@lovrabet/lovrabet-cli 2.3.2 → 2.3.3

package/lib/utils/positive-safe-integer.js

@@ -0,0 +1 @@
+function a162_0x58d4(_0x4417f7,_0x33d2ac){_0x4417f7=_0x4417f7-0x7b;const _0x43a578=a162_0x43a5();let _0x58d4a3=_0x43a578[_0x4417f7];return _0x58d4a3;}function a162_0x43a5(){const _0x38165d=['isSafeInteger','1396230ZJaexy','648gmicvW','262416lOlEIV','test','77dYOZsM','8VzCADR','140568HSwXah','34600ZsJMxX','4zsqJmU','81715gWZJZc','7163292EafZKa','number','11KtWnGV','1122265IpfiAK','string'];a162_0x43a5=function(){return _0x38165d;};return a162_0x43a5();}(function(_0x1544a5,_0x57d820){const _0x61c356=a162_0x58d4,_0x36f395=_0x1544a5();while(!![]){try{const _0x409488=parseInt(_0x61c356(0x87))/0x1*(parseInt(_0x61c356(0x83))/0x2)+parseInt(_0x61c356(0x7e))/0x3+-parseInt(_0x61c356(0x86))/0x4*(-parseInt(_0x61c356(0x7b))/0x5)+-parseInt(_0x61c356(0x80))/0x6+-parseInt(_0x61c356(0x82))/0x7*(-parseInt(_0x61c356(0x84))/0x8)+parseInt(_0x61c356(0x7f))/0x9*(-parseInt(_0x61c356(0x85))/0xa)+-parseInt(_0x61c356(0x8a))/0xb*(parseInt(_0x61c356(0x88))/0xc);if(_0x409488===_0x57d820)break;else _0x36f395['push'](_0x36f395['shift']());}catch(_0x4386af){_0x36f395['push'](_0x36f395['shift']());}}}(a162_0x43a5,0x4e2cf));export function normalizePositiveSafeInteger(_0x3cb92f){const _0x1562f0=a162_0x58d4;if(typeof _0x3cb92f===_0x1562f0(0x89))return Number[_0x1562f0(0x7d)](_0x3cb92f)&&_0x3cb92f>0x0?_0x3cb92f:undefined;if(typeof _0x3cb92f!==_0x1562f0(0x7c)||!/^\d+$/[_0x1562f0(0x81)](_0x3cb92f))return undefined;const _0x9306c4=Number(_0x3cb92f);return Number[_0x1562f0(0x7d)](_0x9306c4)&&_0x9306c4>0x0?_0x9306c4:undefined;}

package/lib/utils/redaction.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @fileoverview Redaction helpers for command arguments and API-shaped values.
+ *
+ * Approval payloads can contain user-provided form data. These helpers keep
+ * credentials and similarly sensitive values out of previews, logs, and output
+ * while preserving ordinary business fields for inspection.
+ */
+declare const REDACTED_VALUE = "[REDACTED]";
+/** Returns whether an object key contains a credential or secret value. */
+export declare function isSensitiveKey(key: string): boolean;
+/** Returns whether a command flag should be hidden in command text. */
+export declare function isSensitiveFlagName(key: string): boolean;
+/** Recursively redacts sensitive object properties without mutating the input. */
+export declare function redactSensitiveValue(value: unknown): unknown;
+/** Redacts values of sensitive flags in a reconstructed command invocation. */
+export declare function redactCommandArgv(argv: readonly string[]): string[];
+export { REDACTED_VALUE };

package/lib/utils/redaction.js

@@ -0,0 +1 @@
+const a163_0x4ac741=a163_0x4200;(function(_0x18b7f5,_0x34d8db){const _0x4b26e6=a163_0x4200,_0x1cb6b2=_0x18b7f5();while(!![]){try{const _0x40a405=-parseInt(_0x4b26e6(0x1b4))/0x1*(parseInt(_0x4b26e6(0x1c2))/0x2)+parseInt(_0x4b26e6(0x1b8))/0x3*(-parseInt(_0x4b26e6(0x1b3))/0x4)+parseInt(_0x4b26e6(0x1ad))/0x5*(-parseInt(_0x4b26e6(0x1b6))/0x6)+parseInt(_0x4b26e6(0x1b5))/0x7+parseInt(_0x4b26e6(0x1ba))/0x8+-parseInt(_0x4b26e6(0x1bb))/0x9*(parseInt(_0x4b26e6(0x1af))/0xa)+parseInt(_0x4b26e6(0x1bd))/0xb;if(_0x40a405===_0x34d8db)break;else _0x1cb6b2['push'](_0x1cb6b2['shift']());}catch(_0x42435a){_0x1cb6b2['push'](_0x1cb6b2['shift']());}}}(a163_0x1a4c,0x2f6f4));const REDACTED_VALUE=a163_0x4ac741(0x1ab),SENSITIVE_KEY_PATTERN=/(?:access.?key|api.?key|authorization|cookie|credential|password|passwd|private.?key|secret|token|webhook)/i,SENSITIVE_FLAG_NAMES=new Set(['comment',a163_0x4ac741(0x1bf)]),SENSITIVE_VALUE_KEYS=new Set([a163_0x4ac741(0x1b1)]);export function isSensitiveKey(_0x443adb){const _0x913b49=a163_0x4ac741,_0x38e7d2=_0x443adb[_0x913b49(0x1bc)](/_/g,'-')[_0x913b49(0x1ae)]();return SENSITIVE_KEY_PATTERN[_0x913b49(0x1b7)](_0x38e7d2);}export function isSensitiveFlagName(_0x1c499c){const _0x517b0d=a163_0x4ac741,_0x4754c2=_0x1c499c[_0x517b0d(0x1bc)](/_/g,'-')[_0x517b0d(0x1ae)]();return isSensitiveKey(_0x4754c2)||SENSITIVE_FLAG_NAMES[_0x517b0d(0x1ac)](_0x4754c2);}function a163_0x4200(_0x1480ff,_0x53ab13){_0x1480ff=_0x1480ff-0x1ab;const _0x1a4c57=a163_0x1a4c();let _0x420017=_0x1a4c57[_0x1480ff];return _0x420017;}function redactVariableValues(_0x22858d){const _0x26b1de=a163_0x4ac741;if(Array[_0x26b1de(0x1c0)](_0x22858d))return _0x22858d['map'](_0x1acf66=>redactVariableValues(_0x1acf66));if(_0x22858d&&typeof _0x22858d===_0x26b1de(0x1b2))return Object['fromEntries'](Object['entries'](_0x22858d)[_0x26b1de(0x1c1)](([_0x38d169,_0x4bb949])=>[_0x38d169,redactVariableValues(_0x4bb949)]));return REDACTED_VALUE;}export function redactSensitiveValue(_0x445dd8){const _0x474ee9=a163_0x4ac741;if(Array[_0x474ee9(0x1c0)](_0x445dd8))return _0x445dd8['map'](_0x4cb793=>redactSensitiveValue(_0x4cb793));if(!_0x445dd8||typeof _0x445dd8!==_0x474ee9(0x1b2))return _0x445dd8;const _0x32a64f={};for(const [_0x4a08e0,_0x45c7f2]of Object[_0x474ee9(0x1be)](_0x445dd8)){const _0x2f544c=_0x4a08e0[_0x474ee9(0x1bc)](/_/g,'-')['toLowerCase']();_0x32a64f[_0x4a08e0]=_0x2f544c===_0x474ee9(0x1bf)?redactVariableValues(_0x45c7f2):SENSITIVE_VALUE_KEYS['has'](_0x2f544c)||isSensitiveKey(_0x4a08e0)?REDACTED_VALUE:redactSensitiveValue(_0x45c7f2);}return _0x32a64f;}export function redactCommandArgv(_0x35d9e3){const _0x39f43d=a163_0x4ac741,_0x3052fa=[];let _0x3af7bf=![];for(const _0x4bc043 of _0x35d9e3){if(_0x3af7bf){_0x3052fa['push'](REDACTED_VALUE),_0x3af7bf=![];continue;}const _0x8eb8dc=_0x4bc043[_0x39f43d(0x1b9)](/^--([^=]+)(?:=(.*))?$/);if(!_0x8eb8dc||!isSensitiveFlagName(_0x8eb8dc[0x1]??'')){_0x3052fa[_0x39f43d(0x1b0)](_0x4bc043);continue;}_0x3052fa[_0x39f43d(0x1b0)]('--'+_0x8eb8dc[0x1]+(_0x8eb8dc[0x2]===undefined?'':'='+REDACTED_VALUE)),_0x8eb8dc[0x2]===undefined&&(_0x3af7bf=!![]);}return _0x3052fa;}function a163_0x1a4c(){const _0x468ed6=['has','14975xCsOFr','toLowerCase','10SODFYD','push','comment','object','4QGJRhi','67KIfBVK','2687342DRtnPG','66cKGJVB','test','274407GIThPd','match','596288wxtDYg','658530evlezh','replace','1699137qVEZpJ','entries','variables','isArray','map','6598kxMXzK','[REDACTED]'];a163_0x1a4c=function(){return _0x468ed6;};return a163_0x1a4c();}export{REDACTED_VALUE};

package/lib/utils/update-notice.js

@@ -1 +1 @@
-(function(_0x2c650b,_0x2522d4){const _0x2b7603=a161_0x5ce5,_0x5a6716=_0x2c650b();while(!![]){try{const _0x5eef5d=-parseInt(_0x2b7603(0x10e))/0x1*(-parseInt(_0x2b7603(0xfc))/0x2)+parseInt(_0x2b7603(0xfe))/0x3+-parseInt(_0x2b7603(0x100))/0x4+-parseInt(_0x2b7603(0x109))/0x5*(-parseInt(_0x2b7603(0x101))/0x6)+-parseInt(_0x2b7603(0x103))/0x7*(-parseInt(_0x2b7603(0x102))/0x8)+parseInt(_0x2b7603(0xfa))/0x9+parseInt(_0x2b7603(0x107))/0xa*(-parseInt(_0x2b7603(0x108))/0xb);if(_0x5eef5d===_0x2522d4)break;else _0x5a6716['push'](_0x5a6716['shift']());}catch(_0x4c325c){_0x5a6716['push'](_0x5a6716['shift']());}}}(a161_0x2346,0x42578));import{mkdir,readFile,writeFile}from'node:fs/promises';import{homedir}from'node:os';import{dirname,join}from'node:path';import{LOVRABET_NPM_PACKAGE_NAME}from'../constant/distribution.js';import{CLI_BIN_NAME}from'../constant/cli.js';import{checkCliVersion,getCliUpgradeCommand}from'../utils/cli-version-check.js';const UPDATE_NOTICE_TTL_MS=0x18*0x3c*0x3c*0x3e8;function isUpdateNoticeDisabled(){const _0x9834b9=a161_0x5ce5,_0x4a7a9e=process.env.LOVRABET_NO_UPDATE_NOTICE?.[_0x9834b9(0x10c)]()[_0x9834b9(0x105)]();return _0x4a7a9e==='1'||_0x4a7a9e===_0x9834b9(0x106)||_0x4a7a9e==='yes';}function a161_0x2346(){const _0x4ffa4a=['6NMYiYb','19056QiXRXE','7nrCRfK','\x20is\x20recommended,\x20current\x20','toLowerCase','true','3240FwHuFH','39314oTTDTq','2173945VKJLIC','/v/','join','trim','currentVersion','1CtEJmr','.cache','number','lastNotifiedVersion','needsUpgrade','filter','lovrabet-cli','lastNotifiedAt','stableVersion','https://www.npmjs.com/package/','1157166YLwzMB',',\x20run:\x20','969712nwRmlY','utf8','1555086imOzQk','parse','557004FOyEQz'];a161_0x2346=function(){return _0x4ffa4a;};return a161_0x2346();}function a161_0x5ce5(_0x45e80f,_0x4a29ed){_0x45e80f=_0x45e80f-0xf6;const _0x23469b=a161_0x2346();let _0x5ce55e=_0x23469b[_0x45e80f];return _0x5ce55e;}function cacheRoot(){const _0x3bed90=a161_0x5ce5;return process.env.XDG_CACHE_HOME||process.env.LOCALAPPDATA||join(homedir(),_0x3bed90(0x10f));}export function getUpdateNoticeCachePath(){const _0x5b4926=a161_0x5ce5;return join(cacheRoot(),_0x5b4926(0xf6),'update-check.json');}async function readUpdateNoticeCache(){const _0x346c44=a161_0x5ce5;try{const _0x50ffe2=await readFile(getUpdateNoticeCachePath(),'utf8'),_0x9a4930=JSON[_0x346c44(0xff)](_0x50ffe2);if(!_0x9a4930||typeof _0x9a4930!=='object')return{};return _0x9a4930;}catch{return{};}}async function writeUpdateNoticeCache(_0x5d9fa4){const _0x5d5145=a161_0x5ce5;try{const _0x5cbeb4=getUpdateNoticeCachePath();await mkdir(dirname(_0x5cbeb4),{'recursive':!![]}),await writeFile(_0x5cbeb4,JSON['stringify'](_0x5d9fa4,null,0x2)+'\x0a',_0x5d5145(0xfd));}catch{}}function isRecentlyNotified(_0x2b14a5,_0x5651fb,_0xa8c687){const _0x3c1148=a161_0x5ce5;return _0x2b14a5[_0x3c1148(0x111)]===_0x5651fb&&typeof _0x2b14a5[_0x3c1148(0xf7)]===_0x3c1148(0x110)&&_0xa8c687-_0x2b14a5['lastNotifiedAt']<UPDATE_NOTICE_TTL_MS;}export function buildNpmVersionUrl(_0x45622c){const _0xd6c27f=a161_0x5ce5;return _0xd6c27f(0xf9)+LOVRABET_NPM_PACKAGE_NAME+_0xd6c27f(0x10a)+_0x45622c;}export async function resolveLatestUpdateNotice(_0x22bbfe){const _0xd1421a=a161_0x5ce5;if(isUpdateNoticeDisabled())return null;try{const _0x1b6667=Date['now'](),_0x4341e1=_0x22bbfe??await checkCliVersion(),_0xdb42dc=_0x4341e1[_0xd1421a(0x10d)],_0x20a362=_0x4341e1[_0xd1421a(0xf8)],_0x4977bb=await readUpdateNoticeCache();if(!_0x20a362||!_0x4341e1[_0xd1421a(0x112)]||_0x4341e1['belowMinimum'])return null;if(isRecentlyNotified(_0x4977bb,_0x20a362,_0x1b6667))return null;const _0x549d7e=getCliUpgradeCommand(_0x4341e1);return await writeUpdateNoticeCache({..._0x4977bb,'checkedAt':_0x1b6667,'latest':_0x20a362,'failed':![],'lastNotifiedVersion':_0x20a362,'lastNotifiedAt':_0x1b6667}),{'command':_0x549d7e,'current':_0xdb42dc,'latest':_0x20a362,'url':buildNpmVersionUrl(_0x20a362),'message':[_0x4341e1['upgradeMessage'],CLI_BIN_NAME+'\x20'+_0x20a362+_0xd1421a(0x104)+_0xdb42dc+_0xd1421a(0xfb)+_0x549d7e][_0xd1421a(0x113)](Boolean)[_0xd1421a(0x10b)]('\x20')};}catch{return null;}}
+function a164_0x36a3(_0x449489,_0x2240ed){_0x449489=_0x449489-0x13c;const _0x11e913=a164_0x11e9();let _0x36a352=_0x11e913[_0x449489];return _0x36a352;}(function(_0x444a66,_0x3083eb){const _0x1d1a92=a164_0x36a3,_0x41421a=_0x444a66();while(!![]){try{const _0x251b19=parseInt(_0x1d1a92(0x143))/0x1*(parseInt(_0x1d1a92(0x13c))/0x2)+-parseInt(_0x1d1a92(0x146))/0x3+parseInt(_0x1d1a92(0x145))/0x4+-parseInt(_0x1d1a92(0x14f))/0x5+parseInt(_0x1d1a92(0x141))/0x6*(-parseInt(_0x1d1a92(0x142))/0x7)+-parseInt(_0x1d1a92(0x13f))/0x8+parseInt(_0x1d1a92(0x151))/0x9*(parseInt(_0x1d1a92(0x153))/0xa);if(_0x251b19===_0x3083eb)break;else _0x41421a['push'](_0x41421a['shift']());}catch(_0x341b38){_0x41421a['push'](_0x41421a['shift']());}}}(a164_0x11e9,0x40ba6));import{mkdir,readFile,writeFile}from'node:fs/promises';import{homedir}from'node:os';import{dirname,join}from'node:path';import{LOVRABET_NPM_PACKAGE_NAME}from'../constant/distribution.js';import{CLI_BIN_NAME}from'../constant/cli.js';import{checkCliVersion,getCliUpgradeCommand}from'../utils/cli-version-check.js';const UPDATE_NOTICE_TTL_MS=0x18*0x3c*0x3c*0x3e8;function isUpdateNoticeDisabled(){const _0xd3f5a7=a164_0x36a3,_0x260d2a=process.env.LOVRABET_NO_UPDATE_NOTICE?.['trim']()[_0xd3f5a7(0x14c)]();return _0x260d2a==='1'||_0x260d2a===_0xd3f5a7(0x13e)||_0x260d2a===_0xd3f5a7(0x150);}function cacheRoot(){return process.env.XDG_CACHE_HOME||process.env.LOCALAPPDATA||join(homedir(),'.cache');}export function getUpdateNoticeCachePath(){const _0x4683a4=a164_0x36a3;return join(cacheRoot(),_0x4683a4(0x147),'update-check.json');}function a164_0x11e9(){const _0xba5374=['lastNotifiedAt','\x20is\x20recommended,\x20current\x20','now','parse','toLowerCase','utf8','currentVersion','714190hscQNd','yes','826047xigwuo','join','30weZWvO','909742MGpIVN','lastNotifiedVersion','true','2796136XGeoTs','upgradeMessage','52542bHaBax','63txNRhm','1Wboiwe','stableVersion','2010940wAsZuh','1189983drJefi','lovrabet-cli'];a164_0x11e9=function(){return _0xba5374;};return a164_0x11e9();}async function readUpdateNoticeCache(){const _0x817a3b=a164_0x36a3;try{const _0x432534=await readFile(getUpdateNoticeCachePath(),_0x817a3b(0x14d)),_0x55a585=JSON[_0x817a3b(0x14b)](_0x432534);if(!_0x55a585||typeof _0x55a585!=='object')return{};return _0x55a585;}catch{return{};}}async function writeUpdateNoticeCache(_0x394dee){const _0x12a664=a164_0x36a3;try{const _0x2eb22d=getUpdateNoticeCachePath();await mkdir(dirname(_0x2eb22d),{'recursive':!![]}),await writeFile(_0x2eb22d,JSON['stringify'](_0x394dee,null,0x2)+'\x0a',_0x12a664(0x14d));}catch{}}function isRecentlyNotified(_0xc964e5,_0x26992a,_0x120360){const _0x51c6d0=a164_0x36a3;return _0xc964e5[_0x51c6d0(0x13d)]===_0x26992a&&typeof _0xc964e5['lastNotifiedAt']==='number'&&_0x120360-_0xc964e5[_0x51c6d0(0x148)]<UPDATE_NOTICE_TTL_MS;}export function buildNpmVersionUrl(_0x447455){return'https://www.npmjs.com/package/'+LOVRABET_NPM_PACKAGE_NAME+'/v/'+_0x447455;}export async function resolveLatestUpdateNotice(_0x3838fc){const _0x40d0d8=a164_0x36a3;if(isUpdateNoticeDisabled())return null;try{const _0x233666=Date[_0x40d0d8(0x14a)](),_0x3f74c8=_0x3838fc??await checkCliVersion(),_0x58e340=_0x3f74c8[_0x40d0d8(0x14e)],_0x5535b7=_0x3f74c8[_0x40d0d8(0x144)],_0xf6cb80=await readUpdateNoticeCache();if(!_0x5535b7||!_0x3f74c8['needsUpgrade']||_0x3f74c8['belowMinimum'])return null;if(isRecentlyNotified(_0xf6cb80,_0x5535b7,_0x233666))return null;const _0x3ce9f0=getCliUpgradeCommand(_0x3f74c8);return await writeUpdateNoticeCache({..._0xf6cb80,'checkedAt':_0x233666,'latest':_0x5535b7,'failed':![],'lastNotifiedVersion':_0x5535b7,'lastNotifiedAt':_0x233666}),{'command':_0x3ce9f0,'current':_0x58e340,'latest':_0x5535b7,'url':buildNpmVersionUrl(_0x5535b7),'message':[_0x3f74c8[_0x40d0d8(0x140)],CLI_BIN_NAME+'\x20'+_0x5535b7+_0x40d0d8(0x149)+_0x58e340+',\x20run:\x20'+_0x3ce9f0]['filter'](Boolean)[_0x40d0d8(0x152)]('\x20')};}catch{return null;}}

package/lib/utils/version.js

@@ -1 +1 @@
-(function(_0xf71dc6,_0xbce332){const _0x4dae06=a162_0x4180,_0x153a8a=_0xf71dc6();while(!![]){try{const _0xd2dfb5=-parseInt(_0x4dae06(0x1e3))/0x1*(parseInt(_0x4dae06(0x1e8))/0x2)+parseInt(_0x4dae06(0x1de))/0x3+-parseInt(_0x4dae06(0x1e1))/0x4*(-parseInt(_0x4dae06(0x1e2))/0x5)+parseInt(_0x4dae06(0x1e0))/0x6*(-parseInt(_0x4dae06(0x1e5))/0x7)+parseInt(_0x4dae06(0x1e6))/0x8+parseInt(_0x4dae06(0x1e9))/0x9+-parseInt(_0x4dae06(0x1e4))/0xa*(parseInt(_0x4dae06(0x1e7))/0xb);if(_0xd2dfb5===_0xbce332)break;else _0x153a8a['push'](_0x153a8a['shift']());}catch(_0x3db8c6){_0x153a8a['push'](_0x153a8a['shift']());}}}(a162_0x1c15,0x983cf));import{BUILD_TIME,GIT_COMMIT,VERSION}from'../generated/build-info.js';export function getCliVersion(){return VERSION;}function a162_0x1c15(){const _0x2b6122=['7530XJsGQC','1458583dmlrLS','1807776RtVwuV','2431XDrzna','34VYgIOk','1544814DseVnA','unknown','3725745UMCdsf','slice','30qmvElr','2139868GCxnjC','10RhAWsI','51626LDKFLt'];a162_0x1c15=function(){return _0x2b6122;};return a162_0x1c15();}function a162_0x4180(_0x1a331c,_0x4d591a){_0x1a331c=_0x1a331c-0x1de;const _0x1c151b=a162_0x1c15();let _0x418031=_0x1c151b[_0x1a331c];return _0x418031;}export function getCliGitCommit(){const _0x3af5da=a162_0x4180,_0x119da0=String(GIT_COMMIT);return _0x119da0&&_0x119da0!==_0x3af5da(0x1ea)?_0x119da0:'';}export function getCliVersionDisplay(){const _0x14da8f=a162_0x4180,_0x15e024=getCliGitCommit(),_0x186495=BUILD_TIME[_0x14da8f(0x1df)](0x0,0xa);if(!_0x15e024||!_0x186495)return VERSION;return VERSION+'\x20('+_0x15e024+',\x20'+_0x186495+')';}
+(function(_0xd79e6,_0x3c8421){const _0x222344=a165_0x52ad,_0x3fd1e5=_0xd79e6();while(!![]){try{const _0x2ea0ac=-parseInt(_0x222344(0x83))/0x1*(-parseInt(_0x222344(0x82))/0x2)+-parseInt(_0x222344(0x88))/0x3*(-parseInt(_0x222344(0x80))/0x4)+parseInt(_0x222344(0x85))/0x5*(-parseInt(_0x222344(0x7f))/0x6)+-parseInt(_0x222344(0x87))/0x7+parseInt(_0x222344(0x89))/0x8*(parseInt(_0x222344(0x84))/0x9)+-parseInt(_0x222344(0x8a))/0xa+parseInt(_0x222344(0x7d))/0xb*(parseInt(_0x222344(0x7e))/0xc);if(_0x2ea0ac===_0x3c8421)break;else _0x3fd1e5['push'](_0x3fd1e5['shift']());}catch(_0x2842bb){_0x3fd1e5['push'](_0x3fd1e5['shift']());}}}(a165_0x583b,0xe6d5c));function a165_0x583b(){const _0x5b01bc=['11371547xoGlDc','12gBWEVD','6pHJqKu','4YdtkBm','slice','270486ctamEg','11konGgS','5899536lbzKYG','3132225XkTyqs','unknown','5140009IxXvDh','204423iQEzkH','8VIjSjC','9388630zToidH'];a165_0x583b=function(){return _0x5b01bc;};return a165_0x583b();}import{BUILD_TIME,GIT_COMMIT,VERSION}from'../generated/build-info.js';export function getCliVersion(){return VERSION;}export function getCliGitCommit(){const _0x27ef16=a165_0x52ad,_0x125a56=String(GIT_COMMIT);return _0x125a56&&_0x125a56!==_0x27ef16(0x86)?_0x125a56:'';}function a165_0x52ad(_0x15d13c,_0x3cd326){_0x15d13c=_0x15d13c-0x7d;const _0x583b36=a165_0x583b();let _0x52ad0e=_0x583b36[_0x15d13c];return _0x52ad0e;}export function getCliVersionDisplay(){const _0x1345ff=a165_0x52ad,_0x3292a6=getCliGitCommit(),_0x445b14=BUILD_TIME[_0x1345ff(0x81)](0x0,0xa);if(!_0x3292a6||!_0x445b14)return VERSION;return VERSION+'\x20('+_0x3292a6+',\x20'+_0x445b14+')';}

package/lib/utils/write-cli-side-channel.js

@@ -1 +1 @@
-function a163_0xe12f(_0x505322,_0x5eaa3f){_0x505322=_0x505322-0x133;var _0x42438c=a163_0x4243();var _0xe12f61=_0x42438c[_0x505322];return _0xe12f61;}(function(_0x43a0cf,_0x58b9b0){var _0x10f19b=a163_0xe12f,_0x3e4d1f=_0x43a0cf();while(!![]){try{var _0x1d1e0f=-parseInt(_0x10f19b(0x136))/0x1*(parseInt(_0x10f19b(0x133))/0x2)+-parseInt(_0x10f19b(0x13e))/0x3*(-parseInt(_0x10f19b(0x13c))/0x4)+-parseInt(_0x10f19b(0x134))/0x5*(-parseInt(_0x10f19b(0x135))/0x6)+parseInt(_0x10f19b(0x138))/0x7+-parseInt(_0x10f19b(0x137))/0x8+parseInt(_0x10f19b(0x13f))/0x9*(-parseInt(_0x10f19b(0x13a))/0xa)+parseInt(_0x10f19b(0x13d))/0xb*(-parseInt(_0x10f19b(0x13b))/0xc);if(_0x1d1e0f===_0x58b9b0)break;else _0x3e4d1f['push'](_0x3e4d1f['shift']());}catch(_0x5f447d){_0x3e4d1f['push'](_0x3e4d1f['shift']());}}}(a163_0x4243,0x9fdb1));function a163_0x4243(){var _0x396e40=['239371VVsISb','417agnuIA','18bpZHBI','write','2ZJLseD','55uHFiGe','519306PzapaK','308857tWCwxp','2902592PycqRF','7833140EtxLUt','stderr','2384240UGXMBh','444ZDBrKO','15464NftPWp'];a163_0x4243=function(){return _0x396e40;};return a163_0x4243();}export function writeCliSideChannelLine(_0x51c998){var _0x214758=a163_0xe12f;process[_0x214758(0x139)][_0x214758(0x140)](_0x51c998+'\x0a');}
+function a166_0xce70(){var _0x44d5f9=['6151243nDOMDy','287184tIylGo','19702480qGCjmr','stderr','6649368myBGxf','9UXowCF','1988230POYYOB','187204MxhTgI','33CZBUOh','6MAsrYb','write','455787zkEuzY'];a166_0xce70=function(){return _0x44d5f9;};return a166_0xce70();}function a166_0x37fd(_0xe073c2,_0x2272f9){_0xe073c2=_0xe073c2-0x1b8;var _0xce707d=a166_0xce70();var _0x37fd4a=_0xce707d[_0xe073c2];return _0x37fd4a;}(function(_0x195f2a,_0x1f4713){var _0x32b920=a166_0x37fd,_0x59f806=_0x195f2a();while(!![]){try{var _0x270f46=-parseInt(_0x32b920(0x1c0))/0x1+-parseInt(_0x32b920(0x1c2))/0x2+parseInt(_0x32b920(0x1bd))/0x3*(-parseInt(_0x32b920(0x1bc))/0x4)+-parseInt(_0x32b920(0x1bb))/0x5+-parseInt(_0x32b920(0x1be))/0x6*(-parseInt(_0x32b920(0x1c1))/0x7)+-parseInt(_0x32b920(0x1b9))/0x8+parseInt(_0x32b920(0x1ba))/0x9*(parseInt(_0x32b920(0x1c3))/0xa);if(_0x270f46===_0x1f4713)break;else _0x59f806['push'](_0x59f806['shift']());}catch(_0x3b3d2d){_0x59f806['push'](_0x59f806['shift']());}}}(a166_0xce70,0x7b886));export function writeCliSideChannelLine(_0x408a48){var _0x34dbb7=a166_0x37fd;process[_0x34dbb7(0x1b8)][_0x34dbb7(0x1bf)](_0x408a48+'\x0a');}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovrabet/lovrabet-cli",
-  "version": "2.3.2",
+  "version": "2.3.3",
   "description": "Runtime CLI for Lovrabet apps, datasets, SQL, Backend Function, skills, and AI agent workflows.",
   "license": "Apache-2.0",
   "keywords": [

package/skills/lovrabet/SKILL.md

@@ -1,8 +1,8 @@
 ---
 name: lovrabet
 displayName: Lovrabet 运行态 CLI
-version: 2.3.2
-description: "Lovrabet 运行态 CLI — 面向业务场景的 AI 操作套件，通过 lovrabet 命令管理应用目录、业务角色与权限、用户级外部账号、Service Tree 业务命令、API 文档发现、数据集查询、Instant API 数据操作、Custom SQL/Backend Function、Personal Backend Function、文件上传、面向票证类业务材料文字与结构化字段提取的 OCR、定时任务、Skill、知识库与运行态 app-config key 状态检查。触发词：云图、lovrabet、lovrabet-cli、业务角色、角色成员、页面权限、菜单权限、数据集权限、user-account bind、provider 外部账号绑定、钉钉 userId 绑定、service tree、业务服务树、api-doc、dataset、data filter、file upload、file query-url、ocr recognize、OCR 识别、票证文字提取、票证字段提取、发票识别、票据识别、证照识别、附件上传、personal-bff、schedule、定时任务、cron、kb、skill、sql exec、bff exec、app-config、accessKey、compress、jq。"
+version: 2.3.3
+description: "Lovrabet 运行态 CLI — 面向业务场景的 AI 操作套件，通过 lovrabet 命令管理应用目录、业务角色与权限、用户级外部账号、Service Tree 业务命令、API 文档发现、数据集查询、Instant API 数据操作、Custom SQL/Backend Function、Personal Backend Function、文件上传、面向票证类业务材料文字与结构化字段提取的 OCR、审批待办与任务办理、定时任务、Skill、知识库与运行态 app-config key 状态检查。触发词：云图、lovrabet、lovrabet-cli、业务角色、角色成员、页面权限、菜单权限、数据集权限、user-account bind、provider 外部账号绑定、钉钉 userId 绑定、service tree、业务服务树、api-doc、dataset、data filter、file upload、file query-url、ocr recognize、OCR 识别、票证文字提取、票证字段提取、发票识别、票据识别、证照识别、附件上传、personal-bff、approval、审批、待办、approve、reject、transfer、schedule、定时任务、cron、kb、skill、sql exec、bff exec、app-config、accessKey、compress、jq。"
 metadata:
   requires:
     bins: ["lovrabet"]
@@ -28,6 +28,7 @@ metadata:
   - [数据集与数据流程](guides/dataset-and-data-workflow.md)
   - [Custom SQL 与 Backend Function 流程](guides/sql-and-bff-workflow.md)
   - [排障](guides/troubleshooting.md)
+  - [审批流运行态办理](references/lovrabet-approval-workflow.md)
 - 命令细节 / 参数参考：
   - `references/*.md`
 

package/skills/lovrabet/references/lovrabet-approval-workflow.md

@@ -0,0 +1,73 @@
+# 审批流运行态办理
+
+Runtime CLI 只负责当前 AccessKey 用户的运行态任务查询和办理，不管理流程定义。当前用户由 `X-User-AK` 对应的服务端认证上下文确定，命令不接受 `--user-id`。
+
+## 查询待办
+
+```bash
+lovrabet approval todo --app-code <APP_CODE>
+lovrabet approval todo --app-code <APP_CODE> --page 2 --page-size 20 --format compress
+```
+
+未传 `--app-code` 时，命令使用当前工作区解析出的应用；服务端请求参数是 `appCode`、`currentPage` 和 `pageSize`。
+
+## 查看任务
+
+```bash
+lovrabet approval task-detail --task-id <TASK_ID> --format json
+```
+
+详情中的 `canHandle`、`canCancel`、`transferCandidates`、`formData` 和流程上下文以 Runtime 返回为准。输出会遮罩敏感键；如响应包含 `variables`，其中的值只显示脱敏占位符。
+
+## 审批和拒绝
+
+先预览请求：
+
+```bash
+lovrabet approval approve --task-id <TASK_ID> --comment '同意' --dry-run
+lovrabet approval reject --task-id <TASK_ID> --comment '需要补充材料' --dry-run
+```
+
+确认后执行：
+
+```bash
+lovrabet approval approve --task-id <TASK_ID> --comment '同意' --yes
+lovrabet approval reject --task-id <TASK_ID> --comment '需要补充材料' --yes
+```
+
+`approve` 和 `reject` 都调用 Runtime 的 `/api/flow/approve`，区别只在请求体的 `approved` 值。流程后续路径由已发布流程定义决定，CLI 不自行解释。
+
+## 转交
+
+目标用户应来自任务详情的 `transferCandidates` 或其他已确认的 Runtime 资源：
+
+```bash
+lovrabet approval transfer \
+  --task-id <TASK_ID> \
+  --target-user-id <USER_ID> \
+  --comment '请协助处理' \
+  --dry-run
+
+lovrabet approval transfer \
+  --task-id <TASK_ID> \
+  --target-user-id <USER_ID> \
+  --comment '请协助处理' \
+  --yes
+```
+
+最终授权和候选人合法性由 Runtime 校验。
+
+## Variables 与安全
+
+审批变量支持内联 JSON 或文件：
+
+```bash
+lovrabet approval approve --task-id <TASK_ID> \
+  --variables '{"amount":100}' --yes
+lovrabet approval approve --task-id <TASK_ID> \
+  --variables @variables.json --yes
+```
+
+变量解析失败时不会发送请求。dry-run、错误重试命令和本地命令日志不会回显变量值、AccessKey、token 或 secret。
+
+高风险命令在非交互模式必须传 `--yes`；`--dry-run` 只生成脱敏预览，不执行写请求。

package/skills/lovrabet.manifest.json

@@ -2,8 +2,8 @@
   "schemaVersion": 1,
   "name": "lovrabet",
   "packageName": "@lovrabet/lovrabet-cli",
-  "packageVersion": "2.3.2",
-  "skillVersion": "2.3.2",
+  "packageVersion": "2.3.3",
+  "skillVersion": "2.3.3",
   "files": [
     "SKILL.md",
     "guides/app-resolution.md",
@@ -15,6 +15,7 @@
     "references/instant-api-workflow.md",
     "references/lovrabet-app-config.md",
     "references/lovrabet-app.md",
+    "references/lovrabet-approval-workflow.md",
     "references/lovrabet-auth.md",
     "references/lovrabet-bff-workflow.md",
     "references/lovrabet-config-commands.md",
@@ -37,5 +38,5 @@
     "references/lovrabet-user-account.md",
     "references/lovrabet-workspace.md"
   ],
-  "digest": "65b3f2960eb4b77a8c291368d7bfc7a5e624cdd47d1ffa958f7406c70140ee5f"
+  "digest": "02276d7336297c9083c30a967c1e874b541b58962bc3162fe3516d2ba848ef1d"
 }