Module: Rubino::Workspace
- Defined in:
- lib/rubino/workspace.rb
Overview
The set of directory roots the agent is allowed to work in.
Historically rubino had exactly ONE root, resolved at launch from terminal.cwd or Dir.pwd, and every tool re-derived it. This module turns that single root into an ordered SET of roots: the primary (launch) root plus any directories added via ‘–add-dir` / `/add-dir`. The default — no extra dirs — is byte-identical to the old single-root behaviour.
Modelled on Claude Code’s ‘–add-dir`: extra roots widen the write/edit sandbox (see Tools::Base#within_workspace?) so the agent can touch files under any allowed root, e.g. a service and its client library at once.
Class Method Summary collapse
-
.add(dir) ⇒ Object
Adds an extra allowed root.
-
.canonical_roots ⇒ Object
Canonical (realpath, symlinks resolved) form of every root — what the sandbox compares against.
-
.primary_root ⇒ Object
The primary root: terminal.cwd when set, else the process cwd.
-
.reset! ⇒ Object
Test/teardown hook: drop all added roots (the primary is always derived live from config/cwd, so it can’t be reset here).
-
.roots ⇒ Object
Every allowed root: the primary first, then each added dir, de-duped on canonical path so re-adding the launch dir (or the same dir twice) is a no-op.
Class Method Details
.add(dir) ⇒ Object
Adds an extra allowed root. Returns the canonical path on success, or raises ArgumentError with a human-readable reason when the dir doesn’t exist / isn’t a readable directory. realpath-resolves so a symlinked add-dir lands on its true destination (and matches the sandbox check).
64 65 66 67 68 69 70 71 72 73 74 |
# File 'lib/rubino/workspace.rb', line 64 def add(dir) = File.(dir.to_s) raise ArgumentError, "no such directory: #{dir}" unless File.directory?() raise ArgumentError, "not readable: #{dir}" unless File.readable?() real = File.realpath() @mutex.synchronize do @added << real unless @added.include?(real) || canonical(primary_root) == real end real end |
.canonical_roots ⇒ Object
Canonical (realpath, symlinks resolved) form of every root — what the sandbox compares against.
56 57 58 |
# File 'lib/rubino/workspace.rb', line 56 def canonical_roots roots.filter_map { |dir| canonical(dir) } end |
.primary_root ⇒ Object
The primary root: terminal.cwd when set, else the process cwd. This is the same rule Tools::Base#workspace_root has always used, kept as the single source of truth so the @-picker, shell/test cwd, file API and attachment downloader all agree on “the” root.
terminal.cwd MUST resolve to a String path: a malformed config (e.g. a YAML ‘terminal: { cwd: { … } }` nested mapping) would otherwise hand a Hash to File.expand_path downstream, which raises “no implicit conversion of Hash into String” deep in a tool’s #call — masking the real outcome (e.g. a write-denylist refusal) behind an opaque error. Anything that isn’t a non-empty String degrades to the process cwd.
31 32 33 34 |
# File 'lib/rubino/workspace.rb', line 31 def primary_root configured = Rubino.configuration&.dig("terminal", "cwd") configured.is_a?(String) && !configured.empty? ? configured : Dir.pwd end |
.reset! ⇒ Object
Test/teardown hook: drop all added roots (the primary is always derived live from config/cwd, so it can’t be reset here).
78 79 80 |
# File 'lib/rubino/workspace.rb', line 78 def reset! @mutex.synchronize { @added = [] } end |
.roots ⇒ Object
Every allowed root: the primary first, then each added dir, de-duped on canonical path so re-adding the launch dir (or the same dir twice) is a no-op. Returns plain strings.
39 40 41 42 43 44 45 46 47 48 49 50 51 52 |
# File 'lib/rubino/workspace.rb', line 39 def roots @mutex.synchronize do ordered = [primary_root, *@added] seen = Set.new ordered.filter_map do |dir| real = canonical(dir) next unless real next if seen.include?(real) seen << real dir end end end |