CRE::Cli

USAGE = "cre - Credential Rotation Enforcer\n\nUsage: cre <subcommand> [options]\n\nSubcommands:\n run headless daemon (production / systemd)\n watch engine + live TUI in same process\n check evaluate policies once, exit non-zero on violations\n rotate <credential-id> manually rotate a single credential\n policy list list compiled-in policies\n policy show <name> inspect one policy\n export --framework=<name> generate signed compliance evidence bundle\n audit verify verify hash chain + HMAC ratchet + Merkle batches\n verify-bundle <zip> verify a compliance evidence ZIP offline\n demo tier-1 zero-deps demo (SQLite + .env rotator)\n tui-demo 8-second TUI preview with synthetic events\n version print version\n help this message\n\nCommon options:\n --output=human|json|ndjson output format (default: human)\n --config=PATH config file (default: $CRE_CONFIG or ./config.cr)"

dispatch(argv : Array(String), io : IO = STDOUT) : Int32