authorize

func NewCmd ¶

func NewCmd() *cobra.Command

NewCmd builds `aiwf authorize <id>` in its three modes:

aiwf authorize <id> --to <agent> [--reason "..."] [--force]
aiwf authorize <id> --pause "<reason>"
aiwf authorize <id> --resume "<reason>"

Exactly one of --to / --pause / --resume must be set. The dispatcher resolves the actor (must be human/), locks the repo, loads the existing scopes for the entity from git log (so --pause / --resume can find their target), and hands off to verb.Authorize.

Per docs/pocv3/design/provenance-model.md §"The aiwf authorize verb" the `--reason` argument has a different role per mode:

• --to: optional; the rationale the human writes when opening a scope.
• --pause / --resume: required; the argument to the flag is itself the reason (e.g. `--pause "blocked by E-09"`). Passing both `--pause "..."` and `--reason "..."` is a usage error.

func Run ¶

func Run(id, actor, root, to, pause, resume, reason string, force bool) int

Run executes `aiwf authorize`. Returns one of the cliutil.Exit* codes.