CLI

Command Purpose
flow:approve Approve a pending approval token from the console.
flow:reject Reject a pending approval token from the console.
flow:deliver-webhooks Deliver pending signed webhook outbox rows.
flow:prune Delete retained terminal telemetry through the supported pruning path.
flow:replay Create a new run from terminal persisted input.
flow:forensics Export one run as a content-addressed evidence bundle, or --verify one someone hands you. Never executes a handler.
flow:taint Show which ports of a stored definition carry untrusted data and along which path; exits non-zero on taint violations, so it works as a CI gate.
Command availability

Commands are registered by the package service provider. Persistence-related commands need published migrations and a configured database when they operate on stored rows.

flow:forensics

php artisan flow:forensics {runId} [--output=path] [--raw] [--verify=path]

--raw skips the export-time redaction pass; routing can only be verified
on a raw bundle, so a redacted export honestly reports that check as
unverifiable rather than as a pass. See
Forensic bundles.

flow:taint

php artisan flow:taint {name} [--version=N] [--json]

Defaults to the latest stored version. Exits 1 when the definition has
taint violations, 0 otherwise — so it can gate CI on definitions stored
before the analysis existed. See
Provenance and taint.