feat: embed fixed files in generated exec commands #273

Merged

coilysiren merged 2 commits from aos/codex/cli-guard-embedded-files into main

2026-08-06 06:52:05 +00:00

coilyco-ops commented

2026-08-06 06:50:18 +00:00

Member

Summary

Remove the doc-link guardfile feature from both dialects.
Add typed embed argv entries for specgen exec members.
Materialize embedded files at private absolute runtime paths and clean them after command completion.
Fail closed on relative runtime mappings, path escape, artifact collision, invalid slots, and oversized inputs.

Validation

make test
make build
make pre-commit

Closes #271
Closes #272

## Summary * Remove the `doc-link` guardfile feature from both dialects. * Add typed `embed` argv entries for specgen exec members. * Materialize embedded files at private absolute runtime paths and clean them after command completion. * Fail closed on relative runtime mappings, path escape, artifact collision, invalid slots, and oversized inputs. ## Validation * `make test` * `make build` * `make pre-commit` Closes #271 Closes #272

coilyco-ops added 2 commits

2026-08-06 06:50:18 +00:00