invariant-firewall 0.0.3

Invariant — a cryptographic command-validation firewall for AI-controlled physical systems (robotics, biosynthesis). Installs the `invariant` binary. Part of the unified workspace at https://github.com/clay-good/invariant.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74

#![forbid(unsafe_code)]

use clap::{CommandFactory, Parser, Subcommand};

mod biosynthesis;
mod key_file;
mod robotics;

#[derive(Parser)]
#[command(
    name = "invariant",
    version,
    about = "Cryptographic command-validation firewall — robotics & biosynthesis."
)]
struct Cli {
    #[command(subcommand)]
    domain: Option<Domain>,
}

#[derive(Subcommand)]
enum Domain {
    /// Robotics domain: validate motion commands, audit logs, profiles.
    Robotics(robotics::RoboticsArgs),
    /// Biosynthesis domain: validate synthesis bundles, audit logs, profiles.
    Biosynthesis(biosynthesis::BiosynthesisArgs),
    /// Domain-agnostic key operations.
    Keys(KeysArgs),
    /// Generate shell completions.
    Completions {
        /// Shell to generate completions for.
        #[arg(value_enum)]
        shell: clap_complete::Shell,
    },
}

#[derive(clap::Args)]
struct KeysArgs {
    #[command(subcommand)]
    cmd: KeysSubcommand,
}

#[derive(Subcommand)]
enum KeysSubcommand {
    /// Generate a new Ed25519 key pair (alias for `invariant robotics keygen`).
    Generate(robotics::commands::keygen::KeygenArgs),
}

fn main() {
    let _ = tracing_subscriber::fmt::try_init();
    let cli = Cli::parse();

    let exit = match cli.domain {
        Some(Domain::Robotics(a)) => robotics::run(a),
        Some(Domain::Biosynthesis(a)) => biosynthesis::run(a),
        Some(Domain::Keys(a)) => match a.cmd {
            KeysSubcommand::Generate(args) => robotics::commands::keygen::run(&args),
        },
        Some(Domain::Completions { shell }) => {
            clap_complete::generate(
                shell,
                &mut Cli::command(),
                "invariant",
                &mut std::io::stdout(),
            );
            0
        }
        None => {
            Cli::command().print_help().unwrap();
            println!();
            2
        }
    };
    std::process::exit(exit);
}