P1 — add a fail-closed Termux named-action adapter and result lifecycle #201

New issue

Open

opened 2026-08-24 06:24:54 +00:00 by lost-rob0t · 0 comments

lost-rob0t commented

2026-08-24 06:24:54 +00:00

(Migrated from github.com)

Parent: #194
Depends on: #159, #174, #198
Integrates with: #150, #151, #152, #177

Goal

Integrate Termux through its supported RUN_COMMAND interface using reviewed named local actions rather than a remote shell.

Required behavior

termux_named_action(Name, TypedArguments) resolves through validated local Prolog configuration to an approved executable and bounded argument schema. Enforce Termux permission/setup requirements and return typed accepted/running/succeeded/failed/cancelled/unsupported results where the installed Termux contract supports them.

Unknown actions, raw command strings, unapproved executables/arguments, traversal, shell metacharacter smuggling, stale/replayed requests and missing permissions fail closed.

Tests

TDD schema validation, permission absence/revocation, missing Termux, result callback authentication/correlation, timeout, cancellation, replay/idempotency, process restart, output bounds/redaction and concurrent actions.

Acceptance

A reviewed named action can run locally and produce a correlated typed result without exposing an arbitrary server-command or executable plane.

Parent: #194 Depends on: #159, #174, #198 Integrates with: #150, #151, #152, #177 ## Goal Integrate Termux through its supported RUN_COMMAND interface using reviewed named local actions rather than a remote shell. ## Required behavior termux_named_action(Name, TypedArguments) resolves through validated local Prolog configuration to an approved executable and bounded argument schema. Enforce Termux permission/setup requirements and return typed accepted/running/succeeded/failed/cancelled/unsupported results where the installed Termux contract supports them. Unknown actions, raw command strings, unapproved executables/arguments, traversal, shell metacharacter smuggling, stale/replayed requests and missing permissions fail closed. ## Tests TDD schema validation, permission absence/revocation, missing Termux, result callback authentication/correlation, timeout, cancellation, replay/idempotency, process restart, output bounds/redaction and concurrent actions. ## Acceptance A reviewed named action can run locally and produce a correlated typed result without exposing an arbitrary server-command or executable plane.