AuthZEN HTTP PDP with an optional repository-defined gRPC mirror

Usage: agentguard-server [OPTIONS]

Options:
      --listen <LISTEN>
          Listen address: tcp:// or tls://
          
          [env: AGENTGUARD_LISTEN=]
          [default: tcp://127.0.0.1:8443]

      --store <STORE>
          Path to the policy store
          
          [env: AGENTGUARD_STORE=]
          [default: .agentguard]

      --audit <AUDIT>
          Path to the decision log
          
          [env: AGENTGUARD_AUDIT=]
          [default: .audit/decisions.jsonl]

      --auth <AUTH>
          Authentication mode for `/access/v1/*` endpoints.
          
          Use `apikey` with `--auth-key-file <path>`, or use the complete `apikey:<path>` form
          through `AGENTGUARD_AUTH`.
          
          [env: AGENTGUARD_AUTH=]
          [default: disabled]

      --auth-key-file <AUTH_KEY_FILE>
          Path to the API-key store when `--auth apikey` is used
          
          [env: AGENTGUARD_AUTH_KEY_FILE=]

      --grpc-listen <GRPC_LISTEN>
          Optional gRPC listen address (e.g. `0.0.0.0:9443`). When set, the server also serves the
          repository-defined `AccessEvaluation` gRPC mirror on this port. It is plaintext and not
          standardized AuthZEN gRPC. Empty disables gRPC
          
          [env: AGENTGUARD_GRPC_LISTEN=]
          [default: ""]

  -h, --help
          Print help (see a summary with '-h')

  -V, --version
          Print version