+ WjBRt^RIHt^RIt^RIHt^RIHtRRltR#)z'``hermes approvals`` subcommand parser.) annotationsN)Callable) add_json_flagc V^8dQhRRRR/#) cmd_approvalsrreturnNone)formats"TC:\Users\johnn\AppData\Local\hermes\hermes-agent\hermes_cli\subcommands\approvals.py __annotate__r s;6;6;6d;6cVPRRRR7pVPRRR7pVPRR R R7pVPR R R RR7\VR4VPR\^ZRR7VPRR\^RR7VPR\^RR7VPRRR7VP VR7VPRRR R7pVPR!R"R#R$R%7\VR4VPR&\ PR'R(R)7VP VR7VP VR7R*#)+z6Attach the ``approvals`` subcommand to ``subparsers``. approvalsz=Approval-prompt tools (mine history into allowlist proposals)zTools for the dangerous-command approval system. `hermes approvals suggest` mines past approval decisions from the session database and proposes command_allowlist entries so repeatedly-approved commands stop prompting.)help descriptionapprovals_commandz )destmetavarsuggestz5Propose command_allowlist entries from past approvalsa/Scan the session database for dangerous-classified commands that ran with user approval, rank the recurring patterns, and print a numbered allowlist proposal. Nothing is written unless --apply is given. Destructive classes (recursive delete, sudo, disk writes, credential edits, ...) are never proposed.z--apply apply_indiceszN[,M...]zUMerge the numbered proposals (from a prior run) into command_allowlist in config.yaml)rrrz9Emit machine-readable JSON instead of human-readable textz--daysz;How far back to scan session history (default: 90; 0 = all))typedefaultrz --min-count min_countz@Minimum approval count for a pattern to be proposed (default: 2))rrrrz--limitz1Maximum number of proposals to show (default: 20)z--dbzCPath to an alternate session database (default: ~/.hermes/state.db))r)functestz>Dry-run the approval verdict for a command (never executes it)uEvaluate a command against the REAL runtime approval guards — hardline blocklist, user approvals.deny rules, dangerous-pattern detection, allowlist, yolo/off bypass — and print the verdict, the matching rule, and the normalized-command trace, without executing the command, prompting anyone, or persisting anything. Exit codes: 0 allow, 2 ask-approval, 3 deny (hardline or user deny rule). Tip: use `--` before the command so its own flags aren't parsed: hermes approvals test -- rm -rf ./buildz --env-typeenv_typelocalzsTerminal backend type to evaluate against (default: local; isolated container backends like docker skip the guards))rrr command_wordscommandz=The command to evaluate (prefix with -- to protect its flags))nargsrrN) add_parseradd_subparsers add_argumentrint set_defaultsargparse REMAINDER) subparsersrapprovals_parserapprovals_subparserssuggest_parser test_parsers&$ r build_approvals_parserr. s!,,Y;-< ,:: .;:*44OF5GN+ ,."]^sB J LKc1 O QR.a cZ \]3&11UE2 FK:wCD+Z[  M N-0!!}!5r) __doc__ __future__rr'typingrhermes_cli.subcommands._sharedrr.r rr r3s-"8;6r