init

2026-04-25 06:45:36 +09:00
commit e77acee8ba
1903 changed files with 513282 additions and 0 deletions
@@ -0,0 +1,109 @@
+/**
+ * Detects potentially destructive PowerShell commands and returns a warning
+ * string for display in the permission dialog. This is purely informational
+ * -- it doesn't affect permission logic or auto-approval.
+ */
+
+type DestructivePattern = {
+  pattern: RegExp
+  warning: string
+}
+
+const DESTRUCTIVE_PATTERNS: DestructivePattern[] = [
+  // Remove-Item with -Recurse and/or -Force (and common aliases)
+  // Anchored to statement start (^, |, ;, &, newline, {, () so `git rm --force`
+  // doesn't match — \b would match `rm` after any word boundary. The `{(`
+  // chars catch scriptblock/group bodies: `{ rm -Force ./x }`. The stopper
+  // adds only `}` (NOT `)`) — `}` ends a block so flags after it belong to a
+  // different statement (`if {rm} else {... -Force}`), but `)` closes a path
+  // grouping and flags after it are still this command's flags:
+  // `Remove-Item (Join-Path $r "tmp") -Recurse -Force` must still warn.
+  {
+    pattern:
+      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Recurse\b[^|;&\n}]*-Force\b/i,
+    warning: 'Note: may recursively force-remove files',
+  },
+  {
+    pattern:
+      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Force\b[^|;&\n}]*-Recurse\b/i,
+    warning: 'Note: may recursively force-remove files',
+  },
+  {
+    pattern:
+      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Recurse\b/i,
+    warning: 'Note: may recursively remove files',
+  },
+  {
+    pattern:
+      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Force\b/i,
+    warning: 'Note: may force-remove files',
+  },
+
+  // Clear-Content on broad paths
+  {
+    pattern: /\bClear-Content\b[^|;&\n]*\*/i,
+    warning: 'Note: may clear content of multiple files',
+  },
+
+  // Format-Volume and Clear-Disk
+  {
+    pattern: /\bFormat-Volume\b/i,
+    warning: 'Note: may format a disk volume',
+  },
+  {
+    pattern: /\bClear-Disk\b/i,
+    warning: 'Note: may clear a disk',
+  },
+
+  // Git destructive operations (same as BashTool)
+  {
+    pattern: /\bgit\s+reset\s+--hard\b/i,
+    warning: 'Note: may discard uncommitted changes',
+  },
+  {
+    pattern: /\bgit\s+push\b[^|;&\n]*\s+(--force|--force-with-lease|-f)\b/i,
+    warning: 'Note: may overwrite remote history',
+  },
+  {
+    pattern:
+      /\bgit\s+clean\b(?![^|;&\n]*(?:-[a-zA-Z]*n|--dry-run))[^|;&\n]*-[a-zA-Z]*f/i,
+    warning: 'Note: may permanently delete untracked files',
+  },
+  {
+    pattern: /\bgit\s+stash\s+(drop|clear)\b/i,
+    warning: 'Note: may permanently remove stashed changes',
+  },
+
+  // Database operations
+  {
+    pattern: /\b(DROP|TRUNCATE)\s+(TABLE|DATABASE|SCHEMA)\b/i,
+    warning: 'Note: may drop or truncate database objects',
+  },
+
+  // System operations
+  {
+    pattern: /\bStop-Computer\b/i,
+    warning: 'Note: will shut down the computer',
+  },
+  {
+    pattern: /\bRestart-Computer\b/i,
+    warning: 'Note: will restart the computer',
+  },
+  {
+    pattern: /\bClear-RecycleBin\b/i,
+    warning: 'Note: permanently deletes recycled files',
+  },
+]
+
+/**
+ * Checks if a PowerShell command matches known destructive patterns.
+ * Returns a human-readable warning string, or null if no destructive pattern is detected.
+ */
+export function getDestructiveCommandWarning(command: string): string | null {
+  for (const { pattern, warning } of DESTRUCTIVE_PATTERNS) {
+    if (pattern.test(command)) {
+      return warning
+    }
+  }
+  return null
+}