safe-rm

# safe-rm

[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
[![Node.js >=18](https://img.shields.io/badge/Node.js-%3E%3D18-339933.svg)](https://nodejs.org/)
[![Python >=3.8](https://img.shields.io/badge/Python-%3E%3D3.8-3776AB.svg)](https://www.python.org/)

**Email approval for risky `rm` commands. Built for AI coding agents on production servers.**

---

## The Problem

AI coding agents (Claude Code, Cursor, Cursor) can execute destructive commands on your server. One `rm -rf` gone wrong can wipe production data. You need a human-in-the-loop safety net that works without babysitting a terminal.

## The Solution

safe-rm intercepts risky deletions and requires email approval before proceeding. It replaces `rm` on your server with a thin wrapper that detects dangerous commands, sends you an email with Approve/Deny buttons, and waits for your response before executing anything.

## How It Works

```
 VPS (your server)                    Your Infrastructure
 ───────────────────                  ────────────────────

 AI Agent runs:
 rm -rf /var/www/data
        │
        ▼
 ┌─────────────┐    HMAC-signed     ┌──────────────────┐
 │   safe-rm    │ ──── POST ──────► │  Approval Server │
 │  (Python)    │                    │   (Express.js)   │
 │              │                    │                  │
 │  Polls for   │ ◄─── GET ──────── │  Creates request │
 │  status...   │    /status         │  with tokens     │
 └─────────────┘                    └────────┬─────────┘
        │                                    │
        │                              Webhook (POST)
        │                                    │
        │                                    ▼
        │                           ┌────────────────┐
        │                           │      n8n       │
        │                           │  (automation)  │
        │                           └────────┬───────┘
        │                                    │
        │