Ting/workflows
Watch
2
0
Fork
You've already forked workflows
 0
Code Issues 28 Pull requests Projects Releases Packages Wiki Activity Actions

Session: ting-workflow-executor — embedded Nushell, bwrap sandboxing, and OWS DSL 1.0 #2

New issue
Open
opened 2026-09-09 10:07:53 +00:00 by larandar · 1 comment
larandar commented 2026-09-09 10:07:53 +00:00
Owner
Copy link

Session: ting-workflow-executor

Summary

Delivers the minimal Rust workflow executor, embedded Nushell engine, Bubblewrap sandboxing scaffolding, and multi-harness bridge. Covers deliverables S2 (Definitions/catalog) and S3 (Executor) of Epic #1.
Projects OpenSpec change package ting-workflow-executor in Ting/contracts.

Direct Deliverables

  • Leaf 1: Engine Scaffolding & DSL 1.0 Document Parser
  • Leaf 2: Embedded Nushell Engine & Combinators
  • Leaf 3: Bubblewrap Sandboxing & Probed Mount Table
  • Leaf 4: Process Tree Lifecycle & Ownership Reaper
  • Leaf 5: Thinned wf Command Surface
  • Leaf 6: Dynamic Sub-Workflow Registration & Tool Projection
  • Leaf 7: Multi-Harness Dispatch Bridge & Loopback Hardening
  • Leaf 8: CLI Binary & Verification Suite
# Session: ting-workflow-executor ## Summary Delivers the minimal Rust workflow executor, embedded Nushell engine, Bubblewrap sandboxing scaffolding, and multi-harness bridge. Covers deliverables S2 (Definitions/catalog) and S3 (Executor) of Epic #1. Projects OpenSpec change package `ting-workflow-executor` in `Ting/contracts`. ## Direct Deliverables - Leaf 1: Engine Scaffolding & DSL 1.0 Document Parser - Leaf 2: Embedded Nushell Engine & Combinators - Leaf 3: Bubblewrap Sandboxing & Probed Mount Table - Leaf 4: Process Tree Lifecycle & Ownership Reaper - Leaf 5: Thinned wf Command Surface - Leaf 6: Dynamic Sub-Workflow Registration & Tool Projection - Leaf 7: Multi-Harness Dispatch Bridge & Loopback Hardening - Leaf 8: CLI Binary & Verification Suite
larandar commented 2026-09-20 03:49:34 +00:00
Author
Owner
Copy link

Audit 2026-09-19/20, G41. Split proposal, not a body rewrite: eight leaves exceed the 2-6 Session norm. Split them into coherent Sessions of at most six leaves, and map every native dependency edge to a named leaf. Acceptance must become executable against the checkout or an explicit operator gate. Status/Need Grooming records this refinement frontier.

<!-- larandar:groom:v1 --> Audit 2026-09-19/20, G41. Split proposal, not a body rewrite: eight leaves exceed the 2-6 Session norm. Split them into coherent Sessions of at most six leaves, and map every native dependency edge to a named leaf. Acceptance must become executable against the checkout or an explicit operator gate. Status/Need Grooming records this refinement frontier.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
fastlane
tango/2-ting-workflow-executor
No results found.
Labels
Clear labels
  
Compat/Breaking
Breaking change that won't be backward compatible

  
Kind/Bug
Something is not working

  
Kind/Documentation
Documentation changes

  
Kind/Enhancement
Improve existing functionality

  
Kind/Feature
New functionality

  
Kind/Security
This is security issue

  
Kind/Testing
Issue or pull request related to testing

  
Meta/Campaign
Campaign grouping node; dependencies name its direct Epics

  
Meta/Epic
Epic grouping node; dependencies name its direct Sessions

  
Meta/Session
Session delivery bundle; dependencies name its direct leaf issues

  
Priority/Critical
The priority is critical

  
Priority/High
The priority is high

  
Priority/Low
The priority is low

  
Priority/Medium
The priority is medium

  
Reviewed/Confirmed
Issue has been confirmed

  
Reviewed/Curated
PR LABEL: merge by rebase/ff to preserve the commit line; absence means squash. Set by the AUTHOR. (Curation itself is a duty on every PR — the label only picks the merge style.)

  
Reviewed/Duplicate
This issue or pull request already exists

  
Reviewed/Invalid
Invalid issue

  
Reviewed/Won't Fix
This issue won't be fixed

  
Scope/Campaign
Umbrella issue grouping a coherent multi-issue campaign.

  
Status/Abandoned
Somebody has started to work on this but abandoned work

  
Status/Blocked
Something is blocking this issue or pull request

  
Status/Conflicted
STATE: steward rebase failed; work returned to its agent, with evidence.

  
Status/In Progress
STATE: claimed, workspace active. Exactly one assignee, or none when idle.

  
Status/In Review
STATE: PR open against fastlane. Set by steward (PR webhook).

  
Status/Need Grooming
Issue body and comments do not yet conform to the Deliverable record; grooming required.

  
Status/Need More Info
Feedback is required to reproduce issue or to continue work

  
Status/Ready
Ready for execution; no known blocker prevents useful work from starting.

No labels
Compat/Breaking
Kind/Bug
Kind/Documentation
Kind/Enhancement
Kind/Feature
Kind/Security
Kind/Testing
Meta/Campaign
Meta/Epic
Meta/Session
Priority/Critical
Priority/High
Priority/Low
Priority/Medium
Reviewed/Confirmed
Reviewed/Curated
Reviewed/Duplicate
Reviewed/Invalid
Reviewed/Won't Fix
Scope/Campaign
Status/Abandoned
Status/Blocked
Status/Conflicted
Status/In Progress
Status/In Review
Status/Need Grooming
Status/Need More Info
Status/Ready
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks
#1 Epic: Ting workflows — cards, definitions, a minimal executor, and code gates
Ting/workflows
Depends on
#11 feat(engine): Rust workspace crate scaffolding and base error types
Ting/workflows
#14 feat(engine): embed nu-engine and nu-protocol with Run context injection
Ting/workflows
#13 feat(engine): DSL normalization layer for <workflow>@<impl> and use.workflows
Ting/workflows
#12 feat(engine): Open Workflow DSL 1.0 parser for document and schemas
Ting/workflows
#21 feat(sandbox): wall-clock timeout watcher and ownership reaper law
Ting/workflows
#20 feat(sandbox): PID 1 namespace lifecycle and orphan reaping
Ting/workflows
#22 feat(engine): native wf workspace command
Ting/workflows
#19 feat(sandbox): UNIX domain socket bridge for supervisor RPC
Ting/workflows
#18 feat(sandbox): network containment and clearenv whitelist
Ting/workflows
#17 feat(sandbox): sensitive path masking for .dsh-run and DSH_HOME
Ting/workflows
#16 feat(sandbox): probed NixOS mount table builder
Ting/workflows
#15 feat(engine): link nu-cmd-lang and nu-command for stream combinators
Ting/workflows
#31 feat(harness): loopback redirect hardening and invalid-args failure mapping
Ting/workflows
#30 feat(harness): DSH loopback HTTP transport without Origin headers
Ting/workflows
#29 feat(workflows): simultaneous agent tool projection wf_<name>
Ting/workflows
#28 feat(workflows): mandatory structured data return validation
Ting/workflows
#27 feat(workflows): contextual <workflow>@<impl> binding with mutual exclusion
Ting/workflows
#25 feat(engine): native wf artifact command
Ting/workflows
#26 feat(workflows): dynamic wf <name> command registration from input.schema
Ting/workflows
#24 feat(engine): native wf gate command
Ting/workflows
#23 feat(engine): native wf branch command
Ting/workflows
#32 feat(harness): external CLI transports for Claude, Pi, and Codex
Ting/workflows
#34 feat(cli): end-to-end integration test suite
Ting/workflows
#33 feat(cli): wf CLI binary run and check subcommands
Ting/workflows
Reference
Ting/workflows#2
No description provided.