rubik 0.1.0

data/lib/rubik/security/classifier/commands/gradle.yaml

@@ -0,0 +1,92 @@
+# $schema: ../../../schemas/command.schema.json
+command: gradle
+description: "Gradle build tool"
+classification: LOCAL_EFFECTS
+strict: false
+subcommand_mode: match_all
+subcommands:
+  clean:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  build:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  test:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  assemble:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  check:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  jar:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  classes:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  compileJava:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  compileKotlin:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  publishToMavenLocal:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  publish:
+    classification: EXTERNAL_EFFECTS
+global_options:
+  --help: {overrides: READONLY}
+  -h: {overrides: READONLY}
+  -?: {overrides: READONLY}
+  --version: {overrides: READONLY}
+options:
+  --dry-run: {overrides: READONLY}
+  -m: {overrides: READONLY}
+  --info: {}
+  -i: {}
+  --debug: {}
+  -d: {}
+  --stacktrace: {}
+  -s: {}
+  --full-stacktrace: {}
+  -S: {}
+  --no-daemon: {}
+  --daemon: {}
+  --build-cache: {}
+  --no-build-cache: {}
+  --configuration-cache: {}
+  --no-configuration-cache: {}
+  --configure-on-demand: {}
+  --no-configure-on-demand: {}
+  --continue: {}
+  --no-continue: {}
+  --parallel: {}
+  --no-parallel: {}
+  --scan: {}
+  --no-scan: {}
+  --offline: {}
+  --quiet: {}
+  -q: {}
+  --warn: {}
+  -w: {}
+  -p: {takes_value: true}
+  --project-dir: {takes_value: true, aliases: [-p]}
+  -b: {takes_value: true}
+  --build-file: {takes_value: true, aliases: [-b]}
+  -c: {takes_value: true}
+  --settings-file: {takes_value: true, aliases: [-c]}
+  -g: {takes_value: true}
+  --gradle-user-home: {takes_value: true, aliases: [-g]}
+  --console: {takes_value: true}
+  --init-script: {takes_value: true}
+  -I: {takes_value: true}
+  -D: {takes_value: true}
+  --system-prop: {takes_value: true, aliases: [-D]}
+  -P: {takes_value: true}
+  --project-prop: {takes_value: true, aliases: [-P]}
+  --max-workers: {takes_value: true}
+  -x: {takes_value: true}
+  --exclude-task: {takes_value: true, aliases: [-x]}

data/lib/rubik/security/classifier/commands/gradlew.yaml

@@ -0,0 +1,92 @@
+# $schema: ../../../schemas/command.schema.json
+command: gradlew
+description: "Gradle wrapper"
+classification: LOCAL_EFFECTS
+strict: false
+subcommand_mode: match_all
+subcommands:
+  clean:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  build:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  test:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  assemble:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  check:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  jar:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  classes:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  compileJava:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  compileKotlin:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  publishToMavenLocal:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  publish:
+    classification: EXTERNAL_EFFECTS
+global_options:
+  --help: {overrides: READONLY}
+  -h: {overrides: READONLY}
+  -?: {overrides: READONLY}
+  --version: {overrides: READONLY}
+options:
+  --dry-run: {overrides: READONLY}
+  -m: {overrides: READONLY}
+  --info: {}
+  -i: {}
+  --debug: {}
+  -d: {}
+  --stacktrace: {}
+  -s: {}
+  --full-stacktrace: {}
+  -S: {}
+  --no-daemon: {}
+  --daemon: {}
+  --build-cache: {}
+  --no-build-cache: {}
+  --configuration-cache: {}
+  --no-configuration-cache: {}
+  --configure-on-demand: {}
+  --no-configure-on-demand: {}
+  --continue: {}
+  --no-continue: {}
+  --parallel: {}
+  --no-parallel: {}
+  --scan: {}
+  --no-scan: {}
+  --offline: {}
+  --quiet: {}
+  -q: {}
+  --warn: {}
+  -w: {}
+  -p: {takes_value: true}
+  --project-dir: {takes_value: true, aliases: [-p]}
+  -b: {takes_value: true}
+  --build-file: {takes_value: true, aliases: [-b]}
+  -c: {takes_value: true}
+  --settings-file: {takes_value: true, aliases: [-c]}
+  -g: {takes_value: true}
+  --gradle-user-home: {takes_value: true, aliases: [-g]}
+  --console: {takes_value: true}
+  --init-script: {takes_value: true}
+  -I: {takes_value: true}
+  -D: {takes_value: true}
+  --system-prop: {takes_value: true, aliases: [-D]}
+  -P: {takes_value: true}
+  --project-prop: {takes_value: true, aliases: [-P]}
+  --max-workers: {takes_value: true}
+  -x: {takes_value: true}
+  --exclude-task: {takes_value: true, aliases: [-x]}

data/lib/rubik/security/classifier/commands/grep.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: grep
+description: "Search for patterns in files"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/groups.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: groups
+description: "Print the groups a user is in"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/gunzip.yaml

@@ -0,0 +1,8 @@
+# $schema: ../../../schemas/command.schema.json
+command: gunzip
+description: "Decompress gzip compressed files"
+classification: LOCAL_EFFECTS
+risk: LOW
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/gws.yaml

@@ -0,0 +1,211 @@
+# $schema: ../../../schemas/command.schema.json
+command: gws
+description: "Google Workspace CLI — manages Drive, Sheets, Gmail, Calendar, Docs, and more via Google APIs"
+classification: READONLY
+strict: false
+
+# Dispatch model:
+#
+# `gws <service> <resource> [sub-resource] <method>` is a 3-4 level hierarchy.
+# bash-classify only honors `subcommand_mode: match_all` on the top-level
+# command, not on nested subcommands. To avoid enumerating every
+# service × resource × method triple, we run the whole thing in match_all
+# mode at the top. Every positional token is matched independently against
+# the flat verb dictionary below; unknown tokens (service names like
+# "drive", resource names like "files", IDs, etc.) fall back to the base
+# READONLY classification. The final classification is the max severity
+# across all matched tokens.
+#
+# This means:
+#   gws drive files list         -> list (READONLY)                -> READONLY
+#   gws drive files delete       -> delete (DANGEROUS)              -> DANGEROUS
+#   gws drive files create       -> create (EXTERNAL_EFFECTS)       -> EXTERNAL
+#   gws gmail users messages send -> send (EXTERNAL_EFFECTS)        -> EXTERNAL
+#
+# The verb `export` is used both for "download as format" (drive/sheets/docs
+# export = READONLY) and for `auth export`, which by default prints *masked*
+# credentials (also READONLY). Only `auth export --unmasked` prints plaintext
+# OAuth tokens and client secrets — that specific case is flagged via the
+# `--unmasked` global option override below.
+subcommand_mode: match_all
+
+global_options:
+  --help: {overrides: READONLY}
+  -h: {overrides: READONLY}
+  --format: {takes_value: true}
+  --params: {takes_value: true}
+  --json: {takes_value: true}
+  --upload: {takes_value: true}
+  --upload-content-type: {takes_value: true}
+  --output: {takes_value: true}
+  --api-version: {takes_value: true}
+  --page-all: {}
+  --page-limit: {takes_value: true}
+  --page-delay: {takes_value: true}
+  --sanitize: {takes_value: true}
+  --dry-run: {overrides: READONLY, risk: LOW}
+  # `auth export --unmasked` prints plaintext OAuth tokens and client secrets.
+  --unmasked: {overrides: DANGEROUS, risk: HIGH}
+
+subcommands:
+  # ── service names (explicit READONLY so they don't pollute risk) ──
+  drive: {classification: READONLY}
+  sheets: {classification: READONLY}
+  gmail: {classification: READONLY}
+  calendar: {classification: READONLY}
+  docs: {classification: READONLY}
+  slides: {classification: READONLY}
+  tasks: {classification: READONLY}
+  people: {classification: READONLY}
+  chat: {classification: READONLY}
+  classroom: {classification: READONLY}
+  forms: {classification: READONLY}
+  keep: {classification: READONLY}
+  meet: {classification: READONLY}
+  events: {classification: READONLY}
+  workflow: {classification: READONLY}
+  wf: {classification: READONLY}
+  script: {classification: READONLY}
+  admin: {classification: READONLY}
+  admin-reports: {classification: READONLY}
+  reports: {classification: READONLY}
+  modelarmor: {classification: READONLY}
+  schema: {classification: READONLY}
+
+  # ── auth: a flat "verb" since match_all treats every token equally ─
+  # `auth` itself maps to READONLY; the method tokens below elevate.
+  # `auth export` defaults to READONLY (masked); `--unmasked` is flagged
+  # separately via the global option override above.
+  auth: {classification: READONLY}
+  status: {classification: READONLY}
+  # `auth login` performs an OAuth2 handshake with Google — creates/rotates
+  # a credential server-side, so it has external effects.
+  login: {classification: EXTERNAL_EFFECTS}
+  logout:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  # `auth setup` can shell out to `gcloud` and create GCP OAuth clients/projects.
+  setup: {classification: EXTERNAL_EFFECTS}
+
+  # ── READONLY methods ──────────────────────────────────────────────
+  get: {classification: READONLY}
+  getProfile: {classification: READONLY}
+  getContent: {classification: READONLY}
+  getMetrics: {classification: READONLY}
+  getThumbnail: {classification: READONLY}
+  getByDataFilter: {classification: READONLY}
+  getBatchGet: {classification: READONLY}
+  batchGet: {classification: READONLY}
+  list: {classification: READONLY}
+  listLabels: {classification: READONLY}
+  listContactGroups: {classification: READONLY}
+  listDirectoryPeople: {classification: READONLY}
+  listScriptProcesses: {classification: READONLY}
+  listUserProcesses: {classification: READONLY}
+  searchContacts: {classification: READONLY}
+  searchDirectoryPeople: {classification: READONLY}
+  search: {classification: READONLY}
+  query: {classification: READONLY}
+  findDirectMessage: {classification: READONLY}
+  freebusy: {classification: READONLY}
+  instances: {classification: READONLY}
+  about: {classification: READONLY}
+  download: {classification: READONLY}
+  export: {classification: READONLY}           # drive/sheets/docs export; NOTE: auth export also matches
+  generateIds: {classification: READONLY}
+  generateCseToken: {classification: READONLY}
+
+  # ── READONLY helpers ('+' prefix) ─────────────────────────────────
+  "+read": {classification: READONLY}
+  "+triage": {classification: READONLY}
+  "+agenda": {classification: READONLY}
+  "+standup-report": {classification: READONLY}
+  "+meeting-prep": {classification: READONLY}
+  "+weekly-digest": {classification: READONLY}
+  "+subscribe": {classification: READONLY}
+
+  # ── EXTERNAL_EFFECTS methods ──────────────────────────────────────
+  create: {classification: EXTERNAL_EFFECTS}
+  createContact: {classification: EXTERNAL_EFFECTS}
+  update: {classification: EXTERNAL_EFFECTS}
+  updateContent: {classification: EXTERNAL_EFFECTS}
+  updateContact: {classification: EXTERNAL_EFFECTS}
+  updateContactPhoto: {classification: EXTERNAL_EFFECTS}
+  patch: {classification: EXTERNAL_EFFECTS}
+  insert: {classification: EXTERNAL_EFFECTS}
+  import: {classification: EXTERNAL_EFFECTS}
+  send: {classification: EXTERNAL_EFFECTS}
+  copy: {classification: EXTERNAL_EFFECTS}
+  copyTo: {classification: EXTERNAL_EFFECTS}
+  copyOtherContactToMyContactsGroup: {classification: EXTERNAL_EFFECTS}
+  move: {classification: EXTERNAL_EFFECTS}
+  modify: {classification: EXTERNAL_EFFECTS}
+  modifyLabels: {classification: EXTERNAL_EFFECTS}
+  modifyAttachments: {classification: EXTERNAL_EFFECTS}
+  modifyAssignment: {classification: EXTERNAL_EFFECTS}
+  modifyIndividualStudentsOptions: {classification: EXTERNAL_EFFECTS}
+  batchUpdate: {classification: EXTERNAL_EFFECTS}
+  batchUpdateByDataFilter: {classification: EXTERNAL_EFFECTS}
+  batchModify: {classification: EXTERNAL_EFFECTS}
+  batchCreateContacts: {classification: EXTERNAL_EFFECTS}
+  batchUpdateContacts: {classification: EXTERNAL_EFFECTS}
+  append: {classification: EXTERNAL_EFFECTS}
+  upload: {classification: EXTERNAL_EFFECTS}
+  watch: {classification: EXTERNAL_EFFECTS}
+  stop: {classification: EXTERNAL_EFFECTS}
+  untrash: {classification: EXTERNAL_EFFECTS}
+  hide: {classification: EXTERNAL_EFFECTS}
+  unhide: {classification: EXTERNAL_EFFECTS}
+  enable: {classification: EXTERNAL_EFFECTS}
+  disable: {classification: EXTERNAL_EFFECTS}
+  verify: {classification: EXTERNAL_EFFECTS}
+  accept: {classification: EXTERNAL_EFFECTS}
+  reclaim: {classification: EXTERNAL_EFFECTS}
+  return: {classification: EXTERNAL_EFFECTS}
+  turnIn: {classification: EXTERNAL_EFFECTS}
+  quickAdd: {classification: EXTERNAL_EFFECTS}
+  setUp: {classification: EXTERNAL_EFFECTS}
+  setPublishSettings: {classification: EXTERNAL_EFFECTS}
+  completeImport: {classification: EXTERNAL_EFFECTS}
+  reactivate: {classification: EXTERNAL_EFFECTS}
+  publish: {classification: EXTERNAL_EFFECTS}
+  endActiveConference: {classification: EXTERNAL_EFFECTS}
+  # Model Armor sanitize* methods POST user-controlled text to the remote
+  # modelarmor.{region}.rep.googleapis.com endpoint.
+  sanitizeUserPrompt: {classification: EXTERNAL_EFFECTS}
+  sanitizeModelResponse: {classification: EXTERNAL_EFFECTS}
+
+  # ── EXTERNAL_EFFECTS helpers ──────────────────────────────────────
+  "+upload": {classification: EXTERNAL_EFFECTS}
+  "+push": {classification: EXTERNAL_EFFECTS}
+  "+send": {classification: EXTERNAL_EFFECTS}
+  # `gmail +watch` creates Pub/Sub topic+subscription and calls users.watch —
+  # leaves persistent server-side GCP resources unless --cleanup is passed.
+  "+watch": {classification: EXTERNAL_EFFECTS}
+  "+sanitize-prompt": {classification: EXTERNAL_EFFECTS}
+  "+sanitize-response": {classification: EXTERNAL_EFFECTS}
+  "+reply": {classification: EXTERNAL_EFFECTS}
+  "+reply-all": {classification: EXTERNAL_EFFECTS}
+  "+forward": {classification: EXTERNAL_EFFECTS}
+  "+insert": {classification: EXTERNAL_EFFECTS}
+  "+write": {classification: EXTERNAL_EFFECTS}
+  "+append": {classification: EXTERNAL_EFFECTS}
+  "+email-to-task": {classification: EXTERNAL_EFFECTS}
+  "+file-announce": {classification: EXTERNAL_EFFECTS}
+  "+renew": {classification: EXTERNAL_EFFECTS}
+  "+create-template": {classification: EXTERNAL_EFFECTS}
+
+  # ── DANGEROUS methods ─────────────────────────────────────────────
+  delete: {classification: DANGEROUS}
+  deleteContact: {classification: DANGEROUS}
+  deleteContactPhoto: {classification: DANGEROUS}
+  batchDelete: {classification: DANGEROUS}
+  batchDeleteContacts: {classification: DANGEROUS}
+  batchClear: {classification: DANGEROUS}
+  batchClearByDataFilter: {classification: DANGEROUS}
+  clear: {classification: DANGEROUS}
+  trash: {classification: DANGEROUS}
+  emptyTrash: {classification: DANGEROUS}
+  remove: {classification: DANGEROUS}
+  # Running an Apps Script project executes arbitrary code.
+  run: {classification: DANGEROUS}

data/lib/rubik/security/classifier/commands/gzip.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: gzip
+description: "Compress or decompress files using gzip"
+classification: LOCAL_EFFECTS
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/hadolint.yaml

@@ -0,0 +1,9 @@
+# $schema: ../../../schemas/command.schema.json
+command: hadolint
+description: "Dockerfile linter"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+options:
+  --version: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/halt.yaml

@@ -0,0 +1,8 @@
+# $schema: ../../../schemas/command.schema.json
+command: halt
+description: "Halt the system"
+classification: DANGEROUS
+risk: HIGH
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/head.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: head
+description: "Output the first part of files"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/helm.yaml

@@ -0,0 +1,129 @@
+# $schema: ../../../schemas/command.schema.json
+command: helm
+description: "Kubernetes package manager"
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+subcommands:
+  list:
+    classification: READONLY
+    strict: false
+  status:
+    classification: READONLY
+    strict: false
+  get:
+    classification: READONLY
+    strict: false
+    subcommands:
+      all:
+        classification: READONLY
+        strict: false
+      values:
+        classification: READONLY
+        strict: false
+      manifest:
+        classification: READONLY
+        strict: false
+      hooks:
+        classification: READONLY
+        strict: false
+      notes:
+        classification: READONLY
+        strict: false
+  history:
+    classification: READONLY
+    strict: false
+  show:
+    classification: READONLY
+    strict: false
+    subcommands:
+      chart:
+        classification: READONLY
+        strict: false
+      readme:
+        classification: READONLY
+        strict: false
+      values:
+        classification: READONLY
+        strict: false
+      all:
+        classification: READONLY
+        strict: false
+  search:
+    classification: READONLY
+    strict: false
+  install:
+    classification: EXTERNAL_EFFECTS
+    strict: false
+  upgrade:
+    classification: EXTERNAL_EFFECTS
+    strict: false
+  rollback:
+    classification: DANGEROUS
+    strict: false
+  uninstall:
+    classification: DANGEROUS
+    strict: false
+  repo:
+    classification: EXTERNAL_EFFECTS
+    strict: false
+    subcommands:
+      list:
+        classification: READONLY
+        strict: false
+  template:
+    classification: READONLY
+    strict: false
+  lint:
+    classification: READONLY
+    strict: false
+  diff:
+    classification: READONLY
+    strict: false
+  env:
+    classification: READONLY
+  verify:
+    classification: READONLY
+    strict: false
+  version:
+    classification: READONLY
+    strict: false
+  completion:
+    classification: READONLY
+    strict: false
+  plugin:
+    classification: LOCAL_EFFECTS
+    strict: false
+    subcommands:
+      list:
+        classification: READONLY
+        strict: false
+  package:
+    classification: LOCAL_EFFECTS
+    strict: false
+  pull:
+    classification: LOCAL_EFFECTS
+    strict: false
+  create:
+    classification: LOCAL_EFFECTS
+    strict: false
+  dependency:
+    classification: LOCAL_EFFECTS
+    strict: false
+    subcommands:
+      list:
+        classification: READONLY
+        strict: false
+  push:
+    classification: DANGEROUS
+    strict: false
+  registry:
+    classification: EXTERNAL_EFFECTS
+    strict: false
+    subcommands:
+      login:
+        classification: EXTERNAL_EFFECTS
+        strict: false
+      logout:
+        classification: EXTERNAL_EFFECTS
+        strict: false

data/lib/rubik/security/classifier/commands/hostname.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: hostname
+description: "Show or set the system hostname"
+classification: EXTERNAL_EFFECTS
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/id.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: id
+description: "Print real and effective user and group IDs"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/install.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: install
+description: "Copy files and set attributes"
+classification: LOCAL_EFFECTS
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/isort.yaml

@@ -0,0 +1,14 @@
+# $schema: ../../../schemas/command.schema.json
+command: isort
+description: "Python import sorter"
+classification: LOCAL_EFFECTS
+risk: LOW
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+options:
+  --check: {overrides: READONLY}
+  --check-only: {overrides: READONLY}
+  -c: {overrides: READONLY}
+  --diff: {overrides: READONLY}
+  --version: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/java.yaml

@@ -0,0 +1,35 @@
+# $schema: ../../../schemas/command.schema.json
+command: java
+description: "Java runtime environment"
+classification: DANGEROUS
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+  -help: {overrides: READONLY}
+options:
+  --version: {overrides: READONLY}
+  -version: {overrides: READONLY}
+  -jar: {takes_value: true}
+  -cp: {takes_value: true}
+  -classpath: {takes_value: true}
+  --class-path: {takes_value: true, aliases: [-cp, -classpath]}
+  -m: {takes_value: true}
+  --module: {takes_value: true, aliases: [-m]}
+  -p: {takes_value: true}
+  --module-path: {takes_value: true, aliases: [-p]}
+  --add-modules: {takes_value: true}
+  --add-opens: {takes_value: true}
+  --add-exports: {takes_value: true}
+  --add-reads: {takes_value: true}
+  -D: {takes_value: true}
+  -X: {takes_value: true}
+  -Xmx: {takes_value: true}
+  -Xms: {takes_value: true}
+  -Xss: {takes_value: true}
+  -ea: {}
+  --enable-assertions: {aliases: [-ea]}
+  -da: {}
+  --disable-assertions: {aliases: [-da]}
+  -server: {}
+  -client: {}
+  --enable-preview: {}