ask-app-server 0.6.0 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b79c759ac798814a57a93e043992b9c619675cfddccb90eee218885e155099e7
-  data.tar.gz: 6166e778d393be9ddcb2c14b979dbce511a29ac94db2dffadbf9fe3870afbeaa
+  metadata.gz: 72683929fd8e34512612ab2b8695d3016e3dd1d4382eec1e2107f4ec59ba99ff
+  data.tar.gz: 4527f49da84ded81cbf1caa7b09ccf469c79047be15df463b43afdf8c73e90c0
 SHA512:
-  metadata.gz: 5ee5c8daac3b4dbe098a2f625f4a35561ae805d12cd419fd863ca7e27a9c33cd2e02ca075bc7f62ec867ff7e4441797b9f237d6081328a99f4f041ee180a80d0
-  data.tar.gz: 41fdf574b1205efc0693916951f6a838e76cf9c6e3ea04ad8cf96ef94b07da7acfe08ac45be897e1c28b5c4dbbc1cbd7bf2bcf0c736011020b4804c2e9c18af2
+  metadata.gz: 9e7a8a5697ee9445f72c3ad0c0904256c7b61a7c25d86e7250a1345e84a0aed05972529f5fe30f7beb8fad8e540571df75927b607fd13dfbdedec1fbedf052ac
+  data.tar.gz: 06abc620c5c2b0f28a42ca9cdf16f3a9f60321828d937d10033a5594f69ad09fb3f3d8f01e7ee59754c9399f144edbd282be54fd03c177e26beb3028f47453d8

data/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 ## [Unreleased]
 
+## [0.7.0] - 2026-09-23
+
+### Added
+
+- Accept a host-owned project-rules object or workspace-aware provider in
+  `SessionManager`; selected rules are passed to Ask Agent only for the
+  matching verified workspace context. Rule persistence remains host-owned.
 ## [0.6.0] - 2026-09-23
 ## [0.5.0] - 2026-09-23
 

data/lib/ask/app_server/agent_adapter.rb

@@ -68,7 +68,7 @@ module Ask
       #   Ask::Agent::Session.new (hooks, plan_mode, todos, ...)
       def initialize(model:, tools: nil, system_prompt: nil, agent_dir: nil,
                      approval: :off, require_approval: nil, host: nil,
-                     state_adapter: nil, created_at: nil, project_grants: nil, **session_opts)
+                     state_adapter: nil, created_at: nil, project_grants: nil, project_rules: nil, **session_opts)
         @model = model
         @system_prompt = system_prompt
         @tools = resolve_tools(tools)
@@ -77,6 +77,7 @@ module Ask
         @require_approval = require_approval
         @agent_dir = agent_dir
         @project_grants = project_grants
+        @project_rules = project_rules
         @host = host || build_durable_host(state_adapter)
         @durable_record = false
         # The session's workspace is the tools' home: bash commands
@@ -488,6 +489,7 @@ module Ask
         )
         opts = { queue: queue }
         opts[:project_grants] = @project_grants if @project_grants
+        opts[:project_rules] = @project_rules if @project_rules
         return opts if @approval == :auto
 
         opts.merge(require_approval: @require_approval)

data/lib/ask/app_server/session_manager.rb

@@ -32,7 +32,7 @@ module Ask
       attr_reader :blocked_tools
       attr_reader :permission_timeout
 
-      def initialize(store: nil, host: nil, state_adapter: nil, permission_mode: :on_request, blocked_tools: nil, permission_timeout: 300)
+      def initialize(store: nil, host: nil, state_adapter: nil, permission_mode: :on_request, blocked_tools: nil, permission_timeout: 300, project_rules: nil)
         @state_adapter = state_adapter
         @project_grant_state = state_adapter || Ask::State::Memory.new
         @store = store || SessionStore.new(state: state_adapter)
@@ -42,6 +42,7 @@ module Ask
         @permission_mode = permission_mode
         @blocked_tools = (blocked_tools || DEFAULT_REQUIRE_APPROVAL).map(&:to_s)
         @permission_timeout = permission_timeout
+        @project_rules_provider = project_rules
         @session_event_observers = []
         @logger = Logger.new($stdout, level: ENV["DEBUG"] ? Logger::DEBUG || Logger::DEBUG : Logger::WARN)
       end
@@ -92,6 +93,7 @@ module Ask
           approval: approval_opts[:mode],
           require_approval: approval_opts[:require_approval],
           project_grants: project_grants_for(workspace_id),
+          project_rules: project_rules_for(canonical_workspace_path(workspace_path), workspace_id),
           plan_mode: plan_mode,
           host: @host
         )
@@ -162,6 +164,7 @@ module Ask
           approval: approval_opts[:mode],
           require_approval: approval_opts[:require_approval],
           project_grants: project_grants,
+          project_rules: project_rules_for(workspace_path, workspace_id),
           plan_mode: plan_mode,
           host: @host,
           created_at: record.created_at
@@ -185,6 +188,24 @@ module Ask
         end
       end
 
+      # Project rule storage and policy selection belong to the host. Supply
+      # either a PermissionRules instance or a callable receiving the
+      # verified workspace path and opaque workspace identity.
+      def project_rules_for(workspace_path, workspace_id)
+        provider = @project_rules_provider
+        return nil unless provider
+
+        rules = if provider.respond_to?(:call)
+          provider.call(workspace_path: workspace_path, workspace_id: workspace_id)
+        else
+          provider
+        end
+        return nil if rules.nil?
+        return rules if rules.respond_to?(:classify)
+
+        raise ArgumentError, 'project_rules provider must return an object responding to :classify'
+      end
+
       def workspace_identity(path)
         canonical = canonical_workspace_path(path)
         canonical && "workspace:#{Digest::SHA256.hexdigest(canonical)}"

data/lib/ask/app_server/version.rb

@@ -2,6 +2,6 @@
 
 module Ask
   module AppServer
-    VERSION = "0.6.0"
+    VERSION = "0.7.0"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ask-app-server
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.7.0
 platform: ruby
 authors:
 - Kaka Ruto
@@ -113,14 +113,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.2.0
+        version: 0.3.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.2.0
+        version: 0.3.0
 - !ruby/object:Gem::Dependency
   name: minitest
   requirement: !ruby/object:Gem::Requirement