$ ./rshell --allowed-paths /var:ro,/etc,/tmp:rw,.:rw --allow-all-commands --mode remediation -c 'help'
rshell (v0.0.22-0.20260624144033-083a52525f12+dirty) - remediation mode

Features:
commands            Registered commands run inside the interpreter; no unregistered commands without an external handler.
variables           Assignments, expansion, inline env, command substitution; no arrays/arithmetic/advanced params.
control-flow        for/while/until/if/&&/||/!/groups/subshells; no case/select/functions.
pipes-redirections  Pipes, stdin/heredocs, /dev/null redirects, fd dup; no arbitrary file writes.
quoting-expansion   Quotes, globbing, continuations, comments; no extglob/tilde/process substitution.
execution           AllowedCommands, AllowedPaths, timeouts, ProcPath; no background jobs/coprocs/time.
environment         Empty by default, caller Env, IFS/ALLOWED_PATHS; no host env inheritance/export.
bash-divergences    Intentional bash differences captured here. Currently: one shared time reference per Run().

Not supported:
  - Expansions: arithmetic $((...)), arrays, advanced ${...} operations, tilde expansion, process substitution, extended globbing.
  - Control flow: case, select, C-style for ((...)), and shell functions.
  - Execution: external commands by default, background jobs, coprocesses, time, [[...]], ((...)), declare/export/local/readonly/let.
  - I/O and environment: arbitrary output file redirects, |&, herestrings, read-write redirects, input fd duplication, host env inheritance.

Commands:
[          evaluate conditional expression
break      exit from a loop
cat        concatenate and print files
cd         change the working directory
continue   continue a loop iteration
cut        remove sections from each line
df         report file system disk space usage
du         estimate file space usage
echo       write arguments to stdout
exit       exit the shell
false      return unsuccessful exit status
find       search for files in a directory hierarchy
grep       print lines that match patterns
head       output the first part of files
help       display help for features and commands
ip         show network interface and routing information
logrotate  truncate logs by size threshold or force
ls         list directory contents
ping       send ICMP echo requests to a network host
printf     format and print data
ps         report process status
pwd        print working directory
read       read a line from standard input and assign to shell variables
sed        stream editor for filtering and transforming text
sort       sort lines of text files
ss         display socket statistics
strings    print printable character sequences
tail       output the last part of files
test       evaluate conditional expression
tr         translate or delete characters
true       return successful exit status
truncate   shrink or extend file size
uname      print system information
uniq       report or omit repeated lines
wc         print newline, word, and byte counts
xargs      build and execute commands from standard input

Allowed paths:
  Read-only:
    /var
    /etc
  Read-write:
    /tmp
    /Users/matthew.deguzman/go/src/github.com/DataDog/rshell

Run 'help <feature|command>' for more information on a specific topic.