feat(kryphos): add vault CLI — init, add, list, get, rotate, revoke, identity

Cargo.toml

@@ -84,5 +84,8 @@ fjall = "3"
 # File locking
 fs2 = "0.4"
 
+# Password input
+rpassword = "7"
+
 # Testing
 tempfile = "3"

crates/akroasis/Cargo.toml

@@ -17,7 +17,10 @@ comfy-table = "7"
 dialoguer = "0.11"
 figment = { workspace = true }
 indicatif = "0.17"
+jiff = { workspace = true }
 koinon = { path = "../koinon" }
+kryphos = { path = "../kryphos" }
+rpassword = { workspace = true }
 serde = { workspace = true }
 serde_json = { workspace = true }
 snafu = { workspace = true }

crates/akroasis/src/cli.rs

@@ -3,6 +3,7 @@
 use clap::{Parser, Subcommand};
 
 use crate::radio::RadioCommand;
+use crate::vault::VaultCommand;
 
 #[allow(clippy::doc_markdown)]
 #[derive(Parser)]
@@ -37,8 +38,8 @@ pub enum Command {
     Nav,
     /// Knowledge — offline references, frequency databases, manuals
     Know,
-    /// Communications — encrypted messaging, key management
-    Comms,
+    /// Credential vault — store, retrieve, rotate, and revoke secrets
+    Vault(VaultArgs),
     /// Privacy — VPN, anonymization, OPSEC assessment
     Privacy,
     /// Serve the Akroasis daemon
@@ -51,3 +52,10 @@ pub struct RadioArgs {
     #[command(subcommand)]
     pub command: RadioCommand,
 }
+
+/// Vault subcommand arguments.
+#[derive(clap::Args)]
+pub struct VaultArgs {
+    #[command(subcommand)]
+    pub command: VaultCommand,
+}

crates/akroasis/src/main.rs

@@ -5,6 +5,7 @@
 
 mod cli;
 mod radio;
+mod vault;
 
 use std::path::PathBuf;
 
@@ -32,6 +33,10 @@ enum Error {
     /// A radio operation failed.
     #[snafu(display("{source}"))]
     Radio { source: radio::errors::RadioError },
+
+    /// A vault operation failed.
+    #[snafu(display("{source}"))]
+    Vault { source: vault::VaultCliError },
 }
 
 /// Application configuration loaded from TOML file and environment overrides.
@@ -73,7 +78,9 @@ fn dispatch(command: &Command) -> Result<(), Error> {
         Command::Auto => println!("praxis — automation (not yet implemented)"),
         Command::Nav => println!("chorografia — navigation (not yet implemented)"),
         Command::Know => println!("pinax — knowledge repository (not yet implemented)"),
-        Command::Comms => println!("kryphos — communications (not yet implemented)"),
+        Command::Vault(args) => {
+            vault::dispatch(&args.command).context(VaultSnafu)?;
+        }
         Command::Privacy => println!("lethe — privacy (not yet implemented)"),
         Command::Serve => println!("daemon mode (not yet implemented)"),
     }