@vybestack/llxprt-code-policy 0.10.0 → 0.11.0-nightly.260728.ffaa8d5d7

package/dist/src/destructive-commands.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @license
+ * Copyright 2025 Vybestack LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Returns true if the raw shell command string contains a canonical destructive
+ * pattern that must be hard-denied regardless of approval mode or allowlist.
+ * Self-contained: performs its own canonicalization so it is not bypassable by
+ * quote-removal, `$IFS` splitting, or command substitution.
+ *
+ * Known residuals (out of scope): a command name computed via substitution
+ * output (e.g. `$(echo rm) -rf /`) cannot be statically resolved; base64
+ * piped to an interpreter (e.g. `echo <b64> | base64 -d | sh`) is not
+ * decoded-and-reparsed here (Class D — handled by the Layer-1 pipe-destination
+ * guard in production); interpreter input read from stdin (beyond the `-c`
+ * flag) is not evaluated.
+ */
+export declare function isDestructiveCommand(command: string): boolean;