jason.woltje 172368612c feat(capabilities): task workspaces + tools allowlist plumbing (#20) ...

- task schema: optional workspace (absent | :run ephemeral | named
  persistent under dataRoot/workspaces) and capabilities.tools (pi
  documented tool allowlist); strict validation, traversal-proof names
- runner: creates host workspace, passes MOSAIC_WORKSPACE (container
  path) + MOSAIC_TOOLS; result.json records both
- pi adapter: cds into workspace; --tools when allowlist present else
  --no-tools
- mock adapter: logs delivered MOSAIC_* vars to stderr as deterministic
  plumbing evidence (dash prints 'export K=v', so use env not export)

Closes #20

2026-09-02 22:03:46 -05:00

..

adapter.sh

feat(capabilities): task workspaces + tools allowlist plumbing (#20)

2026-09-02 22:03:46 -05:00