1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
/// `openlatch boundary <enable|disable|status>` — model-boundary listener
/// config wiring + liveness. Gated behind `boundary` (rides on full-cli).
/// CLI command handler modules.
///
/// Each submodule provides a `run_*` function for the corresponding command.
/// All handlers receive `&OutputConfig` for consistent output formatting.
/// `openlatch evaluate` — the batch verdict surface another process drives over
/// NDJSON. Stateless by contract: it must answer on a box holding nothing but
/// the binary, which is what `ci/check-engine-purity.py` scans it for.
/// `openlatch inventory ...` — configuration plane CLI surface.
/// `openlatch proxy <status|discover|set|clear|test>` — the egress route, plus the
/// gate `init` runs before it touches anything destructive.
/// Hidden maintainer-only `__spike-update` subcommand — Phase 1 of the
/// auto-update plan. Not registered in user-facing docs.
/// `openlatch update [--check] [--apply]` — manual auto-update surface
/// (Phase 2). Routes through the daemon's `/admin/update` RPC when a
/// daemon is running, falls back to in-process apply otherwise.