Skip to content

FEATURE: allow runCommand to specify username or uid #181

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Pangjiping wants to merge 11 commits into from
Closed

FEATURE: allow runCommand to specify username or uid #181

Changes from 1 commit
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
3cdade0
feat(specs): allow runCommand to specify username or uid
Pangjiping Feb 5, 2026
9092247
feat(components/execd): add a user object to the run_command request …
Pangjiping Feb 5, 2026
42896b0
feat(components/execd): allow runCommand to switch user/uid
Pangjiping Feb 5, 2026
d39cb51
chore(specs): simplify user identity schema to name/uid object
Pangjiping Feb 5, 2026
c55adcb
Merge remote-tracking branch 'origin/main' into feat/run_command/uid
Pangjiping Feb 10, 2026
5e895be
chore: update execd-api.yaml
Pangjiping Feb 10, 2026
be9a21f
Merge remote-tracking branch 'origin/main' into feat/run_command/uid
Pangjiping Feb 28, 2026
1b32e83
fix(execd): fix unreachable uid/gid setting
Pangjiping Feb 28, 2026
f483a98
fix(execd): set supplementary groups in syscall.Credential when switc…
Pangjiping Mar 1, 2026
d6a46c0
fix(execd): avoid ghost sessions on exec failure, extract error handling
Pangjiping Mar 1, 2026
c6e9a06
chore(execd): drop redundant request.User logging in runCommand
Pangjiping Mar 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 23 additions & 1 deletion specs/execd-api.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -288,7 +288,8 @@ paths:
description: |
Executes a shell command and streams the output in real-time using SSE (Server-Sent Events).
The command can run in foreground or background mode. The response includes stdout, stderr,
execution status, and completion events.
execution status, and completion events. Use the optional `user` field to run the command as
a specific system user when supported by the sandbox.
operationId: runCommand
tags:
- Command
Expand All @@ -304,12 +305,14 @@ paths:
value:
command: ls -la /workspace
cwd: /workspace
user: sandbox
background: false
background:
summary: Background command
value:
command: python server.py
cwd: /app
user: 1001
background: true
responses:
"200":
Expand Down Expand Up @@ -929,6 +932,16 @@ components:
description: Whether to run command in detached mode
default: false
example: false
user:
oneOf:
- type: string
description: POSIX username
example: sandbox
- type: integer
format: int64
description: Numeric UID
example: 1001
description: Username or numeric UID to run the command as; defaults to the execd process user (current OS user) if omitted

CommandStatusResponse:
type: object
Expand All @@ -942,6 +955,15 @@ components:
type: string
description: Original command content
example: ls -la
user:
oneOf:
- type: string
description: Effective username that executed the command
example: sandbox
- type: integer
format: int64
description: Effective UID that executed the command
example: 1001
running:
type: boolean
description: Whether the command is still running
Expand Down