rcourtman 8e6dc18d6f security: allow rm on /var/tmp and /tmp with approval ...

Updated command policy to be more nuanced:

BLOCKED (hard block, never allowed):
- rm -rf / (root)
- rm -rf /* (root wildcard)
- rm -rf /home, /etc, /usr, /var/lib, /boot, /root, /bin, /sbin, /lib, /opt

REQUIRE APPROVAL (user must click 'Run'):
- rm -rf /var/tmp/* (Proxmox vzdump temp files)
- rm -rf /tmp/*

This allows AI to suggest cleaning up vzdump temp files while still
protecting against destructive operations on critical paths.

2025-12-21 18:53:08 +00:00

..

policy_test.go

Improve test coverage

2025-12-17 12:00:59 +00:00

policy.go

security: allow rm on /var/tmp and /tmp with approval

2025-12-21 18:53:08 +00:00

server_test.go

Improve test coverage

2025-12-17 12:00:59 +00:00

server_websocket_test.go

Add meaningful tests for host agent and exec websocket

2025-12-17 17:02:01 +00:00

server.go

refactor(ai): Remove over-engineered URL discovery service

2025-12-10 08:35:24 +00:00

types.go

wip: AI chat integration with multi-provider support

2025-12-04 20:16:53 +00:00