function cmd::rule::add() {
  local name="" desc=""
  local allow_ips=() block_ips=() block_ports=()
  local dns_redirect=false

  while [[ $# -gt 0 ]]; do
    case "$1" in
      --name)         name="$2";              shift 2 ;;
      --desc)         desc="$2";              shift 2 ;;
      --allow-ip)     allow_ips+=("$2");      shift 2 ;;
      --block-ip)     block_ips+=("$2");      shift 2 ;;
      --block-port)   block_ports+=("$2");    shift 2 ;;
      --dns-redirect) dns_redirect=true;      shift   ;;
      --help)         cmd::rule::help;        return  ;;
      *)
        log::error "Unknown flag: $1"
        return 1
        ;;
    esac
  done

  if [[ -z "$name" ]]; then
    log::error "Missing required flag: --name"
    return 1
  fi

  if rule::exists "$name"; then
    log::error "Rule already exists: ${name}"
    return 1
  fi

  local rule_file
  rule_file="$(ctx::rule::path "${name}.rule")"

  local allow_str block_str port_str

  allow_str=$(IFS=','; echo "${allow_ips[*]}")
  block_str=$(IFS=','; echo "${block_ips[*]}")
  port_str=$(IFS=','; echo "${block_ports[*]}")

  json::create_rule "$rule_file" "$name" "$desc" \
    "$($dns_redirect && echo true || echo false)" \
    "$allow_str" "$block_str" "$port_str" || return 1

  log::wg_success "Rule created: ${name}"
}