Skip to content

Add sandboxed workflow execution engine#12

Closed
sezallagwal wants to merge 1 commit into
RocketChat:feature/workflow-composer-entrypointfrom
sezallagwal:feature/workflow-engine-execution
Closed

Add sandboxed workflow execution engine#12
sezallagwal wants to merge 1 commit into
RocketChat:feature/workflow-composer-entrypointfrom
sezallagwal:feature/workflow-engine-execution

Conversation

@sezallagwal

Copy link
Copy Markdown
Collaborator

Summary

  • Add a sandboxed workflow execution engine that runs composed workflows step by step
  • Support API call steps with authenticated HTTP requests via a pluggable client
  • Add LLM sampling steps for AI-powered transformations via MCP server surface
  • Implement template resolution and expression evaluation with security sandboxing
  • Handle conditional branching, elicitation, and transform steps with dependency ordering
  • Add integration and security unit tests for the executor and sandbox

Depends on

#11

Add the Week 4 workflow engine as focused modules built on the existing
expression-security allowlist:

- templates.ts: VM-sandboxed expression and template resolution, gated by
  validateSafeExpression before any evaluation
- api-call.ts: api_call execution with forEach fan-out and outputPath extraction
- sampling.ts: sampling step execution with JSON-intent detection
- executor.ts: dependency-ordered orchestrator handling conditional, transform,
  and elicitation steps with branch-skip propagation

Includes sandbox security tests covering known escape patterns and an executor
integration test exercising data flow, branching, forEach, sampling, and errors.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant