runtm approve [path]

# runtm.requests.yaml (created by AI agent)
requested:
  features:
    database: true
    auth: true
    reason: "Need persistence for user data and authentication"
  
  env_vars:
    - name: STRIPE_API_KEY
      type: string
      secret: true
      required: true
      reason: "Payment processing integration"
    
    - name: WEBHOOK_SECRET
      type: string
      secret: true
      required: true
      reason: "Verify Stripe webhook signatures"
  
  egress_allowlist:
    - "api.stripe.com"

notes:
  - "Adding Stripe payment integration"
  - "Database needed for order history"

runtm approve --dry-run

Proposed changes from runtm.requests.yaml:

Features:
  + database: true (Need persistence for user data and authentication)
  + auth: true (Need persistence for user data and authentication)

Environment Variables:
  + STRIPE_API_KEY (string, secret, required)
    Reason: Payment processing integration
  + WEBHOOK_SECRET (string, secret, required)
    Reason: Verify Stripe webhook signatures

Egress Allowlist:
  + api.stripe.com

Notes:
  - Adding Stripe payment integration
  - Database needed for order history

Run without --dry-run to apply changes.

runtm approve

Applying changes from runtm.requests.yaml...

✓ Added feature: database
✓ Added feature: auth
✓ Added env var: STRIPE_API_KEY
✓ Added env var: WEBHOOK_SECRET
✓ Added to egress allowlist: api.stripe.com

Updated runtm.yaml
Deleted runtm.requests.yaml

Next steps:
  1. Set required secrets:
     runtm secrets set STRIPE_API_KEY=sk_xxx
     runtm secrets set WEBHOOK_SECRET=whsec_xxx
     runtm secrets set AUTH_SECRET=$(openssl rand -base64 32)
  
  2. Deploy:
     runtm deploy

# runtm.requests.yaml
requested:
  # Enable features
  features:
    database: true
    auth: true
    reason: "Human-readable explanation"
  
  # Add environment variables
  env_vars:
    - name: VAR_NAME
      type: string|url|number|boolean
      secret: true|false
      required: true|false
      reason: "Why this is needed"
  
  # Add to egress allowlist
  egress_allowlist:
    - "api.example.com"
    - "webhooks.service.com"

# Optional notes for the human reviewer
notes:
  - "Context about changes"
  - "Why these changes are needed"