alias
ak secrets alias list
List every alias on this device and the ref each one points at.
Use ak secrets alias list to see which stored secret each alias name
currently follows. It prints names only, never a value.
Usage
ak secrets alias listThe command takes no positional arguments. Its one flag of its own is
--backend <keychain|file|memory>, the storage backend whose index it checks
(default keychain). It is read-only: it reads
~/.agentkit/secrets/aliases.json and the secrets index, never a value.
Shadowed aliases
An alias whose name is also a stored secret is marked shadowed. The stored
secret wins, so a release of that name hands over that secret, not the alias
target. A vault sync can bring such a secret in from another member at any
time; ak secrets sync reports it as alias_shadowed when it does. When the
secrets index cannot be read, no alias is marked.
Output
Human stdout prints one NAME -> REF line per alias, sorted by name. A
shadowed alias ends with
(shadowed: a stored secret has this name and wins; not followed). With no
aliases it prints
(no aliases; set one with `ak secrets alias set NAME REF`).
JSON success uses:
schema_version: 1
kind: secrets.alias
data.action: list
data.aliases[]: name, ref, updatedAt, shadowed?data.aliases is an empty array when nothing is stored. shadowed: true
appears only on a shadowed alias.
Exit behavior
| Exit | Meaning |
|---|---|
0 | Success, including an empty list. |
2 | Invalid flags or arguments, or an invalid row in the aliases file. |
5 | The aliases file could not be read. |