function cmd::rule::assign() {
  local name="" peer="" type=""
  while [[ $# -gt 0 ]]; do
    case "$1" in
      --name) name="$2"; shift 2 ;;
      --peer) peer="$2"; shift 2 ;;
      --type) type="$2"; shift 2 ;;
      --help) cmd::rule::help; return ;;
      *) log::error "Unknown flag: $1"; return 1 ;;
    esac
  done

  [[ -z "$name" || -z "$peer" ]] && \
    log::error "Missing required flags: --name and --peer" && return 1

  rule::require_exists    "$name" || return 1
  rule::require_assignable "$name" || return 1

  peer=$(peers::resolve_and_require "$peer" "$type") || return 1

  local existing_rule ip
  existing_rule=$(peers::get_meta "$peer" "rule")
  ip=$(peers::get_ip "$peer")
  [[ -z "$ip" ]] && log::error "Could not resolve IP for: $peer" && return 1

  if [[ -n "$existing_rule" && "$existing_rule" != "$name" ]]; then
    rule::unapply "$existing_rule" "$ip"
    log::wg "Removed existing rule '${existing_rule}' from: ${peer}"
  fi

  rule::apply "$name" "$ip"
  log::wg_success "Assigned rule '${name}' to: ${peer}"
}