execverb: per-grant argv override for friendly launch verbs #151

New issue

Closed

opened 2026-06-17 22:02:29 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-06-17 22:02:29 +00:00

Owner

The exec dialect appends the granted subcommand verbatim, so it can only express bin <subcommand> <args>. That cannot model a bare interactive launch (claude) or a flag-shaped headless call (claude -p, aider --message): the mounted leaf name and the executed argv are forced equal.

Add an argv <tokens...> grant child that overrides the appended tokens, decoupling the friendly leaf name from what runs:

can run launch { argv } -> bare claude (interactive)
can run headless { argv "-p" } -> claude -p <args>
can run whoami { argv "login" "status" } -> codex login status

The friendly name keeps the CLI path and dotted audit name; only the executed argv changes. Override tokens are trusted policy (like argv-prefix) and skip the flag policy; caller args are still checked. Fail-closed on a wildcard grant or a duplicate override.

Motivation: drives the ward-kdl agents <cli> launchers (claude/codex/opencode/aider/goose) in the ward repo.

The exec dialect appends the granted subcommand verbatim, so it can only express `bin <subcommand> <args>`. That cannot model a bare interactive launch (`claude`) or a flag-shaped headless call (`claude -p`, `aider --message`): the mounted leaf name and the executed argv are forced equal. Add an `argv <tokens...>` grant child that overrides the appended tokens, decoupling the friendly leaf name from what runs: - `can run launch { argv }` -> bare `claude` (interactive) - `can run headless { argv "-p" }` -> `claude -p <args>` - `can run whoami { argv "login" "status" }` -> `codex login status` The friendly name keeps the CLI path and dotted audit name; only the executed argv changes. Override tokens are trusted policy (like `argv-prefix`) and skip the flag policy; caller args are still checked. Fail-closed on a wildcard grant or a duplicate override. Motivation: drives the `ward-kdl agents <cli>` launchers (claude/codex/opencode/aider/goose) in the ward repo.

coilysiren referenced this issue from a commit

2026-06-17 22:09:26 +00:00

feat(execverb): add per-grant argv override for friendly launch verbs

coilysiren closed this issue

2026-06-17 22:09:26 +00:00