stream

stream

Long-running event-reader verbs — watch, simple-clearance.

Both stream per-container events: watch multiplexes the DNS/audit/NFLOG sources into a JSON-lines feed, and simple-clearance runs the terminal verdict loop for hosts without the D-Bus hub. Their heavy machinery (watch / simple_clearance) is imported inside the handler bodies, so wiring these verbs — or resolving their group module for --help — pulls in none of it.

WATCH = CommandDef(name='watch', help='Stream shield events — DNS blocks, audit log, NFLOG packets (requires dnsmasq tier)', handler=_handle_watch, extras=NEEDS_CTR, args=(CONTAINER_ARG,)) module-attribute

SIMPLE_CLEARANCE = CommandDef(name='simple-clearance', help='Terminal clearance fallback — prompts operator for each blocked connection (no D-Bus)', handler=_handle_simple_clearance, extras=NEEDS_CTR, args=(CONTAINER_ARG,)) module-attribute