infill-bedrock 0.3.0__tar.gz

infill_bedrock-0.3.0/CONTRIBUTING.md

@@ -0,0 +1,45 @@
+# Contributing to Bedrock
+
+Thank you for your interest in contributing to Bedrock. This project is developed by InFill Systems, LLC under a proprietary license.
+
+## Development Setup
+
+```bash
+cd core
+pip install -e ".[dev]"
+pytest
+
+cd ../sdk-python
+pip install -e ".[dev]"
+pytest
+
+cd ../sdk-ts
+npm install
+npm test
+```
+
+## Code Standards
+
+- **Python 3.11+** with type hints (`mypy --strict`)
+- **Line length**: 100 chars (black + isort)
+- **Tests**: every feature gets tests before merge
+- **Commit messages**: `B-XXX: Short description` format
+
+## Pull Request Process
+
+1. Create a feature branch from `develop`
+2. Write tests first (TDD preferred)
+3. Implement the feature
+4. Ensure all tests pass: `pytest`, `npm test`
+5. Submit PR with description referencing the build number (B-XXX)
+6. Code review required before merge
+
+## Security Vulnerabilities
+
+**Do not report security issues through public GitHub issues.**
+
+Email security@infill.systems instead. See [SECURITY.md](SECURITY.md) for details.
+
+## License
+
+By contributing, you agree that your contributions will be licensed under the same proprietary license as Bedrock (InFill Systems, LLC).

infill_bedrock-0.3.0/LICENSE

@@ -0,0 +1,57 @@
+Business Source License 1.1
+
+Copyright (c) 2025-2026 InFill Systems, LLC
+
+License Scope: The contents of this repository are licensed under the
+Business Source License 1.1 (the "License"). You may not use this file
+except in compliance with the License. You may obtain a copy of the
+License at https://github.com/drc10101/bedrock/blob/main/LICENSE
+
+Change Date: On or after the Change Date specified in the License
+Reference below, you may use this software under the terms of the
+Change License specified below.
+
+Change License: Apache License, Version 2.0
+
+License Reference: Bedrock Core — BSL 1.1
+
+Additional Use Grant: You may use the Software for development,
+testing, and evaluation purposes, including in non-production
+environments, provided that:
+
+  1. You have obtained a valid license key from InFill Systems, LLC;
+     OR
+  2. You are within a 30-day trial period, which begins on the date
+     you first install or use the Software.
+
+Production deployment of the Software requires a Production License
+from InFill Systems, LLC. "Production" means any deployment that
+serves end users, processes live data, or operates in a non-
+development environment.
+
+You may create modifications, extensions, or derivative works of the
+Software, provided that:
+
+  (a) Any derivative works are also subject to this License; and
+  (b) You retain all original copyright notices; and
+  (c) You do not represent that your derivative works are the
+      original Software.
+
+You may not:
+  - Use the Software in production without a valid Production License;
+  - Use the Software after the 30-day trial period without a valid
+    Developer or Production License;
+  - Remove, alter, or obscure any license enforcement mechanisms;
+  - Distribute the Software or derivative works under a different
+    license without written permission from InFill Systems, LLC;
+  - Use the Software to compete with InFill Systems, LLC.
+
+The Software is provided "as is", without warranty of any kind,
+express or implied, including but not limited to the warranties of
+merchantability, fitness for a particular purpose and noninfringement.
+In no event shall the authors or copyright holders be liable for any
+claim, damages or other liability, whether in an action of contract,
+tort or otherwise, arising from, out of or in connection with the
+Software or the use or other dealings in the Software.
+
+For license inquiries: licensing@infill.systems

infill_bedrock-0.3.0/MANIFEST.in

@@ -0,0 +1,7 @@
+include LICENSE
+include README.md
+include CHANGELOG.md
+include SECURITY.md
+include CONTRIBUTING.md
+recursive-include bedrock *.py
+recursive-include docs *.md

infill_bedrock-0.3.0/PKG-INFO

@@ -0,0 +1,268 @@
+Metadata-Version: 2.4
+Name: infill-bedrock
+Version: 0.3.0
+Summary: Identity-based security framework. Every node is a user. Everything between is encrypted at rest.
+Author: InFill Systems, LLC
+License: BSL-1.1
+Project-URL: Homepage, https://bedrock.dev
+Project-URL: Repository, https://github.com/drc10101/bedrock
+Project-URL: Documentation, https://bedrock.dev/docs
+Project-URL: Issues, https://github.com/drc10101/bedrock/issues
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Security
+Classifier: Topic :: Security :: Cryptography
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: cryptography>=42.0
+Requires-Dist: fastapi>=0.110
+Requires-Dist: uvicorn[standard]>=0.29
+Requires-Dist: uuid7>=0.1
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=1.0; extra == "dev"
+Requires-Dist: pytest-cov>=5.0; extra == "dev"
+Requires-Dist: ruff>=0.4; extra == "dev"
+Requires-Dist: mypy>=1.10; extra == "dev"
+Requires-Dist: black>=24.0; extra == "dev"
+Requires-Dist: isort>=5.13; extra == "dev"
+Requires-Dist: httpx2>=0.28; extra == "dev"
+Provides-Extra: sqlcipher
+Requires-Dist: sqlcipher3>=0.5; extra == "sqlcipher"
+Provides-Extra: hsm
+Requires-Dist: pkcs11>=1.1; extra == "hsm"
+Provides-Extra: stripe
+Requires-Dist: stripe>=10.0; extra == "stripe"
+Dynamic: license-file
+
+<p align="center">
+  <img src="assets/Bedrock_Logo.png" alt="Bedrock" width="600">
+</p>
+
+<h3 align="center">Build your app. Inherit the security.</h3>
+
+<p align="center">
+  Bedrock is the security layer your app sits on top of.<br>
+  Identity, encryption, consent, and audit — handled from the start.
+</p>
+
+<p align="center">
+  <a href="https://github.com/drc10101/bedrock/releases/tag/v0.3.0"><img src="https://img.shields.io/badge/version-0.3.0-blue" alt="Version"></a>
+  <img src="https://img.shields.io/badge/tests-841-passing-brightgreen" alt="Tests">
+  <img src="https://img.shields.io/badge/python-3.11+-blue" alt="Python">
+  <img src="https://img.shields.io/badge/license-BSL--1.1-orange" alt="License">
+  <img src="https://img.shields.io/badge/trial-free_30_days-success" alt="Free Trial">
+</p>
+
+---
+
+**You don't bolt security on after the fact. You build on Bedrock, and your app inherits it.**
+
+Bedrock is a security framework that your application calls into — not a service you route traffic through. When your app uses Bedrock's SDK, every node gets a cryptographic identity, every field write gets encrypted at rest, every cross-silo read requires cryptographic consent, and every action gets written to a tamper-evident audit chain. Your app focuses on business logic. Bedrock handles the security guarantees.
+
+## What Your App Gets
+
+- **Cryptographic identity for every node.** Each service, device, or user in your system gets a signed identity. No anonymous access.
+- **Field-level encryption at rest.** Data is encrypted before it hits storage. Siloed by category — medical records, financial data, PII — each in its own encrypted container.
+- **Consent-gated data access.** No cross-silo read without a cryptographic consent token. If the patient didn't authorize it, the data doesn't move.
+- **Tamper-evident audit chain.** Every write, read, consent grant, and revocation is SHA-256 chained. Detect tampering, prove compliance.
+- **Self-healing mesh transport.** Encrypted node-to-node communication with automatic failover and reconnection.
+- **License-gated operation.** Runtime enforcement of tier limits — nodes, certificates, features.
+
+Your app calls the SDK. The SDK calls Bedrock Core. The security is there because you built on Bedrock, not because you remembered to add it later.
+
+## How It Works
+
+```
+┌─────────────────────────────────────────────────────┐
+│                    Your Application                   │
+│                                                       │
+│   Business logic, routes, UI — whatever you build     │
+│                                                       │
+├──────────┬──────────┬──────────────────────────────┤
+│  Python  │TypeScript│          REST API              │
+│   SDK    │   SDK    │                                │
+├──────────┴──────────┴──────────────────────────────┤
+│                                                       │
+│                  Bedrock Core                         │
+│                                                       │
+│   You inherit: identity, encryption, consent,         │
+│   audit, key management, mesh transport               │
+│                                                       │
+└─────────────────────────────────────────────────────┘
+```
+
+Your app makes normal SDK calls — register a node, create a silo, encrypt a field, request consent. Bedrock handles the cryptography, the key derivation, the consent verification, the audit logging. You never touch raw crypto. You never write your own access control. You build on top, and the security is already there.
+
+## Status
+
+Bedrock v0.3 is an active development release. Core modules (crypto, identity, data separation, licensing) are well-tested (841 tests, zero type errors). The HTTP API server has SQLite persistence and works for development and testing, but is not yet hardened for production traffic. See [PRODUCTION_DEPLOYMENT.md](../docs/PRODUCTION_DEPLOYMENT.md) for the roadmap.
+
+## Quick Start
+
+```bash
+# Install
+pip install bedrock-core
+
+# Initialize a project
+bedrock init ./my-project
+cd my-project
+
+# Generate a free 30-day trial license
+bedrock trial --licensee "your-email@example.com"
+
+# Start the API server
+bedrock serve
+```
+
+### From Source
+
+```bash
+git clone https://github.com/drc10101/bedrock.git
+cd bedrock/core
+pip install -e ".[dev]"
+pytest
+
+# Or with Docker
+docker compose -f deploy/docker-compose.yml up
+```
+
+## Use It In Your App
+
+### Python
+
+```python
+from bedrock_sdk import BedrockClient
+
+client = BedrockClient(
+    base_url="https://bedrock.infill.systems",
+    license_key="1:...",
+)
+
+# Register your service as a node — it now has a cryptographic identity
+node = client.nodes.register(name="my-service", node_type="application")
+
+# Create a data silo — medical records live here, encrypted at rest
+silo = client.silos.create(
+    name="patient-records",
+    display_name="Patient Records",
+    categories=["medical", "phi"],
+)
+
+# Encrypt a field before storing it — Bedrock handles key derivation
+ciphertext = client.encryption.encrypt(
+    plaintext="SSN-123-45-6789",
+    silo=silo.silo_id,
+    record_id="patient-001",
+    scope="ssn",
+    operation="store",
+)
+
+# Request consent before reading cross-silo data — cryptographic proof required
+consent = client.consent.request(
+    requester_id=node.node_id,
+    target_id="patient-001",
+    silo_id=silo.silo_id,
+    purpose="treatment",
+    scope=["ssn", "diagnosis"],
+)
+```
+
+### TypeScript
+
+```typescript
+import { BedrockClient } from "@infill/bedrock-sdk";
+
+const client = new BedrockClient({
+  baseUrl: "https://bedrock.infill.systems",
+  licenseKey: "1:...",
+});
+
+// Same API surface as Python SDK
+const node = await client.nodes.register({ name: "my-service" });
+const silo = await client.silos.create({ name: "patient-records" });
+```
+
+That's it. Your app now has identity, encryption, consent, and audit — because it's built on Bedrock.
+
+## CLI Commands
+
+| Command | Description |
+|---------|-------------|
+| `bedrock init [dir]` | Initialize a new project (config, keys, env template) |
+| `bedrock trial [--licensee]` | Generate a free 30-day trial license |
+| `bedrock serve [--host] [--port]` | Start the API server |
+| `bedrock keygen [--key-id]` | Generate a signing key |
+| `bedrock license issue --tier --licensee` | Issue a license key |
+| `bedrock license validate --key` | Validate a license key |
+| `bedrock license revoke --key-id` | Revoke a signing key |
+| `bedrock health [--json]` | Run health checks |
+| `bedrock status` | Show system status and config |
+
+## Licensing
+
+Bedrock is source-available under the [Business Source License 1.1](LICENSE).
+
+### Free Trial
+
+Start with a free 30-day trial — full developer features, 3 local nodes, self-signed certificates. No credit card required.
+
+```bash
+bedrock trial --licensee "your-email@example.com"
+```
+
+### Pricing
+
+| Tier | Price | Nodes | Certificates | Use Case |
+|------|-------|-------|---------------|----------|
+| **Trial** | Free (30 days) | 3 | Self-signed | Evaluation and development |
+| **Developer** | $99/yr | 3 | Self-signed | Individual development |
+| **Professional** | $499/yr | 10 | Self-signed | Team development |
+| **Starter** | $5K/yr | 5 | CA-enforced | Production deployment |
+| **Business** | $20K/yr | 25 | CA-enforced | Production at scale |
+| **Enterprise** | Custom | Unlimited | CA-enforced | Mission-critical deployments |
+
+**Non-production use** (development, testing, evaluation) is free forever under BSL-1.1. **Production deployment** requires a paid license.
+
+### How It Works
+
+1. `bedrock trial` — get a free 30-day license with full developer features
+2. Build your app on Bedrock — identity, encryption, consent, audit are inherited
+3. When ready for production, purchase a runtime license at [bedrock.dev/pricing](https://bedrock.dev/pricing)
+4. Upgrade your license key — no code changes, no reinstallation
+
+## Testing
+
+```bash
+# Core tests
+cd core && pytest
+
+# Python SDK tests
+cd sdk-python && pytest
+
+# TypeScript SDK tests
+cd sdk-ts && npm test
+```
+
+841 tests pass across core modules (841) and Python SDK (20). Zero type errors.
+
+## Security
+
+See [SECURITY.md](SECURITY.md) for reporting vulnerabilities.
+
+**Do not report security issues through public GitHub issues.**
+
+## License
+
+This software is licensed under the [Business Source License 1.1](LICENSE).
+
+You may use, modify, and redistribute this software for non-production purposes (development, testing, evaluation) free of charge. Production use requires a paid license — see [bedrock.dev/pricing](https://bedrock.dev/pricing).
+
+The BSL converts to an open-source license (typically Apache 2.0) on a predetermined change date — see the LICENSE file for details.

infill_bedrock-0.3.0/README.md

@@ -0,0 +1,224 @@
+<p align="center">
+  <img src="assets/Bedrock_Logo.png" alt="Bedrock" width="600">
+</p>
+
+<h3 align="center">Build your app. Inherit the security.</h3>
+
+<p align="center">
+  Bedrock is the security layer your app sits on top of.<br>
+  Identity, encryption, consent, and audit — handled from the start.
+</p>
+
+<p align="center">
+  <a href="https://github.com/drc10101/bedrock/releases/tag/v0.3.0"><img src="https://img.shields.io/badge/version-0.3.0-blue" alt="Version"></a>
+  <img src="https://img.shields.io/badge/tests-841-passing-brightgreen" alt="Tests">
+  <img src="https://img.shields.io/badge/python-3.11+-blue" alt="Python">
+  <img src="https://img.shields.io/badge/license-BSL--1.1-orange" alt="License">
+  <img src="https://img.shields.io/badge/trial-free_30_days-success" alt="Free Trial">
+</p>
+
+---
+
+**You don't bolt security on after the fact. You build on Bedrock, and your app inherits it.**
+
+Bedrock is a security framework that your application calls into — not a service you route traffic through. When your app uses Bedrock's SDK, every node gets a cryptographic identity, every field write gets encrypted at rest, every cross-silo read requires cryptographic consent, and every action gets written to a tamper-evident audit chain. Your app focuses on business logic. Bedrock handles the security guarantees.
+
+## What Your App Gets
+
+- **Cryptographic identity for every node.** Each service, device, or user in your system gets a signed identity. No anonymous access.
+- **Field-level encryption at rest.** Data is encrypted before it hits storage. Siloed by category — medical records, financial data, PII — each in its own encrypted container.
+- **Consent-gated data access.** No cross-silo read without a cryptographic consent token. If the patient didn't authorize it, the data doesn't move.
+- **Tamper-evident audit chain.** Every write, read, consent grant, and revocation is SHA-256 chained. Detect tampering, prove compliance.
+- **Self-healing mesh transport.** Encrypted node-to-node communication with automatic failover and reconnection.
+- **License-gated operation.** Runtime enforcement of tier limits — nodes, certificates, features.
+
+Your app calls the SDK. The SDK calls Bedrock Core. The security is there because you built on Bedrock, not because you remembered to add it later.
+
+## How It Works
+
+```
+┌─────────────────────────────────────────────────────┐
+│                    Your Application                   │
+│                                                       │
+│   Business logic, routes, UI — whatever you build     │
+│                                                       │
+├──────────┬──────────┬──────────────────────────────┤
+│  Python  │TypeScript│          REST API              │
+│   SDK    │   SDK    │                                │
+├──────────┴──────────┴──────────────────────────────┤
+│                                                       │
+│                  Bedrock Core                         │
+│                                                       │
+│   You inherit: identity, encryption, consent,         │
+│   audit, key management, mesh transport               │
+│                                                       │
+└─────────────────────────────────────────────────────┘
+```
+
+Your app makes normal SDK calls — register a node, create a silo, encrypt a field, request consent. Bedrock handles the cryptography, the key derivation, the consent verification, the audit logging. You never touch raw crypto. You never write your own access control. You build on top, and the security is already there.
+
+## Status
+
+Bedrock v0.3 is an active development release. Core modules (crypto, identity, data separation, licensing) are well-tested (841 tests, zero type errors). The HTTP API server has SQLite persistence and works for development and testing, but is not yet hardened for production traffic. See [PRODUCTION_DEPLOYMENT.md](../docs/PRODUCTION_DEPLOYMENT.md) for the roadmap.
+
+## Quick Start
+
+```bash
+# Install
+pip install bedrock-core
+
+# Initialize a project
+bedrock init ./my-project
+cd my-project
+
+# Generate a free 30-day trial license
+bedrock trial --licensee "your-email@example.com"
+
+# Start the API server
+bedrock serve
+```
+
+### From Source
+
+```bash
+git clone https://github.com/drc10101/bedrock.git
+cd bedrock/core
+pip install -e ".[dev]"
+pytest
+
+# Or with Docker
+docker compose -f deploy/docker-compose.yml up
+```
+
+## Use It In Your App
+
+### Python
+
+```python
+from bedrock_sdk import BedrockClient
+
+client = BedrockClient(
+    base_url="https://bedrock.infill.systems",
+    license_key="1:...",
+)
+
+# Register your service as a node — it now has a cryptographic identity
+node = client.nodes.register(name="my-service", node_type="application")
+
+# Create a data silo — medical records live here, encrypted at rest
+silo = client.silos.create(
+    name="patient-records",
+    display_name="Patient Records",
+    categories=["medical", "phi"],
+)
+
+# Encrypt a field before storing it — Bedrock handles key derivation
+ciphertext = client.encryption.encrypt(
+    plaintext="SSN-123-45-6789",
+    silo=silo.silo_id,
+    record_id="patient-001",
+    scope="ssn",
+    operation="store",
+)
+
+# Request consent before reading cross-silo data — cryptographic proof required
+consent = client.consent.request(
+    requester_id=node.node_id,
+    target_id="patient-001",
+    silo_id=silo.silo_id,
+    purpose="treatment",
+    scope=["ssn", "diagnosis"],
+)
+```
+
+### TypeScript
+
+```typescript
+import { BedrockClient } from "@infill/bedrock-sdk";
+
+const client = new BedrockClient({
+  baseUrl: "https://bedrock.infill.systems",
+  licenseKey: "1:...",
+});
+
+// Same API surface as Python SDK
+const node = await client.nodes.register({ name: "my-service" });
+const silo = await client.silos.create({ name: "patient-records" });
+```
+
+That's it. Your app now has identity, encryption, consent, and audit — because it's built on Bedrock.
+
+## CLI Commands
+
+| Command | Description |
+|---------|-------------|
+| `bedrock init [dir]` | Initialize a new project (config, keys, env template) |
+| `bedrock trial [--licensee]` | Generate a free 30-day trial license |
+| `bedrock serve [--host] [--port]` | Start the API server |
+| `bedrock keygen [--key-id]` | Generate a signing key |
+| `bedrock license issue --tier --licensee` | Issue a license key |
+| `bedrock license validate --key` | Validate a license key |
+| `bedrock license revoke --key-id` | Revoke a signing key |
+| `bedrock health [--json]` | Run health checks |
+| `bedrock status` | Show system status and config |
+
+## Licensing
+
+Bedrock is source-available under the [Business Source License 1.1](LICENSE).
+
+### Free Trial
+
+Start with a free 30-day trial — full developer features, 3 local nodes, self-signed certificates. No credit card required.
+
+```bash
+bedrock trial --licensee "your-email@example.com"
+```
+
+### Pricing
+
+| Tier | Price | Nodes | Certificates | Use Case |
+|------|-------|-------|---------------|----------|
+| **Trial** | Free (30 days) | 3 | Self-signed | Evaluation and development |
+| **Developer** | $99/yr | 3 | Self-signed | Individual development |
+| **Professional** | $499/yr | 10 | Self-signed | Team development |
+| **Starter** | $5K/yr | 5 | CA-enforced | Production deployment |
+| **Business** | $20K/yr | 25 | CA-enforced | Production at scale |
+| **Enterprise** | Custom | Unlimited | CA-enforced | Mission-critical deployments |
+
+**Non-production use** (development, testing, evaluation) is free forever under BSL-1.1. **Production deployment** requires a paid license.
+
+### How It Works
+
+1. `bedrock trial` — get a free 30-day license with full developer features
+2. Build your app on Bedrock — identity, encryption, consent, audit are inherited
+3. When ready for production, purchase a runtime license at [bedrock.dev/pricing](https://bedrock.dev/pricing)
+4. Upgrade your license key — no code changes, no reinstallation
+
+## Testing
+
+```bash
+# Core tests
+cd core && pytest
+
+# Python SDK tests
+cd sdk-python && pytest
+
+# TypeScript SDK tests
+cd sdk-ts && npm test
+```
+
+841 tests pass across core modules (841) and Python SDK (20). Zero type errors.
+
+## Security
+
+See [SECURITY.md](SECURITY.md) for reporting vulnerabilities.
+
+**Do not report security issues through public GitHub issues.**
+
+## License
+
+This software is licensed under the [Business Source License 1.1](LICENSE).
+
+You may use, modify, and redistribute this software for non-production purposes (development, testing, evaluation) free of charge. Production use requires a paid license — see [bedrock.dev/pricing](https://bedrock.dev/pricing).
+
+The BSL converts to an open-source license (typically Apache 2.0) on a predetermined change date — see the LICENSE file for details.

infill_bedrock-0.3.0/SECURITY.md

@@ -0,0 +1,39 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+**Do not report security vulnerabilities through public GitHub issues.**
+
+Instead, email **security@infill.systems** with:
+
+- A description of the vulnerability
+- Steps to reproduce
+- Potential impact
+- Any suggested mitigations
+
+You should receive a response within 48 hours. If you do not, please follow up to ensure we received your message.
+
+## Disclosure Policy
+
+- We acknowledge all vulnerability reports within 48 hours
+- We provide a timeline for fix within 5 business days
+- We credit researchers in our changelog (unless anonymity is requested)
+- We ask for 90 days before public disclosure to allow users to patch
+
+## Supported Versions
+
+| Version | Supported |
+|---------|-----------|
+| 0.3.x   | Active development |
+| < 0.3   | Not supported |
+
+## Security Architecture
+
+Bedrock is designed with defense in depth:
+
+- **Encryption at rest**: All data encrypted with AES-256-GCM, keys derived via HKDF
+- **Identity-first**: Every node has a cryptographic identity, verified at every interaction
+- **Consent-gated access**: Cross-silo data access requires cryptographic proof of consent
+- **Audit chain**: SHA-256 hash chain provides tamper-evident audit trail
+- **TLS enforcement**: All transport encrypted, downgrade detection active
+- **Key isolation**: Silo-scoped keys, master key never stored in cleartext

infill_bedrock-0.3.0/bedrock/__init__.py

@@ -0,0 +1,10 @@
+"""
+Bedrock Core — Identity-based security framework.
+
+Every node is a user. Everything between is encrypted at rest.
+
+SPDX-License-Identifier: BSL-1.1 — See LICENSE for details.
+"""
+
+__version__ = "0.3.0"
+__author__ = "InFill Systems, LLC"

infill_bedrock-0.3.0/bedrock/__main__.py

@@ -0,0 +1,7 @@
+"""Bedrock CLI entry point for `python -m bedrock`."""
+
+import sys
+
+from bedrock.cli import main
+
+sys.exit(main())