vars: add 'clan vars keygen'

pkgs/clan-cli/clan_cli/vars/keygen.py

@@ -0,0 +1,49 @@
+import argparse
+import logging
+import os
+
+from clan_cli.clan_uri import FlakeId
+from clan_cli.errors import ClanError
+from clan_cli.secrets.key import generate_key
+from clan_cli.secrets.users import add_user
+
+log = logging.getLogger(__name__)
+
+
+def keygen(user: str | None, flake: FlakeId, force: bool) -> None:
+    if user is None:
+        user = os.getenv("USER", None)
+        if not user:
+            msg = "No user provided and $USER is not set. Please provide a user via --user."
+            raise ClanError(msg)
+    pub_key = generate_key()
+    add_user(
+        flake_dir=flake.path / "vars",
+        name=user,
+        key=pub_key,
+        force=force,
+    )
+
+
+def _command(
+    args: argparse.Namespace,
+) -> None:
+    keygen(
+        user=args.user,
+        flake=args.flake,
+        force=args.force,
+    )
+
+
+def register_keygen_parser(parser: argparse.ArgumentParser) -> None:
+    parser.add_argument(
+        "--user",
+        help="The user to generate the keys for. Default: $USER",
+        default=None,
+    )
+
+    parser.add_argument(
+        "-f", "--force", help="overwrite existing user", action="store_true"
+    )
+
+    parser.set_defaults(func=_command)