-      requireExplicitPermission: false, // Default to false for backward compatibility+      requireExplicitPermission: true, // Enabled by default for safety rails

-const DESTRUCTIVE_PATTERNS = [-    /\brm\s+(-rf?|-fr?)\s+/,       // rm -rf or rm -fr-    /\brm\s+.*\*/,                  // rm with wildcards-    /\bfind\s+.*-delete/,           // find with -delete-    /\bfind\s+.*-exec\s+rm/,        // find with -exec rm-    /\b(dd|mkfs|format|fdisk)\b/,   // Disk operations-];+const DESTRUCTIVE_PATTERNS = [+    // rm where both -r and -f are present anywhere before operands (order-insensitive)+    /\brm\b[^\n]*\s-(?:[^\s]*r[^\s]*f[^\s]*|[^\s]*f[^\s]*r[^\s]*)/i,+    // rm with separated flags (e.g., -r ... -f or -f ... -r)+    /\brm\b[^\n]*\s-r\b[^\n]*\s-f\b/i,+    /\brm\b[^\n]*\s-f\b[^\n]*\s-r\b/i,+    // rm with wildcards+    /\brm\b[^\n]*\*/,+    // find with -delete or -exec rm+    /\bfind\b[^\n]*-delete\b/i,+    /\bfind\b[^\n]*-exec\b[^\n]*\brm\b/i,+    // Disk operations+    /\b(dd|mkfs|format|fdisk)\b/i,+];

   async executeCommand(command: string, timeoutMs: number = DEFAULT_COMMAND_TIMEOUT, shell?: string): Promise<CommandExecutionResult> {+    // Enforce static blockedCommands first+    try {+      const { default: CommandManagerMod } = await import('./command-manager.js');+      const commandManager = new CommandManagerMod.default?.constructor === Function+        ? new CommandManagerMod.default()+        : new CommandManagerMod.CommandManager?.constructor === Function+          ? new CommandManagerMod.CommandManager()+          : null;+      if (commandManager && !(await commandManager.validateCommand(command))) {+        return {+          pid: -1,+          output: 'Command blocked by policy (blockedCommands).',+          isBlocked: true+        };+      }+    } catch (e) {+      // Non-fatal: if validation fails, continue to the destructive guard+    }

-import { spawn } from 'child_process';+import { spawn } from 'child_process';+import { CommandManager } from './command-manager.js';

-          return {+          return {             pid: -1,             output: `🚨 DESTRUCTIVE OPERATION BLOCKED! 🚨@@-Example: rm ${PERMISSION_FLAG} -rf /path/to/delete`,-            isBlocked: false+Example: rm ${PERMISSION_FLAG} -rf /path/to/delete`,+            isBlocked: true           };

 async function isPathReadOnly(checkPath: string): Promise<boolean> {-    const config = await configManager.getConfig();-    const readOnlyDirs = config.readOnlyDirectories || [];+    const config = await configManager.getConfig();+    const readOnlyDirs = config.readOnlyDirectories || [];@@-    const normalizedCheckPath = path.normalize(checkPath).toLowerCase();+    const normalizedCheckPath = path.normalize(checkPath).toLowerCase();@@     for (const dir of readOnlyDirs) {         const expandedDir = expandHome(dir);         const normalizedDir = path.normalize(expandedDir).toLowerCase();@@     }      return false; }

-        // Check if path is read-only for write operations-        if (isWriteOperation && await isPathReadOnly(absolute)) {+        // Check if path is read-only for write operations (resolve parent symlinks)+        if (isWriteOperation) {+            const parent = path.dirname(absolute);+            let canonicalParent = parent;+            try {+                canonicalParent = await fs.realpath(parent);+            } catch { /* parent may not exist; keep as-is */ }+            const canonicalTarget = path.join(canonicalParent, path.basename(absolute));+            if (await isPathReadOnly(canonicalTarget)) {                 capture('server_path_validation_error', {                     error: 'Path is read-only',                     operation: 'write'                 });--            throw new Error(`Path is read-only: ${requestedPath}. This directory is protected from modifications.`);+                throw new Error(`Path is read-only: ${requestedPath}. This directory is protected from modifications.`);+            }         }

-import { configManager } from './dist/config-manager.js';-import { writeFile } from './dist/tools/filesystem.js';+import { configManager } from './dist/config-manager.js';+import { writeFile, createDirectory } from './dist/tools/filesystem.js';+import os from 'os';+import path from 'path';@@-    await configManager.setValue('readOnlyDirectories', ['/home/konverts/projects2/test-readonly']);+    const TMP = os.tmpdir();+    const RO_DIR = path.join(TMP, 'dcmd-readonly');+    const OK_DIR = path.join(TMP, 'dcmd-allowed');+    await createDirectory(RO_DIR);+    await createDirectory(OK_DIR);+    await configManager.setValue('readOnlyDirectories', [RO_DIR]);@@-        console.log('Attempting to write to /home/konverts/projects2/test-readonly/test.txt...');-        await writeFile('/home/konverts/projects2/test-readonly/test.txt', 'This should fail');+        const roFile = path.join(RO_DIR, 'test.txt');+        console.log(`Attempting to write to ${roFile}...`);+        await writeFile(roFile, 'This should fail');@@-        console.log('\nAttempting to write to /home/konverts/projects2/test-allowed/test.txt...');-        await writeFile('/home/konverts/projects2/test-allowed/test.txt', 'This should work');+        const okFile = path.join(OK_DIR, 'test.txt');+        console.log(`\nAttempting to write to ${okFile}...`);+        await writeFile(okFile, 'This should work');