kcosr

GPT-5.6 Luna and Codex subagents v2

Summary

In the Codex source at commit 44d76c6a, GPT-5.6 Sol and Terra can be selected as explicit models for subagents v2, while Luna cannot.

This is an intentional backend-compatibility check, not a hardcoded Luna

kcosr

Standalone Ubuntu SSH Container on a Mac

This guide creates a minimal Ubuntu workstation with Apple's container CLI. OpenSSH runs directly as PID 1, with a persistent Linux home and a shared Mac directory.

Because sshd is PID 1, the container exits if sshd exits. Start it again from the Mac with container start ubuntu-ssh.

The container has a persistent ext4 home and one Mac directory shared into that

kcosr

// formwork-codex-task — DRAFT (2026-07-04, unvalidated)
//
// A keel workflow that runs ONE Formwork implementation task with a
// persistent Codex session, then PARKS instead of finishing so the
// orchestrator (Claude, via `keel signal`) can send follow-up rounds to
// the same session. Review is deliberately NOT embedded: the orchestrator
// reviews the branch between rounds and feeds findings back as follow-ups.
//
// Cribbed from workflows/branch-worktree-implement-review-codex-fast.
// Validate with `keel run` against the current SDK before

kcosr

HTTP Service Tunneling Design

Repository: https://github.com/kcosr/termstation

Purpose

This guide explains how TermStation exposes container-local services to API clients through a reverse tunnel, including HTTP proxying and WebSocket upgrades on paths like:

• /api/sessions/:sessionId/service/:port/...

kcosr

CLI Provider for Pi

Overview

This design document describes integrating external CLI tools (like Claude CLI, Codex CLI) as a new Provider type in pi. The goal is to create an abstraction layer that takes streaming JSON output from external CLIs and converts it into pi's native AssistantMessageEvent format.

Background

Assistant App's CLI Integration

kcosr

Multi-Agent Orchestration Workflow

This document describes the workflow for an orchestrator agent to break down a large task into sub-tasks, delegate to worker agents, and coordinate the work to completion.

Overview

┌─────────────────────────────────────────────────────────────────┐
│                     Orchestrator Agent                          │
│                                                                 │

kcosr

Securing Network Access from Containers with a Transparent Proxy

This pattern uses iptables to redirect outbound HTTP/HTTPS traffic through a transparent MITM proxy such as kcosr/acl-proxy (WIP prototype), allowing you to filter requests by URL, inspect content, log traffic, enforce allow/deny lists, or even inject credentials you don't want to deploy in the container.

Note: This approach can be used without containers if you trust that all commands invoked by the agent CLI will respect HTTP_PROXY environment variables.

How It Works

1. Container starts with temporary sudo access to iptables
2. Entrypoint script configures iptables to redirect traffic to the proxy

kcosr

Securing File-Based Credentials in Containers

This pattern allows a non-root container user to run utilities that use file-based credentials (e.g., gh, git) while limiting direct access to those credentials files. Credentials are mounted into root's home read by utilities run using sudo.

If a priviledged utility can be instructed to read arbitrary files or dump credentials, no security is provided beyond obfuscation. This pattern can be useful to prevent accidental reads or low-complexity exploits but will not block access. A proxy-based approach, combined with credentials injection in the request, is better.

Example Exploits

gh auth token