repocfg-demo / run

run - cli-guard examples/repocfg

NAME

run - execute a declared verb by name

SYNOPSIS

run

DESCRIPTION

Executes one verb by name from the discovered coily.yaml. The verb's argv was policy.ValidateArg'd at load time, so the tokens themselves cannot contain shell metacharacters. The wrapped exec is non-shell (exec.Command, not /bin/sh -c), so the argv tokens are forwarded literally.

Examples:

# invoke a declared verb
cd examples/repocfg
repocfg-demo run greet
# hello world

# invoke a verb that does not exist
repocfg-demo run nonexistent
# error: no such verb: nonexistent
# exit: 1

# required arg missing
repocfg-demo run
# error: usage: run <verb>
# exit: 1

What run does NOT do:

- It does not parse the wrapped tool's flag syntax. The argv is
  taken from coily.yaml as-is.
- It does not let you mutate the verb at the call site. To
  change what `go build ./...` does, edit coily.yaml and commit.
  That diff is the audit trail.
- It does not bypass policy validation. The yaml-loaded argv
  was already validated; any user-appended extras pass through
  ValidateArg too.

Agent behavior on "no such verb": surface to operator with the output of list. Do not guess at alternative spellings; the verb catalog is the catalog.

Usage:

run [GLOBAL OPTIONS] [command [COMMAND OPTIONS]] [ARGUMENTS...]