    }
}

// ---------------------------------------------------------------------------