@capekai/core 1.0.3 → 1.0.4

package/README.md

@@ -10,3 +10,46 @@ Requires Bun 1.3 or newer.
 npm install @capekai/core
 ```
 Public subpaths include `composition`, `plugins`, `hosts`, `execution`, `providers`, `tools`, `ask-authority`, `sandbox`, `workspace`, `configuration`, `tool`, and `storage`.
+
+## Workspace policy
+
+Čapek owns path resolution and containment. Embedding hosts can supply their own blocked paths, sensitive patterns, and home directory when composing an agent:
+
+```ts
+import { createComposition } from '@capekai/core/composition';
+
+const composition = await createComposition(processScope, {
+  ...values,
+  workspacePolicy: {
+    blockedPaths: ['/proc/', '/sys/'],
+    sensitivePatterns: ['.env', '.pem', '.key'],
+    homeDir: '/home/agent',
+  },
+});
+```
+
+Hosts building a custom plugin profile can configure the same policy directly:
+
+```ts
+import { workspacePolicyPlugin } from '@capekai/core/plugins';
+
+workspacePolicyPlugin('host.workspace-policy', {
+  blockedPaths: [],
+  sensitivePatterns: ['credentials'],
+  homeDir: '/srv/agent',
+});
+```
+
+For workspace helpers used outside an agent scope, configure the process-wide policy during host bootstrap:
+
+```ts
+import { configureWorkspacePolicy } from '@capekai/core/workspace';
+
+configureWorkspacePolicy({
+  blockedPaths: ['/proc/', '/sys/'],
+  sensitivePatterns: ['.env', '.pem', '.key'],
+  homeDir: '/home/agent',
+});
+```
+
+Call `configureWorkspacePolicy()` with no argument, or omit composition options, to retain the compatibility defaults.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capekai/core",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Bun-native composable agent runtime and framework for Capek.",
   "license": "MIT",
   "repository": {

package/src/internal/workspace.ts

@@ -9,6 +9,7 @@
  */
 
 export {
+  configureWorkspacePolicy,
   expandPath,
   isInsideUnselectedAdditionalRoot,
   isPathInside,

package/src/plugins/facade-plugins.ts

@@ -16,6 +16,7 @@ import type { SandboxController } from '../sandbox/controller';
 import type { StorageBundle } from '../storage/contracts';
 import type { ToolRegistryResolver } from '../tools/registry';
 import type { WorkspaceToolDiscovery } from '../tools/tool-source';
+import type { WorkspacePolicyOptions } from '../workspace/contracts';
 import { getSchedulerHost } from '../scheduler/host';
 import { getSessionSearchHost } from '../session-search/host';
 import { createContextSectionsPlugin } from './context-sections';
@@ -64,6 +65,9 @@ export interface FacadeScopeValues {
   host: RuntimeHost;
   contextSources: Partial<ContextSources>;
   workspaceToolDiscovery: WorkspaceToolDiscovery;
+  /** Host-owned path classification values. When omitted, the current
+   * compatibility defaults apply. */
+  workspacePolicy?: WorkspacePolicyOptions;
   /** Optional compatibility resolver. When omitted, the facade
    * composition derives the resolver from the composed scope's effective
    * contributed tool payloads. The explicit value is the rollback
@@ -109,7 +113,7 @@ export function createFacadeAgentPlugins(values: FacadeScopeValues): readonly Ca
     retryPolicyPlugin('facade.retry-policy'),
     compactionPolicyPlugin('facade.compaction-policy'),
     permissionPolicyPlugin('facade.permission-policy'),
-    workspacePolicyPlugin('facade.workspace-policy'),
+    workspacePolicyPlugin('facade.workspace-policy', values.workspacePolicy),
     toolOutputPolicyPlugin('facade.tool-output-policy'),
     contextSourcesValuePlugin('facade.context-sources', values.contextSources),
     // Facade context parity: the facade keeps the legacy self-delegation and

package/src/plugins/workspace-policy.ts

@@ -1,11 +1,6 @@
 import type { CapekPlugin, PluginContext } from '../kernel/types';
-import { homedir } from 'os';
-import { SENSITIVE_FILE_PATTERNS } from '@capekai/types';
-import {
-  BLOCKED_PATHS,
-  createWorkspaceService,
-  type WorkspacePolicyOptions,
-} from '../workspace/policy';
+import type { WorkspacePolicyOptions } from '../workspace/contracts';
+import { createWorkspaceService } from '../workspace/policy';
 import { capekWorkspacePolicyKey } from './service-keys';
 
 /**
@@ -17,17 +12,15 @@ import { capekWorkspacePolicyKey } from './service-keys';
  * current containment, root classification, expansion, and sensitive/blocked
  * denial behavior.
  */
-export function workspacePolicyPlugin(id: string): CapekPlugin<unknown> {
+export function workspacePolicyPlugin(
+  id: string,
+  options?: WorkspacePolicyOptions,
+): CapekPlugin<unknown> {
   return {
     id,
     scope: 'agent',
     provides: [capekWorkspacePolicyKey],
     setup(context: PluginContext) {
-      const options: WorkspacePolicyOptions = {
-        blockedPaths: [...BLOCKED_PATHS],
-        sensitivePatterns: [...SENSITIVE_FILE_PATTERNS],
-        homeDir: homedir(),
-      };
       context.provide(
         capekWorkspacePolicyKey,
         createWorkspaceService({ id, options }),

package/src/workspace/policy.ts

@@ -47,6 +47,14 @@ function defaultOptions(): WorkspacePolicyOptions {
   };
 }
 
+function freezeOptions(options: WorkspacePolicyOptions): Readonly<WorkspacePolicyOptions> {
+  return Object.freeze({
+    blockedPaths: Object.freeze([...options.blockedPaths]),
+    sensitivePatterns: Object.freeze([...options.sensitivePatterns]),
+    homeDir: options.homeDir,
+  });
+}
+
 // ── Mandatory containment runtime (C6 step 6) ───────────────────────────
 // The tool-runtime capability is constructed HERE, not by provider methods:
 // a custom provider supplies only frozen options (blocked paths, sensitive
@@ -130,7 +138,7 @@ export function createWorkspaceService(
   createOptions: WorkspaceServiceCreateOptions = {},
 ): WorkspaceService {
   const id = createOptions.id ?? 'workspace.default';
-  const options = createOptions.options ?? defaultOptions();
+  const options = freezeOptions(createOptions.options ?? defaultOptions());
 
   const service: WorkspaceService = {
     id,
@@ -251,6 +259,15 @@ export function getWorkspaceService(): WorkspaceService {
     ?? (processDefaultService ??= createWorkspaceService({ id: 'workspace.process-default' }));
 }
 
+/** Configures the process-wide policy used outside an agent scope. Omitting
+ * options restores the compatibility defaults. */
+export function configureWorkspacePolicy(options?: WorkspacePolicyOptions): void {
+  processDefaultService = createWorkspaceService({
+    id: 'workspace.process-default',
+    options,
+  });
+}
+
 /** Builds the tool-runtime capability over the active workspace policy. */
 export function createWorkspaceCapability(host: WorkspaceCapabilityHost): WorkspaceCapability {
   return createWorkspaceCapabilityWithOptions(host, getWorkspaceService().options);