plutonium 0.62.2 → 0.63.0

data/docs/superpowers/specs/2026-08-17-async-interactions-design.md

@@ -0,0 +1,185 @@
+# Async interactions — design
+
+Status: design approved in conversation, not yet implemented.
+
+## The problem
+
+`Plutonium::Resource::Interaction` runs inline. `Interaction.call` validates, runs
+`execute`, and returns an `Outcome` the controller turns into a `Response` — all
+inside one request. That is correct for the operations it was built for, and
+wrong for three kinds of work an app inevitably grows:
+
+- **Bulk over many records.** Archiving 500 projects in a request either times
+  out or holds a web worker hostage.
+- **One slow operation.** Rebuilding an index, generating a report, calling a
+  third-party API. Duration is opaque and often exceeds a request budget.
+- **Anything worth auditing.** Nothing records who ran what, with which options,
+  or what it did. The interaction leaves no trace.
+
+There is no `perform_later` anywhere in `lib/plutonium` outside
+`Wizard::SweepJob`, so this is genuinely absent rather than partially built.
+
+## The idea
+
+**The run becomes a record.** That single change buys everything else:
+persistence outlives the request, so async is natural; a row has a lifecycle, so
+progress and scheduling follow; it is queryable, so audit is free; and it is a
+resource, so it gets an index and show page from machinery that already exists.
+
+Prior art is Bullet Train's Action Models. The adaptation below is deliberately
+not a port — Plutonium already owns primitives (policy scopes, entity scoping,
+interactions, `Kanban::Broadcaster`) that Bullet Train has to reinvent.
+
+**Interactions dispatch; runs execute.** The interaction keeps its current job —
+declare inputs, validate, authorize, render a form. On `execute` it creates a run
+and enqueues it. It still succeeds *synchronously*, because dispatching is what
+succeeded, so `Outcome` needs no new state. Its response is a redirect to the
+run.
+
+## Architecture
+
+### Storage — one table, STI
+
+A single `plutonium_interaction_runs` table with a `type` column. Authors
+subclass to configure behaviour; options live in a JSON column, so an async
+action costs zero migrations.
+
+| Column | Purpose |
+|---|---|
+| `type` | STI discriminator — the author's run subclass |
+| `state` | `pending` / `running` / `completed` / `failed` |
+| `options` | JSON. The dispatching interaction's validated inputs |
+| `target_type` | Class name of the targeted resource; `nil` for opaque runs |
+| `target_ids` | JSON array of ids selected at dispatch |
+| `initiator_type` / `initiator_id` | Polymorphic — who started it |
+| `scoped_entity_type` / `scoped_entity_id` | Polymorphic, nullable — tenant context |
+| `progress_total` / `progress_done` | Counts. Both `nil` for opaque work |
+| `errors_log` | JSON. Per-target failures |
+| `started_at` / `finished_at` | Timing, and the basis for sweeping |
+
+The shape follows `Wizard::Session`, which is already a persisted process record
+with polymorphic `owner` / `anchor` / `scope` refs and a `SweepJob`. This is not
+a new architecture for the codebase; it is the second instance of one that works.
+
+### Two run shapes
+
+The framework picks by what the subclass implements — no mode flag.
+
+```ruby
+class ArchiveProjectsRun < Plutonium::Interaction::Run
+  on_failure :continue
+
+  # Targets arrive from the dispatching interaction's selection. The framework
+  # re-resolves them through the policy scope before each call.
+  def perform_on(project) = project.archive(notify: options[:notify_users])
+end
+
+class RebuildSearchIndexRun < Plutonium::Interaction::Run
+  # No targets: one opaque unit, indeterminate progress.
+  def perform = SearchIndex.rebuild!
+end
+```
+
+There is deliberately **no author-defined `targets` method**. Bullet Train needs
+`valid_targets` because its action model receives raw ids with nothing to
+constrain them. Plutonium already has that primitive: a bulk action's records
+come from the selection, and `relation_scope` answers "which records may this
+user touch". A second declaration would be a second place to disagree with the
+policy.
+
+### Identifying targets — ids, not GlobalIDs
+
+`target_type` (a real column) plus a JSON array of ids. Not GIDs:
+
+1. **The index feature needs a real column.** "Runs in progress for this
+   resource" is `where(target_type: Project.name, state: :running)`. That cannot
+   be indexed out of a JSON array of `gid://app/Project/1` strings.
+2. **One scoped query, not N locates.** `policy_scope(Project).where(id: ids)`
+   re-resolves through `relation_scope` in a single query and enforces
+   authorization by construction. `GlobalID::Locator` bypasses the policy scope
+   entirely, requiring a separate re-authorization per record.
+3. **GIDs solve heterogeneity that does not exist here.** Bulk selection is
+   always one resource type; the existing route is already `ids[]=1&ids[]=2`.
+
+GlobalID-style polymorphism is still right for `initiator` and `scoped_entity`,
+which genuinely vary by portal — hence the polymorphic columns.
+
+### Authorization outside the request
+
+This is the sharpest correctness issue in the design.
+
+`perform` runs in a job. There is no `current_user`, no request, no ambient
+context. Plutonium authorizes on the **pair** `(user, entity_scope)` —
+`Authorizable` registers `authorize :entity_scope, through:
+:entity_scope_for_authorize`, and PR #74 exists precisely because a nil entity
+leaking into that memo broke scoping.
+
+Therefore:
+
+- The run persists **both** `initiator` and `scoped_entity`. Storing only the
+  user would re-resolve targets under the wrong tenant — and that fails *open*,
+  because a broader scope silently includes records the initiator could not see
+  when they dispatched.
+- The job **rebuilds** the context from those columns. It never inherits one.
+- Authorization is **re-checked at perform time**, not trusted from dispatch.
+  Access revoked between enqueue and run must stop the work, or a persisted run
+  becomes a way to launder stale permissions.
+
+**Decision: `initiator` is required.** A nullable column would silently come to
+mean "unscoped", which is the failure mode above. System-triggered runs
+(schedules, callbacks) should get an explicit system initiator later rather than
+a null.
+
+### Failure policy
+
+Configured on the run subclass, since the author knows the semantics:
+
+- `on_failure :continue` — record the failure in `errors_log`, keep going.
+  Correct for bulk, where 497 successes should not be discarded.
+- `on_failure :halt` — stop at the first error.
+- `on_failure :transactional` — wrap the whole run in one transaction. Honest
+  about its cost: a long transaction over many records risks lock contention,
+  and is impossible once the work touches a third-party API.
+
+**Decision: a target that vanishes or falls out of scope between dispatch and
+perform is recorded as a per-target failure, not skipped.** "3 targets were no
+longer available" is information the operator needs; silence there is how bulk
+operations quietly under-apply.
+
+### Progress transport
+
+**Turbo poll by default, broadcast opt-in.** The progress page is a turbo-frame
+with a refresh interval — no ActionCable, works on any deployment. A run may opt
+into realtime and reuse `Kanban::Broadcaster`, whose stream names are already
+keyed on **both** `resource_class` and `scoped_entity` so tenants can never share
+a stream. This matches the house posture: kanban's `realtime` defaults to false.
+
+### Surfaces
+
+- **The run is a resource.** The framework ships a definition and policy, so a
+  portal can register it and get index and show pages. The progress page is
+  simply the run's show page — no bespoke view.
+- **Dispatch redirects** to that show page, via the interaction's ordinary
+  `Response::Redirect`.
+- **The target resource's index lists in-progress runs at the top**, queried by
+  `target_type` — which is why it is a column rather than JSON.
+
+## Testing
+
+- **Unit** — state machine, failure policies, progress accounting, options
+  round-tripping through JSON.
+- **Authorization** — the highest-value tests. A run whose initiator lost access
+  between dispatch and perform must not perform. A run must not resolve targets
+  outside its stored `scoped_entity`. Both fail open if wrong, so both need
+  explicit coverage.
+- **Integration** — dispatch returns a redirect; the show page reports progress;
+  the target index lists running work.
+- **System** — one end-to-end pass on the progress page updating.
+
+## Out of scope
+
+Scheduling (`run_at`), approval workflows, retries, and import/export run types.
+All are natural extensions of a persisted run and none is needed to make the
+first version useful. Retention/sweeping follows `Wizard::SweepJob`'s pattern
+when it is needed; runs are kept indefinitely until then, since audit is a
+motivation.

data/gemfiles/postgres.gemfile.lock

@@ -3,29 +3,29 @@ GEM
   specs:
     action_text-trix (2.1.19)
       railties
-    actioncable (8.1.3)
-      actionpack (= 8.1.3)
-      activesupport (= 8.1.3)
+    actioncable (8.1.3.1)
+      actionpack (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       nio4r (~> 2.0)
       websocket-driver (>= 0.6.1)
       zeitwerk (~> 2.6)
-    actionmailbox (8.1.3)
-      actionpack (= 8.1.3)
-      activejob (= 8.1.3)
-      activerecord (= 8.1.3)
-      activestorage (= 8.1.3)
-      activesupport (= 8.1.3)
+    actionmailbox (8.1.3.1)
+      actionpack (= 8.1.3.1)
+      activejob (= 8.1.3.1)
+      activerecord (= 8.1.3.1)
+      activestorage (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       mail (>= 2.8.0)
-    actionmailer (8.1.3)
-      actionpack (= 8.1.3)
-      actionview (= 8.1.3)
-      activejob (= 8.1.3)
-      activesupport (= 8.1.3)
+    actionmailer (8.1.3.1)
+      actionpack (= 8.1.3.1)
+      actionview (= 8.1.3.1)
+      activejob (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       mail (>= 2.8.0)
       rails-dom-testing (~> 2.2)
-    actionpack (8.1.3)
-      actionview (= 8.1.3)
-      activesupport (= 8.1.3)
+    actionpack (8.1.3.1)
+      actionview (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       nokogiri (>= 1.8.5)
       rack (>= 2.2.4)
       rack-session (>= 1.0.1)
@@ -33,36 +33,36 @@ GEM
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
       useragent (~> 0.16)
-    actiontext (8.1.3)
+    actiontext (8.1.3.1)
       action_text-trix (~> 2.1.15)
-      actionpack (= 8.1.3)
-      activerecord (= 8.1.3)
-      activestorage (= 8.1.3)
-      activesupport (= 8.1.3)
+      actionpack (= 8.1.3.1)
+      activerecord (= 8.1.3.1)
+      activestorage (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       globalid (>= 0.6.0)
       nokogiri (>= 1.8.5)
-    actionview (8.1.3)
-      activesupport (= 8.1.3)
+    actionview (8.1.3.1)
+      activesupport (= 8.1.3.1)
       builder (~> 3.1)
       erubi (~> 1.11)
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
-    activejob (8.1.3)
-      activesupport (= 8.1.3)
+    activejob (8.1.3.1)
+      activesupport (= 8.1.3.1)
       globalid (>= 0.3.6)
-    activemodel (8.1.3)
-      activesupport (= 8.1.3)
-    activerecord (8.1.3)
-      activemodel (= 8.1.3)
-      activesupport (= 8.1.3)
+    activemodel (8.1.3.1)
+      activesupport (= 8.1.3.1)
+    activerecord (8.1.3.1)
+      activemodel (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       timeout (>= 0.4.0)
-    activestorage (8.1.3)
-      actionpack (= 8.1.3)
-      activejob (= 8.1.3)
-      activerecord (= 8.1.3)
-      activesupport (= 8.1.3)
+    activestorage (8.1.3.1)
+      actionpack (= 8.1.3.1)
+      activejob (= 8.1.3.1)
+      activerecord (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       marcel (~> 1.0)
-    activesupport (8.1.3)
+    activesupport (8.1.3.1)
       base64
       bigdecimal
       concurrent-ruby (~> 1.0, >= 1.3.1)
@@ -78,12 +78,12 @@ GEM
     base64 (0.3.0)
     bigdecimal (4.1.2)
     builder (3.3.0)
-    concurrent-ruby (1.3.7)
+    concurrent-ruby (1.3.8)
     connection_pool (3.0.2)
     crass (1.0.7)
     date (3.5.1)
     drb (2.2.3)
-    erb (6.0.4)
+    erb (6.0.6)
     erubi (1.13.1)
     globalid (1.4.0)
       activesupport (>= 6.1)
@@ -95,12 +95,12 @@ GEM
       prism (>= 1.3.0)
       rdoc (>= 4.0.0)
       reline (>= 0.4.2)
-    json (2.20.0)
+    json (2.21.2)
     logger (1.7.0)
-    loofah (2.25.1)
+    loofah (2.25.2)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
-    mail (2.9.0)
+    mail (2.9.1)
       logger
       mini_mime (>= 0.1.1)
       net-imap
@@ -112,7 +112,7 @@ GEM
     minitest (6.0.6)
       drb (~> 2.0)
       prism (~> 1.5)
-    net-imap (0.6.4.1)
+    net-imap (0.6.6)
       date
       net-protocol
     net-pop (0.1.2)
@@ -161,30 +161,30 @@ GEM
       rack (>= 1.3)
     rackup (2.3.1)
       rack (>= 3)
-    rails (8.1.3)
-      actioncable (= 8.1.3)
-      actionmailbox (= 8.1.3)
-      actionmailer (= 8.1.3)
-      actionpack (= 8.1.3)
-      actiontext (= 8.1.3)
-      actionview (= 8.1.3)
-      activejob (= 8.1.3)
-      activemodel (= 8.1.3)
-      activerecord (= 8.1.3)
-      activestorage (= 8.1.3)
-      activesupport (= 8.1.3)
+    rails (8.1.3.1)
+      actioncable (= 8.1.3.1)
+      actionmailbox (= 8.1.3.1)
+      actionmailer (= 8.1.3.1)
+      actionpack (= 8.1.3.1)
+      actiontext (= 8.1.3.1)
+      actionview (= 8.1.3.1)
+      activejob (= 8.1.3.1)
+      activemodel (= 8.1.3.1)
+      activerecord (= 8.1.3.1)
+      activestorage (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       bundler (>= 1.15.0)
-      railties (= 8.1.3)
+      railties (= 8.1.3.1)
     rails-dom-testing (2.3.0)
       activesupport (>= 5.0.0)
       minitest
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.7.0)
-      loofah (~> 2.25)
+    rails-html-sanitizer (1.7.1)
+      loofah (~> 2.25, >= 2.25.2)
       nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
-    railties (8.1.3)
-      actionpack (= 8.1.3)
-      activesupport (= 8.1.3)
+    railties (8.1.3.1)
+      actionpack (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       irb (~> 1.13)
       rackup (>= 1.0.0)
       rake (>= 12.2)
@@ -192,7 +192,7 @@ GEM
       tsort (>= 0.2)
       zeitwerk (~> 2.6)
     rake (13.4.2)
-    rbs (4.0.3)
+    rbs (4.1.1)
       logger
       prism (>= 1.6.0)
       tsort
@@ -215,7 +215,7 @@ GEM
       base64
       websocket-extensions (>= 0.1.0)
     websocket-extensions (0.1.5)
-    zeitwerk (2.8.2)
+    zeitwerk (2.8.3)
 
 PLATFORMS
   aarch64-linux
@@ -236,40 +236,40 @@ DEPENDENCIES
 
 CHECKSUMS
   action_text-trix (2.1.19) sha256=7012f59421009cf284aa651294896414d653a61a2417c9b8714c8476d2f74009
-  actioncable (8.1.3) sha256=e5bc7f75e44e6a22de29c4f43176927c3a9ce4824464b74ed18d8226e75a80f0
-  actionmailbox (8.1.3) sha256=df7da474eaa0e70df4ed5a6fef66eb3b3b0f2dbf7f14518deee8d77f1b4aae59
-  actionmailer (8.1.3) sha256=831f724891bb70d0aaa4d76581a6321124b6a752cb655c9346aae5479318448d
-  actionpack (8.1.3) sha256=af998cae4d47c5d581a2cc363b5c77eb718b7c4b45748d81b1887b25621c29a3
-  actiontext (8.1.3) sha256=d291019c00e1ea9e6463011fa214f6081a56d7b9a1d224e7d3f6384c1dafc7d2
-  actionview (8.1.3) sha256=1347c88c7f3edb38100c5ce0e9fb5e62d7755f3edc1b61cce2eb0b2c6ea2fd5d
-  activejob (8.1.3) sha256=a149b1766aa8204c3c3da7309e4becd40fcd5529c348cffbf6c9b16b565fe8d3
-  activemodel (8.1.3) sha256=90c05cbe4cef3649b8f79f13016191ea94c4525ce4a5c0fb7ef909c4b91c8219
-  activerecord (8.1.3) sha256=8003be7b2466ba0a2a670e603eeb0a61dd66058fccecfc49901e775260ac70ab
-  activestorage (8.1.3) sha256=0564ce9309143951a67615e1bb4e090ee54b8befed417133cae614479b46384d
-  activesupport (8.1.3) sha256=21a5e0dfbd4c3ddd9e1317ec6a4d782fa226e7867dc70b0743acda81a1dca20e
+  actioncable (8.1.3.1) sha256=e318528295c878a3efdfe25f0f2267c80cb7a76eba41bb5f64d44aa380a3d91b
+  actionmailbox (8.1.3.1) sha256=5f704972097d843ade8e435e93694a1dac732b926df1717aceba1f3840082b1c
+  actionmailer (8.1.3.1) sha256=88ea441b28ff02a0c6c006468892642a3d9942affce9d294e81a74504aa5c43c
+  actionpack (8.1.3.1) sha256=974cb7154548e81f470b1b0f247b99cb38e87825899dca58610596e2817723d0
+  actiontext (8.1.3.1) sha256=5da729d833d1a29cddb1eee938878e55e503d2613e00e735f5daf58c2ba98af2
+  actionview (8.1.3.1) sha256=2da68b8414c47b43bfbed1ce69c5afe1c04f78c267aacb5660a4cab5ca12cfb6
+  activejob (8.1.3.1) sha256=1c8dd275df930df40deecffec63d913a550a33fd94bd298f69721dd96939954a
+  activemodel (8.1.3.1) sha256=99cc02ce2faec371d14440949d85787ebd23a907c9baef0a9d4bcd4d21888f88
+  activerecord (8.1.3.1) sha256=0a2fb6c28f4938f6b013a3a549bec0a7e37d535f3dc8990e804bcc3258c0403b
+  activestorage (8.1.3.1) sha256=f555254f387b1cffa499d2fd3115d12635eadc5b15206a8534316a67036163ef
+  activesupport (8.1.3.1) sha256=85458765f25ea48b9019c46b6bb3fa5683197bf4280d9f06710a6e8d7a831376
   base64 (0.3.0) sha256=27337aeabad6ffae05c265c450490628ef3ebd4b67be58257393227588f5a97b
   bigdecimal (4.1.2) sha256=53d217666027eab4280346fba98e7d5b66baaae1b9c3c1c0ffe89d48188a3fbd
   builder (3.3.0) sha256=497918d2f9dca528fdca4b88d84e4ef4387256d984b8154e9d5d3fe5a9c8835f
-  concurrent-ruby (1.3.7) sha256=4412caec3a5ea2e5fdc52076724c071a81f2c0593d83b2ac8cbb8ca63b3151b0
+  concurrent-ruby (1.3.8) sha256=b2f1be836e968ccc78ccfce277ea79c72a88633f22306782c16ff23fb415d1e1
   connection_pool (3.0.2) sha256=33fff5ba71a12d2aa26cb72b1db8bba2a1a01823559fb01d29eb74c286e62e0a
   crass (1.0.7) sha256=94868719948664c89ddcaf0a37c65048413dfcb1c869470a5f7a7ceb5390b295
   date (3.5.1) sha256=750d06384d7b9c15d562c76291407d89e368dda4d4fff957eb94962d325a0dc0
   drb (2.2.3) sha256=0b00d6fdb50995fe4a45dea13663493c841112e4068656854646f418fda13373
-  erb (6.0.4) sha256=38e3803694be357fe2bfe312487c74beaf9fb4e5beb3e22498952fe1645b95d9
+  erb (6.0.6) sha256=a9b24986700f5bf127c4f297c5403c3ca41b83b0a316c0cd09a096b56e644ae5
   erubi (1.13.1) sha256=a082103b0885dbc5ecf1172fede897f9ebdb745a4b97a5e8dc63953db1ee4ad9
   globalid (1.4.0) sha256=037f12fbf1d9d7a014d501c2d5c77356fd4ddd96d7a7991d6700bba96706f427
   i18n (1.15.2) sha256=00f9eb62412fe593b2a65a97daa75300d37abb8f7202ec748e94b6d46a9dd1b5
   io-console (0.8.2) sha256=d6e3ae7a7cc7574f4b8893b4fca2162e57a825b223a177b7afa236c5ef9814cc
   irb (1.18.0) sha256=de9454a0703a54704b9811a5ef31a60c86949fbf4013fcf244fabc7c775248e3
-  json (2.20.0) sha256=9362bc6e55a952b056abf9167cf053358181c904cb70cd6eee0808ea830fc32b
+  json (2.21.2) sha256=1f1d3b7cf2b3ba1a69beca0bb6db13d5438b80bff3cd54cdaaa620b9b07c1c6a
   logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203
-  loofah (2.25.1) sha256=d436c73dbd0c1147b16c4a41db097942d217303e1f7728704b37e4df9f6d2e04
-  mail (2.9.0) sha256=6fa6673ecd71c60c2d996260f9ee3dd387d4673b8169b502134659ece6d34941
+  loofah (2.25.2) sha256=2007f746959ac65552456e04b433e83deb22759ab38c838b4445c70e43425918
+  mail (2.9.1) sha256=06574eca475253d6c18145dd70af80d0eb970182d55053497c5f4d797ea160e8
   marcel (1.2.1) sha256=1678e9360e32f9eafa917c80029e2f6d10b2715c66a4b87b6d0da9b9cd1f859f
   mini_mime (1.1.5) sha256=8681b7e2e4215f2a159f9400b5816d85e9d8c6c6b491e96a12797e798f8bccef
   mini_portile2 (2.8.9) sha256=0cd7c7f824e010c072e33f68bc02d85a00aeb6fce05bb4819c03dfd3c140c289
   minitest (6.0.6) sha256=153ea36d1d987a62942382b61075745042a2b3123b1cd48f4c3675af9cc7d6f1
-  net-imap (0.6.4.1) sha256=29f0360d75a7efd3539f16ac1957dea5c0a51ddeceb348db4553c3120914ea0d
+  net-imap (0.6.6) sha256=96aa4ee50df3060203e649efc341f53480b791d49e150f2fdebf68beb141a8df
   net-pop (0.1.2) sha256=848b4e982013c15b2f0382792268763b748cce91c9e91e36b0f27ed26420dff3
   net-protocol (0.2.2) sha256=aa73e0cba6a125369de9837b8d8ef82a61849360eba0521900e2c3713aa162a8
   net-smtp (0.5.1) sha256=ed96a0af63c524fceb4b29b0d352195c30d82dd916a42f03c62a3a70e5b70736
@@ -298,12 +298,12 @@ CHECKSUMS
   rack-session (2.1.2) sha256=595434f8c0c3473ae7d7ac56ecda6cc6dfd9d37c0b2b5255330aa1576967ffe8
   rack-test (2.2.0) sha256=005a36692c306ac0b4a9350355ee080fd09ddef1148a5f8b2ac636c720f5c463
   rackup (2.3.1) sha256=6c79c26753778e90983761d677a48937ee3192b3ffef6bc963c0950f94688868
-  rails (8.1.3) sha256=6d017ba5348c98fc909753a8169b21d44de14d2a0b92d140d1a966834c3c9cd3
+  rails (8.1.3.1) sha256=ccd11a36bfc171bf9c66d585d14c0ece91c0c9dde840aae60c0118d6f5c9c52a
   rails-dom-testing (2.3.0) sha256=8acc7953a7b911ca44588bf08737bc16719f431a1cc3091a292bca7317925c1d
-  rails-html-sanitizer (1.7.0) sha256=28b145cceaf9cc214a9874feaa183c3acba036c9592b19886e0e45efc62b1e89
-  railties (8.1.3) sha256=913eb0e0cb520aac687ffd74916bd726d48fa21f47833c6292576ef6a286de22
+  rails-html-sanitizer (1.7.1) sha256=e797a7c9b01e567307e317c576b49ab4168017e63eea4dba9ce3cb587e2f22c2
+  railties (8.1.3.1) sha256=2388a232579a00cefea4487de66c8553c3408c1300abdc6cf1799d86ffb04487
   rake (13.4.2) sha256=cb825b2bd5f1f8e91ca37bddb4b9aaf345551b4731da62949be002fa89283701
-  rbs (4.0.3) sha256=5a7bf70e2628549d9a1f44eae447b2cfe55968a9c60cfff52693a4bdcc020e14
+  rbs (4.1.1) sha256=1bf118f2f95d1cd3956357645d495152b661e0257e57781d18ceecd461622b9e
   rdoc (8.0.0) sha256=03bf8c08a9639658855a0cfd77c0abca8325c227693f7f33f82957811348c469
   reline (0.6.3) sha256=1198b04973565b36ec0f11542ab3f5cfeeec34823f4e54cebde90968092b1835
   securerandom (0.4.1) sha256=cc5193d414a4341b6e225f0cb4446aceca8e50d5e1888743fac16987638ea0b1
@@ -315,7 +315,7 @@ CHECKSUMS
   useragent (0.16.11) sha256=700e6413ad4bb954bb63547fa098dddf7b0ebe75b40cc6f93b8d54255b173844
   websocket-driver (0.8.2) sha256=97c556b019bf3410b4961002ac501621e9322d3f8a7bc02161a09301cc4c4146
   websocket-extensions (0.1.5) sha256=1c6ba63092cda343eb53fc657110c71c754c56484aad42578495227d717a8241
-  zeitwerk (2.8.2) sha256=7212a61311083c604184b1ea2574b9aa05cd14f855a0841c06985cabe9181d12
+  zeitwerk (2.8.3) sha256=2c85125a8467ce069e20123d1e709a08955c9d29c118c25b46b7b7fafdbb92e5
 
 BUNDLED WITH
   4.0.6