rails-ai-bridge 2.2.1 → 3.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 70867e1bc29b66979111806711304a319895660a492f22c32664945cbd9a0172
-  data.tar.gz: 157d6edc614ab44ce75bd26a67180d52f972309c6e40442aebf597885573f27b
+  metadata.gz: 57b5b16d9e952041e81f752dc1a31049d576d63ff62ea99286508ae20f377043
+  data.tar.gz: 65f2dd6a121e3b3ac7b3ad23e081a5426d1d7e9212e65574db6dbb130c4ef583
 SHA512:
-  metadata.gz: 7443118e1519437db85760ccf3ab74149c089cc5c11df0a07f3265ef32f7715f11bff08ac77e71c6630b6e84a38139f5d34e3240b8daf7a15de978e0647c2cb7
-  data.tar.gz: 496f69091bc4d8fce29527bc0445868250b3a34fb5a7192cd19d5334940c857e022a6b71a1268e0035f6c6f65a71de90f5b4deb1dd26250bfcc9e4cc98f63bdd
+  metadata.gz: '09c4d837c7fb6166f2d8f1480010a509404875b1080be01406f9efe886f17e8fbe8def7d28afcfc76e64a98ed4d56809f9c5acf4da601f11b954008451247e04'
+  data.tar.gz: d85e4f45e131a8f4475f3fb48171fa268927d8a7ee78df599e482278580fb9100b7f0f5bcc5bd06a2563cdfad83ee69a73a98d6e69e4b652a6de2e81e051b4b0

data/.coderabbit.yaml

@@ -0,0 +1,68 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
+language: "en-US"
+early_access: false
+
+reviews:
+  profile: assertive
+  request_changes_workflow: true
+  high_level_summary: true
+  review_status: true
+  review_details: true
+  collapse_walkthrough: false
+  poem: false
+  in_progress_fortune: false
+  auto_review:
+    enabled: true
+    drafts: false
+    auto_incremental_review: true
+  tools:
+    actionlint:
+      enabled: true
+    gitleaks:
+      enabled: true
+    semgrep:
+      enabled: true
+    rubocop:
+      enabled: true
+    brakeman:
+      enabled: true
+    osvScanner:
+      enabled: true
+  path_filters:
+    - "!coverage/**"
+    - "!log/**"
+    - "!tmp/**"
+    - "!pkg/**"
+    - "!*.gem"
+  path_instructions:
+    - path: "**"
+      instructions: |
+        You are acting as a Senior Ruby on Rails Architect and AI Tooling Expert.
+        When reviewing rails-ai-bridge, enforce the following standards (this gem introspects Rails
+        apps and exposes structure via MCP and static context files):
+        (1) Ruby Idioms: prefer early returns, predicate methods end with ?.
+        (2) Architecture: introspectors must stay lightweight; MCP tools use rails_ prefix;
+        changes under lib/rails_ai_bridge/tools/, introspectors/, serializers/, or services/
+        need spec coverage and must preserve Service::Result and read-only tool semantics.
+        (3) Security (Critical): flag leaks of credentials, ENV values, raw PII, or unsafe paths.
+        (4) Docs: meaningful changes update CHANGELOG.md; do not approve PRs that fail the
+        code quality gates (Reek, Rubocop, and security tooling).
+        (5) Vibe Coding Prevention: challenge magic numbers and opaque literals; prefer clear,
+        deterministic logic over heavy metaprogramming.
+    - path: ".github/**"
+      instructions: >
+        Review workflows and Dependabot configuration for least-privilege permissions,
+        safe secret usage, fork pull request behavior, OIDC scope, release publishing
+        boundaries, and supply-chain risk from third-party actions.
+    - path: "lib/**"
+      instructions: >
+        Prioritize leaks of credentials, ENV values, Rails credentials, raw PII,
+        unsafe filesystem traversal, unbounded host-app introspection, destructive
+        MCP tool behavior, and public API compatibility for this gem.
+    - path: "spec/**"
+      instructions: >
+        Watch for order-dependent tests, lazy fixture backups, global Rails state
+        leakage, and missing coverage for security-sensitive behavior.
+
+chat:
+  auto_reply: true

data/.markdownlint.json

@@ -0,0 +1,8 @@
+{
+  "MD060": false,
+  "MD013": {
+    "line_length": 120,
+    "code_blocks": false,
+    "tables": false
+  }
+}