Struct TriggerConfig 

pub struct TriggerConfig {
    pub name: String,
    pub pattern: String,
    pub enabled: bool,
    pub actions: Vec<TriggerActionConfig>,
    pub prompt_before_run: bool,
    pub i_accept_the_risk: bool,
    pub allowed_commands: Vec<String>,
}

A trigger definition that matches terminal output and fires actions.

Fields

name: String

pattern: String

enabled: bool

actions: Vec<TriggerActionConfig>

prompt_before_run: bool

When true (default), dangerous actions show a confirmation dialog before executing. When false, they execute automatically (with rate-limit + denylist guards still applied).

Previously named require_user_action. The old name is accepted as an alias for backward compatibility with existing config files.

SECURITY WARNING

Setting prompt_before_run: false is a high-risk configuration that allows terminal output — including output produced by commands you run in the terminal — to trigger RunCommand, SendText, and SplitPane actions without any user confirmation. This is effectively a terminal-output-to-command-execution path.

Known risks with prompt_before_run: false:

• Prompt injection: a web page, log file, or remote server response printed to the terminal could contain text that matches your trigger pattern and causes arbitrary commands to run.
• Denylist bypass: the command denylist is a best-effort heuristic, not a security boundary. Encoded or obfuscated payloads can bypass it.
• No audit trail: commands execute silently; there is no confirmation step that would give you a chance to notice unexpected execution.

This field MUST remain true (the default) unless you have a specific, well-understood automation need and have set i_accept_the_risk: true to explicitly acknowledge the above risks.

i_accept_the_risk: bool

Explicit opt-in required when prompt_before_run: false is set for any trigger that contains dangerous actions (RunCommand, SendText, SplitPane).

When prompt_before_run: false, the denylist is the only automated protection against malicious terminal output triggering arbitrary command execution. Setting this to true signals that you have reviewed and accepted this risk.

If prompt_before_run: false AND this is false (default), the trigger will not execute and a warning will be logged.

allowed_commands: Vec<String>

SEC-002: Optional allowlist of commands that this trigger is permitted to execute via RunCommand actions.

When allowed_commands is set (non-empty), only commands whose binary name or canonical path matches an entry in this list are allowed. This is more secure than the denylist because it defaults to deny-everything and only allows explicitly approved commands.

When allowed_commands is empty or absent (the default), the existing denylist behavior continues — all commands are allowed unless they match a denylist pattern.

Matching rules

• Entries are matched against the command binary name (the first token) using case-insensitive substring matching.
• For exact matching, include the full command name (e.g., "git", "docker", "npm").
• Path-based matching is also supported (e.g., "/usr/bin/git").

Example

triggers:
  - name: deploy
    pattern: "deploy:\\s*(\\S+)"
    prompt_before_run: false
    i_accept_the_risk: true
    allowed_commands:
      - git
      - docker
      - kubectl
    actions:
      - type: run_command
        command: "/usr/local/bin/deploy"

Trait Implementations

impl Clone for TriggerConfig

fn clone(&self) -> TriggerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TriggerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TriggerConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<TriggerConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for TriggerConfig

fn eq(&self, other: &TriggerConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for TriggerConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TriggerConfig