Run Command

Run Command executes a single executable through a Command Runner policy. The executable must be permitted by that runner's Allowed Commands, and the working directory must fall under its Allowed Paths.

Arguments are supplied as discrete array elements and are never shell-parsed. There is no shell to escape, so a value containing spaces or shell metacharacters is passed through as one argument rather than being re-interpreted.

The activity has four tabs: Configuration, Arguments, Environment, and Output.

Configuration

Field	Required	Description
Name	Optional	Name of the component.
Description	Optional	Description of the component.
Command Runner	Optional	The Command Runner policy resource that gates this execution.
Command	Optional	Executable to run; must be permitted by the runner's Allowed Commands.
Working Directory	Optional	Must be under the runner's Allowed Paths. Defaults to the first Allowed Paths entry.
Standard Input	Optional	Text written to the process stdin, which is then closed.

Command, Working Directory, and Standard Input each support mapped and vault-backed values.

Arguments

Field	Required	Description
Arguments	Optional	Command arguments, each a discrete array element.

Environment

Field	Required	Description
Environment Overrides	Optional	Per-run environment variables applied on top of the runner's environment.

Values are mapping and vault capable.

Output

The activity returns a scriptOutput object.

Field	Data Type	Description
exitCode	Integer	Process exit code.
stdout	String	Captured standard output.
stderr	String	Captured standard error.
durationMs	Integer	Run duration in milliseconds.
timedOut	Boolean	Whether the run exceeded Max Runtime (seconds) on the Command Runner.
truncated	Boolean	Whether output exceeded Max Output Bytes (per stream) and was cut short.