rcourtman 8e6dc18d6f security: allow rm on /var/tmp and /tmp with approval ... Updated command policy to be more nuanced: BLOCKED (hard block, never allowed): - rm -rf / (root) - rm -rf /* (root wildcard) - rm -rf /home, /etc, /usr, /var/lib, /boot, /root, /bin, /sbin, /lib, /opt REQUIRE APPROVAL (user must click 'Run'): - rm -rf /var/tmp/* (Proxmox vzdump temp files) - rm -rf /tmp/* This allows AI to suggest cleaning up vzdump temp files while still protecting against destructive operations on critical paths.		2025-12-21 18:53:08 +00:00
..
policy.go	security: allow rm on /var/tmp and /tmp with approval	2025-12-21 18:53:08 +00:00
policy_test.go	Improve test coverage	2025-12-17 12:00:59 +00:00
server.go	refactor(ai): Remove over-engineered URL discovery service	2025-12-10 08:35:24 +00:00
server_test.go	Improve test coverage	2025-12-17 12:00:59 +00:00
server_websocket_test.go	Add meaningful tests for host agent and exec websocket	2025-12-17 17:02:01 +00:00
types.go	wip: AI chat integration with multi-provider support	2025-12-04 20:16:53 +00:00