Something went wrong. Try again.
source dump of claude code forked from oppi.li/claude-code
Something went wrong. Try again.
3.4 kB · 109 lines
TypeScript
at main
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110/** * Detects potentially destructive PowerShell commands and returns a warning * string for display in the permission dialog. This is purely informational * -- it doesn't affect permission logic or auto-approval. */
type DestructivePattern = { pattern: RegExp warning: string}
const DESTRUCTIVE_PATTERNS: DestructivePattern[] = [ // Remove-Item with -Recurse and/or -Force (and common aliases) // Anchored to statement start (^, |, ;, &, newline, {, () so `git rm --force` // doesn't match — \b would match `rm` after any word boundary. The `{(` // chars catch scriptblock/group bodies: `{ rm -Force ./x }`. The stopper // adds only `}` (NOT `)`) — `}` ends a block so flags after it belong to a // different statement (`if {rm} else {... -Force}`), but `)` closes a path // grouping and flags after it are still this command's flags: // `Remove-Item (Join-Path $r "tmp") -Recurse -Force` must still warn. { pattern: /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Recurse\b[^|;&\n}]*-Force\b/i, warning: 'Note: may recursively force-remove files', }, { pattern: /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Force\b[^|;&\n}]*-Recurse\b/i, warning: 'Note: may recursively force-remove files', }, { pattern: /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Recurse\b/i, warning: 'Note: may recursively remove files', }, { pattern: /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Force\b/i, warning: 'Note: may force-remove files', },
// Clear-Content on broad paths { pattern: /\bClear-Content\b[^|;&\n]*\*/i, warning: 'Note: may clear content of multiple files', },
// Format-Volume and Clear-Disk { pattern: /\bFormat-Volume\b/i, warning: 'Note: may format a disk volume', }, { pattern: /\bClear-Disk\b/i, warning: 'Note: may clear a disk', },
// Git destructive operations (same as BashTool) { pattern: /\bgit\s+reset\s+--hard\b/i, warning: 'Note: may discard uncommitted changes', }, { pattern: /\bgit\s+push\b[^|;&\n]*\s+(--force|--force-with-lease|-f)\b/i, warning: 'Note: may overwrite remote history', }, { pattern: /\bgit\s+clean\b(?![^|;&\n]*(?:-[a-zA-Z]*n|--dry-run))[^|;&\n]*-[a-zA-Z]*f/i, warning: 'Note: may permanently delete untracked files', }, { pattern: /\bgit\s+stash\s+(drop|clear)\b/i, warning: 'Note: may permanently remove stashed changes', },
// Database operations { pattern: /\b(DROP|TRUNCATE)\s+(TABLE|DATABASE|SCHEMA)\b/i, warning: 'Note: may drop or truncate database objects', },
// System operations { pattern: /\bStop-Computer\b/i, warning: 'Note: will shut down the computer', }, { pattern: /\bRestart-Computer\b/i, warning: 'Note: will restart the computer', }, { pattern: /\bClear-RecycleBin\b/i, warning: 'Note: permanently deletes recycled files', },]
/** * Checks if a PowerShell command matches known destructive patterns. * Returns a human-readable warning string, or null if no destructive pattern is detected. */export function getDestructiveCommandWarning(command: string): string | null { for (const { pattern, warning } of DESTRUCTIVE_PATTERNS) { if (pattern.test(command)) { return warning } } return null}