Add basic cli application

.devcontainer/devcontainer.json

@@ -8,13 +8,19 @@
       "extensions": [
         "denoland.vscode-deno",
         "doppler.doppler-vscode",
-        "ms-azuretools.vscode-docker"
+        "ms-azuretools.vscode-docker",
+        "rust-lang.rust-analyzer",
+        "tamasfe.even-better-toml"
       ]
     }
   },
   "features": {
     "ghcr.io/itsmechlark/features/doppler:2": {
       "version": "latest"
+    },
+    "ghcr.io/devcontainers/features/rust:1": {
+      "version": "latest",
+      "profile": "default"
     }
   },
   "portsAttributes": {

.github/workflows/publish.yml

@@ -6,6 +6,7 @@ on:
       - "v[0-9]+.[0-9]+.[0-9]+*"
 
 permissions:
+  contents: write
   packages: write
 
 env:
@@ -79,3 +80,64 @@ jobs:
           chart: ./helm
           version: ${{ steps.version.outputs.full }}
           appVersion: ${{ steps.version.outputs.full }}
+
+  rust-cli-build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - uses: nowsprinting/check-version-format-action@v3
+        id: version
+        with:
+          prefix: "v"
+
+      - name: Install Rust toolchain
+        uses: actions-rs/toolchain@v1
+        with:
+          profile: minimal
+          toolchain: stable
+          override: true
+
+      - name: Build Rust CLI
+        working-directory: ./cli
+        run: cargo build --release
+
+      - name: Upload Rust CLI binary
+        uses: actions/upload-artifact@v4
+        with:
+          name: keys-cli-${{ steps.version.outputs.full }}
+          path: cli/target/release/keys
+          retention-days: 30
+
+  github-release:
+    needs:
+      - docker-publish
+      - helm-publish
+      - rust-cli-build
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - uses: nowsprinting/check-version-format-action@v3
+        id: version
+        with:
+          prefix: "v"
+
+      - name: Download Rust CLI binary
+        uses: actions/download-artifact@v4
+        with:
+          name: keys-cli-${{ steps.version.outputs.full }}
+          path: ./artifacts
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.version.outputs.full }}
+          name: Release ${{ steps.version.outputs.full }}
+          generate_release_notes: true
+          files: |
+            ./artifacts/keys

.github/workflows/test.yml

@@ -43,3 +43,49 @@ jobs:
         uses: codecov/codecov-action@v5
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        with:
+          flags: deno-server
+
+  test-rust-cli:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Setup repo
+        uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: actions-rs/toolchain@v1
+        with:
+          profile: minimal
+          toolchain: stable
+          override: true
+          components: rustfmt, clippy
+
+      - name: Install cargo-llvm-cov
+        uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-llvm-cov
+
+      - name: Check Rust formatting
+        working-directory: ./cli
+        run: cargo fmt --all -- --check
+
+      - name: Lint with clippy
+        working-directory: ./cli
+        run: cargo clippy --all-targets -- -D warnings
+
+      - name: Build Rust CLI
+        working-directory: ./cli
+        run: cargo build
+
+      - name: Run Rust tests with coverage
+        working-directory: ./cli
+        run: cargo llvm-cov --lcov --output-path lcov.info
+
+      - name: Upload Rust coverage to Codecov
+        uses: codecov/codecov-action@v5
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        with:
+          files: ./cli/lcov.info
+          flags: rust-cli

README.md

@@ -17,9 +17,8 @@ machine. This is currently done with manual curl commands, and not typically
 automated with a CRON due to the risk of losing access to machines as a result
 of the service being down or misconfigured.
 
-In the future ([#24](https://github.com/danielemery/keys/issues/24)) a cli tool
-will be provided to safely manage the `authorized_keys` file with guards in
-place to prevent loss of access.
+A CLI tool is now available to interact with the keys server. See the
+[CLI README](/cli/README.md) for more information on installation and usage.
 
 ### Get all listed keys
 

cli/.gitignore

@@ -0,0 +1,2 @@
+/target/
+**/*.rs.bk