Enum Cmd

pub(crate) enum Cmd {
    Init {
        name: String,
    },
    Validate,
    Authorize {
        request: String,
        entities: Option<String>,
        skip_audit: bool,
    },
    Sim {
        request: String,
        entities: Option<String>,
    },
    Delegate {
        from: String,
        to: String,
        actions: Vec<String>,
        resources: Vec<String>,
        ttl: i64,
        key_id: Option<String>,
        key_file: Option<String>,
        out: Option<String>,
    },
    Verify {
        token: String,
        keys: String,
    },
    ApiKey {
        action: ApiKeyCmd,
    },
    Schema,
    Log {
        action: LogCmd,
    },
    Audit {
        action: AuditCmd,
    },
    Gen {
        description: String,
        name: Option<String>,
        provider: String,
        model: String,
        dry_run: bool,
        confirm: bool,
    },
    Doctor,
}

Variants

Init

Initialize a new agentguard store in the current directory.

Fields

name: String

Project name (used as default org in policies)

Validate

Validate policies against the schema.

Authorize

Run a single authorization check from a request file or stdin.

Fields

request: String

Path to a JSON request, or ‘-’ for stdin

entities: Option<String>

Path to entities.json (default: .agentguard/entities.json)

skip_audit: bool

Skip writing to the audit log for this decision. Aliases: –no-audit (deprecated).

Sim

Simulate: same as authorize, but always reads from a file and pretty-prints.

Fields

request: String

entities: Option<String>

Delegate

Mint a delegation token.

Fields

from: String

to: String

actions: Vec<String>

resources: Vec<String>

ttl: i64

key_id: Option<String>

key_file: Option<String>

out: Option<String>

Write token to this file instead of stdout

Verify

Verify and inspect a delegation token.

Fields

token: String

Compact token string, or path to a file with the token on a single line

keys: String

Public key file (one or more key_id=base64 lines)

ApiKey

Manage standalone PDP API keys.

Fields

action: ApiKeyCmd

Schema

Inspect the schema.

Log

Tail/query the audit log.

Fields

action: LogCmd

Audit

Audit log operations (verify, export, SAR, erase, notarize).

Fields

action: AuditCmd

Gen

Generate Cedar policy from a natural language description (requires OPENAI_API_KEY or ANTHROPIC_API_KEY env).

Fields

description: String

name: Option<String>

Write generated policy to this file under policies/

provider: String

LLM provider (openai|anthropic)

model: String

Model name

dry_run: bool

Print the generated policy to stdout instead of writing to the store. Use this to inspect the LLM output before installing it.

confirm: bool

Prompt for confirmation (‘y/N’) on stderr before writing the policy. Has no effect with –dry-run.

Doctor

Diagnose a deployment: schema, policies, audit log, chain, authorizer.

Trait Implementations

impl FromArgMatches for Cmd

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from [ArgMatches], parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from [ArgMatches], parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for Cmd

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to [Command] so it can instantiate Self via [FromArgMatches::from_arg_matches_mut]

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to [Command] so it can instantiate self via [FromArgMatches::update_from_arg_matches_mut]

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand