damage-control-dev 0.1.0__py3-none-any.whl

damage_control/tooldefs/git.json

@@ -0,0 +1,166 @@
+{
+ "name": "Git",
+ "binary": "git",
+ "purpose": "Version control — track changes, manage branches, collaborate via remotes",
+ "docs": "https://git-scm.com/docs",
+ "commands": [
+  {
+   "cmd": "git status",
+   "access": "read",
+   "description": "Show working tree status"
+  },
+  {
+   "cmd": "git log [--oneline] [--graph]",
+   "access": "read",
+   "description": "Show commit history"
+  },
+  {
+   "cmd": "git diff [<file>]",
+   "access": "read",
+   "description": "Show unstaged changes"
+  },
+  {
+   "cmd": "git diff --staged",
+   "access": "read",
+   "description": "Show staged changes"
+  },
+  {
+   "cmd": "git show <commit>",
+   "access": "read",
+   "description": "Show commit details"
+  },
+  {
+   "cmd": "git branch [-a] [-v]",
+   "access": "read",
+   "description": "List branches"
+  },
+  {
+   "cmd": "git remote -v",
+   "access": "read",
+   "description": "List remotes"
+  },
+  {
+   "cmd": "git stash list",
+   "access": "read",
+   "description": "List stashed changes"
+  },
+  {
+   "cmd": "git stash show [-p]",
+   "access": "read",
+   "description": "Show a stash's changes"
+  },
+  {
+   "cmd": "git merge-base [--is-ancestor] <commit> <commit>",
+   "access": "read",
+   "description": "Find common ancestor / check ancestry"
+  },
+  {
+   "cmd": "git add <file>",
+   "access": "write",
+   "description": "Stage file for commit",
+   "id": "git.add"
+  },
+  {
+   "cmd": "git add -u",
+   "access": "write",
+   "description": "Stage all tracked file changes (deletions + modifications)",
+   "id": "git.add-u"
+  },
+  {
+   "cmd": "git commit -m '<message>'",
+   "access": "write",
+   "description": "Create a commit",
+   "id": "git.commit"
+  },
+  {
+   "id": "tooldef.git-stash-current-changes",
+   "cmd": "git stash",
+   "access": "write",
+   "description": "Stash current changes"
+  },
+  {
+   "id": "tooldef.git-apply-most-recent-stash",
+   "cmd": "git stash pop",
+   "access": "write",
+   "description": "Apply most recent stash"
+  },
+  {
+   "id": "tooldef.git-switch-branches-create-one-b-or-restore-working-tree-fil",
+   "cmd": "git checkout <target>",
+   "access": "write",
+   "description": "Switch branches, create one (-b), or restore working-tree files (overwrites uncommitted changes to restored paths)"
+  },
+  {
+   "id": "tooldef.git-merge-branch-into-current",
+   "cmd": "git merge <branch>",
+   "access": "write",
+   "description": "Merge branch into current"
+  },
+  {
+   "id": "tooldef.git-rebase-current-branch-onto-another",
+   "cmd": "git rebase <branch>",
+   "access": "write",
+   "description": "Rebase current branch onto another"
+  },
+  {
+   "id": "tooldef.git-apply-a-commit-to-current-branch",
+   "cmd": "git cherry-pick <commit>",
+   "access": "write",
+   "description": "Apply a commit to current branch"
+  },
+  {
+   "cmd": "git fetch [--all]",
+   "access": "read",
+   "description": "Download remote changes without merging"
+  },
+  {
+   "id": "tooldef.git-fetch-and-merge-remote-changes",
+   "cmd": "git pull",
+   "access": "write",
+   "description": "Fetch and merge remote changes"
+  },
+  {
+   "cmd": "git push",
+   "access": "write",
+   "description": "Push commits to remote",
+   "id": "git.push"
+  },
+  {
+   "id": "tooldef.git-force-push-only-if-remote-hasn-t-changed-safer-than-forc",
+   "cmd": "git push --force-with-lease",
+   "access": "write",
+   "description": "Force push only if remote hasn't changed (safer than --force)"
+  },
+  {
+   "cmd": "git reset --hard",
+   "access": "blocked",
+   "description": "Discard all uncommitted changes (unrecoverable)"
+  },
+  {
+   "cmd": "git push --force",
+   "access": "blocked",
+   "description": "Force push regardless of remote state — can overwrite others' work",
+   "note": "Use --force-with-lease instead"
+  },
+  {
+   "cmd": "git clean -fd",
+   "access": "blocked",
+   "description": "Delete all untracked files and directories"
+  },
+  {
+   "cmd": "git stash clear",
+   "access": "blocked",
+   "description": "Delete ALL stashes permanently"
+  },
+  {
+   "cmd": "git filter-branch",
+   "access": "blocked",
+   "description": "Rewrite entire commit history"
+  },
+  {
+   "cmd": "git reflog expire",
+   "access": "blocked",
+   "description": "Destroy the recovery mechanism for lost commits"
+  }
+ ]
+}

damage_control/tooldefs/git.yaml

@@ -0,0 +1,143 @@
+name: Git
+binary: git
+purpose: Version control — track changes, manage branches, collaborate via remotes
+docs: https://git-scm.com/docs
+
+commands:
+  # Status & inspection
+  - cmd: "git status"
+    access: read
+    description: Show working tree status
+
+  - cmd: "git log [--oneline] [--graph]"
+    access: read
+    description: Show commit history
+
+  - cmd: "git diff [<file>]"
+    access: read
+    description: Show unstaged changes
+
+  - cmd: "git diff --staged"
+    access: read
+    description: Show staged changes
+
+  - cmd: "git show <commit>"
+    access: read
+    description: Show commit details
+
+  - cmd: "git branch [-a] [-v]"
+    access: read
+    description: List branches
+
+  - cmd: "git remote -v"
+    access: read
+    description: List remotes
+
+  - cmd: "git stash list"
+    access: read
+    description: List stashed changes
+
+  - cmd: "git stash show [-p]"
+    access: read
+    description: Show a stash's changes
+
+  - cmd: "git merge-base [--is-ancestor] <commit> <commit>"
+    access: read
+    description: Find common ancestor / check ancestry
+
+  # Staging & committing
+  - cmd: "git add <file>"
+    access: write
+    description: Stage file for commit
+    id: git.add
+
+  - cmd: "git add -u"
+    access: write
+    description: Stage all tracked file changes (deletions + modifications)
+    id: git.add-u
+
+  - cmd: "git commit -m '<message>'"
+    access: write
+    description: Create a commit
+    id: git.commit
+
+  - id: tooldef.git-stash-current-changes
+    cmd: "git stash"
+    access: write
+    description: Stash current changes
+
+  - id: tooldef.git-apply-most-recent-stash
+    cmd: "git stash pop"
+    access: write
+    description: Apply most recent stash
+
+  # Branching & merging
+  # One prefix rule covers every checkout form (the generated pattern stops at
+  # the first flag), so the description must name the whole operation — the old
+  # "Create and switch to new branch" misdescribed a refused
+  # ``git checkout -- <file>`` (#933).
+  - id: tooldef.git-switch-branches-create-one-b-or-restore-working-tree-fil
+    cmd: "git checkout <target>"
+    access: write
+    description: Switch branches, create one (-b), or restore working-tree files (overwrites uncommitted changes to restored paths)
+
+  - id: tooldef.git-merge-branch-into-current
+    cmd: "git merge <branch>"
+    access: write
+    description: Merge branch into current
+
+  - id: tooldef.git-rebase-current-branch-onto-another
+    cmd: "git rebase <branch>"
+    access: write
+    description: Rebase current branch onto another
+
+  - id: tooldef.git-apply-a-commit-to-current-branch
+    cmd: "git cherry-pick <commit>"
+    access: write
+    description: Apply a commit to current branch
+
+  # Remote operations
+  - cmd: "git fetch [--all]"
+    access: read
+    description: Download remote changes without merging
+
+  - id: tooldef.git-fetch-and-merge-remote-changes
+    cmd: "git pull"
+    access: write
+    description: Fetch and merge remote changes
+
+  - cmd: "git push"
+    access: write
+    description: Push commits to remote
+    id: git.push
+
+  - id: tooldef.git-force-push-only-if-remote-hasn-t-changed-safer-than-forc
+    cmd: "git push --force-with-lease"
+    access: write
+    description: Force push only if remote hasn't changed (safer than --force)
+
+  # Blocked operations
+  - cmd: "git reset --hard"
+    access: blocked
+    description: Discard all uncommitted changes (unrecoverable)
+
+  - cmd: "git push --force"
+    access: blocked
+    description: Force push regardless of remote state — can overwrite others' work
+    note: Use --force-with-lease instead
+
+  - cmd: "git clean -fd"
+    access: blocked
+    description: Delete all untracked files and directories
+
+  - cmd: "git stash clear"
+    access: blocked
+    description: Delete ALL stashes permanently
+
+  - cmd: "git filter-branch"
+    access: blocked
+    description: Rewrite entire commit history
+
+  - cmd: "git reflog expire"
+    access: blocked
+    description: Destroy the recovery mechanism for lost commits

damage_control/tooldefs/kubectl.json

@@ -0,0 +1,101 @@
+{
+ "name": "kubectl",
+ "binary": "kubectl",
+ "purpose": "Manage Kubernetes clusters — deploy workloads, inspect resources, manage config",
+ "docs": "https://kubernetes.io/docs/reference/kubectl/",
+ "install": "brew install kubectl",
+ "commands": [
+  {
+   "cmd": "kubectl cluster-info",
+   "access": "read",
+   "description": "Show cluster endpoint info"
+  },
+  {
+   "cmd": "kubectl get nodes",
+   "access": "read",
+   "description": "List cluster nodes"
+  },
+  {
+   "cmd": "kubectl config get-contexts",
+   "access": "read",
+   "description": "List available kubeconfig contexts"
+  },
+  {
+   "id": "tooldef.kubectl-switch-active-cluster-context",
+   "cmd": "kubectl config use-context <context>",
+   "access": "write",
+   "description": "Switch active cluster context"
+  },
+  {
+   "cmd": "kubectl get pods [-n <namespace>]",
+   "access": "read",
+   "description": "List pods"
+  },
+  {
+   "cmd": "kubectl describe pod <pod>",
+   "access": "read",
+   "description": "Detailed pod info and events"
+  },
+  {
+   "cmd": "kubectl logs <pod> [-c <container>]",
+   "access": "read",
+   "description": "View pod logs"
+  },
+  {
+   "id": "tooldef.kubectl-execute-command-in-pod",
+   "cmd": "kubectl exec -it <pod> -- <cmd>",
+   "access": "write",
+   "description": "Execute command in pod"
+  },
+  {
+   "id": "tooldef.kubectl-create-or-update-resources-from-manifest",
+   "cmd": "kubectl apply -f <file>",
+   "access": "write",
+   "description": "Create or update resources from manifest"
+  },
+  {
+   "id": "tooldef.kubectl-rolling-restart-of-a-deployment",
+   "cmd": "kubectl rollout restart deployment/<name>",
+   "access": "write",
+   "description": "Rolling restart of a deployment"
+  },
+  {
+   "id": "tooldef.kubectl-scale-a-deployment",
+   "cmd": "kubectl scale deployment/<name> --replicas=<n>",
+   "access": "write",
+   "description": "Scale a deployment"
+  },
+  {
+   "id": "tooldef.kubectl-delete-a-pod-will-be-recreated-by-deployment",
+   "cmd": "kubectl delete pod <pod>",
+   "access": "write",
+   "description": "Delete a pod (will be recreated by deployment)"
+  },
+  {
+   "cmd": "kubectl get services [-n <namespace>]",
+   "access": "read",
+   "description": "List services"
+  },
+  {
+   "id": "tooldef.kubectl-forward-local-port-to-pod",
+   "cmd": "kubectl port-forward <pod> <local>:<remote>",
+   "access": "write",
+   "description": "Forward local port to pod"
+  },
+  {
+   "cmd": "kubectl delete namespace <ns>",
+   "access": "blocked",
+   "description": "Delete namespace and ALL its resources"
+  },
+  {
+   "cmd": "kubectl delete all --all",
+   "access": "blocked",
+   "description": "Delete all resources in current namespace"
+  },
+  {
+   "cmd": "helm uninstall <release>",
+   "access": "blocked",
+   "description": "Remove a Helm release and its resources"
+  }
+ ]
+}

damage_control/tooldefs/kubectl.yaml

@@ -0,0 +1,85 @@
+name: kubectl
+binary: kubectl
+purpose: Manage Kubernetes clusters — deploy workloads, inspect resources, manage config
+docs: https://kubernetes.io/docs/reference/kubectl/
+install: brew install kubectl
+
+commands:
+  # Cluster info
+  - cmd: "kubectl cluster-info"
+    access: read
+    description: Show cluster endpoint info
+
+  - cmd: "kubectl get nodes"
+    access: read
+    description: List cluster nodes
+
+  - cmd: "kubectl config get-contexts"
+    access: read
+    description: List available kubeconfig contexts
+
+  - id: tooldef.kubectl-switch-active-cluster-context
+    cmd: "kubectl config use-context <context>"
+    access: write
+    description: Switch active cluster context
+
+  # Workloads
+  - cmd: "kubectl get pods [-n <namespace>]"
+    access: read
+    description: List pods
+
+  - cmd: "kubectl describe pod <pod>"
+    access: read
+    description: Detailed pod info and events
+
+  - cmd: "kubectl logs <pod> [-c <container>]"
+    access: read
+    description: View pod logs
+
+  - id: tooldef.kubectl-execute-command-in-pod
+    cmd: "kubectl exec -it <pod> -- <cmd>"
+    access: write
+    description: Execute command in pod
+
+  - id: tooldef.kubectl-create-or-update-resources-from-manifest
+    cmd: "kubectl apply -f <file>"
+    access: write
+    description: Create or update resources from manifest
+
+  - id: tooldef.kubectl-rolling-restart-of-a-deployment
+    cmd: "kubectl rollout restart deployment/<name>"
+    access: write
+    description: Rolling restart of a deployment
+
+  - id: tooldef.kubectl-scale-a-deployment
+    cmd: "kubectl scale deployment/<name> --replicas=<n>"
+    access: write
+    description: Scale a deployment
+
+  - id: tooldef.kubectl-delete-a-pod-will-be-recreated-by-deployment
+    cmd: "kubectl delete pod <pod>"
+    access: write
+    description: Delete a pod (will be recreated by deployment)
+
+  # Services & networking
+  - cmd: "kubectl get services [-n <namespace>]"
+    access: read
+    description: List services
+
+  - id: tooldef.kubectl-forward-local-port-to-pod
+    cmd: "kubectl port-forward <pod> <local>:<remote>"
+    access: write
+    description: Forward local port to pod
+
+  # Blocked
+  - cmd: "kubectl delete namespace <ns>"
+    access: blocked
+    description: Delete namespace and ALL its resources
+
+  - cmd: "kubectl delete all --all"
+    access: blocked
+    description: Delete all resources in current namespace
+
+  - cmd: "helm uninstall <release>"
+    access: blocked
+    description: Remove a Helm release and its resources

damage_control/tooldefs/npm.json

@@ -0,0 +1,77 @@
+{
+ "name": "npm",
+ "binary": "npm",
+ "purpose": "Node.js package manager — install dependencies, run scripts, publish packages",
+ "docs": "https://docs.npmjs.com/cli/",
+ "install": "bundled with Node.js",
+ "commands": [
+  {
+   "cmd": "npm list [--depth=0]",
+   "access": "read",
+   "description": "List installed packages"
+  },
+  {
+   "cmd": "npm outdated",
+   "access": "read",
+   "description": "Check for outdated packages"
+  },
+  {
+   "cmd": "npm audit",
+   "access": "read",
+   "description": "Check for security vulnerabilities"
+  },
+  {
+   "id": "tooldef.npm-run-a-package-json-script",
+   "cmd": "npm run <script>",
+   "access": "write",
+   "description": "Run a package.json script"
+  },
+  {
+   "id": "tooldef.npm-install-all-dependencies-from-package-json",
+   "cmd": "npm install",
+   "access": "write",
+   "description": "Install all dependencies from package.json"
+  },
+  {
+   "id": "tooldef.npm-install-a-package",
+   "cmd": "npm install <package>",
+   "access": "write",
+   "description": "Install a package"
+  },
+  {
+   "id": "tooldef.npm-install-a-dev-dependency",
+   "cmd": "npm install -D <package>",
+   "access": "write",
+   "description": "Install a dev dependency"
+  },
+  {
+   "id": "tooldef.npm-remove-a-package",
+   "cmd": "npm uninstall <package>",
+   "access": "write",
+   "description": "Remove a package"
+  },
+  {
+   "id": "tooldef.npm-update-packages-to-latest-allowed-versions",
+   "cmd": "npm update [<package>]",
+   "access": "write",
+   "description": "Update packages to latest allowed versions"
+  },
+  {
+   "id": "tooldef.npm-clean-install-from-package-lock-json-faster-deterministi",
+   "cmd": "npm ci",
+   "access": "write",
+   "description": "Clean install from package-lock.json (faster, deterministic)"
+  },
+  {
+   "id": "tooldef.npm-publish-package-to-npm-registry",
+   "cmd": "npm publish",
+   "access": "write",
+   "description": "Publish package to npm registry"
+  },
+  {
+   "cmd": "npm unpublish <package>",
+   "access": "blocked",
+   "description": "Remove package from registry (irreversible after 72h, affects downstream users)"
+  }
+ ]
+}

damage_control/tooldefs/npm.yaml

@@ -0,0 +1,65 @@
+name: npm
+binary: npm
+purpose: Node.js package manager — install dependencies, run scripts, publish packages
+docs: https://docs.npmjs.com/cli/
+install: bundled with Node.js
+
+commands:
+  # Inspection
+  - cmd: "npm list [--depth=0]"
+    access: read
+    description: List installed packages
+
+  - cmd: "npm outdated"
+    access: read
+    description: Check for outdated packages
+
+  - cmd: "npm audit"
+    access: read
+    description: Check for security vulnerabilities
+
+  - id: tooldef.npm-run-a-package-json-script
+    cmd: "npm run <script>"
+    access: write
+    description: Run a package.json script
+
+  # Package management
+  - id: tooldef.npm-install-all-dependencies-from-package-json
+    cmd: "npm install"
+    access: write
+    description: Install all dependencies from package.json
+
+  - id: tooldef.npm-install-a-package
+    cmd: "npm install <package>"
+    access: write
+    description: Install a package
+
+  - id: tooldef.npm-install-a-dev-dependency
+    cmd: "npm install -D <package>"
+    access: write
+    description: Install a dev dependency
+
+  - id: tooldef.npm-remove-a-package
+    cmd: "npm uninstall <package>"
+    access: write
+    description: Remove a package
+
+  - id: tooldef.npm-update-packages-to-latest-allowed-versions
+    cmd: "npm update [<package>]"
+    access: write
+    description: Update packages to latest allowed versions
+
+  - id: tooldef.npm-clean-install-from-package-lock-json-faster-deterministi
+    cmd: "npm ci"
+    access: write
+    description: Clean install from package-lock.json (faster, deterministic)
+
+  # Publishing
+  - id: tooldef.npm-publish-package-to-npm-registry
+    cmd: "npm publish"
+    access: write
+    description: Publish package to npm registry
+
+  - cmd: "npm unpublish <package>"
+    access: blocked
+    description: Remove package from registry (irreversible after 72h, affects downstream users)