rubik 0.1.0

data/lib/rubik/security/classifier/commands/pwd.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: pwd
+description: "Print name of current working directory"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/pytest.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: pytest
+description: "Python testing framework"
+classification: LOCAL_EFFECTS
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/python.yaml

@@ -0,0 +1,9 @@
+# $schema: ../../../schemas/command.schema.json
+command: python
+description: "Python language interpreter"
+classification: DANGEROUS
+strict: false
+options:
+  --version: {overrides: READONLY}
+  -V: {overrides: READONLY}
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/python3.yaml

@@ -0,0 +1,9 @@
+# $schema: ../../../schemas/command.schema.json
+command: python3
+description: "Python 3 language interpreter"
+classification: DANGEROUS
+strict: false
+options:
+  --version: {overrides: READONLY}
+  -V: {overrides: READONLY}
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/read.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: read
+description: "Read a line from standard input"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/readlink.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: readlink
+description: "Print resolved symbolic links or canonical names"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/realpath.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: realpath
+description: "Print the resolved absolute path"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/reboot.yaml

@@ -0,0 +1,8 @@
+# $schema: ../../../schemas/command.schema.json
+command: reboot
+description: "Reboot the system"
+classification: DANGEROUS
+risk: HIGH
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/rev.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: rev
+description: "Reverse lines character-wise"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/rg.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: rg
+description: "Recursively search directories for a regex pattern"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/rm.yaml

@@ -0,0 +1,8 @@
+# $schema: ../../../schemas/command.schema.json
+command: rm
+description: "Remove files or directories"
+classification: LOCAL_EFFECTS
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+  --no-preserve-root: {overrides: DANGEROUS, risk: HIGH}

data/lib/rubik/security/classifier/commands/rsync.yaml

@@ -0,0 +1,12 @@
+# $schema: ../../../schemas/command.schema.json
+command: rsync
+description: "Fast, versatile file copying tool"
+classification: EXTERNAL_EFFECTS
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+options:
+  -n: {overrides: READONLY}
+  --dry-run: {overrides: READONLY, aliases: [-n]}
+  --delete: {overrides: DANGEROUS}
+  --list-only: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/rtk.yaml

@@ -0,0 +1,140 @@
+# $schema: ../../../schemas/command.schema.json
+command: rtk
+description: "CLI proxy that filters/summarizes command output for LLM context"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+  -h: {overrides: READONLY, aliases: [--help]}
+  --version: {overrides: READONLY}
+  -V: {overrides: READONLY, aliases: [--version]}
+  -v: {}
+  --verbose: {aliases: [-v]}
+  --ultra-compact: {}
+  --skip-env: {}
+# Most rtk subcommands are thin passthroughs: `rtk <tool> <args>` runs `<tool> <args>`
+# and only filters stdout. Risk profile is identical to the inner command, so by default
+# delegate to the rest of argv. Only rtk-native subcommands (config, gain, run, etc.)
+# are enumerated below.
+delegates_to:
+  mode: rest_are_argv
+subcommands:
+  # --- rtk-native readonly inspectors / filters ---
+  read:
+    classification: READONLY
+    strict: false
+  smart:
+    classification: READONLY
+    strict: false
+  pipe:
+    classification: READONLY
+    strict: false
+  json:
+    classification: READONLY
+    strict: false
+  log:
+    classification: READONLY
+    strict: false
+  deps:
+    classification: READONLY
+    strict: false
+  rewrite:
+    classification: READONLY
+    strict: false
+  hook:
+    classification: READONLY
+    strict: false
+  hook-audit:
+    classification: READONLY
+    strict: false
+  verify:
+    classification: READONLY
+    strict: false
+  discover:
+    classification: READONLY
+    strict: false
+  session:
+    classification: READONLY
+    strict: false
+  cc-economics:
+    classification: READONLY
+    strict: false
+  gain:
+    classification: READONLY
+    strict: false
+    options:
+      --reset: {overrides: LOCAL_EFFECTS}
+  config:
+    classification: READONLY
+    strict: false
+    options:
+      --create: {overrides: LOCAL_EFFECTS}
+  learn:
+    classification: READONLY
+    strict: false
+    options:
+      -w: {overrides: LOCAL_EFFECTS}
+      --write-rules: {overrides: LOCAL_EFFECTS, aliases: [-w]}
+  telemetry:
+    classification: READONLY
+    strict: false
+    subcommands:
+      status:
+        classification: READONLY
+      enable:
+        classification: LOCAL_EFFECTS
+      disable:
+        classification: LOCAL_EFFECTS
+      forget:
+        classification: LOCAL_EFFECTS
+
+  # --- rtk-native local-effects ---
+  init:
+    classification: LOCAL_EFFECTS
+    strict: false
+  trust:
+    classification: LOCAL_EFFECTS
+    strict: false
+    options:
+      --list: {overrides: READONLY}
+  untrust:
+    classification: LOCAL_EFFECTS
+    strict: false
+
+  # --- rtk-native delegating runners (inner command is arbitrary) ---
+  # `rtk run -c "<sh>"` executes a raw shell expression; `rtk run <argv>` runs argv.
+  run:
+    classification: DANGEROUS
+    strict: false
+    options:
+      -c: {takes_value: true}
+    delegates_to:
+      mode: flag_value_is_expression
+      flag: -c
+  proxy:
+    strict: false
+    delegates_to:
+      mode: rest_are_argv
+  err:
+    strict: false
+    delegates_to:
+      mode: rest_are_argv
+  test:
+    strict: false
+    delegates_to:
+      mode: rest_are_argv
+  summary:
+    strict: false
+    delegates_to:
+      mode: rest_are_argv
+
+  # --- rtk-aliased filters (rtk subcommand name doesn't match a real tool) ---
+  # `rtk lint` runs eslint; `rtk format` is a universal format checker.
+  lint:
+    classification: READONLY
+    strict: false
+    options:
+      --fix: {overrides: LOCAL_EFFECTS}
+  format:
+    classification: READONLY
+    strict: false

data/lib/rubik/security/classifier/commands/ruff.yaml

@@ -0,0 +1,29 @@
+# $schema: ../../../schemas/command.schema.json
+command: ruff
+description: "Fast Python linter and formatter"
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+subcommands:
+  check:
+    classification: READONLY
+    strict: false
+    options:
+      --fix: {overrides: LOCAL_EFFECTS, risk: LOW}
+      --fix-only: {overrides: LOCAL_EFFECTS, risk: LOW}
+  format:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+    strict: false
+    options:
+      --check: {overrides: READONLY}
+      --diff: {overrides: READONLY}
+  version:
+    classification: READONLY
+  rule:
+    classification: READONLY
+  linter:
+    classification: READONLY
+  clean:
+    classification: LOCAL_EFFECTS
+    risk: LOW

data/lib/rubik/security/classifier/commands/rustfmt.yaml

@@ -0,0 +1,14 @@
+# $schema: ../../../schemas/command.schema.json
+command: rustfmt
+description: "Rust code formatter (rewrites files in place; --check is the read-only form)"
+classification: LOCAL_EFFECTS
+risk: LOW
+global_options:
+  --help: {overrides: READONLY}
+  --version: {overrides: READONLY}
+  -V: {overrides: READONLY}
+options:
+  --check: {overrides: READONLY}
+  --edition: {takes_value: true}
+  --config-path: {takes_value: true}
+  --config: {takes_value: true}

data/lib/rubik/security/classifier/commands/scp.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: scp
+description: "Secure copy files between hosts"
+classification: EXTERNAL_EFFECTS
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/sed.yaml

@@ -0,0 +1,14 @@
+# $schema: ../../../schemas/command.schema.json
+command: sed
+description: "Stream editor for filtering and transforming text"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+options:
+  -i: {overrides: DANGEROUS, risk: HIGH}
+  --in-place: {overrides: DANGEROUS, risk: HIGH, aliases: [-i]}
+  -e: {takes_value: true}
+  --expression: {takes_value: true, aliases: [-e]}
+  -f: {takes_value: true}
+  --file: {takes_value: true, aliases: [-f]}

data/lib/rubik/security/classifier/commands/seq.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: seq
+description: "Print a sequence of numbers"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/sh.yaml

@@ -0,0 +1,14 @@
+# $schema: ../../../schemas/command.schema.json
+command: sh
+description: "POSIX-compliant command interpreter"
+classification: DANGEROUS
+global_options:
+  --help: {overrides: READONLY}
+delegates_to:
+  mode: flag_value_is_expression
+  flag: -c
+options:
+  -c: {takes_value: true}
+  -e: {}
+  -x: {}
+  -i: {}

data/lib/rubik/security/classifier/commands/sha1sum.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: sha1sum
+description: "Compute and check SHA-1 message digest"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/sha256sum.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: sha256sum
+description: "Compute and check SHA-256 message digest"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/shellcheck.yaml

@@ -0,0 +1,10 @@
+# $schema: ../../../schemas/command.schema.json
+command: shellcheck
+description: "Shell script linter"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+options:
+  --version: {overrides: READONLY}
+  -V: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/shutdown.yaml

@@ -0,0 +1,8 @@
+# $schema: ../../../schemas/command.schema.json
+command: shutdown
+description: "Shut down or restart the system"
+classification: DANGEROUS
+risk: HIGH
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/slack.yaml

@@ -0,0 +1,113 @@
+# $schema: ../../../schemas/command.schema.json
+command: slack
+description: "Slack CLI (https://github.com/fprochazka/slackcli) — interact with Slack workspaces"
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+  -o: {takes_value: true}
+  --org: {takes_value: true, aliases: [-o]}
+  -c: {takes_value: true}
+  --config: {takes_value: true, aliases: [-c]}
+  -v: {}
+  --verbose: {}
+
+subcommands:
+  # ── Resolve ───────────────────────────────────────────────────────
+  resolve:
+    classification: READONLY
+    strict: false
+
+  # ── Config ────────────────────────────────────────────────────────
+  config:
+    classification: READONLY
+    strict: false
+
+  # ── Conversations ─────────────────────────────────────────────────
+  conversations:
+    subcommands:
+      list:
+        classification: READONLY
+        strict: false
+
+  # ── Messages ──────────────────────────────────────────────────────
+  messages:
+    subcommands:
+      list:
+        classification: READONLY
+        strict: false
+      send:
+        classification: EXTERNAL_EFFECTS
+        strict: false
+      edit:
+        classification: EXTERNAL_EFFECTS
+        strict: false
+      delete:
+        classification: DANGEROUS
+        strict: false
+
+  # ── Reactions ─────────────────────────────────────────────────────
+  reactions:
+    subcommands:
+      add:
+        classification: EXTERNAL_EFFECTS
+        strict: false
+      remove:
+        classification: EXTERNAL_EFFECTS
+        strict: false
+
+  # ── Pins ──────────────────────────────────────────────────────────
+  pins:
+    subcommands:
+      list:
+        classification: READONLY
+        strict: false
+      add:
+        classification: EXTERNAL_EFFECTS
+        strict: false
+      remove:
+        classification: EXTERNAL_EFFECTS
+        strict: false
+
+  # ── Scheduled ─────────────────────────────────────────────────────
+  scheduled:
+    subcommands:
+      list:
+        classification: READONLY
+        strict: false
+      create:
+        classification: EXTERNAL_EFFECTS
+        strict: false
+      delete:
+        classification: DANGEROUS
+        strict: false
+
+  # ── Search ────────────────────────────────────────────────────────
+  search:
+    subcommands:
+      messages:
+        classification: READONLY
+        strict: false
+      files:
+        classification: READONLY
+        strict: false
+
+  # ── Users ─────────────────────────────────────────────────────────
+  users:
+    subcommands:
+      list:
+        classification: READONLY
+        strict: false
+      search:
+        classification: READONLY
+        strict: false
+      get:
+        classification: READONLY
+        strict: false
+
+  # ── Files ─────────────────────────────────────────────────────────
+  files:
+    subcommands:
+      download:
+        classification: LOCAL_EFFECTS
+        risk: LOW
+        strict: false

data/lib/rubik/security/classifier/commands/sleep.yaml

@@ -0,0 +1,8 @@
+# $schema: ../../../schemas/command.schema.json
+command: sleep
+description: "Delay for a specified amount of time"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+  --version: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/snip.yaml

@@ -0,0 +1,79 @@
+# $schema: ../../../schemas/command.schema.json
+command: snip
+description: "CLI proxy that filters/compresses tool output for LLM agents"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+  -h: {overrides: READONLY, aliases: [--help]}
+  --version: {overrides: READONLY}
+  -V: {overrides: READONLY, aliases: [--version]}
+# Implicit form `snip <tool> <args>` is semantically identical to `<tool> <args>`
+# — same filter pipeline, same risk profile. Explicit `snip run -- <tool> <args>`
+# is the canonical form the Claude Code hook rewrites to. Only snip-native
+# subcommands are enumerated below; everything else falls through to delegation.
+delegates_to:
+  mode: rest_are_argv
+subcommands:
+  # --- snip-native readonly inspectors ---
+  hook:
+    classification: READONLY
+    strict: false
+    subcommands:
+      codex:
+        classification: READONLY
+  hook-audit:
+    classification: READONLY
+    strict: false
+    options:
+      --clear: {overrides: LOCAL_EFFECTS}
+  gain:
+    classification: READONLY
+    strict: false
+  cc-economics:
+    classification: READONLY
+    strict: false
+  config:
+    classification: READONLY
+    strict: false
+  discover:
+    classification: READONLY
+    strict: false
+  verify:
+    classification: READONLY
+    strict: false
+  learn:
+    classification: READONLY
+    strict: false
+    options:
+      --generate: {overrides: LOCAL_EFFECTS}
+
+  # --- snip-native local-effects ---
+  init:
+    classification: LOCAL_EFFECTS
+    strict: false
+    options:
+      --uninstall: {overrides: LOCAL_EFFECTS}
+  trust:
+    classification: LOCAL_EFFECTS
+    strict: false
+  untrust:
+    classification: LOCAL_EFFECTS
+    strict: false
+
+  # --- snip-native delegating runners ---
+  # `snip run -- <cmd> <args>` is the explicit form: classify the inner command.
+  run:
+    strict: false
+    delegates_to:
+      mode: after_separator
+      separator: "--"
+  # `snip proxy <cmd> <args>` skips filtering and execs the inner directly.
+  proxy:
+    strict: false
+    delegates_to:
+      mode: rest_are_argv
+  # `snip check -- <cmd>` is a dry-run that never executes the inner command.
+  check:
+    classification: READONLY
+    strict: false

data/lib/rubik/security/classifier/commands/sort.yaml

@@ -0,0 +1,10 @@
+# $schema: ../../../schemas/command.schema.json
+command: sort
+description: "Sort lines of text files"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+options:
+  -o: {takes_value: true, overrides: LOCAL_EFFECTS}
+  --output: {takes_value: true, overrides: LOCAL_EFFECTS, aliases: [-o]}

data/lib/rubik/security/classifier/commands/ss.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: ss
+description: "Utility to investigate sockets"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/ssh.yaml

@@ -0,0 +1,41 @@
+# $schema: ../../../schemas/command.schema.json
+command: ssh
+description: "OpenSSH remote login client"
+classification: DANGEROUS
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+options:
+  -l: {takes_value: true}
+  -p: {takes_value: true}
+  -i: {takes_value: true}
+  -F: {takes_value: true}
+  -o: {takes_value: true}
+  -J: {takes_value: true}
+  -L: {takes_value: true}
+  -R: {takes_value: true}
+  -D: {takes_value: true}
+  -W: {takes_value: true}
+  -b: {takes_value: true}
+  -c: {takes_value: true}
+  -e: {takes_value: true}
+  -m: {takes_value: true}
+  -w: {takes_value: true}
+  -N: {}
+  -f: {}
+  -n: {}
+  -q: {}
+  -t: {}
+  -T: {}
+  -v: {}
+  -X: {}
+  -x: {}
+  -A: {}
+  -a: {}
+  -C: {}
+  -g: {}
+  -K: {}
+  -k: {}
+  -s: {}
+  -4: {}
+  -6: {}

data/lib/rubik/security/classifier/commands/stat.yaml

@@ -0,0 +1,7 @@
+# $schema: ../../../schemas/command.schema.json
+command: stat
+description: "Display file or file system status"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}

data/lib/rubik/security/classifier/commands/stdbuf.yaml

@@ -0,0 +1,15 @@
+# $schema: ../../../schemas/command.schema.json
+command: stdbuf
+description: "Run a command with modified stdio buffering"
+classification: READONLY
+global_options:
+  --help: {overrides: READONLY}
+delegates_to:
+  mode: rest_are_argv
+options:
+  -i: {takes_value: true}
+  --input: {takes_value: true, aliases: [-i]}
+  -o: {takes_value: true}
+  --output: {takes_value: true, aliases: [-o]}
+  -e: {takes_value: true}
+  --error: {takes_value: true, aliases: [-e]}