assay-cli 6.6.0

Policy-as-code gate for MCP agent tool calls, with verifiable evidence and Linux kernel enforcement.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

#![allow(unsafe_code)]
use clap::Parser;

pub mod aee_run_context;
pub mod aee_seal;
pub mod aee_seal_envelope;
pub mod aee_seal_key;
#[cfg(test)]
mod aee_seal_round_trip;
pub mod aee_trust_set;
pub mod backend;
pub mod caps;
mod cli;
mod cli_failure;
pub mod diagnostics;
pub mod enforcement_health_v1;
mod env_filter;
mod evidence_verify_reason;
pub mod exit_codes;
pub mod fs;
pub mod landlock_check;
pub mod landlock_net;
pub mod metrics;
mod output_write;
pub mod packs;
pub mod policy;
pub mod profile;
pub mod setup;
mod templates;

use cli::args::Cli;
use cli::commands::dispatch;
use cli_failure::CliFailure;

#[tokio::main(flavor = "multi_thread")]
async fn main() {
    if std::env::var("RUST_LOG").is_err() {
        std::env::set_var("RUST_LOG", "info");
    }
    env_logger::init();
    let cli = Cli::parse();
    let machine_output_verify_enabled = cli.machine_output_verify_enabled();
    let legacy_mode = std::env::var("MCP_CONFIG_LEGACY").ok().as_deref() == Some("1");
    let code = match dispatch(cli, legacy_mode).await {
        Ok(code) => code,
        Err(error) => match error.downcast::<CliFailure>() {
            Ok(failure) => failure.emit(machine_output_verify_enabled),
            Err(error) => {
                eprintln!("fatal: {error:?}");
                2 // CONFIG_ERROR from cli::commands::exit_codes::CONFIG_ERROR ideally, but hardcoded 2 is safe here
            }
        },
    };
    std::process::exit(code);
}