vtcode-config 0.98.7

/// Commands that are always blocked for security reasons
pub const ALWAYS_BLOCKED_COMMANDS: &[&str] = &[
    "rm",
    "rmdir",
    "del",
    "format",
    "fdisk",
    "mkfs",
    "dd",
    "shred",
    "wipe",
    "srm",
    "unlink",
    "chmod",
    "chown",
    "passwd",
    "usermod",
    "userdel",
    "systemctl",
    "service",
    "kill",
    "killall",
    "pkill",
    "reboot",
    "shutdown",
    "halt",
    "poweroff",
    "sudo",
    "su",
    "doas",
    "runas",
    "mount",
    "umount",
    "fsck",
    "tune2fs", // Filesystem operations
    "iptables",
    "ufw",
    "firewalld", // Firewall
    "crontab",
    "at", // Scheduling
    "podman",
    "kubectl", // Container/orchestration
];

/// Network commands that require sandbox to be enabled
pub const NETWORK_COMMANDS: &[&str] = &[
    "wget", "ftp", "scp", "rsync", "ssh", "telnet", "nc", "ncat", "socat",
];

/// Commands that are always allowed (safe development tools)
pub const ALLOWED_COMMANDS: &[&str] = &[
    // File system and basic utilities
    "ls",
    "pwd",
    "cat",
    "head",
    "tail",
    "grep",
    "find",
    "wc",
    "sort",
    "uniq",
    "cut",
    "awk",
    "sed",
    "echo",
    "printf",
    "seq",
    "basename",
    "dirname",
    "date",
    "cal",
    "bc",
    "expr",
    "test",
    "[",
    "]",
    "true",
    "false",
    "sleep",
    "which",
    "type",
    "file",
    "stat",
    "du",
    "df",
    "ps",
    "top",
    "htop",
    "tree",
    "less",
    "more",
    "tac",
    "rev",
    "tr",
    "fold",
    "paste",
    "join",
    "comm",
    "diff",
    "patch",
    "gzip",
    "gunzip",
    "bzip2",
    "bunzip2",
    "xz",
    "unxz",
    "tar",
    "zip",
    "unzip",
    "shasum",
    "md5sum",
    "sha256sum",
    "sha512sum", // Hashing tools
    // Version control
    "git",
    "hg",
    "svn",
    "git-lfs",
    // Build systems and tools
    "make",
    "cmake",
    "ninja",
    "meson",
    "bazel",
    "buck2",
    "scons",
    "waf",
    "xcodebuild",
    // Rust/Cargo ecosystem
    "cargo",
    "rustc",
    "rustfmt",
    "rustup",
    "clippy",
    "cargo-clippy",
    "cargo-fmt",
    "cargo-build",
    "cargo-test",
    "cargo-run",
    "cargo-check",
    "cargo-doc",
    // Node.js/npm ecosystem
    "npm",
    "yarn",
    "pnpm",
    "bun",
    "npx",
    "node",
    "yarnpkg",
    "npm-run",
    "npm-test",
    "npm-start",
    "npm-build",
    "npm-lint",
    "npm-install",
    "yarn-test",
    "yarn-start",
    "yarn-build",
    "yarn-lint",
    "yarn-install",
    "pnpm-test",
    "pnpm-start",
    "pnpm-build",
    "pnpm-lint",
    "pnpm-install",
    "bun-test",
    "bun-start",
    "bun-build",
    "bun-lint",
    "bun-install",
    "bun-run",
    // Python ecosystem
    "python",
    "python3",
    "pip",
    "pip3",
    "virtualenv",
    "venv",
    "conda",
    "pytest",
    "python-m-pytest",
    "python3-m-pytest",
    "python-m-pip",
    "python3-m-pip",
    "python-m-venv",
    "python3-m-venv",
    "black",
    "flake8",
    "mypy",
    "pylint",
    "isort",
    "ruff",
    "bandit",
    // Java ecosystem
    "java",
    "javac",
    "jar",
    "jarsigner",
    "javadoc",
    "jmap",
    "jstack",
    "jstat",
    "jinfo",
    "mvn",
    "gradle",
    "gradlew",
    "./gradlew",
    "mvnw",
    "./mvnw",
    "mvn-test",
    "mvn-compile",
    "mvn-package",
    "mvn-install",
    "mvn-clean",
    "gradle-test",
    "gradle-build",
    "gradle-check",
    "gradle-run",
    "gradle-clean",
    // Go ecosystem
    "go",
    "gofmt",
    "goimports",
    "golint",
    "go-test",
    "go-build",
    "go-run",
    "go-mod",
    "golangci-lint",
    "go-doc",
    "go-vet",
    "go-install",
    "go-clean",
    // C/C++ ecosystem
    "gcc",
    "g++",
    "clang",
    "clang++",
    "clang-cl",
    "cpp",
    "cc",
    "c++",
    "gcc-ar",
    "gcc-nm",
    "gcc-ranlib",
    "ld",
    "lld",
    "gold",
    "bfdld",
    "make",
    "cmake",
    "ninja",
    "autotools",
    "autoconf",
    "automake",
    "libtool",
    "pkg-config",
    "pkgconfig",
    // Testing frameworks and tools
    "pytest",
    "jest",
    "mocha",
    "jasmine",
    "karma",
    "chai",
    "sinon",
    "vitest",
    "cypress",
    "selenium",
    "playwright",
    "testcafe",
    "tape",
    "ava",
    "qunit",
    "junit",
    "googletest",
    "catch2",
    "benchmark",
    "hyperfine",
    // Linting and formatting tools
    "eslint",
    "prettier",
    "tslint",
    "jshint",
    "jscs",
    "stylelint",
    "htmlhint",
    "jsonlint",
    "yamllint",
    "toml-check",
    "markdownlint",
    "remark-cli",
    "shellcheck",
    "hadolint",
    "rustfmt",
    "gofmt",
    "black",
    "isort",
    "ruff",
    "clang-format",
    "clang-tidy",
    // Documentation tools
    "doxygen",
    "sphinx",
    "mkdocs",
    "hugo",
    "jekyll",
    "gatsby",
    "next",
    "nuxt",
    "vuepress",
    "docusaurus",
    "storybook",
    "gitbook",
    "readthedocs",
    "pandoc",
    "mdbook",
    "mdBook",
    // Container tools (safe operations only)
    "docker",
    "docker-compose",
    "docker-buildx",
    "podman",
    "buildah",
    "docker-build",
    "docker-run",
    "docker-ps",
    "docker-images",
    "docker-inspect",
    "docker-exec",
    "docker-logs",
    "docker-stats",
    "docker-system",
    "docker-network",
    // Database tools (development usage)
    "sqlite3",
    "mysql",
    "psql",
    "mongosh",
    "redis-cli",
    "redis-server",
    // Cloud and deployment tools
    "aws",
    "gcloud",
    "az",
    "kubectl",
    "helm",
    "terraform",
    "tf",
    "terragrunt",
    "serverless",
    "sls",
    "pulumi",
    "cdk",
    "sam",
    "localstack",
    "minikube",
    // Security and analysis tools
    "gitleaks",
    "trivy",
    "snyk",
    "npm-audit",
    "pip-audit",
    "cargo-audit",
    "bandit",
    "safety",
    "pipenv",
    "poetry",
    // Performance profiling tools
    "perf",
    "strace",
    "ltrace",
    "valgrind",
    "gdb",
    "lldb",
    "sar",
    "iostat",
    "vmstat",
    "htop",
    "iotop",
    "nethogs",
    "iftop",
    "speedtest-cli",
    "ab",
    "wrk",
    "hey",
    // CI/CD tools
    "gh",
    "gitlab-ci",
    "bitbucket",
    "azure-pipelines",
    "circleci",
    "jenkins",
    "drone",
    "buildkite",
    "travis",
    "appveyor",
    // Package managers for various languages
    "composer",
    "pear",
    "gem",
    "rbenv",
    "rvm",
    "nvm",
    "nodenv",
    "pyenv",
    "rbenv",
    "sdkman",
    "jenv",
    "lein",
    "boot",
    "mix",
    "rebar3",
    "erl",
    "elixir",
    // Web development tools
    "webpack",
    "rollup",
    "vite",
    "parcel",
    "esbuild",
    "snowpack",
    "turbo",
    "swc",
    "babel",
    "postcss",
    "sass",
    "scss",
    "less",
    "stylus",
    "tailwindcss",
    // Mobile development tools
    "xcodebuild",
    "fastlane",
    "gradle",
    "./gradlew",
    "cordova",
    "ionic",
    "react-native",
    "flutter",
    "expo",
    "capacitor",
];