cardinal-ai 0.2.4 → 0.2.6

data/app/services/agent/runner.rb

@@ -30,6 +30,21 @@ module Agent
       - Finish with a concise report: what you did, what to check, any open questions.
     RULES
 
+    # Column shell access OFF: the agent can read, search, and edit — nothing
+    # else. Enforced by the CLI tool list, not just these words.
+    RESTRICTED_EXECUTE_RULES = <<~RULES.freeze
+      ## Rules
+      - You have FILE TOOLS ONLY: read, search, edit, write. You cannot run shell
+        commands or git — do not attempt to; Cardinal commits and pushes your edits for you.
+      - Work only inside this repository checkout (you are already on the card's branch).
+      - Stay strictly within the card's scope. Prefer the smallest reasonable interpretation and note assumptions.
+      - If something must be RUN to finish the job (tests, generators, installs), do the file
+        work, then list the exact commands in your final report for the user to run.
+      - If you are blocked on a decision only the user can make, output a single line starting with
+        "QUESTION:" followed by the question, then stop immediately. Do not guess on genuinely ambiguous choices.
+      - Finish with a concise report: what you did, what to check, any open questions.
+    RULES
+
     def self.start(run) = new(run).start
     def self.resume(run, message, approve: false) = new(run).resume(message, approve: approve)
 
@@ -59,7 +74,7 @@ module Agent
       begin_segment!
       if run.phase == "plan" && approve
         run.update!(phase: "execute")
-        stream_agent(prompt: "Your plan is approved — execute it now.\n\n#{EXECUTE_RULES}",
+        stream_agent(prompt: "Your plan is approved — execute it now.\n\n#{execute_rules}",
                      mode: "execute", resuming: true)
       elsif run.phase == "plan"
         stream_agent(prompt: "Feedback on your plan:\n\n#{message}\n\nRevise the plan accordingly, present it, and stop again for approval. Stay in read-only mode.",
@@ -106,6 +121,9 @@ module Agent
         cmd += ["--max-turns", "3", "--tools", ""]
       else
         cmd += ["--max-turns", (column.max_turns.presence || DEFAULT_EXECUTE_TURNS).to_s]
+        # Shell access off: restrict to file tools — the sandbox is the tool
+        # list itself, not a request in the prompt.
+        cmd += ["--tools", "Read,Glob,Grep,Edit,Write"] unless column.shell_access?
       end
       cmd += ["--model", column.model] if column.model.present?
       cmd += ["--effort", column.effort] if column.effort.present?
@@ -205,6 +223,11 @@ module Agent
 
     def conclude_execute(workspace, result)
       accumulate_usage(result)
+      # A shell-less agent cannot commit its own edits — do it for it before
+      # any commit counting or salvage below.
+      unless column.shell_access?
+        workspace.commit_all!("Card ##{card.number}: #{card.title.truncate(60)}\n\nCommitted by Cardinal for a shell-less agent.")
+      end
       unless result[:success]
         # Budget exhaustion isn't failure — park and offer to continue (§8).
         # The session survives; an answer resumes it with a fresh turn budget.
@@ -329,15 +352,19 @@ module Agent
         ## Brief
         #{card.description.presence || "(no description — infer scope from the title and conversation)"}
 
-        #{"## Brief from planning (authoritative — refined with the user)\n#{planning_brief}\n" if planning_brief}
+        #{repo_brief_section}#{"## Brief from planning (authoritative — refined with the user)\n#{planning_brief}\n" if planning_brief}
         ## Card conversation so far
         #{conversation_excerpt.presence || "(none)"}
 
         #{"## Column instructions\n#{column.instructions}\n" if column.instructions.present?}
-        #{EXECUTE_RULES}
+        #{execute_rules}
       PROMPT
     end
 
+    def execute_rules
+      column.shell_access? ? EXECUTE_RULES : RESTRICTED_EXECUTE_RULES
+    end
+
     def plan_prompt
       <<~PROMPT
         You are the dedicated worker agent for card ##{card.number} of the Cardinal board: "#{card.title}".
@@ -346,7 +373,7 @@ module Agent
         ## Brief
         #{card.description.presence || "(no description — infer scope from the title and conversation)"}
 
-        #{"## Brief from planning (authoritative — refined with the user)\n#{planning_brief}\n" if planning_brief}
+        #{repo_brief_section}#{"## Brief from planning (authoritative — refined with the user)\n#{planning_brief}\n" if planning_brief}
         ## Card conversation so far
         #{conversation_excerpt.presence || "(none)"}
 
@@ -363,6 +390,14 @@ module Agent
       PROMPT
     end
 
+    # The one-time repo deep dive (card #12), injected ahead of the planning
+    # brief so the agent starts oriented instead of re-exploring the tree each
+    # run. Empty string (not nil) when there's no brief, so the heredoc stays clean.
+    def repo_brief_section
+      brief = card.board.repo_brief.presence or return ""
+      "## Repo brief\n#{brief.strip}\n\n"
+    end
+
     # The planning assistant's distilled "Ready for execution" brief, if the
     # conversation produced one — the most load-bearing artifact of planning.
     def planning_brief

data/app/services/agent/workspace.rb

@@ -74,6 +74,15 @@ module Agent
         end
       end
 
+      # Shell-less agents (column shell access off) edit files but cannot run
+      # git — the runner commits on their behalf when a segment ends.
+      def commit_all!(message)
+        return false if git_out(path, "status", "--porcelain").strip.empty?
+        git!(path, "add", "-A")
+        git!(path, "commit", "--quiet", "-m", message)
+        true
+      end
+
       # How the runner should spawn the agent process for this workspace.
       def agent_spawn(cmd) = [cmd, { chdir: path.to_s }]
 

data/app/views/boards/brief.html.erb

@@ -0,0 +1,48 @@
+<%= turbo_frame_tag "modal", data: { turbo_permanent: true } do %>
+  <div class="modal-backdrop" data-controller="modal" data-action="click->modal#backdrop">
+    <div class="modal modal-sm">
+      <header class="modal-header">
+        <h1>🔍 Repo brief</h1>
+        <button type="button" class="modal-close" data-action="modal#close" title="Close (Esc)">✕</button>
+      </header>
+      <div class="modal-body">
+        <p class="hint">
+          A deep dive is a one-shot, read-only agent (Read/Glob/Grep only — it cannot change
+          anything) that maps this repo into the brief below. Every worker agent gets the brief
+          in its prompt, so runs skip re-exploring the codebase. It costs one bounded AI call
+          using the planning column's model.
+        </p>
+
+        <% if @board.brief? %>
+          <p class="brief-meta">
+            Generated <%= @board.brief_generated_at&.strftime("%b %-d, %H:%M") %>
+            from <code><%= @board.brief_sha&.first(7) %></code>
+            with <%= @board.brief_model %>
+            <% behind = @board.commits_behind_brief %>
+            <% if behind&.positive? %>
+              · <span class="brief-behind"><%= pluralize(behind, "commit") %> behind HEAD</span>
+            <% else %>
+              · current with HEAD
+            <% end %>
+          </p>
+
+          <div class="brief-content">
+            <%= render_markdown(@board.repo_brief.to_s) %>
+          </div>
+        <% else %>
+          <p class="brief-meta">No brief yet — run a deep dive from the topbar.</p>
+        <% end %>
+
+        <div class="card-edit-actions">
+          <%= button_to "↻ Regenerate brief", deep_dive_board_path(force: 1),
+                form: { data: { turbo_frame: "_top" } },
+                disabled: @board.brief_working? %>
+        </div>
+        <p class="hint">
+          Regenerating replaces the brief. When the brief already matches HEAD the deep dive
+          button won't re-run it — only this button forces a fresh dive.
+        </p>
+      </div>
+    </div>
+  </div>
+<% end %>

data/app/views/boards/edit.html.erb

@@ -0,0 +1,29 @@
+<%= turbo_frame_tag "modal", data: { turbo_permanent: true } do %>
+  <div class="modal-backdrop" data-controller="modal" data-action="click->modal#backdrop">
+    <div class="modal modal-sm" data-controller="autosave">
+      <header class="modal-header">
+        <h1>⚙ Board settings
+            <span class="autosave-status" data-autosave-target="status"></span></h1>
+        <button type="button" class="modal-close" data-action="modal#close" title="Close (Esc)">✕</button>
+      </header>
+      <div class="modal-body">
+        <div id="board-form-errors"></div>
+
+        <%= form_with model: @board, url: board_path(autosave: 1), class: "card-edit",
+              data: { autosave_target: "form" } do |f| %>
+          <label>Board name</label>
+          <%= f.text_field :name %>
+
+          <label>Default branch <%= info_tip("The branch agents fork card branches from and Done merges pull requests toward. Detected from the repo at first boot; fix it here if that guess was wrong.") %></label>
+          <%= f.text_field :default_branch, placeholder: "main" %>
+        <% end %>
+
+        <label>Repository</label>
+        <p class="locked-field"><code><%= @board.repo_url.presence || "(no remote)" %></code></p>
+
+        <label>Local checkout</label>
+        <p class="locked-field"><code><%= @board.local_path %></code></p>
+      </div>
+    </div>
+  </div>
+<% end %>

data/app/views/boards/show.html.erb

@@ -1,7 +1,42 @@
 <%= turbo_stream_from @board %>
 
 <header class="topbar">
-  <h1>Cardinal AI <span class="sep">▸</span> <%= @board.name %></h1>
+  <div class="topbar-left">
+    <h1>Cardinal AI <span class="sep">▸</span> <span id="board-name"><%= @board.name %></span></h1>
+    <%= link_to "⚙", edit_board_path, data: { turbo_frame: "modal" }, class: "gear",
+          title: "Board settings — name, default branch" %>
+    <%= button_to "⇣ Pull", pull_board_path, form_class: "pull-form",
+          form: { title: "git pull --ff-only in #{@board.local_path} — fetch what Done has merged" },
+          data: { turbo_submits_with: "⇣ Pulling…" }, class: "theme-toggle" %>
+    <%# Repo deep dive (card #12): one-shot read-only mapping of the repo, stored
+        as a brief and injected into worker prompts. The button greys→reds as the
+        brief falls behind HEAD; a stale brief over-anchors, so it nags at 10+.
+        Once a brief exists the button opens it for inspection (the modal holds
+        the Regenerate action) — a fresh brief is never silently re-run. %>
+    <% behind = @board.commits_behind_brief %>
+    <% if @board.brief_working? %>
+      <button type="button" class="deep-dive working" disabled>
+        <span class="pulse-dot"></span> Deep dive · working…
+      </button>
+    <% elsif @board.brief? %>
+      <%= link_to brief_board_path, data: { turbo_frame: "modal" },
+            class: "deep-dive#{' stale-critical' if @board.brief_stale?}",
+            style: "color: #{@board.brief_staleness_color}; border-color: #{@board.brief_staleness_color}",
+            title: "Repo brief from #{@board.brief_sha&.first(7)} · #{@board.brief_generated_at&.to_date} — click to inspect" do %>
+        <% if behind&.positive? %>
+          🔍 Repo brief · <%= behind %> commit<%= "s" if behind != 1 %> behind
+        <% else %>
+          🔍 Repo brief
+        <% end %>
+      <% end %>
+    <% else %>
+      <%= button_to deep_dive_board_path, class: "deep-dive",
+            title: "Map this repo into a brief agents reuse — saves exploration on every run" do %>
+        🔍 Deep dive
+      <% end %>
+    <% end %>
+    <span id="repo-pull-status"></span>
+  </div>
   <div class="topbar-right">
     <button type="button" class="theme-toggle"
             data-controller="theme" data-action="theme#toggle">☀ Light</button>

data/app/views/cards/_card.html.erb

@@ -36,10 +36,10 @@
       <% end %>
       <% if card.parent_id %><span class="chip">↑ sub</span><% end %>
       <% if card.children.any? %><span class="chip">↳ <%= card.children.where(status: %w[done archived]).count %>/<%= card.children.count %></span><% end %>
-      <% if card.branch_name && card.pr_url.blank? %><span class="chip branch">🌿 <%= card.branch_name.delete_prefix("cardinal/") %></span><% end %>
+      <% if card.branch_name.present? && card.pr_url.blank? %><span class="chip branch">🌿 <%= card.branch_name.delete_prefix("cardinal/") %></span><% end %>
     </div>
   <% end %>
-  <% if card.pr_url %>
+  <% if card.pr_url.present? %>
     <a class="card-footer" href="<%= card.pr_url %>" target="_blank" rel="noopener" title="Open the pull request on GitHub">
       <span class="footer-left"><%# future: Asana / Trello / linked-ticket slot %></span>
       <span class="footer-pr">GitHub #<%= card.pr_url[%r{/pull/(\d+)}, 1] %> ↗</span>

data/app/views/cards/_detail.html.erb

@@ -8,7 +8,7 @@
           <span class="card-number-sub" title="Card number — how branches, PRs, and other cards refer to this card">#<%= @card.number %></span>
         </h1>
         <div class="modal-header-right">
-          <% if @card.branch_name %>
+          <% if @card.branch_name.present? %>
             <span class="git-line">
               <span class="branch-base"><%= @card.board.default_branch %></span>
               <span class="git-arrow">→</span>
@@ -17,7 +17,7 @@
                 <button type="button" class="copy-btn" data-clipboard-target="button"
                         data-action="clipboard#copy" title="Copy branch name">⧉</button>
               </span>
-              <% if @card.pr_url %>
+              <% if @card.pr_url.present? %>
                 <span class="git-arrow">→</span>
                 <%= link_to "##{@card.pr_url[%r{/pull/(\d+)}, 1]}", @card.pr_url, target: "_blank", rel: "noopener", class: "pr-link" %>
                 <% if @card.pr_state.present? %><span class="pr-state">(<%= @card.pr_state %>)</span><% end %>
@@ -113,7 +113,7 @@
 
           <% if @card.column.review? %>
             <h3>Review</h3>
-            <% if @card.pr_url %>
+            <% if @card.pr_url.present? %>
               <%= link_to "View Pull Request", @card.pr_url, target: "_blank", rel: "noopener", class: "pr-view-btn" %>
             <% end %>
             <% if @card.in_review? %>
@@ -168,7 +168,7 @@
                 </li>
               <% end %>
             </ul>
-            <% if @card.pr_url %>
+            <% if @card.pr_url.present? %>
               <p>🌿 <%= link_to "View pull request", @card.pr_url, target: "_blank" %><%= " (#{@card.pr_state})" if @card.pr_state.present? %></p>
             <% end %>
           <% else %>

data/app/views/columns/_column.html.erb

@@ -22,4 +22,15 @@
       <%= render "cards/card", card: card %>
     <% end %>
   </div>
+  <% rows = column.footer_rows %>
+  <% if rows.any? %>
+    <footer class="column-footer">
+      <% rows.each do |row| %>
+        <div class="footer-row">
+          <span class="footer-label"><%= row[:label] %></span>
+          <span class="footer-value"><%= row[:value] %></span>
+        </div>
+      <% end %>
+    </footer>
+  <% end %>
 </section>

data/app/views/columns/edit.html.erb

@@ -105,6 +105,14 @@
               <%= info_tip("The agent's first pass is read-only: it explores and proposes a plan, then waits. You approve with one click or reply to redirect. Your main safety rail.") %>
             </label>
 
+            <% if @column.execution? %>
+              <label class="check-row">
+                <%= f.check_box :shell, checked: @column.shell_access? %>
+                Shell access — the agent may run commands (tests, builds, git)
+                <%= info_tip("Unchecked: the agent gets file tools only (read, search, edit, write) and physically cannot execute anything — Cardinal commits and pushes its edits for it. Safer, but it can't run your tests or generators, and the agent process runs on this machine either way.") %>
+              </label>
+            <% end %>
+
             </div>
 
             <label>On-entry rules <%= info_tip("What happens when a card lands in this column, in plain English — e.g. \"start the worker agent\" or \"have an AI suggest tags and a better title\". Cardinal compiles it to rule actions when you save. Blank = the archetype's default behavior shown below.") %></label>
@@ -125,6 +133,11 @@
             </details>
           </div>
           <% end %>
+
+          <label>Footer <%= info_tip("A summary strip under the cards. One row per line as \"Label | compute\", where compute is sum_cost (total run cost), sum_tokens (total input+output tokens), count_cards, or blank for a static label. Example: \"Total cost: | sum_cost\".") %></label>
+          <%= f.text_area :footer_text, rows: 3, class: "mono",
+                value: footer_config_text(@column),
+                placeholder: "Total cost: | sum_cost" %>
         <% end %>
 
         <details class="advanced-rules panel-advanced">

data/config/application.rb

@@ -22,7 +22,7 @@ require "securerandom"
 
 if ENV["CARDINAL_GEM"] == "1"
   # Installed-gem mode: no Bundler — load what Bundler.require would have.
-  %w[propshaft importmap-rails turbo-rails stimulus-rails redcarpet sqlite3].each { |g| require g }
+  %w[propshaft importmap-rails turbo-rails stimulus-rails redcarpet sqlite3 solid_queue solid_cable].each { |g| require g }
 else
   # Require the gems listed in Gemfile, including any gems
   # you've limited to :test, :development, or :production.

data/config/cable.yml

@@ -1,5 +1,13 @@
+# Jobs run in SolidQueue worker processes (forked by the puma plugin), so
+# Turbo broadcasts cross process boundaries — the async adapter can't carry
+# them. SolidCable (SQLite-backed pubsub) works in dev and prod alike.
 development:
-  adapter: async
+  adapter: solid_cable
+  connects_to:
+    database:
+      writing: cable
+  polling_interval: 0.1.seconds
+  message_retention: 1.day
 
 test:
   adapter: test

data/config/database.yml

@@ -6,8 +6,17 @@ default: &default
   timeout: 5000
 
 development:
-  <<: *default
-  database: <%= ENV.fetch("CARDINAL_DATA_DIR", ".cardinal") %>/cardinal.db
+  primary:
+    <<: *default
+    database: <%= ENV.fetch("CARDINAL_DATA_DIR", ".cardinal") %>/cardinal.db
+  queue:
+    <<: *default
+    database: <%= ENV.fetch("CARDINAL_DATA_DIR", ".cardinal") %>/queue.sqlite3
+    migrations_paths: db/queue_migrate
+  cable:
+    <<: *default
+    database: <%= ENV.fetch("CARDINAL_DATA_DIR", ".cardinal") %>/cable.sqlite3
+    migrations_paths: db/cable_migrate
 
 test:
   <<: *default

data/config/environments/development.rb

@@ -1,6 +1,11 @@
 require "active_support/core_ext/integer/time"
 
 Rails.application.configure do
+  # Durable jobs even in dev (dogfooding runs real agent work): SolidQueue in
+  # its own SQLite db; the puma plugin supervises workers — no extra service.
+  config.active_job.queue_adapter = :solid_queue
+  config.solid_queue.connects_to = { database: { writing: :queue } }
+
   # Settings specified here will take precedence over those in config/application.rb.
 
   # Make code changes take effect immediately without server restart.

data/config/environments/production.rb

@@ -50,7 +50,8 @@ Rails.application.configure do
   # config.cache_store = :mem_cache_store
 
   # Replace the default in-process and non-durable queuing backend for Active Job.
-  # config.active_job.queue_adapter = :resque
+  config.active_job.queue_adapter = :solid_queue
+  config.solid_queue.connects_to = { database: { writing: :queue } }
 
   # Ignore bad email addresses and do not raise email delivery errors.
   # Set this to true and configure the email server for immediate delivery to raise delivery errors.

data/config/puma.rb

@@ -35,7 +35,7 @@ port ENV.fetch("PORT", 3000)
 plugin :tmp_restart
 
 # Run the Solid Queue supervisor inside of Puma for single-server deployments.
-plugin :solid_queue if ENV["SOLID_QUEUE_IN_PUMA"]
+plugin :solid_queue if ENV.fetch("SOLID_QUEUE_IN_PUMA", "1") == "1" && !ENV["RAILS_ENV"].to_s.start_with?("test")
 
 # Specify the PID file. Defaults to tmp/pids/server.pid in development.
 # In other environments, only set the PID file if requested.

data/config/queue.yml

@@ -0,0 +1,18 @@
+default: &default
+  dispatchers:
+    - polling_interval: 1
+      batch_size: 500
+  workers:
+    - queues: "*"
+      threads: 3
+      processes: <%= ENV.fetch("JOB_CONCURRENCY", 1) %>
+      polling_interval: 0.1
+
+development:
+  <<: *default
+
+test:
+  <<: *default
+
+production:
+  <<: *default

data/config/recurring.yml

@@ -0,0 +1,15 @@
+# examples:
+#   periodic_cleanup:
+#     class: CleanSoftDeletedRecordsJob
+#     queue: background
+#     args: [ 1000, { batch_size: 500 } ]
+#     schedule: every hour
+#   periodic_cleanup_with_command:
+#     command: "SoftDeletedRecord.due.delete_all"
+#     priority: 2
+#     schedule: at 5am every day
+
+production:
+  clear_solid_queue_finished_jobs:
+    command: "SolidQueue::Job.clear_finished_in_batches(sleep_between_batches: 0.3)"
+    schedule: every hour at minute 12

data/config/routes.rb

@@ -1,7 +1,11 @@
 Rails.application.routes.draw do
   root "boards#show"
 
-  resource :board, only: :show
+  resource :board, only: [:show, :edit, :update] do
+    post :deep_dive
+    post :pull
+    get :brief
+  end
   resources :cards, only: [:new, :create, :show, :update, :destroy] do
     member do
       patch :move

data/db/cable_schema.rb

@@ -0,0 +1,11 @@
+ActiveRecord::Schema[7.1].define(version: 1) do
+  create_table "solid_cable_messages", force: :cascade do |t|
+    t.binary "channel", limit: 1024, null: false
+    t.binary "payload", limit: 536870912, null: false
+    t.datetime "created_at", null: false
+    t.integer "channel_hash", limit: 8, null: false
+    t.index ["channel"], name: "index_solid_cable_messages_on_channel"
+    t.index ["channel_hash"], name: "index_solid_cable_messages_on_channel_hash"
+    t.index ["created_at"], name: "index_solid_cable_messages_on_created_at"
+  end
+end

data/db/migrate/20260704120000_add_repo_brief_to_boards.rb

@@ -0,0 +1,8 @@
+class AddRepoBriefToBoards < ActiveRecord::Migration[8.1]
+  def change
+    add_column :boards, :brief_sha, :string
+    add_column :boards, :brief_generated_at, :datetime
+    add_column :boards, :brief_model, :string
+    add_column :boards, :brief_status, :string
+  end
+end

data/db/queue_schema.rb

@@ -0,0 +1,129 @@
+ActiveRecord::Schema[7.1].define(version: 1) do
+  create_table "solid_queue_blocked_executions", force: :cascade do |t|
+    t.bigint "job_id", null: false
+    t.string "queue_name", null: false
+    t.integer "priority", default: 0, null: false
+    t.string "concurrency_key", null: false
+    t.datetime "expires_at", null: false
+    t.datetime "created_at", null: false
+    t.index [ "concurrency_key", "priority", "job_id" ], name: "index_solid_queue_blocked_executions_for_release"
+    t.index [ "expires_at", "concurrency_key" ], name: "index_solid_queue_blocked_executions_for_maintenance"
+    t.index [ "job_id" ], name: "index_solid_queue_blocked_executions_on_job_id", unique: true
+  end
+
+  create_table "solid_queue_claimed_executions", force: :cascade do |t|
+    t.bigint "job_id", null: false
+    t.bigint "process_id"
+    t.datetime "created_at", null: false
+    t.index [ "job_id" ], name: "index_solid_queue_claimed_executions_on_job_id", unique: true
+    t.index [ "process_id", "job_id" ], name: "index_solid_queue_claimed_executions_on_process_id_and_job_id"
+  end
+
+  create_table "solid_queue_failed_executions", force: :cascade do |t|
+    t.bigint "job_id", null: false
+    t.text "error"
+    t.datetime "created_at", null: false
+    t.index [ "job_id" ], name: "index_solid_queue_failed_executions_on_job_id", unique: true
+  end
+
+  create_table "solid_queue_jobs", force: :cascade do |t|
+    t.string "queue_name", null: false
+    t.string "class_name", null: false
+    t.text "arguments"
+    t.integer "priority", default: 0, null: false
+    t.string "active_job_id"
+    t.datetime "scheduled_at"
+    t.datetime "finished_at"
+    t.string "concurrency_key"
+    t.datetime "created_at", null: false
+    t.datetime "updated_at", null: false
+    t.index [ "active_job_id" ], name: "index_solid_queue_jobs_on_active_job_id"
+    t.index [ "class_name" ], name: "index_solid_queue_jobs_on_class_name"
+    t.index [ "finished_at" ], name: "index_solid_queue_jobs_on_finished_at"
+    t.index [ "queue_name", "finished_at" ], name: "index_solid_queue_jobs_for_filtering"
+    t.index [ "scheduled_at", "finished_at" ], name: "index_solid_queue_jobs_for_alerting"
+  end
+
+  create_table "solid_queue_pauses", force: :cascade do |t|
+    t.string "queue_name", null: false
+    t.datetime "created_at", null: false
+    t.index [ "queue_name" ], name: "index_solid_queue_pauses_on_queue_name", unique: true
+  end
+
+  create_table "solid_queue_processes", force: :cascade do |t|
+    t.string "kind", null: false
+    t.datetime "last_heartbeat_at", null: false
+    t.bigint "supervisor_id"
+    t.integer "pid", null: false
+    t.string "hostname"
+    t.text "metadata"
+    t.datetime "created_at", null: false
+    t.string "name", null: false
+    t.index [ "last_heartbeat_at" ], name: "index_solid_queue_processes_on_last_heartbeat_at"
+    t.index [ "name", "supervisor_id" ], name: "index_solid_queue_processes_on_name_and_supervisor_id", unique: true
+    t.index [ "supervisor_id" ], name: "index_solid_queue_processes_on_supervisor_id"
+  end
+
+  create_table "solid_queue_ready_executions", force: :cascade do |t|
+    t.bigint "job_id", null: false
+    t.string "queue_name", null: false
+    t.integer "priority", default: 0, null: false
+    t.datetime "created_at", null: false
+    t.index [ "job_id" ], name: "index_solid_queue_ready_executions_on_job_id", unique: true
+    t.index [ "priority", "job_id" ], name: "index_solid_queue_poll_all"
+    t.index [ "queue_name", "priority", "job_id" ], name: "index_solid_queue_poll_by_queue"
+  end
+
+  create_table "solid_queue_recurring_executions", force: :cascade do |t|
+    t.bigint "job_id", null: false
+    t.string "task_key", null: false
+    t.datetime "run_at", null: false
+    t.datetime "created_at", null: false
+    t.index [ "job_id" ], name: "index_solid_queue_recurring_executions_on_job_id", unique: true
+    t.index [ "task_key", "run_at" ], name: "index_solid_queue_recurring_executions_on_task_key_and_run_at", unique: true
+  end
+
+  create_table "solid_queue_recurring_tasks", force: :cascade do |t|
+    t.string "key", null: false
+    t.string "schedule", null: false
+    t.string "command", limit: 2048
+    t.string "class_name"
+    t.text "arguments"
+    t.string "queue_name"
+    t.integer "priority", default: 0
+    t.boolean "static", default: true, null: false
+    t.text "description"
+    t.datetime "created_at", null: false
+    t.datetime "updated_at", null: false
+    t.index [ "key" ], name: "index_solid_queue_recurring_tasks_on_key", unique: true
+    t.index [ "static" ], name: "index_solid_queue_recurring_tasks_on_static"
+  end
+
+  create_table "solid_queue_scheduled_executions", force: :cascade do |t|
+    t.bigint "job_id", null: false
+    t.string "queue_name", null: false
+    t.integer "priority", default: 0, null: false
+    t.datetime "scheduled_at", null: false
+    t.datetime "created_at", null: false
+    t.index [ "job_id" ], name: "index_solid_queue_scheduled_executions_on_job_id", unique: true
+    t.index [ "scheduled_at", "priority", "job_id" ], name: "index_solid_queue_dispatch_all"
+  end
+
+  create_table "solid_queue_semaphores", force: :cascade do |t|
+    t.string "key", null: false
+    t.integer "value", default: 1, null: false
+    t.datetime "expires_at", null: false
+    t.datetime "created_at", null: false
+    t.datetime "updated_at", null: false
+    t.index [ "expires_at" ], name: "index_solid_queue_semaphores_on_expires_at"
+    t.index [ "key", "value" ], name: "index_solid_queue_semaphores_on_key_and_value"
+    t.index [ "key" ], name: "index_solid_queue_semaphores_on_key", unique: true
+  end
+
+  add_foreign_key "solid_queue_blocked_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade
+  add_foreign_key "solid_queue_claimed_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade
+  add_foreign_key "solid_queue_failed_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade
+  add_foreign_key "solid_queue_ready_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade
+  add_foreign_key "solid_queue_recurring_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade
+  add_foreign_key "solid_queue_scheduled_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade
+end

data/exe/cardinal

@@ -106,6 +106,9 @@ end
 # scaffolding inside the engine/gem directory — read-only for sudo installs).
 ENV["PIDFILE"] = File.join(TARGET, ".cardinal", "tmp", "server.pid")
 ENV["CARDINAL_SWEEPER"] = "1" # the sweeper initializer keys off Rails::Server otherwise
+# Localhost only: the board drives your logged-in gh/claude sessions, so it
+# must not be reachable by others on the network. CARDINAL_HOST=0.0.0.0
+# deliberately exposes it (e.g. to browse from a phone on your LAN).
 exec(RbConfig.ruby, "-S", "puma",
-     "-b", "tcp://0.0.0.0:#{ENV["PORT"]}",
+     "-b", "tcp://#{ENV.fetch("CARDINAL_HOST", "127.0.0.1")}:#{ENV["PORT"]}",
      File.join(HOME_DIR, "config.ru"))

data/lib/cardinal/version.rb

@@ -1,3 +1,3 @@
 module Cardinal
-  VERSION = "0.2.4"
+  VERSION = "0.2.6"
 end