rcourtman 2420c2affb feat: Commands disabled by default, require --enable-commands to opt-in ...

BREAKING CHANGE: AI command execution on agents is now disabled by default.
Users who want AI auto-fix must explicitly enable it with --enable-commands
flag or PULSE_ENABLE_COMMANDS=true environment variable.

Changes:
- Add --enable-commands flag (opt-in for command execution)
- Commands disabled by default for security (defense-in-depth)
- --disable-commands is now deprecated (logs warning, no longer needed)
- PULSE_DISABLE_COMMANDS deprecated in favor of PULSE_ENABLE_COMMANDS
- Update installer script to use --enable-commands
- Backwards compatibility: PULSE_DISABLE_COMMANDS=false still enables commands

This addresses community feedback about secure defaults for arbitrary
command execution on production infrastructure.

Related to #889

2025-12-24 17:36:44 +00:00

..

hashpw

Improve test coverage

2025-12-17 12:00:59 +00:00

pulse

feat: add CLI commands for mock mode management

2025-12-22 17:26:57 +00:00

pulse-agent

feat: Commands disabled by default, require --enable-commands to opt-in

2025-12-24 17:36:44 +00:00

pulse-docker-agent

wip: AI chat integration with multi-provider support

2025-12-04 20:16:53 +00:00

pulse-host-agent

wip: AI chat integration with multi-provider support

2025-12-04 20:16:53 +00:00

pulse-sensor-proxy

feat: add --kube-include-all-deployments flag for Kubernetes agent

2025-12-18 20:58:30 +00:00