llama_bot_rails 0.1.11 → 0.1.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ab8f2052c6695abc545b10879f23262d1c444011c28aa60e035fe94e12e62e35
-  data.tar.gz: 21532f0afe7f6bf345da06b89e0e472d6e219eba9a3da0a5387a09a2f3ddbc39
+  metadata.gz: 73211770ce4e13b9fb835721ed12f0d422889a84d0c45473174b7bf97ff76e93
+  data.tar.gz: b70b8fdcc9375f45d317427cd62546c3d2190fab82d9769f50afeaabc3af4870
 SHA512:
-  metadata.gz: a4400caf025fb253e8734003046a8256d6dcd6862ef6ddc9b45a3ac7a0a016749ef77eccf5ed9b17d5310ed1029a98af4873737765471d17aa665e0f60c7865c
-  data.tar.gz: 5ee28cfaa7c097dcce2fd95490c3721643abc0600cdbb3bd591bb255a2d21c27558810f43194206a10ae4ea0de7ee1ec71e9c5c0c62defb731238751fc8f1dd5
+  metadata.gz: c7b9a928144a765964510b4e1d2ce51a0736b3105a083503f98cb7681e229a6e7fd2c7d9246c13ee9233f04adbd2448d03bc4dfd626b550bbb8c38bf848cbbdb
+  data.tar.gz: e94b2ee65ac23a81ba952bfd14fd2679c442a80058f42743cd06c0c132dd6164dcebdca885c1979eeeeac89732ae4fa2726d51266669df2834a4a85ae1a8d857

data/README.md

@@ -160,6 +160,23 @@ Rails.application.configure do
 end
 ```
 
+## **Principle of Least Priviledge**: Whitelisting Controller Actions
+
+Rather than giving the agent full access to your Rails app via the Rails console, You can whitelist controller actions instead.
+
+```
+class PagesController < ApplicationController
+  include LlamaBotRails::ControllerExtensions
+  include LlamaBotRails::AgentAuth
+  
+  # ─── Allow the agent to hit these actions ────────────────────────────────
+  llama_bot_allow :update #uses llama_bot_rails "authenticate_user_or_agent!" on top of your existing devise authentication.
+
+  skip_before_action :authenticate_user_or_agent!, only: [:show] #NOTE: You must change any skip_before_action callbacks that skip devise Authentication, to use :authenticate_user_or_agent!
+```
+
+When you include LlamaBotRails::AgentAuth, the gem aliases any authenticate_<scope>! filters to a unified guard. You can keep your old callbacks/skips for now, but you’ll see a deprecation warning—switch to authenticate_user_or_agent! at your convenience.
+
 ## 🧪 **What You Can Build**
 
 ### Developer Assistant

data/app/channels/llama_bot_rails/chat_channel.rb

@@ -47,11 +47,6 @@ module LlamaBotRails
         # Use a begin/rescue block to catch thread creation errors
       begin
 
-        @api_token = Rails.application.message_verifier(:llamabot_ws).generate(
-          { session_id: SecureRandom.uuid },
-          expires_in: 30.minutes
-        )
-
         @worker = Thread.new do
             Thread.current[:connection_id] = @connection_id
           Thread.current.abort_on_exception = true  # This will help surface errors
@@ -126,7 +121,15 @@ module LlamaBotRails
     # through external websocket to FastAPI/Python backend.
     def receive(data)
       begin
-        #used to validate the message before it's sent to the backend.
+        #used to validate the message before it's sent to the llamabot-backend.
+
+        # Get the currently logged in user from the environment.
+        current_user = LlamaBotRails.current_user_resolver.call(connection.env)
+
+        @api_token = Rails.application.message_verifier(:llamabot_ws).generate(
+          { session_id: SecureRandom.uuid, user_id: current_user&.id},
+          expires_in: 30.minutes
+        )
 
         #This could be an example of how we might implement hooks & filters in the future.
         validate_message(data) #Placeholder for now, we are using this to mock errors being thrown. In the future, we can add actual validation logic.        
@@ -148,6 +151,7 @@ module LlamaBotRails
         Rails.logger.info "[LlamaBot] Got message from Javascript LlamaBot Frontend: #{data.inspect}"
       rescue => e
         Rails.logger.error "[LlamaBot] Error in receive method: #{e.message}"
+        Rails.logger.error "[LlamaBot] Backtrace: #{e.backtrace.join("\n")}"
         send_message_to_frontend("error", e.message)
       end
     end

data/app/controllers/llama_bot_rails/agent_controller.rb

@@ -2,11 +2,25 @@ require 'llama_bot_rails/llama_bot'
 module LlamaBotRails
     class AgentController < ActionController::Base
         include ActionController::Live
+        include LlamaBotRails::AgentAuth
+        include LlamaBotRails::ControllerExtensions
+
+        llama_bot_allow :command
+        
         skip_before_action :verify_authenticity_token, only: [:command, :send_message]
-        before_action :authenticate_agent!, only: [:command]
+        # skip_before_action :authenticate_user_or_agent!, only: [:command]
+        
+        before_action :check_agent_authentication
 
         # POST /agent/command
         def command
+
+            unless LlamaBotRails.config.enable_console_tool
+                Rails.logger.warn("[[LlamaBot Debug]] Console tool is disabled")
+                render json: { error: "Console tool is disabled" }, status: :forbidden
+                return
+            end
+
             input = params[:command]
             
             # Capture both stdout and return value
@@ -16,18 +30,15 @@ module LlamaBotRails
             $stdout = output
             result = safety_eval(input)
             $stdout = STDOUT
-            
-            # If result is a string and output has content, prefer output
-            final_result = if output.string.present?
-                             output.string.strip
-                           else
-                             result
-                           end
-            
-            render json: { result: final_result }
+
+            # Return both output and result
+            render json: { 
+                output: output.string.strip, 
+                result: result 
+            }
         rescue => e
             $stdout = STDOUT  # Reset stdout on error
-            render json: { error: e.class.name, message: e.message }, status: :unprocessable_entity
+            render json: { error: "#{e.class.name}: #{e.message}" }
         end
 
         def index
@@ -78,10 +89,13 @@ module LlamaBotRails
             response.headers['Cache-Control'] = 'no-cache'
             response.headers['Connection']    = 'keep-alive'
 
+            # Get the currently logged in user from the environment.
+            current_user = LlamaBotRails.current_user_resolver.call(request.env)
+
             @api_token = Rails.application.message_verifier(:llamabot_ws).generate(
-                { session_id: SecureRandom.uuid },
+                { session_id: SecureRandom.uuid, user_id: current_user&.id},
                 expires_in: 30.minutes
-              )
+            )
 
             # 1. Instantiate the builder
             builder = state_builder_class.new(
@@ -131,25 +145,15 @@ module LlamaBotRails
         private 
 
         def safety_eval(input)
-            begin
-                # Change to Rails root directory for file operations
-                Dir.chdir(Rails.root) do
-                    # Create a safer evaluation context
-                    Rails.logger.info "[[LlamaBot]] Evaluating input: #{input}"
-                    binding.eval(input)
-                end
-            rescue => exception
-                Rails.logger.error "Error in safety_eval: #{exception.message}"
-                return exception.message
+            # Change to Rails root directory for file operations
+            Dir.chdir(Rails.root) do
+                # Create a safer evaluation context
+                Rails.logger.info "[[LlamaBot]] Evaluating input: #{input}"
+                binding.eval(input)
             end
-        end
-
-        def authenticate_agent!
-            auth_header = request.headers["Authorization"]
-            token = auth_header&.split("Bearer ")&.last  # Extract token after "Bearer "
-            @session_payload = Rails.application.message_verifier(:llamabot_ws).verify(token)
-        rescue ActiveSupport::MessageVerifier::InvalidSignature
-            head :unauthorized
+        rescue => exception
+            Rails.logger.error "Error in safety_eval: #{exception.message}"
+            raise exception
         end
 
         def state_builder_class

data/app/views/llama_bot_rails/agent/chat_ws.html.erb

@@ -575,7 +575,7 @@ This deprecated and will be removed over time.
             <img src="https://service-jobs-images.s3.us-east-2.amazonaws.com/7rl98t1weu387r43il97h6ipk1l7" alt="LlamaBot Logo" class="logo">
             <div id="connectionStatusIconForLlamaBot" class="connection-status status-yellow"></div>
           </div>
-          <h1>LlamaBot Chat</h1>
+          <h1>Lenny the Llama</h1>
         </div>
         <button class="compose-button" onclick="startNewConversation()">
           <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">

data/bin/bundle

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'bundler' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ENV['BUNDLER_VERSION'] = str
+
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('bundler', 'bundle', version)
+else
+gem "bundler", version
+load Gem.bin_path("bundler", "bundle", version)
+end

data/bin/bundler

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'bundler' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ENV['BUNDLER_VERSION'] = str
+
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('bundler', 'bundler', version)
+else
+gem "bundler", version
+load Gem.bin_path("bundler", "bundler", version)
+end

data/bin/byebug

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'byebug' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('byebug', 'byebug', version)
+else
+gem "byebug", version
+load Gem.bin_path("byebug", "byebug", version)
+end

data/bin/coderay

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'coderay' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('coderay', 'coderay', version)
+else
+gem "coderay", version
+load Gem.bin_path("coderay", "coderay", version)
+end

data/bin/erb

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'erb' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('erb', 'erb', version)
+else
+gem "erb", version
+load Gem.bin_path("erb", "erb", version)
+end

data/bin/faker

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'faker' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('faker', 'faker', version)
+else
+gem "faker", version
+load Gem.bin_path("faker", "faker", version)
+end

data/bin/htmldiff

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'diff-lcs' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('diff-lcs', 'htmldiff', version)
+else
+gem "diff-lcs", version
+load Gem.bin_path("diff-lcs", "htmldiff", version)
+end

data/bin/irb

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'irb' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('irb', 'irb', version)
+else
+gem "irb", version
+load Gem.bin_path("irb", "irb", version)
+end

data/bin/ldiff

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'diff-lcs' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('diff-lcs', 'ldiff', version)
+else
+gem "diff-lcs", version
+load Gem.bin_path("diff-lcs", "ldiff", version)
+end

data/bin/nokogiri

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'nokogiri' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('nokogiri', 'nokogiri', version)
+else
+gem "nokogiri", version
+load Gem.bin_path("nokogiri", "nokogiri", version)
+end

data/bin/pry

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'pry' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('pry', 'pry', version)
+else
+gem "pry", version
+load Gem.bin_path("pry", "pry", version)
+end

data/bin/puma

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'puma' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('puma', 'puma', version)
+else
+gem "puma", version
+load Gem.bin_path("puma", "puma", version)
+end

data/bin/pumactl

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'puma' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('puma', 'pumactl', version)
+else
+gem "puma", version
+load Gem.bin_path("puma", "pumactl", version)
+end

data/bin/racc

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'racc' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('racc', 'racc', version)
+else
+gem "racc", version
+load Gem.bin_path("racc", "racc", version)
+end

data/bin/rackup

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'rackup' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('rackup', 'rackup', version)
+else
+gem "rackup", version
+load Gem.bin_path("rackup", "rackup", version)
+end

data/bin/rake

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by RubyGems.
+#
+# The application 'rake' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('rake', 'rake', version)
+else
+gem "rake", version
+load Gem.bin_path("rake", "rake", version)
+end