@xelauvas/xela-cli 0.1.0

package/src/tools/PowerShellTool/UI.tsx

@@ -0,0 +1,131 @@
+import type { ToolResultBlockParam } from '@anthropic-ai/sdk/resources/index.mjs';
+import * as React from 'react';
+import { KeyboardShortcutHint } from '../../components/design-system/KeyboardShortcutHint.js';
+import { FallbackToolUseErrorMessage } from '../../components/FallbackToolUseErrorMessage.js';
+import { MessageResponse } from '../../components/MessageResponse.js';
+import { OutputLine } from '../../components/shell/OutputLine.js';
+import { ShellProgressMessage } from '../../components/shell/ShellProgressMessage.js';
+import { ShellTimeDisplay } from '../../components/shell/ShellTimeDisplay.js';
+import { Box, Text } from '../../ink.js';
+import type { Tool } from '../../Tool.js';
+import type { ProgressMessage } from '../../types/message.js';
+import type { PowerShellProgress } from '../../types/tools.js';
+import type { ThemeName } from '../../utils/theme.js';
+import type { Out, PowerShellToolInput } from './PowerShellTool.js';
+
+// Constants for command display
+const MAX_COMMAND_DISPLAY_LINES = 2;
+const MAX_COMMAND_DISPLAY_CHARS = 160;
+export function renderToolUseMessage(input: Partial<PowerShellToolInput>, {
+  verbose,
+  theme: _theme
+}: {
+  verbose: boolean;
+  theme: ThemeName;
+}): React.ReactNode {
+  const {
+    command
+  } = input;
+  if (!command) {
+    return null;
+  }
+  const displayCommand = command;
+  if (!verbose) {
+    const lines = displayCommand.split('\n');
+    const needsLineTruncation = lines.length > MAX_COMMAND_DISPLAY_LINES;
+    const needsCharTruncation = displayCommand.length > MAX_COMMAND_DISPLAY_CHARS;
+    if (needsLineTruncation || needsCharTruncation) {
+      let truncated = displayCommand;
+      if (needsLineTruncation) {
+        truncated = lines.slice(0, MAX_COMMAND_DISPLAY_LINES).join('\n');
+      }
+      if (truncated.length > MAX_COMMAND_DISPLAY_CHARS) {
+        truncated = truncated.slice(0, MAX_COMMAND_DISPLAY_CHARS);
+      }
+      return <Text>{truncated.trim()}…</Text>;
+    }
+  }
+  return displayCommand;
+}
+export function renderToolUseProgressMessage(progressMessagesForMessage: ProgressMessage<PowerShellProgress>[], {
+  verbose,
+  tools: _tools,
+  terminalSize: _terminalSize,
+  inProgressToolCallCount: _inProgressToolCallCount
+}: {
+  tools: Tool[];
+  verbose: boolean;
+  terminalSize?: {
+    columns: number;
+    rows: number;
+  };
+  inProgressToolCallCount?: number;
+}): React.ReactNode {
+  const lastProgress = progressMessagesForMessage.at(-1);
+  if (!lastProgress || !lastProgress.data) {
+    return <MessageResponse height={1}>
+        <Text dimColor>Running…</Text>
+      </MessageResponse>;
+  }
+  const data = lastProgress.data;
+  return <ShellProgressMessage fullOutput={data.fullOutput} output={data.output} elapsedTimeSeconds={data.elapsedTimeSeconds} totalLines={data.totalLines} totalBytes={data.totalBytes} timeoutMs={data.timeoutMs} taskId={data.taskId} verbose={verbose} />;
+}
+export function renderToolUseQueuedMessage(): React.ReactNode {
+  return <MessageResponse height={1}>
+      <Text dimColor>Waiting…</Text>
+    </MessageResponse>;
+}
+export function renderToolResultMessage(content: Out, progressMessagesForMessage: ProgressMessage<PowerShellProgress>[], {
+  verbose,
+  theme: _theme,
+  tools: _tools,
+  style: _style
+}: {
+  verbose: boolean;
+  theme: ThemeName;
+  tools: Tool[];
+  style?: 'condensed';
+}): React.ReactNode {
+  const lastProgress = progressMessagesForMessage.at(-1);
+  const timeoutMs = lastProgress?.data?.timeoutMs;
+  const {
+    stdout,
+    stderr,
+    interrupted,
+    returnCodeInterpretation,
+    isImage,
+    backgroundTaskId
+  } = content;
+  if (isImage) {
+    return <MessageResponse height={1}>
+        <Text dimColor>[Image data detected and sent to Claude]</Text>
+      </MessageResponse>;
+  }
+  return <Box flexDirection="column">
+      {stdout !== '' ? <OutputLine content={stdout} verbose={verbose} /> : null}
+      {stderr.trim() !== '' ? <OutputLine content={stderr} verbose={verbose} isError /> : null}
+      {stdout === '' && stderr.trim() === '' ? <MessageResponse height={1}>
+          <Text dimColor>
+            {backgroundTaskId ? <>
+                Running in the background{' '}
+                <KeyboardShortcutHint shortcut="↓" action="manage" parens />
+              </> : interrupted ? 'Interrupted' : returnCodeInterpretation || '(No output)'}
+          </Text>
+        </MessageResponse> : null}
+      {timeoutMs ? <MessageResponse>
+          <ShellTimeDisplay timeoutMs={timeoutMs} />
+        </MessageResponse> : null}
+    </Box>;
+}
+export function renderToolUseErrorMessage(result: ToolResultBlockParam['content'], {
+  verbose,
+  progressMessagesForMessage: _progressMessagesForMessage,
+  tools: _tools
+}: {
+  verbose: boolean;
+  progressMessagesForMessage: ProgressMessage<PowerShellProgress>[];
+  tools: Tool[];
+}): React.ReactNode {
+  return <FallbackToolUseErrorMessage result={result} verbose={verbose} />;
+}
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/src/tools/PowerShellTool/clmTypes.ts

@@ -0,0 +1,211 @@
+/**
+ * PowerShell Constrained Language Mode allowed types.
+ *
+ * Microsoft's CLM restricts .NET type usage to this allowlist when PS runs
+ * under AppLocker/WDAC system lockdown. Any type NOT in this set is considered
+ * unsafe for untrusted code execution.
+ *
+ * We invert this: type literals not in this set → ask. One canonical check
+ * replaces enumerating individual dangerous types (named pipes, reflection,
+ * process spawning, P/Invoke marshaling, etc.). Microsoft maintains the list.
+ *
+ * Source: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_language_modes
+ *
+ * Normalization: entries stored lowercase, short AND full names where both
+ * exist (PS resolves type accelerators like [int] → System.Int32 at runtime;
+ * we match against what the AST emits, which is the literal text).
+ */
+export const CLM_ALLOWED_TYPES: ReadonlySet<string> = new Set(
+  [
+    // Type accelerators (short names as they appear in AST TypeName.Name)
+    // SECURITY: 'adsi' and 'adsisearcher' REMOVED. Both are Active Directory
+    // Service Interface types that perform NETWORK BINDS when cast:
+    //   [adsi]'LDAP://evil.com/...' → connects to LDAP server
+    //   [adsisearcher]'(objectClass=user)' → binds to AD and queries
+    // Microsoft's CLM allows these because it's for Windows admins in trusted
+    // domains; we block them since the target isn't validated.
+    'alias',
+    'allowemptycollection',
+    'allowemptystring',
+    'allownull',
+    'argumentcompleter',
+    'argumentcompletions',
+    'array',
+    'bigint',
+    'bool',
+    'byte',
+    'char',
+    'cimclass',
+    'cimconverter',
+    'ciminstance',
+    // 'cimsession' REMOVED — see wmi/adsi comment below
+    'cimtype',
+    'cmdletbinding',
+    'cultureinfo',
+    'datetime',
+    'decimal',
+    'double',
+    'dsclocalconfigurationmanager',
+    'dscproperty',
+    'dscresource',
+    'experimentaction',
+    'experimental',
+    'experimentalfeature',
+    'float',
+    'guid',
+    'hashtable',
+    'int',
+    'int16',
+    'int32',
+    'int64',
+    'ipaddress',
+    'ipendpoint',
+    'long',
+    'mailaddress',
+    'norunspaceaffinity',
+    'nullstring',
+    'objectsecurity',
+    'ordered',
+    'outputtype',
+    'parameter',
+    'physicaladdress',
+    'pscredential',
+    'pscustomobject',
+    'psdefaultvalue',
+    'pslistmodifier',
+    'psobject',
+    'psprimitivedictionary',
+    'pstypenameattribute',
+    'ref',
+    'regex',
+    'sbyte',
+    'securestring',
+    'semver',
+    'short',
+    'single',
+    'string',
+    'supportswildcards',
+    'switch',
+    'timespan',
+    'uint',
+    'uint16',
+    'uint32',
+    'uint64',
+    'ulong',
+    'uri',
+    'ushort',
+    'validatecount',
+    'validatedrive',
+    'validatelength',
+    'validatenotnull',
+    'validatenotnullorempty',
+    'validatenotnullorwhitespace',
+    'validatepattern',
+    'validaterange',
+    'validatescript',
+    'validateset',
+    'validatetrusteddata',
+    'validateuserdrive',
+    'version',
+    'void',
+    'wildcardpattern',
+    // SECURITY: 'wmi', 'wmiclass', 'wmisearcher', 'cimsession' REMOVED.
+    // WMI type casts perform WMI queries which can target remote computers
+    // (network request) and access dangerous classes like Win32_Process.
+    // cimsession creates a CIM session (network connection to remote host).
+    //   [wmi]'\\evil-host\root\cimv2:Win32_Process.Handle="1"' → remote WMI
+    //   [wmisearcher]'SELECT * FROM Win32_Process' → runs WQL query
+    // Same rationale as adsi/adsisearcher removal above.
+    'x500distinguishedname',
+    'x509certificate',
+    'xml',
+    // Full names for accelerators that resolve to System.* (AST may emit either)
+    'system.array',
+    'system.boolean',
+    'system.byte',
+    'system.char',
+    'system.datetime',
+    'system.decimal',
+    'system.double',
+    'system.guid',
+    'system.int16',
+    'system.int32',
+    'system.int64',
+    'system.numerics.biginteger',
+    'system.sbyte',
+    'system.single',
+    'system.string',
+    'system.timespan',
+    'system.uint16',
+    'system.uint32',
+    'system.uint64',
+    'system.uri',
+    'system.version',
+    'system.void',
+    'system.collections.hashtable',
+    'system.text.regularexpressions.regex',
+    'system.globalization.cultureinfo',
+    'system.net.ipaddress',
+    'system.net.ipendpoint',
+    'system.net.mail.mailaddress',
+    'system.net.networkinformation.physicaladdress',
+    'system.security.securestring',
+    'system.security.cryptography.x509certificates.x509certificate',
+    'system.security.cryptography.x509certificates.x500distinguishedname',
+    'system.xml.xmldocument',
+    // System.Management.Automation.* — FQ equivalents of PS-specific accelerators
+    'system.management.automation.pscredential',
+    'system.management.automation.pscustomobject',
+    'system.management.automation.pslistmodifier',
+    'system.management.automation.psobject',
+    'system.management.automation.psprimitivedictionary',
+    'system.management.automation.psreference',
+    'system.management.automation.semanticversion',
+    'system.management.automation.switchparameter',
+    'system.management.automation.wildcardpattern',
+    'system.management.automation.language.nullstring',
+    // Microsoft.Management.Infrastructure.* — FQ equivalents of CIM accelerators
+    // SECURITY: cimsession FQ REMOVED — same network-bind hazard as short name
+    // (creates a CIM session to a remote host).
+    'microsoft.management.infrastructure.cimclass',
+    'microsoft.management.infrastructure.cimconverter',
+    'microsoft.management.infrastructure.ciminstance',
+    'microsoft.management.infrastructure.cimtype',
+    // FQ equivalents of remaining short-name accelerators
+    // SECURITY: DirectoryEntry/DirectorySearcher/ManagementObject/
+    // ManagementClass/ManagementObjectSearcher FQ REMOVED — same network-bind
+    // hazard as short names adsi/adsisearcher/wmi/wmiclass/wmisearcher
+    // (LDAP bind, remote WMI). See short-name removal comments above.
+    'system.collections.specialized.ordereddictionary',
+    'system.security.accesscontrol.objectsecurity',
+    // Arrays of allowed types are allowed (e.g. [string[]])
+    // normalizeTypeName strips [] before lookup, so store the base name
+    'object',
+    'system.object',
+    // ModuleSpecification — full qualified name
+    'microsoft.powershell.commands.modulespecification',
+  ].map(t => t.toLowerCase()),
+)
+
+/**
+ * Normalize a type name from AST TypeName.FullName or TypeName.Name.
+ * Handles array suffix ([]) and generic brackets.
+ */
+export function normalizeTypeName(name: string): string {
+  // Strip array suffix: "String[]" → "string" (arrays of allowed types are allowed)
+  // Strip generic args: "List[int]" → "list" (conservative — the generic wrapper
+  // might be unsafe even if the type arg is safe, so we check the outer type)
+  return name
+    .toLowerCase()
+    .replace(/\[\]$/, '')
+    .replace(/\[.*\]$/, '')
+    .trim()
+}
+
+/**
+ * True if typeName (from AST) is in Microsoft's CLM allowlist.
+ * Types NOT in this set trigger ask — they access system APIs CLM blocks.
+ */
+export function isClmAllowedType(typeName: string): boolean {
+  return CLM_ALLOWED_TYPES.has(normalizeTypeName(typeName))
+}

package/src/tools/PowerShellTool/commandSemantics.ts

@@ -0,0 +1,142 @@
+/**
+ * Command semantics configuration for interpreting exit codes in PowerShell.
+ *
+ * PowerShell-native cmdlets do NOT need exit-code semantics:
+ *   - Select-String (grep equivalent) exits 0 on no-match (returns $null)
+ *   - Compare-Object (diff equivalent) exits 0 regardless
+ *   - Test-Path exits 0 regardless (returns bool via pipeline)
+ * Native cmdlets signal failure via terminating errors ($?), not exit codes.
+ *
+ * However, EXTERNAL executables invoked from PowerShell DO set $LASTEXITCODE,
+ * and many use non-zero codes to convey information rather than failure:
+ *   - grep.exe / rg.exe (Git for Windows, scoop, etc.): 1 = no match
+ *   - findstr.exe (Windows native): 1 = no match
+ *   - robocopy.exe (Windows native): 0-7 = success, 8+ = error (notorious!)
+ *
+ * Without this module, PowerShellTool throws ShellError on any non-zero exit,
+ * so `robocopy` reporting "files copied successfully" (exit 1) shows as an error.
+ */
+
+export type CommandSemantic = (
+  exitCode: number,
+  stdout: string,
+  stderr: string,
+) => {
+  isError: boolean
+  message?: string
+}
+
+/**
+ * Default semantic: treat only 0 as success, everything else as error
+ */
+const DEFAULT_SEMANTIC: CommandSemantic = (exitCode, _stdout, _stderr) => ({
+  isError: exitCode !== 0,
+  message:
+    exitCode !== 0 ? `Command failed with exit code ${exitCode}` : undefined,
+})
+
+/**
+ * grep / ripgrep: 0 = matches found, 1 = no matches, 2+ = error
+ */
+const GREP_SEMANTIC: CommandSemantic = (exitCode, _stdout, _stderr) => ({
+  isError: exitCode >= 2,
+  message: exitCode === 1 ? 'No matches found' : undefined,
+})
+
+/**
+ * Command-specific semantics for external executables.
+ * Keys are lowercase command names WITHOUT .exe suffix.
+ *
+ * Deliberately omitted:
+ *   - 'diff': Ambiguous. Windows PowerShell 5.1 aliases `diff` → Compare-Object
+ *     (exit 0 on differ), but PS Core / Git for Windows may resolve to diff.exe
+ *     (exit 1 on differ). Cannot reliably interpret.
+ *   - 'fc': Ambiguous. PowerShell aliases `fc` → Format-Custom (a native cmdlet),
+ *     but `fc.exe` is the Windows file compare utility (exit 1 = files differ).
+ *     Same aliasing problem as `diff`.
+ *   - 'find': Ambiguous. Windows find.exe (text search) vs Unix find.exe
+ *     (file search via Git for Windows) have different semantics.
+ *   - 'test', '[': Not PowerShell constructs.
+ *   - 'select-string', 'compare-object', 'test-path': Native cmdlets exit 0.
+ */
+const COMMAND_SEMANTICS: Map<string, CommandSemantic> = new Map([
+  // External grep/ripgrep (Git for Windows, scoop, choco)
+  ['grep', GREP_SEMANTIC],
+  ['rg', GREP_SEMANTIC],
+
+  // findstr.exe: Windows native text search
+  // 0 = match found, 1 = no match, 2 = error
+  ['findstr', GREP_SEMANTIC],
+
+  // robocopy.exe: Windows native robust file copy
+  // Exit codes are a BITFIELD — 0-7 are success, 8+ indicates at least one failure:
+  //   0 = no files copied, no mismatch, no failures (already in sync)
+  //   1 = files copied successfully
+  //   2 = extra files/dirs detected (no copy)
+  //   4 = mismatched files/dirs detected
+  //   8 = some files/dirs could not be copied (copy errors)
+  //  16 = serious error (robocopy did not copy any files)
+  // This is the single most common "CI failed but nothing's wrong" Windows gotcha.
+  [
+    'robocopy',
+    (exitCode, _stdout, _stderr) => ({
+      isError: exitCode >= 8,
+      message:
+        exitCode === 0
+          ? 'No files copied (already in sync)'
+          : exitCode >= 1 && exitCode < 8
+            ? exitCode & 1
+              ? 'Files copied successfully'
+              : 'Robocopy completed (no errors)'
+            : undefined,
+    }),
+  ],
+])
+
+/**
+ * Extract the command name from a single pipeline segment.
+ * Strips leading `&` / `.` call operators and `.exe` suffix, lowercases.
+ */
+function extractBaseCommand(segment: string): string {
+  // Strip PowerShell call operators: & "cmd", . "cmd"
+  // (& and . at segment start followed by whitespace invoke the next token)
+  const stripped = segment.trim().replace(/^[&.]\s+/, '')
+  const firstToken = stripped.split(/\s+/)[0] || ''
+  // Strip surrounding quotes if command was invoked as & "grep.exe"
+  const unquoted = firstToken.replace(/^["']|["']$/g, '')
+  // Strip path: C:\bin\grep.exe → grep.exe, .\rg.exe → rg.exe
+  const basename = unquoted.split(/[\\/]/).pop() || unquoted
+  // Strip .exe suffix (Windows is case-insensitive)
+  return basename.toLowerCase().replace(/\.exe$/, '')
+}
+
+/**
+ * Extract the primary command from a PowerShell command line.
+ * Takes the LAST pipeline segment since that determines the exit code.
+ *
+ * Heuristic split on `;` and `|` — may get it wrong for quoted strings or
+ * complex constructs. Do NOT depend on this for security; it's only used
+ * for exit-code interpretation (false negatives just fall back to default).
+ */
+function heuristicallyExtractBaseCommand(command: string): string {
+  const segments = command.split(/[;|]/).filter(s => s.trim())
+  const last = segments[segments.length - 1] || command
+  return extractBaseCommand(last)
+}
+
+/**
+ * Interpret command result based on semantic rules
+ */
+export function interpretCommandResult(
+  command: string,
+  exitCode: number,
+  stdout: string,
+  stderr: string,
+): {
+  isError: boolean
+  message?: string
+} {
+  const baseCommand = heuristicallyExtractBaseCommand(command)
+  const semantic = COMMAND_SEMANTICS.get(baseCommand) ?? DEFAULT_SEMANTIC
+  return semantic(exitCode, stdout, stderr)
+}

package/src/tools/PowerShellTool/commonParameters.ts

@@ -0,0 +1,30 @@
+/**
+ * PowerShell Common Parameters (available on all cmdlets via [CmdletBinding()]).
+ * Source: about_CommonParameters (PowerShell docs) + Get-Command output.
+ *
+ * Shared between pathValidation.ts (merges into per-cmdlet known-param sets)
+ * and readOnlyValidation.ts (merges into safeFlags check). Split out to break
+ * what would otherwise be an import cycle between those two files.
+ *
+ * Stored lowercase with leading dash — callers `.toLowerCase()` their input.
+ */
+
+export const COMMON_SWITCHES = ['-verbose', '-debug']
+
+export const COMMON_VALUE_PARAMS = [
+  '-erroraction',
+  '-warningaction',
+  '-informationaction',
+  '-progressaction',
+  '-errorvariable',
+  '-warningvariable',
+  '-informationvariable',
+  '-outvariable',
+  '-outbuffer',
+  '-pipelinevariable',
+]
+
+export const COMMON_PARAMETERS: ReadonlySet<string> = new Set([
+  ...COMMON_SWITCHES,
+  ...COMMON_VALUE_PARAMS,
+])

package/src/tools/PowerShellTool/destructiveCommandWarning.ts

@@ -0,0 +1,109 @@
+/**
+ * Detects potentially destructive PowerShell commands and returns a warning
+ * string for display in the permission dialog. This is purely informational
+ * -- it doesn't affect permission logic or auto-approval.
+ */
+
+type DestructivePattern = {
+  pattern: RegExp
+  warning: string
+}
+
+const DESTRUCTIVE_PATTERNS: DestructivePattern[] = [
+  // Remove-Item with -Recurse and/or -Force (and common aliases)
+  // Anchored to statement start (^, |, ;, &, newline, {, () so `git rm --force`
+  // doesn't match — \b would match `rm` after any word boundary. The `{(`
+  // chars catch scriptblock/group bodies: `{ rm -Force ./x }`. The stopper
+  // adds only `}` (NOT `)`) — `}` ends a block so flags after it belong to a
+  // different statement (`if {rm} else {... -Force}`), but `)` closes a path
+  // grouping and flags after it are still this command's flags:
+  // `Remove-Item (Join-Path $r "tmp") -Recurse -Force` must still warn.
+  {
+    pattern:
+      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Recurse\b[^|;&\n}]*-Force\b/i,
+    warning: 'Note: may recursively force-remove files',
+  },
+  {
+    pattern:
+      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Force\b[^|;&\n}]*-Recurse\b/i,
+    warning: 'Note: may recursively force-remove files',
+  },
+  {
+    pattern:
+      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Recurse\b/i,
+    warning: 'Note: may recursively remove files',
+  },
+  {
+    pattern:
+      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Force\b/i,
+    warning: 'Note: may force-remove files',
+  },
+
+  // Clear-Content on broad paths
+  {
+    pattern: /\bClear-Content\b[^|;&\n]*\*/i,
+    warning: 'Note: may clear content of multiple files',
+  },
+
+  // Format-Volume and Clear-Disk
+  {
+    pattern: /\bFormat-Volume\b/i,
+    warning: 'Note: may format a disk volume',
+  },
+  {
+    pattern: /\bClear-Disk\b/i,
+    warning: 'Note: may clear a disk',
+  },
+
+  // Git destructive operations (same as BashTool)
+  {
+    pattern: /\bgit\s+reset\s+--hard\b/i,
+    warning: 'Note: may discard uncommitted changes',
+  },
+  {
+    pattern: /\bgit\s+push\b[^|;&\n]*\s+(--force|--force-with-lease|-f)\b/i,
+    warning: 'Note: may overwrite remote history',
+  },
+  {
+    pattern:
+      /\bgit\s+clean\b(?![^|;&\n]*(?:-[a-zA-Z]*n|--dry-run))[^|;&\n]*-[a-zA-Z]*f/i,
+    warning: 'Note: may permanently delete untracked files',
+  },
+  {
+    pattern: /\bgit\s+stash\s+(drop|clear)\b/i,
+    warning: 'Note: may permanently remove stashed changes',
+  },
+
+  // Database operations
+  {
+    pattern: /\b(DROP|TRUNCATE)\s+(TABLE|DATABASE|SCHEMA)\b/i,
+    warning: 'Note: may drop or truncate database objects',
+  },
+
+  // System operations
+  {
+    pattern: /\bStop-Computer\b/i,
+    warning: 'Note: will shut down the computer',
+  },
+  {
+    pattern: /\bRestart-Computer\b/i,
+    warning: 'Note: will restart the computer',
+  },
+  {
+    pattern: /\bClear-RecycleBin\b/i,
+    warning: 'Note: permanently deletes recycled files',
+  },
+]
+
+/**
+ * Checks if a PowerShell command matches known destructive patterns.
+ * Returns a human-readable warning string, or null if no destructive pattern is detected.
+ */
+export function getDestructiveCommandWarning(command: string): string | null {
+  for (const { pattern, warning } of DESTRUCTIVE_PATTERNS) {
+    if (pattern.test(command)) {
+      return warning
+    }
+  }
+  return null
+}