rails-ai-bridge 3.5.2 → 3.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 87f66a2c3254515e628ba04cac7fcda527bda86254df738f3384f28ccad5fcdf
-  data.tar.gz: 6bc9b66810b8c5bedd1526a3683b13530a46c1c5b61ba7db89288544d61bce20
+  metadata.gz: b375ce08baa45d08d3c20625d27280862175bb022677e1f5c5ae90d1eb7a1493
+  data.tar.gz: 7d8de9d9b1642b447c03cc3b36820d2008dee648a475ebffaac038a9f081a178
 SHA512:
-  metadata.gz: ae624883e2d08b61bd76d178b52d7067aefd611a1fc6e6f760b7f07361b7acbe877b2ce3f5984b2b6c9d0c74b7376c522cc8065fdf25a8cc8c78660a95583c18
-  data.tar.gz: 8cc300bb5f6e4d9669e8de9313eca2c4e5cd0c4a7ce336c2cec7bd5c69665df2580d3864536aef092cc22c16ca775909d26c40c372b5bc065577f567836dc149
+  metadata.gz: 6ced1f26479b6614723aaba77812ec4efe9ff35c107a40e4e8865ec88553eace62aa5bd990371c0eb1b2ae4bfd13d7983c1d101bb3403ef7b8e8922022150106
+  data.tar.gz: 39b6117bb858aa1dca13e65d05244aeccece63fb6afde51ee5ff1c0d3986512aabd3bd74e0ae00ee5ad0bda3382025573caebe7aa273155ff5a3fd85db03e812

data/CHANGELOG.md

@@ -5,6 +5,23 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.6.0]
+
+### Changed
+
+- **`mcp` minimum version raised to 0.25** (#92) — the gemspec lower bound is now `>= 0.25` (was `>= 0.10`), matching the minimum version the codebase actually requires. The upper bound remains `< 1.0`.
+- **`rubydex` constraint tightened to `~> 0.2.9`** (#92) — was `~> 0.2.4`. This is a **minor breaking change** for users pinned to rubydex 0.2.4–0.2.8; update your lockfile with `bundle update rubydex`.
+- **`simplecov` bumped to 1.0** (#92) — development dependency only; does not affect gem consumers. The test suite filter was migrated from `add_filter '/spec/'` to `skip 'spec'` per the simplecov 1.0 migration guide (`SourceFile#project_filename` no longer includes a leading separator).
+
+### Fixed
+
+- **`Style/ArrayIntersect` lint offense** (#91/#92) — pre-existing rubocop offense in `context_summary.rb` autocorrected to use `Array#intersect?`. No behavior change.
+
+### Added
+
+- **PathResolver architectural documentation** (#90/#91) — class-level docblock documents PathResolver's intentional role as a shared utility (11 introspector callers, high betweenness centrality). Prevents false "god class" flags from future graph analyses.
+- **PathResolver edge-case tests** (#90/#91) — 6 new specs covering the private `SafeRelativePath` (backslash normalization, Windows path rejection, empty path rejection) and `SafeJoin` (valid joins, traversal escape prevention) helper classes.
+
 ## [3.5.2]
 
 ### Security

data/README.md

@@ -780,7 +780,7 @@ Bug reports and pull requests: [github.com/igmarin/rails-ai-bridge/issues](https
 
 ## Acknowledgments & Origins
 
-This gem ships as **rails-ai-bridge** (Ruby **`RailsAiBridge`**, version **3.1.0**). Earlier iterations of the same codebase were distributed as `rails-ai-context`.
+This gem ships as **rails-ai-bridge** (Ruby **`RailsAiBridge`**, version **3.6.0**). Earlier iterations of the same codebase were distributed as `rails-ai-context`.
 
 RailsMCP evolved from 
 [crisnahine/rails-ai-context](https://github.com/crisnahine/rails-ai-context),

data/UPGRADING.md

@@ -1,5 +1,22 @@
 # Upgrading rails-ai-bridge
 
+## Upgrading from 3.5.x to 3.6.0
+
+**One action required if you are pinned to an older `rubydex`:**
+
+The `rubydex` gem constraint was tightened from `~> 0.2.4` to `~> 0.2.9`. If your
+lockfile resolves to rubydex 0.2.4–0.2.8, update it after upgrading:
+
+```bash
+bundle update rubydex
+```
+
+No other configuration or code changes are required. The `mcp` lower bound also
+moved from `>= 0.10` to `>= 0.25`, but if you were already on a recent version
+(no earlier than 0.25) this is a no-op.
+
+---
+
 ## Upgrading from 1.x to 2.x
 
 **No configuration changes required.** Every `config.*` attribute from 1.x is still available — `Configuration` now delegates to focused sub-objects but exposes the same flat DSL. See `CHANGELOG.md` for the full list of internal changes.

data/lib/rails_ai_bridge/path_resolver.rb

@@ -3,6 +3,27 @@
 module RailsAiBridge
   # Resolves configured Rails logical paths to filesystem paths without leaking
   # machine-specific absolute paths into generated assistant context.
+  #
+  # == Architectural role: intentional shared utility
+  #
+  # PathResolver is deliberately used by every introspector that needs to
+  # locate files on disk (controller, model, view, stimulus, turbo, auth,
+  # api, config, action_text, activeStorage, nonArModels — 11 callers as of
+  # v3.6.0). It is NOT a god class despite high betweenness centrality in
+  # graph analyses: a foundational path-resolution utility is expected to
+  # sit at the centre of the introspector graph. Splitting it would spread
+  # path-safety logic (traversal guards, safe joins) across multiple files
+  # and weaken the single responsibility it currently holds.
+  #
+  # The three private helper classes — SafeRelativePath, SafeJoin, and
+  # ConfiguredPathsError — are kept nested and private_constant so they
+  # cannot leak into the public API or be referenced by callers. This
+  # keeps the safety surface area small and auditable in one file.
+  #
+  # If a future graph analysis flags this class again, check the
+  # betweenness centrality against the caller count before proposing a
+  # split: a utility with many callers and a single responsibility is
+  # healthy, not smelly.
   class PathResolver
     # Validates user-provided relative paths before filesystem operations.
     class SafeRelativePath

data/lib/rails_ai_bridge/serializers/context_summary.rb

@@ -459,7 +459,7 @@ module RailsAiBridge
       private_class_method :sensitive_config_basename?
 
       def sensitive_config_path_segment?(path)
-        path.split('/').any? { |segment| SENSITIVE_CONFIG_SEGMENTS.include?(segment) }
+        path.split('/').intersect?(SENSITIVE_CONFIG_SEGMENTS)
       end
       module_function :sensitive_config_path_segment?
       private_class_method :sensitive_config_path_segment?

data/lib/rails_ai_bridge/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module RailsAiBridge
-  VERSION = '3.5.2'
+  VERSION = '3.6.0'
 end

data/rails-ai-bridge.gemspec

@@ -50,11 +50,11 @@ Gem::Specification.new do |spec|
   spec.require_paths = ['lib']
 
   # Core dependencies
-  spec.add_dependency 'mcp', '>= 0.10', '< 1.0' # Official MCP Ruby SDK
+  spec.add_dependency 'mcp', '>= 0.25', '< 1.0' # Official MCP Ruby SDK
   spec.add_dependency 'railties', '>= 7.1', '< 10.0'
   spec.add_dependency 'thor', '>= 1.0', '< 3.0'
   spec.add_dependency 'zeitwerk', '~> 2.6' # Autoloading
 
   # Semantic code analysis via Shopify's rubydex
-  spec.add_dependency 'rubydex', '~> 0.2.4'
+  spec.add_dependency 'rubydex', '~> 0.2.9'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rails-ai-bridge
 version: !ruby/object:Gem::Version
-  version: 3.5.2
+  version: 3.6.0
 platform: ruby
 authors:
 - Ismael Marin
@@ -15,7 +15,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.10'
+        version: '0.25'
     - - "<"
       - !ruby/object:Gem::Version
         version: '1.0'
@@ -25,7 +25,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.10'
+        version: '0.25'
     - - "<"
       - !ruby/object:Gem::Version
         version: '1.0'
@@ -89,14 +89,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.2.4
+        version: 0.2.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.2.4
+        version: 0.2.9
 description: Rails-AI-Bridge introspects your Rails application and exposes structure
   to AI assistants via static context files and a live Model Context Protocol (MCP)
   server. It classifies Active Record models semantically (Core, Join, Supporting),