Repository navigation

Redesigned bash toolset that have a prefix based approvals - #1360

Merged

Sheeproid merged 68 commits into

masterfrom

bash-toolset-redesign

Jan 25, 2026

Commits on Dec 31, 2025
- add an initial plan. may need more work
  Sheeproid
  committed
  d4c07e9
- more detailed plan handling command parsing and approval
  Sheeproid
  committed
  9843970
- fleshed out details
  Sheeproid
  committed
  1a7879a
- more concise spec
  Sheeproid
  committed
  c9516e2
Commits on Jan 1, 2026
- sharper spec with limited use cases
  Sheeproid
  committed
  25f3e49
- remove longer spec
  Sheeproid
  committed
  4c2e39e
- simplified design with one tool and empty config
  Sheeproid
  committed
  588849f
- ordely spec
  Sheeproid
  committed
  c176337
- replace existing bash toolset instead of writing a new one
  Sheeproid
  committed
  51edd1d
Commits on Jan 4, 2026
- Merge branch 'master' into bash-toolset-redesign
  Sheeproid
  committed
  cc5a1f3
- using 'include_default_allow_deny_list' item
  Sheeproid
  committed
  94d66df
- add some evals
  Sheeproid
  committed
  18e11a4
- add comments about ai tools being disabled
  Sheeproid
  committed
  c989cf3
- WIP bash with allow or deny list - cli only
  Sheeproid
  committed
  a6a8099
Commits on Jan 5, 2026
- using always allow and deny command-line options for bash toolset
  Sheeproid
  committed
  40db8d9
- approval flow from the UI
  Sheeproid
  committed
  5810198
Commits on Jan 6, 2026
- make deny list catch more prefixes
  Sheeproid
  committed
  d0a71b9
- add logging on getting prefixes
  Sheeproid
  committed
  2f4c109
- extracting approved prefix from tool response when using array
  Sheeproid
  committed
  0a29864
- Fix cross-conversation prefix leak by returning copies from get_effective_lists()
  Sheeproid
  committed
  2afe180
Commits on Jan 7, 2026
- minimize string creation for bash prefixes extraction
  Sheeproid
  committed
  ccc00e9
Commits on Jan 12, 2026
- handle cases of timeout correctly
  Sheeproid
  committed
  4e18dff
- Add prefix suggestion guidelines for bash tool
  Sheeproid
  committed
  4712218
- add more commands to default pre approved list
  Sheeproid
  committed
  b412612
- remove the secrets from the deny list as they will be denied based on holmes pod rbac in cluster
  Sheeproid
  committed
  5a955ba
- move the default allow and deny lists to their own file so can reference
  Sheeproid
  committed
  14b4294
- better metadata for bash toolset
  Sheeproid
  committed
  74c72d0
- make bash toolset enabled by default + inc. default allow list in server
  Sheeproid
  committed
  8644080
- Merge branch 'master' into bash-toolset-redesign
  Sheeproid
  committed
  7ac95de
- moved test to not conflict
  Sheeproid
  committed
  45e4ce0
- removed helm from pre approved cmd list as they need access to secrets
  Sheeproid
  committed
  f1e544a
- remove dead code related to bash toolset before prefix verification
  Sheeproid
  committed
  80cd0f6
- fix test
  Sheeproid
  committed
  ae9dd2b
Commits on Jan 13, 2026
- make llm aware of allow and deny lists
  Sheeproid
  committed
  eada316
- updated docs
  Sheeproid
  committed
  2632b9e
- small fixes
  Sheeproid
  committed
  7cd1e16
- limit the number of processes a shell command can start
  Sheeproid
  committed
  10a767a
- fix test namespaces
  Sheeproid
  committed
  5d5f612
- skip ulimit tests in mac os
  Sheeproid
  committed
  bbcd5c8
- Merge branch 'master' into bash-toolset-redesign
  Sheeproid
  authored
  55b1a63
- removed the ulimit -u as it is shared for the whole user. no need to protect like this
  Sheeproid
  committed
  7fd7331
- restored to original
  Sheeproid
  committed
  0fb67d5
- fix broken test
  Sheeproid
  committed
  ecccd44
Commits on Jan 14, 2026
- Merge remote-tracking branch 'origin/master' into bash-toolset-redesign
  Sheeproid
  committed
  91fd853
- remove from default allow list command that doesnt exist in holmes image
  Sheeproid
  committed
  3fbdfd4
- fix docs
  Sheeproid
  committed
  72618e6
Commits on Jan 15, 2026
- Merge remote-tracking branch 'origin/master' into bash-toolset-redesign
  Sheeproid
  committed
  929a324
- enable bash as default in the tests
  Sheeproid
  committed
  4508843
Commits on Jan 18, 2026
- add test showing bash can get logs from multiple pods
  Sheeproid
  committed
  226d596
- not allowing compound statements
  Sheeproid
  committed
  ae4041f
- hint to llm the type of the suggested prefixes array
  Sheeproid
  committed
  cc14e13
- more relaxed validation for suggested prefixes
  Sheeproid
  committed
  c2d22c9
- Merge master's tool approval workflow with our prefix-based validation
  Sheeproid
  committed
  2b400cd
- refresh approval if user is prompted twice in same question
  Sheeproid
  committed
  abb2c6b
Commits on Jan 19, 2026
- deduping if the same prefix is used for approval in same command
  Sheeproid
  committed
  c9034ee
- logging include_default_allow_deny_list
  Sheeproid
  committed
  abd7000
- split the kubectl run image toolset from the bash toolset
  Sheeproid
  committed
  cec31c3
- console icon for bash toolset
  Sheeproid
  committed
  ab1f6dc
- add llm instructions for the run image toolset
  Sheeproid
  committed
  d93302f
- fix some validation comments
  Sheeproid
  committed
  6298317
- fix code rabbit review issues + refactor reading approved prefixes file
  Sheeproid
  committed
  83bcba8
- Merge branch 'master' into bash-toolset-redesign
  Sheeproid
  committed
  b3ea656
- fixed failing test
  Sheeproid
  committed
  b967dfe
- remove non needed spec
  Sheeproid
  committed
  b7943f3
Commits on Jan 25, 2026
- fix refactoring CR comments
  Sheeproid
  committed
  e2d8d3c
- Merge branch 'master' into bash-toolset-redesign
  Sheeproid
  committed
  ef47080
- Merge branch 'master' into bash-toolset-redesign
  Sheeproid
  authored
  8d82b78
- Merge branch 'master' into bash-toolset-redesign
  Sheeproid
  authored
  39ece1e

Commits

Commits on Dec 31, 2025

Commits on Jan 1, 2026

Commits on Jan 4, 2026

Commits on Jan 5, 2026

Commits on Jan 6, 2026

Commits on Jan 7, 2026

Commits on Jan 12, 2026

Commits on Jan 13, 2026

Commits on Jan 14, 2026

Commits on Jan 15, 2026

Commits on Jan 18, 2026

Commits on Jan 19, 2026

Commits on Jan 25, 2026