feat: add argument verification diagnostic and secure temp files for launcher

1 files changed, 12 insertions, 12 deletions

diff --git a/internal/cli/cli.go b/internal/cli/cli.go
index 6118ee5..b315fba 100644
--- a/internal/cli/cli.go
+++ b/internal/cli/cli.go
@@ -18,19 +18,19 @@ func NewApp(args []string) *App {
 }
 
 func (a *App) Run() error {
-	// 1. Ensure we are in an isolated network namespace
-	if err := namespace.Bootstrap(); err != nil {
-		return fmt.Errorf("namespace bootstrap failed: %w", err)
-	}
-
-	// Handle the internal diagnostic command first
-	if len(a.Args) > 1 && a.Args[1] == "test-ns" {
-		ok, msg := namespace.VerifyIsolation()
-		if !ok {
-			return fmt.Errorf("isolation check failed: %s", msg)
+	// Handle the internal diagnostic commands first
+	if len(a.Args) > 1 {
+		switch a.Args[1] {
+		case "test-ns":
+			ok, msg := namespace.VerifyIsolation()
+			if !ok {
+				return fmt.Errorf("isolation check failed: %s", msg)
+			}
+			fmt.Println("Isolation Verified: OK")
+			return nil
+		case "test-args":
+			return namespace.VerifyArguments(a.Args)
 		}
-		fmt.Println("Isolation Verified: OK")
-		return nil
 	}
 
 	// Handle subcommands first (profile list, import, configure, delete, stop)