feat(harness): external CLI transports for Claude, Pi, and Codex #32

New issue

Open

opened 2026-09-09 10:15:34 +00:00 by larandar · 0 comments

larandar commented

2026-09-09 10:15:34 +00:00

Owner

Proposal

Invoke Claude, Pi, and Codex CLIs sandboxed with bounded stdio.

Design

Add adapters with bounded stdin/stdout/stderr and normalized result mapping.

Tasks

Define commands; enforce sandbox; bound stdio; map exit/output.

Gherkin Specification Delta

must.contracts.ting-workflows.deliverable-32

Scenario: Deliverable behavior

GIVEN the stated prerequisites and inputs
WHEN the feature is exercised
THEN an enabled harness, when dispatches, then CLI runs sandboxed with bounded stdio and normalized result.

## Proposal Invoke Claude, Pi, and Codex CLIs sandboxed with bounded stdio. ## Design Add adapters with bounded stdin/stdout/stderr and normalized result mapping. ## Tasks - Define commands; enforce sandbox; bound stdio; map exit/output. ## Gherkin Specification Delta ### must.contracts.ting-workflows.deliverable-32 **Scenario: Deliverable behavior** - **GIVEN** the stated prerequisites and inputs - **WHEN** the feature is exercised - **THEN** an enabled harness, when dispatches, then CLI runs sandboxed with bounded stdio and normalized result.

larandar added a new dependency

2026-09-09 10:15:36 +00:00

#18 feat(sandbox): network containment and clearenv whitelist

larandar added a new dependency

2026-09-09 10:15:36 +00:00

#30 feat(harness): DSH loopback HTTP transport without Origin headers

larandar added a new dependency

2026-09-09 10:15:38 +00:00

#2 Session: ting-workflow-executor — embedded Nushell, bwrap sandboxing, and OWS DSL 1.0

larandar referenced this issue

2026-09-10 14:49:32 +00:00

Epic: Ting workflows — cards, definitions, a minimal executor, and code gates #1