# 🛡️ Safety Guard: Destructive Commands

Intercepts bash tool calls that match dangerous patterns and blocks or prompts for confirmation.

## What it protects against

### 🔴 Hard-blocked (always, no override)

| Pattern | Why |
|---------|-----|
| `dd … of=/dev/…` | Raw disk write — destroys partitions |
| `mkfs` | Formats a filesystem |
| `> /dev/sd*` | Redirect to raw block device |
| `rm -rf /` | Wipe root filesystem |
| Fork bombs `:(){ :\|:& };:` | Infinite process spawning |
| `shutdown`, `reboot`, `halt`, `poweroff` | System power control |
| `iptables -F` | Flush all firewall rules |

### 🟡 Confirmation required

| Pattern | Why |
|---------|-----|
| `rm -r`, `rm -f`, `rm -rf` | Recursive / forced deletion |
| `sudo …` | Elevated privileges |
| `chmod … 777`, `chmod -R` | Dangerous permission changes |
| `chown -R` | Recursive ownership change |
| `killall`, `pkill -9` | Mass process termination |
| `systemctl stop/disable/mask` | Disabling system services |
| `launchctl unload/remove` | Removing macOS services |
| `truncate`, `shred` | Destructive file operations |

### ✅ Safe exceptions (auto-allowed)

These common dev patterns are **not** intercepted:

- `rm -rf ./node_modules`
- `rm -rf ./dist`, `./build`, `./.next`, `./target`
- `rm -rf /tmp/…`

## Behavior

| Mode | Action |
|------|--------|
| **Interactive** | Shows confirmation dialog with the command |
| **Non-interactive** (headless/RPC) | Blocks outright with reason |

## Status bar

Shows `🛡️ cmd-guard` in the footer when active.

## Installation

Already active — lives in `~/.pi/agent/extensions/safety-destructive-commands/index.ts` and auto-loads with every pi session.

## Example

```
⚠️ Recursive delete (rm -r)
  rm -rf ./some-important-directory

  Allow this command?

  [Yes]  [No]
```