@dawn-ai/core 0.6.0 → 0.8.0

package/README.md

@@ -6,7 +6,7 @@
 
 Filesystem-based route discovery, app config loading, state-field resolution, and typegen primitives that the Dawn CLI builds on.
 
-This is an internal Dawn workspace package. For Dawn documentation, see <https://github.com/cacheplane/dawnai/tree/main/apps/web/content/docs>.
+This is an internal Dawn workspace package, part of [Dawn — the TypeScript meta-framework for LangGraph](https://github.com/cacheplane/dawnai). For documentation, see [dawnai.org/docs](https://dawnai.org/docs/getting-started).
 
 ## License
 

package/dist/capabilities/built-in/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../../src/capabilities/built-in/workspace.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAsB,MAAM,aAAa,CAAA;AAuNvE,wBAAgB,qBAAqB,IAAI,gBAAgB,CAoBxD"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../../src/capabilities/built-in/workspace.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAsB,MAAM,aAAa,CAAA;AA6GvE,wBAAgB,qBAAqB,IAAI,gBAAgB,CAoBxD"}

package/dist/capabilities/built-in/workspace.js

@@ -1,9 +1,9 @@
 import { existsSync } from "node:fs";
 import { join, relative, resolve, sep } from "node:path";
-import { suggestedCommandPattern, suggestedPathPattern } from "@dawn-ai/permissions";
 import { localExec, localFilesystem } from "@dawn-ai/workspace";
-import { interrupt } from "@langchain/langgraph";
 import { z } from "zod";
+import { gateBashOp } from "../permission-gate.js";
+import { createWorkspaceFs } from "../workspace-fs.js";
 const WORKSPACE_DIRNAME = "workspace";
 /**
  * Resolve the workspace root relative to the given app root. In production
@@ -21,90 +21,18 @@ const RUN_BASH_INPUT = z.object({ command: z.string().min(1) });
 function backendContext(workspaceRoot, signal) {
     return { signal, workspaceRoot };
 }
-async function gatePathOp(permissions, operation, absPath, workspaceRoot) {
-    // If permissions store is absent, allow (legacy behavior — capability used without permissions context).
-    if (!permissions)
-        return { allowed: true };
-    if (permissions.mode === "bypass")
-        return { allowed: true };
-    const insideWorkspace = absPath === workspaceRoot || absPath.startsWith(workspaceRoot + sep);
-    // Inside workspace: always allow silently.
-    if (insideWorkspace)
-        return { allowed: true };
-    // Outside workspace: consult the store.
-    const decision = permissions.match(operation, absPath);
-    if (decision === "allow")
-        return { allowed: true };
-    if (decision === "deny") {
-        return { allowed: false, reason: `Permission denied by user: ${absPath}` };
-    }
-    // decision === "unknown"
-    if (permissions.mode === "non-interactive") {
-        return { allowed: false, reason: `Permission denied (fail-closed): ${absPath}` };
-    }
-    // Interactive: emit LangGraph interrupt and await user decision.
-    const result = await emitPermissionInterrupt({
-        kind: "path",
-        operation,
-        path: absPath,
-        permissions,
-    });
-    if (result === "deny") {
-        return { allowed: false, reason: `Permission denied by user: ${absPath}` };
-    }
-    return { allowed: true };
-}
-async function gateBashOp(permissions, command) {
-    if (!permissions)
-        return { allowed: true };
-    if (permissions.mode === "bypass")
-        return { allowed: true };
-    const decision = permissions.match("bash", command);
-    if (decision === "allow")
-        return { allowed: true };
-    if (decision === "deny") {
-        return { allowed: false, reason: `Permission denied by user: ${command}` };
-    }
-    if (permissions.mode === "non-interactive") {
-        return { allowed: false, reason: `Permission denied (fail-closed): ${command}` };
-    }
-    const result = await emitPermissionInterrupt({
-        kind: "command",
-        command,
-        permissions,
-    });
-    if (result === "deny") {
-        return { allowed: false, reason: `Permission denied by user: ${command}` };
-    }
-    return { allowed: true };
-}
-async function emitPermissionInterrupt(args) {
-    const interruptId = `perm-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
-    const suggestedPattern = args.kind === "command"
-        ? suggestedCommandPattern(args.command ?? "")
-        : suggestedPathPattern(args.path ?? "");
-    const payload = {
-        interruptId,
-        type: "permission-request",
-        kind: args.kind,
-        detail: args.kind === "command"
-            ? { command: args.command ?? "", suggestedPattern }
-            : {
-                operation: args.operation ?? "readFile",
-                path: args.path ?? "",
-                suggestedPattern,
-            },
-    };
-    const decision = interrupt(payload);
-    if (decision === "deny")
-        return "deny";
-    if (decision === "always") {
-        const tool = args.kind === "command" ? "bash" : (args.operation ?? "readFile");
-        await args.permissions.addAllow(tool, suggestedPattern);
-    }
-    return "allow";
-}
 function buildWorkspaceTools(workspaceRoot, fs, exec, permissions) {
+    // Agent tools run inside the graph, so the handle may surface the
+    // interactive LangGraph permission interrupt.
+    function handleFor(signal) {
+        return createWorkspaceFs({
+            workspaceRoot,
+            backend: fs,
+            permissions,
+            signal,
+            interruptCapable: true,
+        });
+    }
     const readFile = {
         name: "readFile",
         description: "Read a UTF-8 file from the workspace.",
@@ -112,19 +40,15 @@ function buildWorkspaceTools(workspaceRoot, fs, exec, permissions) {
         overridable: true,
         run: async (input, ctx) => {
             const { path } = READ_FILE_INPUT.parse(input);
+            const handle = handleFor(ctx.signal);
             const absPath = resolve(workspaceRoot, path);
-            const gate = await gatePathOp(permissions, "readFile", absPath, workspaceRoot);
-            if (!gate.allowed) {
-                throw new Error(gate.reason);
-            }
-            const bctx = backendContext(workspaceRoot, ctx.signal);
             const rel = relative(workspaceRoot, absPath);
             // NOTE: must match SUBDIR ("tool-outputs") in @dawn-ai/langchain offload-store.ts
             const isToolOutput = rel === "tool-outputs" || rel.startsWith(`tool-outputs${sep}`);
-            const data = await fs.readFile(absPath, bctx, isToolOutput ? { maxBytes: Number.POSITIVE_INFINITY } : undefined);
+            const data = await handle.readFile(path, isToolOutput ? { maxBytes: Number.POSITIVE_INFINITY } : undefined);
             if (isToolOutput && fs.touchFile) {
                 try {
-                    await fs.touchFile(absPath, bctx);
+                    await fs.touchFile(absPath, backendContext(workspaceRoot, ctx.signal));
                 }
                 catch {
                     /* touch is best-effort; never fail a read because of it */
@@ -140,12 +64,7 @@ function buildWorkspaceTools(workspaceRoot, fs, exec, permissions) {
         overridable: true,
         run: async (input, ctx) => {
             const { path, content } = WRITE_FILE_INPUT.parse(input);
-            const absPath = resolve(workspaceRoot, path);
-            const gate = await gatePathOp(permissions, "writeFile", absPath, workspaceRoot);
-            if (!gate.allowed) {
-                throw new Error(gate.reason);
-            }
-            const result = await fs.writeFile(absPath, content, backendContext(workspaceRoot, ctx.signal));
+            const result = await handleFor(ctx.signal).writeFile(path, content);
             return `wrote ${result.bytesWritten} bytes to ${path}`;
         },
     };
@@ -156,13 +75,7 @@ function buildWorkspaceTools(workspaceRoot, fs, exec, permissions) {
         overridable: true,
         run: async (input, ctx) => {
             const { path } = LIST_DIR_INPUT.parse(input);
-            const absPath = resolve(workspaceRoot, path);
-            const gate = await gatePathOp(permissions, "listDir", absPath, workspaceRoot);
-            if (!gate.allowed) {
-                throw new Error(gate.reason);
-            }
-            const entries = await fs.listDir(absPath, backendContext(workspaceRoot, ctx.signal));
-            return [...entries];
+            return [...(await handleFor(ctx.signal).listDir(path))];
         },
     };
     const runBash = {

package/dist/capabilities/permission-gate.d.ts

@@ -0,0 +1,13 @@
+import type { PermissionsStore } from "@dawn-ai/permissions";
+export type PathOperation = "readFile" | "writeFile" | "listDir";
+export type GateResult = {
+    allowed: true;
+} | {
+    allowed: false;
+    reason: string;
+};
+export declare function gatePathOp(permissions: PermissionsStore | undefined, operation: PathOperation, absPath: string, workspaceRoot: string, opts?: {
+    readonly interruptCapable?: boolean;
+}): Promise<GateResult>;
+export declare function gateBashOp(permissions: PermissionsStore | undefined, command: string): Promise<GateResult>;
+//# sourceMappingURL=permission-gate.d.ts.map

package/dist/capabilities/permission-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-gate.d.ts","sourceRoot":"","sources":["../../src/capabilities/permission-gate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAI5D,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,CAAA;AAEhE,MAAM,MAAM,UAAU,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAE/E,wBAAsB,UAAU,CAC9B,WAAW,EAAE,gBAAgB,GAAG,SAAS,EACzC,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7C,OAAO,CAAC,UAAU,CAAC,CAwCrB;AAED,wBAAsB,UAAU,CAC9B,WAAW,EAAE,gBAAgB,GAAG,SAAS,EACzC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,UAAU,CAAC,CAqBrB"}

package/dist/capabilities/permission-gate.js

@@ -0,0 +1,94 @@
+import { sep } from "node:path";
+import { suggestedCommandPattern, suggestedPathPattern } from "@dawn-ai/permissions";
+import { interrupt } from "@langchain/langgraph";
+export async function gatePathOp(permissions, operation, absPath, workspaceRoot, opts) {
+    // If permissions store is absent, allow (legacy behavior — capability used without permissions context).
+    if (!permissions)
+        return { allowed: true };
+    if (permissions.mode === "bypass")
+        return { allowed: true };
+    const insideWorkspace = absPath === workspaceRoot || absPath.startsWith(workspaceRoot + sep);
+    // Inside workspace: always allow silently.
+    if (insideWorkspace)
+        return { allowed: true };
+    // Outside workspace: consult the store.
+    const decision = permissions.match(operation, absPath);
+    if (decision === "allow")
+        return { allowed: true };
+    if (decision === "deny") {
+        return { allowed: false, reason: `Permission denied by user: ${absPath}` };
+    }
+    // decision === "unknown"
+    if (permissions.mode === "non-interactive") {
+        return { allowed: false, reason: `Permission denied (fail-closed): ${absPath}` };
+    }
+    if (opts?.interruptCapable === false) {
+        return {
+            allowed: false,
+            reason: `Permission denied: ${absPath} is outside the workspace and interactive ` +
+                `permission prompts are not available in this execution context. ` +
+                `Add an allow rule for "${operation}" to the permissions config in dawn.config.ts.`,
+        };
+    }
+    // Interactive: emit LangGraph interrupt and await user decision.
+    const result = await emitPermissionInterrupt({
+        kind: "path",
+        operation,
+        path: absPath,
+        permissions,
+    });
+    if (result === "deny") {
+        return { allowed: false, reason: `Permission denied by user: ${absPath}` };
+    }
+    return { allowed: true };
+}
+export async function gateBashOp(permissions, command) {
+    if (!permissions)
+        return { allowed: true };
+    if (permissions.mode === "bypass")
+        return { allowed: true };
+    const decision = permissions.match("bash", command);
+    if (decision === "allow")
+        return { allowed: true };
+    if (decision === "deny") {
+        return { allowed: false, reason: `Permission denied by user: ${command}` };
+    }
+    if (permissions.mode === "non-interactive") {
+        return { allowed: false, reason: `Permission denied (fail-closed): ${command}` };
+    }
+    const result = await emitPermissionInterrupt({
+        kind: "command",
+        command,
+        permissions,
+    });
+    if (result === "deny") {
+        return { allowed: false, reason: `Permission denied by user: ${command}` };
+    }
+    return { allowed: true };
+}
+async function emitPermissionInterrupt(args) {
+    const interruptId = `perm-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+    const suggestedPattern = args.kind === "command"
+        ? suggestedCommandPattern(args.command ?? "")
+        : suggestedPathPattern(args.path ?? "");
+    const payload = {
+        interruptId,
+        type: "permission-request",
+        kind: args.kind,
+        detail: args.kind === "command"
+            ? { command: args.command ?? "", suggestedPattern }
+            : {
+                operation: args.operation ?? "readFile",
+                path: args.path ?? "",
+                suggestedPattern,
+            },
+    };
+    const decision = interrupt(payload);
+    if (decision === "deny")
+        return "deny";
+    if (decision === "always") {
+        const tool = args.kind === "command" ? "bash" : (args.operation ?? "readFile");
+        await args.permissions.addAllow(tool, suggestedPattern);
+    }
+    return "allow";
+}

package/dist/capabilities/types.d.ts

@@ -1,5 +1,5 @@
 import type { PermissionsStore } from "@dawn-ai/permissions";
-import type { DawnAgent } from "@dawn-ai/sdk";
+import type { DawnAgent, WorkspaceFs } from "@dawn-ai/sdk";
 import type { ExecBackend, FilesystemBackend } from "@dawn-ai/workspace";
 import type { ResolvedStateField, RouteManifest } from "../types.js";
 export interface CapabilityMarkerContext {
@@ -20,6 +20,7 @@ export interface DawnToolDefinition {
     readonly run: (input: unknown, context: {
         readonly middleware?: Readonly<Record<string, unknown>>;
         readonly signal: AbortSignal;
+        readonly fs?: WorkspaceFs;
     }) => Promise<unknown> | unknown;
     readonly schema?: unknown;
 }

package/dist/capabilities/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/capabilities/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEpE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,SAAS,CAAA;IAC1C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;QACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAA;KAC5B,CAAA;IACD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAA;IACvC,4IAA4I;IAC5I,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,CACZ,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;QACP,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QACvD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAC7B,KACE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;IACvC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,MAAM,CAAA;CACtE;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,sBAAsB,KAC1B,QAAQ,CAAC,uBAAuB,CAAC,GAAG,aAAa,CAAC,uBAAuB,CAAC,CAAA;CAChF;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAA;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAA;IACxD,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAA;IACxC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAA;CAC/D;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACzF,QAAQ,CAAC,IAAI,EAAE,CACb,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,uBAAuB,KAC7B,OAAO,CAAC,sBAAsB,CAAC,CAAA;CACrC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/capabilities/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEpE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,SAAS,CAAA;IAC1C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;QACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAA;KAC5B,CAAA;IACD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAA;IACvC,4IAA4I;IAC5I,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,CACZ,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;QACP,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QACvD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;QAI5B,QAAQ,CAAC,EAAE,CAAC,EAAE,WAAW,CAAA;KAC1B,KACE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;IACvC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,MAAM,CAAA;CACtE;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,sBAAsB,KAC1B,QAAQ,CAAC,uBAAuB,CAAC,GAAG,aAAa,CAAC,uBAAuB,CAAC,CAAA;CAChF;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAA;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAA;IACxD,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAA;IACxC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAA;CAC/D;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACzF,QAAQ,CAAC,IAAI,EAAE,CACb,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,uBAAuB,KAC7B,OAAO,CAAC,sBAAsB,CAAC,CAAA;CACrC"}

package/dist/capabilities/workspace-fs.d.ts

@@ -0,0 +1,22 @@
+import type { PermissionsStore } from "@dawn-ai/permissions";
+import type { WorkspaceFs } from "@dawn-ai/sdk";
+import type { FilesystemBackend } from "@dawn-ai/workspace";
+export interface CreateWorkspaceFsOptions {
+    readonly workspaceRoot: string;
+    readonly backend: FilesystemBackend;
+    readonly permissions: PermissionsStore | undefined;
+    readonly signal: AbortSignal;
+    /**
+     * Whether this execution context can surface the interactive LangGraph
+     * permission interrupt (true inside agent-route tool execution; false for
+     * workflow/graph entries, which run outside the graph).
+     */
+    readonly interruptCapable: boolean;
+}
+/**
+ * Build the author-facing sandboxed filesystem handle (`ctx.fs`). Paths are
+ * workspace-relative; every call runs the same permission gate as the
+ * agent-facing workspace tools.
+ */
+export declare function createWorkspaceFs(opts: CreateWorkspaceFsOptions): WorkspaceFs;
+//# sourceMappingURL=workspace-fs.d.ts.map

package/dist/capabilities/workspace-fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-fs.d.ts","sourceRoot":"","sources":["../../src/capabilities/workspace-fs.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAG3D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAA;IAClD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;CACnC;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,WAAW,CAoC7E"}

package/dist/capabilities/workspace-fs.js

@@ -0,0 +1,41 @@
+import { resolve } from "node:path";
+import { gatePathOp } from "./permission-gate.js";
+/**
+ * Build the author-facing sandboxed filesystem handle (`ctx.fs`). Paths are
+ * workspace-relative; every call runs the same permission gate as the
+ * agent-facing workspace tools.
+ */
+export function createWorkspaceFs(opts) {
+    const bctx = { signal: opts.signal, workspaceRoot: opts.workspaceRoot };
+    async function gate(operation, path) {
+        const absPath = resolve(opts.workspaceRoot, path);
+        const result = await gatePathOp(opts.permissions, operation, absPath, opts.workspaceRoot, {
+            interruptCapable: opts.interruptCapable,
+        });
+        if (!result.allowed)
+            throw new Error(result.reason);
+        return absPath;
+    }
+    return {
+        async readFile(path, readOpts) {
+            return opts.backend.readFile(await gate("readFile", path), bctx, readOpts);
+        },
+        async readBinaryFile(path, readOpts) {
+            // Check backend capability before gating so users are never prompted to
+            // approve a read that will immediately fail.
+            const { readBinaryFile } = opts.backend;
+            if (!readBinaryFile) {
+                throw new Error("The configured filesystem backend does not support binary reads (readBinaryFile). " +
+                    "localFilesystem supports it; custom backends must implement it.");
+            }
+            const absPath = await gate("readFile", path);
+            return readBinaryFile.call(opts.backend, absPath, bctx, readOpts);
+        },
+        async writeFile(path, content) {
+            return opts.backend.writeFile(await gate("writeFile", path), content, bctx);
+        },
+        async listDir(path = ".") {
+            return [...(await opts.backend.listDir(await gate("listDir", path), bctx))];
+        },
+    };
+}

package/dist/index.d.ts

@@ -8,6 +8,8 @@ export { createWorkspaceMarker } from "./capabilities/built-in/workspace.js";
 export type { AppliedContribution, ApplyResult, CapabilityError, CapabilityRegistry, } from "./capabilities/registry.js";
 export { applyCapabilities, createCapabilityRegistry } from "./capabilities/registry.js";
 export type { CapabilityContribution, CapabilityMarker, CapabilityMarkerContext, DawnToolDefinition, PromptFragment, StreamTransformer, StreamTransformerInput, StreamTransformerOutput, } from "./capabilities/types.js";
+export type { CreateWorkspaceFsOptions } from "./capabilities/workspace-fs.js";
+export { createWorkspaceFs } from "./capabilities/workspace-fs.js";
 export { loadDawnConfig } from "./config.js";
 export { discoverRoutes } from "./discovery/discover-routes.js";
 export { assertDawnRoutesDir, findDawnApp } from "./discovery/find-dawn-app.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAA;AAC3E,YAAY,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAA;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAA;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,YAAY,EACV,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,kBAAkB,GACnB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAA;AACxF,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC/E,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,GAChB,MAAM,+BAA+B,CAAA;AACtC,YAAY,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAA;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,YAAY,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAA;AAC7E,YAAY,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AACnF,YAAY,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,YAAY,EACV,UAAU,EACV,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,SAAS,EACT,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAA;AAC3E,YAAY,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAA;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAA;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,YAAY,EACV,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,kBAAkB,GACnB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAA;AACxF,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,yBAAyB,CAAA;AAChC,YAAY,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAA;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC/E,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,GAChB,MAAM,+BAA+B,CAAA;AACtC,YAAY,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAA;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,YAAY,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAA;AAC7E,YAAY,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AACnF,YAAY,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,YAAY,EACV,UAAU,EACV,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,SAAS,EACT,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -4,6 +4,7 @@ export { createSkillsMarker } from "./capabilities/built-in/skills.js";
 export { createSubagentsMarker } from "./capabilities/built-in/subagents.js";
 export { createWorkspaceMarker } from "./capabilities/built-in/workspace.js";
 export { applyCapabilities, createCapabilityRegistry } from "./capabilities/registry.js";
+export { createWorkspaceFs } from "./capabilities/workspace-fs.js";
 export { loadDawnConfig } from "./config.js";
 export { discoverRoutes } from "./discovery/discover-routes.js";
 export { assertDawnRoutesDir, findDawnApp } from "./discovery/find-dawn-app.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/core",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "private": false,
   "type": "module",
   "license": "MIT",
@@ -34,10 +34,10 @@
     "tsx": "^4.8.1",
     "typescript": "5.8.3",
     "zod": "^4.4.3",
-    "@dawn-ai/sdk": "0.6.0",
-    "@dawn-ai/workspace": "0.2.0",
-    "@dawn-ai/permissions": "0.1.8",
-    "@dawn-ai/sqlite-storage": "0.2.0"
+    "@dawn-ai/permissions": "0.8.0",
+    "@dawn-ai/sdk": "0.8.0",
+    "@dawn-ai/workspace": "0.8.0",
+    "@dawn-ai/sqlite-storage": "0.8.0"
   },
   "peerDependencies": {
     "@langchain/langgraph-checkpoint": "^1.0.2"
@@ -45,8 +45,8 @@
   "devDependencies": {
     "@langchain/langgraph-checkpoint": "^1.0.2",
     "@types/node": "25.6.0",
-    "@dawn-ai/config-typescript": "0.6.0",
-    "@dawn-ai/sqlite-storage": "0.2.0"
+    "@dawn-ai/config-typescript": "0.8.0",
+    "@dawn-ai/sqlite-storage": "0.8.0"
   },
   "scripts": {
     "build": "tsc -b tsconfig.json",