mino 1.6.0

Secure AI agent sandbox using rootless containers
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

//! Mino - Secure AI Agent Sandbox Wrapper
//!
//! CLI entry point that dispatches to subcommands.

use clap::Parser;
use console::style;
use mino::cli::{Cli, Commands};
use mino::config::ConfigManager;
use mino::error::MinoResult;
use std::process::ExitCode;
use tracing::debug;
use tracing_subscriber::EnvFilter;

#[tokio::main]
async fn main() -> ExitCode {
    match run().await {
        Ok(code) => code,
        Err(e) => {
            eprintln!("{} {}", style("Error:").red().bold(), e);
            if let Some(hint) = e.hint() {
                eprintln!("{} {}", style("Hint:").yellow(), hint);
            }
            ExitCode::FAILURE
        }
    }
}

async fn run() -> MinoResult<ExitCode> {
    let cli = Cli::parse();

    // Initialize logging: 0 = warn (spinners only), 1 = info, 2+ = debug
    let filter = match cli.verbose {
        0 => EnvFilter::new("mino=warn"),
        1 => EnvFilter::new("mino=info"),
        _ => EnvFilter::new("mino=debug"),
    };

    tracing_subscriber::fmt()
        .with_env_filter(filter)
        .with_target(false)
        .without_time()
        .init();

    // Commands that don't need config loading
    if let Commands::Init(args) = cli.command {
        mino::cli::commands::init(args).await?;
        return Ok(ExitCode::SUCCESS);
    }
    if let Commands::Completions(args) = cli.command {
        mino::cli::commands::completions(args).await?;
        return Ok(ExitCode::SUCCESS);
    }

    // Load configuration
    let config_manager = if let Some(ref path) = cli.config {
        ConfigManager::with_path(path.clone())
    } else {
        ConfigManager::new()
    };

    // Find local config unless --no-local is set
    let local_config_path = if cli.no_local {
        debug!("Local config discovery disabled (--no-local)");
        None
    } else {
        let cwd = std::env::current_dir()
            .map_err(|e| mino::error::MinoError::io("getting current directory", e))?;
        let found = ConfigManager::find_local_config(&cwd);
        if let Some(ref path) = found {
            debug!("Found local config: {}", path.display());
        }
        found
    };

    // Trust gate: verify local config before merging
    let local_config_path = match local_config_path {
        Some(path) => {
            let ctx = mino::ui::UiContext::detect();
            mino::config::trust::verify_local_config(&path, &ctx, cli.trust_local).await?
        }
        None => None,
    };

    let config = config_manager
        .load_merged(local_config_path.as_deref())
        .await?;

    // Ensure state directories exist
    ConfigManager::ensure_state_dirs().await?;

    // Dispatch to command
    match cli.command {
        Commands::Init(_) | Commands::Completions(_) => unreachable!("handled above"),
        Commands::Exec(args) => mino::cli::commands::exec(args, &config).await?,
        Commands::Run(args) => mino::cli::commands::run(args, &config).await?,
        Commands::List(args) => mino::cli::commands::list(args, &config).await?,
        Commands::Stop(args) => mino::cli::commands::stop(args, &config).await?,
        Commands::Logs(args) => mino::cli::commands::logs(args, &config).await?,
        Commands::Status => mino::cli::commands::status(&config).await?,
        Commands::Setup(args) => mino::cli::commands::setup(args, &config).await?,
        Commands::Config(args) => mino::cli::commands::config(args, &config).await?,
        Commands::Cache(args) => mino::cli::commands::cache(args, &config).await?,
    };

    Ok(ExitCode::SUCCESS)
}