@capekai/core 1.0.2 → 1.0.4

package/README.md

@@ -10,3 +10,46 @@ Requires Bun 1.3 or newer.
 npm install @capekai/core
 ```
 Public subpaths include `composition`, `plugins`, `hosts`, `execution`, `providers`, `tools`, `ask-authority`, `sandbox`, `workspace`, `configuration`, `tool`, and `storage`.
+
+## Workspace policy
+
+Čapek owns path resolution and containment. Embedding hosts can supply their own blocked paths, sensitive patterns, and home directory when composing an agent:
+
+```ts
+import { createComposition } from '@capekai/core/composition';
+
+const composition = await createComposition(processScope, {
+  ...values,
+  workspacePolicy: {
+    blockedPaths: ['/proc/', '/sys/'],
+    sensitivePatterns: ['.env', '.pem', '.key'],
+    homeDir: '/home/agent',
+  },
+});
+```
+
+Hosts building a custom plugin profile can configure the same policy directly:
+
+```ts
+import { workspacePolicyPlugin } from '@capekai/core/plugins';
+
+workspacePolicyPlugin('host.workspace-policy', {
+  blockedPaths: [],
+  sensitivePatterns: ['credentials'],
+  homeDir: '/srv/agent',
+});
+```
+
+For workspace helpers used outside an agent scope, configure the process-wide policy during host bootstrap:
+
+```ts
+import { configureWorkspacePolicy } from '@capekai/core/workspace';
+
+configureWorkspacePolicy({
+  blockedPaths: ['/proc/', '/sys/'],
+  sensitivePatterns: ['.env', '.pem', '.key'],
+  homeDir: '/home/agent',
+});
+```
+
+Call `configureWorkspacePolicy()` with no argument, or omit composition options, to retain the compatibility defaults.

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@capekai/core",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Bun-native composable agent runtime and framework for Capek.",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/capek-dev/prokop.git",
+    "url": "git+https://github.com/capek-dev/capek.git",
     "directory": "packages/capek"
   },
   "type": "module",
@@ -77,7 +77,7 @@
   "dependencies": {
     "@ai-sdk/deepseek": "^2.0.35",
     "@ai-sdk/openai": "^3.0.84",
-    "@capekai/tool": "^1.0.0",
+    "@capekai/tool": "^1.0.2",
     "@capekai/types": "^1.0.1",
     "@openrouter/ai-sdk-provider": "^2.3.3",
     "@zip.js/zip.js": "^2.7.60",

package/src/internal/workspace.ts

@@ -9,6 +9,7 @@
  */
 
 export {
+  configureWorkspacePolicy,
   expandPath,
   isInsideUnselectedAdditionalRoot,
   isPathInside,

package/src/plugins/facade-plugins.ts

@@ -16,6 +16,7 @@ import type { SandboxController } from '../sandbox/controller';
 import type { StorageBundle } from '../storage/contracts';
 import type { ToolRegistryResolver } from '../tools/registry';
 import type { WorkspaceToolDiscovery } from '../tools/tool-source';
+import type { WorkspacePolicyOptions } from '../workspace/contracts';
 import { getSchedulerHost } from '../scheduler/host';
 import { getSessionSearchHost } from '../session-search/host';
 import { createContextSectionsPlugin } from './context-sections';
@@ -64,6 +65,9 @@ export interface FacadeScopeValues {
   host: RuntimeHost;
   contextSources: Partial<ContextSources>;
   workspaceToolDiscovery: WorkspaceToolDiscovery;
+  /** Host-owned path classification values. When omitted, the current
+   * compatibility defaults apply. */
+  workspacePolicy?: WorkspacePolicyOptions;
   /** Optional compatibility resolver. When omitted, the facade
    * composition derives the resolver from the composed scope's effective
    * contributed tool payloads. The explicit value is the rollback
@@ -109,7 +113,7 @@ export function createFacadeAgentPlugins(values: FacadeScopeValues): readonly Ca
     retryPolicyPlugin('facade.retry-policy'),
     compactionPolicyPlugin('facade.compaction-policy'),
     permissionPolicyPlugin('facade.permission-policy'),
-    workspacePolicyPlugin('facade.workspace-policy'),
+    workspacePolicyPlugin('facade.workspace-policy', values.workspacePolicy),
     toolOutputPolicyPlugin('facade.tool-output-policy'),
     contextSourcesValuePlugin('facade.context-sources', values.contextSources),
     // Facade context parity: the facade keeps the legacy self-delegation and

package/src/plugins/workspace-policy.ts

@@ -1,11 +1,6 @@
 import type { CapekPlugin, PluginContext } from '../kernel/types';
-import { homedir } from 'os';
-import { SENSITIVE_FILE_PATTERNS } from '@capekai/types';
-import {
-  BLOCKED_PATHS,
-  createWorkspaceService,
-  type WorkspacePolicyOptions,
-} from '../workspace/policy';
+import type { WorkspacePolicyOptions } from '../workspace/contracts';
+import { createWorkspaceService } from '../workspace/policy';
 import { capekWorkspacePolicyKey } from './service-keys';
 
 /**
@@ -17,17 +12,15 @@ import { capekWorkspacePolicyKey } from './service-keys';
  * current containment, root classification, expansion, and sensitive/blocked
  * denial behavior.
  */
-export function workspacePolicyPlugin(id: string): CapekPlugin<unknown> {
+export function workspacePolicyPlugin(
+  id: string,
+  options?: WorkspacePolicyOptions,
+): CapekPlugin<unknown> {
   return {
     id,
     scope: 'agent',
     provides: [capekWorkspacePolicyKey],
     setup(context: PluginContext) {
-      const options: WorkspacePolicyOptions = {
-        blockedPaths: [...BLOCKED_PATHS],
-        sensitivePatterns: [...SENSITIVE_FILE_PATTERNS],
-        homeDir: homedir(),
-      };
       context.provide(
         capekWorkspacePolicyKey,
         createWorkspaceService({ id, options }),

package/src/tools/executor.ts

@@ -205,6 +205,7 @@ export async function executeTool(options: ExecuteToolOptions): Promise<ToolResu
     logger: createLogger(tool.definition.name, sessionId),
     fetch: globalThis.fetch.bind(globalThis),
     resolvePath: workspace.resolvePath,
+    resolvePathFrom: workspace.resolvePathFrom,
     isWithinWorkspace: workspace.isWithinWorkspace,
     isSensitivePath: workspace.isSensitivePath,
     isBlockedPath: workspace.isBlockedPath,

package/src/workspace/contracts.ts

@@ -41,6 +41,7 @@ export interface WorkspaceCapability {
   allowedRoots: string[];
   tempDir: string;
   resolvePath(path: string): string;
+  resolvePathFrom(path: string, basePath: string): string;
   isWithinWorkspace(path: string): boolean;
   isSensitivePath(path: string): boolean;
   isBlockedPath(path: string): boolean;

package/src/workspace/policy.ts

@@ -47,6 +47,14 @@ function defaultOptions(): WorkspacePolicyOptions {
   };
 }
 
+function freezeOptions(options: WorkspacePolicyOptions): Readonly<WorkspacePolicyOptions> {
+  return Object.freeze({
+    blockedPaths: Object.freeze([...options.blockedPaths]),
+    sensitivePatterns: Object.freeze([...options.sensitivePatterns]),
+    homeDir: options.homeDir,
+  });
+}
+
 // ── Mandatory containment runtime (C6 step 6) ───────────────────────────
 // The tool-runtime capability is constructed HERE, not by provider methods:
 // a custom provider supplies only frozen options (blocked paths, sensitive
@@ -78,14 +86,18 @@ export function createWorkspaceCapabilityWithOptions(
   const additionalRoots = (host.additionalRoots ?? []).map((path) => resolve(path));
   const allowedRoots = (host.allowedRoots ?? []).map((path) => resolve(path));
 
-  function resolvePath(path: string): string {
+  function resolvePathFrom(path: string, basePath: string): string {
     if (path === '~' || path.startsWith('~/')) {
       return join(options.homeDir, path.slice(1));
     }
     if (isAbsolute(path)) {
       return resolve(path);
     }
-    return resolve(effectiveRoot, path);
+    return resolve(basePath, path);
+  }
+
+  function resolvePath(path: string): string {
+    return resolvePathFrom(path, effectiveRoot);
   }
 
   return {
@@ -94,6 +106,7 @@ export function createWorkspaceCapabilityWithOptions(
     allowedRoots,
     tempDir: host.tempDir,
     resolvePath,
+    resolvePathFrom,
     isWithinWorkspace(path: string): boolean {
       const resolvedPath = resolvePath(path);
       return [effectiveRoot, ...additionalRoots]
@@ -125,7 +138,7 @@ export function createWorkspaceService(
   createOptions: WorkspaceServiceCreateOptions = {},
 ): WorkspaceService {
   const id = createOptions.id ?? 'workspace.default';
-  const options = createOptions.options ?? defaultOptions();
+  const options = freezeOptions(createOptions.options ?? defaultOptions());
 
   const service: WorkspaceService = {
     id,
@@ -246,6 +259,15 @@ export function getWorkspaceService(): WorkspaceService {
     ?? (processDefaultService ??= createWorkspaceService({ id: 'workspace.process-default' }));
 }
 
+/** Configures the process-wide policy used outside an agent scope. Omitting
+ * options restores the compatibility defaults. */
+export function configureWorkspacePolicy(options?: WorkspacePolicyOptions): void {
+  processDefaultService = createWorkspaceService({
+    id: 'workspace.process-default',
+    options,
+  });
+}
+
 /** Builds the tool-runtime capability over the active workspace policy. */
 export function createWorkspaceCapability(host: WorkspaceCapabilityHost): WorkspaceCapability {
   return createWorkspaceCapabilityWithOptions(host, getWorkspaceService().options);