Struct DestructiveCommandVerifier 

pub struct DestructiveCommandVerifier { /* private fields */ }

Verifier that blocks destructive shell commands (e.g., rm -rf /, dd, mkfs) before the shell tool executes them.

Applies to any tool whose name is in the configured shell_tools set (default: ["bash", "shell", "terminal"]). For commands targeting a specific path, execution is allowed when the path starts with one of the configured allowed_paths. When allowed_paths is empty (the default), all matching destructive commands are blocked.

Implementations

impl DestructiveCommandVerifier

pub fn new(config: &DestructiveVerifierConfig) -> Self

Trait Implementations

impl Debug for DestructiveCommandVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PreExecutionVerifier for DestructiveCommandVerifier

fn name(&self) -> &'static str

Human-readable name for logging and TUI display.

fn verify(&self, tool_name: &str, args: &Value) -> VerificationResult

Verify whether a tool call should proceed.