Apply
dome rules apply [files...]
Deploy a rule bundle from one or more Cedar files.
After a successful deploy,
apply prints advisory warning: lines to
stderr for any Dome::MCPTool reference that does not match a tool in
the target workspace’s persisted MCP tool catalog (typo, rename, or a
tool not yet observed). Warnings never block the deploy.
List
dome rules list
List rule bundle history.
Show
dome rules show
Show effective rules across the full scope hierarchy.
Validate
dome rules validate [files...]
Validate Cedar rule files without deploying. Returns errors and prints catalog warnings (unknown tools or connections) to stderr. Pass --agent to run catalog checks against an agent’s scope — without it, only syntax and semantic validation runs.
Rollback
dome rules rollback <bundle-id>
Rollback to a previous rule bundle. The bundle UUID (from dome rules list) encodes the scope — no extra flags needed.
Generate
dome rules generate
Generate starter Cedar authorization rules.
Simulate
dome rules simulate
Simulate an authorization decision against active rules.