cardinal-ai 0.2.18 → 0.2.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e3382a025a7d0f1ce58e7a8a9f64a6a36705a2e27f2e9e9acd116dfa0c8955e8
-  data.tar.gz: 13824a0d4d5680a880151780e33b611e16c2299f9c7465bebbf47af5bf32718b
+  metadata.gz: 0a2b2e4142b5c9c54b8d320d6e36c17832c2bfb69996fce034be52ee2b4849fe
+  data.tar.gz: 266f7d5ce81b724643c600582ce744ed48cb8bc24606d98c3b16bc21b515b673
 SHA512:
-  metadata.gz: '098257f74f2a65053e822330315ce564e44fddef11ece7cb830364f8f1f8810a8161ae98a3cf439a35d54918b4bcca4670f97ac5f8ced351ed4e0cd8ae724ae2'
-  data.tar.gz: 3051666fee426647550bf6abab8abd8d36f79ff8998ca90e03eb0df85b318044aa31389487270bba5a2340e1b48be846cde8253ef40e49e1cf23d0ba4b79b927
+  metadata.gz: 94358996801e25b84e34564156a362d3963bf4941c0d195215cf19aee86fd510f4d22ee1ecd3adf4500d2846c811f7df653d808cbceca8c028c38e678e4a3337
+  data.tar.gz: 86deb643dae9b203eeb462e0c62c30c3bb7aa85b648b89ef7c53b8436f3a14af013fa231384e1e5f28a74aa0be0e9bab410b22e820fd500af4fd4c4e0ec5ff42

data/app/controllers/boards_controller.rb

@@ -29,8 +29,9 @@ class BoardsController < ApplicationController
 
   def update
     board = Board.first!
-    attrs = params.require(:board).permit(:name, :default_branch, archive_accepts_from: [])
+    attrs = params.require(:board).permit(:name, :default_branch, :permission_bypass, archive_accepts_from: [])
     board.archive_accepts_from = attrs[:archive_accepts_from].to_a.map(&:to_s).reject(&:blank?) if attrs.key?(:archive_accepts_from)
+    board.permission_bypass = (attrs[:permission_bypass] == "1") if attrs.key?(:permission_bypass)
     board.update!(
       name: attrs[:name].presence || board.name,
       default_branch: attrs[:default_branch].presence || board.default_branch

data/app/controllers/cards_controller.rb

@@ -212,7 +212,8 @@ class CardsController < ApplicationController
   end
 
   def card_params
-    attrs = params.require(:card).permit(:title, :description, :tags, :branch_name, :pr_url, :summary, :compact, :model, :effort)
+    attrs = params.require(:card).permit(:title, :description, :tags, :branch_name, :pr_url, :summary, :compact, :model, :effort, :permission_mode)
+    attrs[:permission_mode] = attrs[:permission_mode].presence_in(Card::PERMISSION_MODES) if attrs.key?(:permission_mode)
     attrs[:tags] = attrs[:tags].to_s.split(",").map(&:strip).reject(&:blank?) if attrs.key?(:tags)
     # Blank model/effort from the "Use column default" option mean "no override" —
     # store nil so effective_* falls back to the column (card #33).

data/app/models/board.rb

@@ -55,7 +55,15 @@ class Board < ApplicationRecord
   # may be DRAGGED onto the topbar 🗄 (explicit-only, like column rails —
   # empty means the archive is not a drop target). The Advanced-panel archive
   # button is always available; this governs only the drag affordance.
-  store_accessor :settings, :archive_accepts_from
+  store_accessor :settings, :archive_accepts_from, :permission_bypass
+
+  # Board default for worker autonomy (§ permissions): true (default) lets
+  # agents act without asking — full shell inside their workspace. false
+  # restricts workers to file tools (read/search/edit/write; Cardinal commits
+  # for them) unless a card explicitly overrides back to full autonomy.
+  def permission_bypass?
+    settings["permission_bypass"] != false
+  end
 
   def archive_accepts?(column)
     Array(archive_accepts_from).map(&:to_s).include?(column.id.to_s)

data/app/models/card.rb

@@ -92,6 +92,18 @@ class Card < ApplicationRecord
   # default", so existing cards are unaffected. Read fresh at every segment
   # spawn (start, restart, resume) by the runner and the planning assistant, so
   # a change takes effect on the next segment — never on an already-running one.
+  # Permission override (nil = board default): "bypass" forces full autonomy
+  # for this card, "ask" forces the restricted file-tools mode.
+  PERMISSION_MODES = ["bypass", "ask"].freeze
+
+  def effective_permission_bypass?
+    case permission_mode
+    when "bypass" then true
+    when "ask"    then false
+    else board.permission_bypass?
+    end
+  end
+
   def effective_model  = model.presence || column.model
   def effective_effort = effort.presence || column.effort
 

data/app/services/agent/runner.rb

@@ -125,9 +125,10 @@ module Agent
         cmd += ["--max-turns", "3", "--tools", ""]
       else
         cmd += ["--max-turns", (column.max_turns.presence || DEFAULT_EXECUTE_TURNS).to_s]
-        # Shell access off: restrict to file tools — the sandbox is the tool
-        # list itself, not a request in the prompt.
-        cmd += ["--tools", "Read,Glob,Grep,Edit,Write"] unless column.shell_access?
+        # Restricted agents (column shell toggle, or board/card permission
+        # setting) get file tools only — the sandbox is the tool list itself,
+        # not a request in the prompt.
+        cmd += ["--tools", "Read,Glob,Grep,Edit,Write"] if restricted_tools?
       end
       # Effective (possibly card-overridden) config, read fresh here at spawn
       # time — so a mid-run override takes effect on the next segment (start,
@@ -232,7 +233,7 @@ module Agent
       accumulate_usage(result)
       # A shell-less agent cannot commit its own edits — do it for it before
       # any commit counting or salvage below.
-      unless column.shell_access?
+      if restricted_tools?
         workspace.commit_all!("Card ##{card.number}: #{card.title.truncate(60)}\n\nCommitted by Cardinal for a shell-less agent.")
       end
       unless result[:success]
@@ -380,7 +381,14 @@ module Agent
     end
 
     def execute_rules
-      column.shell_access? ? EXECUTE_RULES : RESTRICTED_EXECUTE_RULES
+      restricted_tools? ? RESTRICTED_EXECUTE_RULES : EXECUTE_RULES
+    end
+
+    # Three voices, one verdict: the column's shell toggle, the board's
+    # permission default, and the card's own override (which beats the board
+    # but never re-opens a column that turned shell off).
+    def restricted_tools?
+      !column.shell_access? || !card.effective_permission_bypass?
     end
 
     def plan_prompt

data/app/views/boards/edit.html.erb

@@ -10,12 +10,18 @@
         <div id="board-form-errors"></div>
 
         <%= form_with model: @board, url: board_path(autosave: 1), class: "card-edit",
-              data: { autosave_target: "form" } do |f| %>
+              data: { autosave_target: "form", action: "input->autosave#save change->autosave#save" } do |f| %>
           <label>Board name</label>
           <%= f.text_field :name %>
 
           <label>Default branch <%= info_tip("The branch agents fork card branches from and Done merges pull requests toward. Detected from the repo at first boot; fix it here if that guess was wrong.") %></label>
           <%= f.text_field :default_branch, placeholder: "main" %>
+
+          <label class="check-row">
+            <%= f.check_box :permission_bypass, { checked: @board.permission_bypass? }, "1", "0" %>
+            Agents act without asking (full autonomy)
+            <%= info_tip("On (default): worker agents run shell commands — tests, builds, git — inside their workspace without permission prompts. Off: workers get file tools only (read, search, edit, write); they cannot execute anything, and Cardinal commits their edits for them. Each card can override this in its 🧠 panel; a column whose Shell access is off stays restricted regardless.") %>
+          </label>
         <% end %>
 
         <label>Repository</label>

data/app/views/cards/_detail.html.erb

@@ -176,7 +176,17 @@
                     <%= f.select :effort, [["Use column default", ""], "low", "medium", "high", "max"], selected: @card.effort %>
                   </div>
                 </div>
-                <p class="hint">Overrides this card's model and effort. Only model + effort — budget, timeout, and concurrency are column policy. Takes effect on the next run segment (a run already going finishes on the model it started with).</p>
+                <div class="field-row">
+                  <div>
+                    <label>Permissions <%= info_tip("Overrides the board's autonomy default for THIS card. Full autonomy: the worker runs shell commands without asking. Restricted: file tools only — it cannot execute anything, and Cardinal commits its edits. A column whose Shell access is off stays restricted regardless.") %></label>
+                    <%= f.select :permission_mode,
+                          [["Board default (#{@card.board.permission_bypass? ? "full autonomy" : "restricted"})", ""],
+                           ["Full autonomy — acts without asking", "bypass"],
+                           ["Restricted — file tools only", "ask"]],
+                          selected: @card.permission_mode.to_s %>
+                  </div>
+                </div>
+                <p class="hint">Overrides this card's model, effort, and permissions. Budget, timeout, and concurrency are column policy. Takes effect on the next run segment (a run already going finishes on the settings it started with).</p>
               </details>
             <% end %>
           </div>

data/db/migrate/20260706002904_add_permission_mode_to_cards.rb

@@ -0,0 +1,5 @@
+class AddPermissionModeToCards < ActiveRecord::Migration[8.1]
+  def change
+    add_column :cards, :permission_mode, :string
+  end
+end

data/lib/cardinal/version.rb

@@ -1,3 +1,3 @@
 module Cardinal
-  VERSION = "0.2.18"
+  VERSION = "0.2.19"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cardinal-ai
 version: !ruby/object:Gem::Version
-  version: 0.2.18
+  version: 0.2.19
 platform: ruby
 authors:
 - Jason Ellis
@@ -280,6 +280,7 @@ files:
 - db/migrate/20260705120001_add_issue_number_to_cards.rb
 - db/migrate/20260705193935_add_settings_to_boards.rb
 - db/migrate/20260705225451_add_asana_url_to_cards.rb
+- db/migrate/20260706002904_add_permission_mode_to_cards.rb
 - db/queue_schema.rb
 - db/seeds.rb
 - docker/agent/Dockerfile