rails_console_ai 0.31.0 → 0.33.0

data/lib/rails_console_ai/tools/registry.rb

@@ -338,19 +338,27 @@ module RailsConsoleAi
         'name' => 'output-explorer',
         'tools' => ['execute_code'],
         'max_rounds' => 8,
+        'skip_base_instructions' => true,
         'body' => <<~PROMPT.freeze
-          You are exploring a single chunk of captured tool output on behalf of the main assistant.
+          You are exploring a single chunk of already-captured tool output on behalf of the
+          main assistant. Your ONLY job is to answer a question about that captured text.
 
           The full output is bound to the local variable `output` (a String). You do NOT see it
-          directly — it lives in Ruby memory. Use `execute_code` with Ruby to query it:
+          directly — it lives in Ruby memory. Use `execute_code` with Ruby to examine it:
             - `output.length`, `output.lines.count`
             - `output[start, len]`, `output.lines[n]`
             - `output.scan(/pattern/)`, `output.include?("...")`
             - `JSON.parse(output)` if it looks like JSON, then drill in
             - any other Ruby string/collection methods
 
-          Print only the specific slice or summary the task requires — never dump the whole `output`.
-          Return a concise factual answer. No preamble.
+          Database / ActiveRecord access is DISABLED in this context — any DB query (e.g.
+          `SomeModel.where(...)`, `.find`, raw SQL) will be blocked and raise an error. The data
+          you need exists ONLY in the `output` String already in memory. Do not load models, do
+          not run queries, and do not try to "look up" anything — every fact must come from
+          examining `output`.
+
+          Print only the specific slice or summary the task requires — never dump the whole
+          `output`. Return a concise factual answer. No preamble.
         PROMPT
       }.freeze
 
@@ -368,7 +376,11 @@ module RailsConsoleAi
           executor: @executor,
           output_payload: payload.dup
         )
-        result = sub.run
+        # Hard sandbox: the output-explorer only examines the in-memory `output` string.
+        # Block all DB access for the duration of its run so a stray query can't escape to
+        # the live database. Scoped via thread-local (explore_output runs synchronously),
+        # so the parent session's guard state is untouched.
+        result = RailsConsoleAi.configuration.safety_guards.with_database_blocked { sub.run }
         @last_sub_agent_usage = { input: sub.input_tokens, output: sub.output_tokens, model: sub.model_used }
         "Exploration result (#{sub.input_tokens + sub.output_tokens} tokens used, #{payload.length} chars explored):\n#{result}"
       end
@@ -418,7 +430,7 @@ module RailsConsoleAi
 
         register(
           name: 'save_memory',
-          description: 'Save a fact or pattern you learned about this codebase for future sessions. Use after discovering how something works (e.g. sharding, auth, custom business logic). Defaults to the versioned DB store; pass target: "file" to write to the on-disk .rails_console_ai/memories directory instead.',
+          description: 'Save a fact or pattern you learned about this codebase for future sessions. Use after discovering how something works (e.g. sharding, auth, custom business logic). Defaults to the versioned DB store; pass target: "file" to write to the on-disk .rails_console_ai/memories directory instead. IMPORTANT: memories saved to the DB start in "proposed" state and must be approved by a human in the web UI before you can recall them. Edits to an approved memory also revert it to proposed. Tell the user to visit /rails_console_ai/memories to approve.',
           parameters: {
             'type' => 'object',
             'properties' => {
@@ -686,13 +698,16 @@ module RailsConsoleAi
         end
 
         if @executor.last_error
-          return "ERROR: #{@executor.last_error}"
+          result = "ERROR: #{@executor.last_error}"
+          result += "\n\n#{@executor.last_error_hint}" if @executor.last_error_hint
+          return result
         end
 
         output = @executor.last_output
         parts = []
         parts << "Output:\n#{output.strip}" if output && !output.strip.empty?
         parts << "Return value: #{exec_result.inspect}"
+        parts << @executor.last_error_hint if @executor.last_error_hint
         parts.join("\n\n")
       end
 
@@ -796,6 +811,7 @@ module RailsConsoleAi
           step_report = "Step #{i + 1} (#{step['description']}):\n"
           if error
             step_report += "ERROR: #{error}\n"
+            step_report += "#{@executor.last_error_hint}\n" if @executor.last_error_hint
           end
           if output && !output.strip.empty?
             step_report += "Output: #{output.strip}\n"

data/lib/rails_console_ai/version.rb

@@ -1,3 +1,3 @@
 module RailsConsoleAi
-  VERSION = '0.31.0'.freeze
+  VERSION = '0.33.0'.freeze
 end

data/lib/rails_console_ai.rb

@@ -1,3 +1,5 @@
+require 'set'
+
 require 'rails_console_ai/version'
 require 'rails_console_ai/configuration'
 
@@ -84,7 +86,7 @@ module RailsConsoleAi
 
     # Returns the current status string for an enqueued agent run, or nil
     # if the session id is not found. Status is one of:
-    # 'queued' | 'running' | 'ready' | 'failed'.
+    # 'queued' | 'running' | 'ready' | 'failed' | 'aborted'.
     def check_agent(session_id)
       Session.where(id: session_id).pluck(:status).first
     end
@@ -98,6 +100,16 @@ module RailsConsoleAi
       { status: row.status, result: row.result, error: row.error_message }
     end
 
+    # Abort a queued or running agent run. Returns true if the run was
+    # aborted, false if it had already finished (or doesn't exist).
+    # Queued runs are never picked up; a run already executing keeps
+    # going but its result is discarded when it completes.
+    def abort_agent(session_id)
+      n = Session.where(id: session_id, status: %w[queued running])
+                 .update_all(status: 'aborted', error_message: 'Aborted')
+      n == 1
+    end
+
     def status
       c = configuration
       key = c.resolved_api_key
@@ -242,20 +254,41 @@ module RailsConsoleAi
         conn.create_table(memories_table) do |t|
           t.string   :name,        limit: 255, null: false
           t.text     :content,     null: false
+          t.string   :status,      limit: 20,  default: 'proposed', null: false
+          t.string   :approved_by, limit: 255
+          t.datetime :approved_at
           t.integer  :use_count,   default: 0, null: false
           t.datetime :last_used_at
           t.datetime :created_at,  null: false
           t.datetime :updated_at,  null: false
         end
         conn.add_index(memories_table, :name, unique: true)
+        conn.add_index(memories_table, :status)
         $stdout.puts "\e[32mRailsConsoleAi: created #{memories_table} table.\e[0m"
       end
 
+      # Existing installs have the content-based memories table but predate the
+      # approval columns — the drop-on-missing-content guard above won't fire for
+      # them, so add the columns in place. Memories created before approval existed
+      # were trusted under the old no-approval regime, so grandfather them to
+      # "approved" rather than yanking them out from under the AI; only memories
+      # created from now on start in "proposed".
+      if conn.table_exists?(memories_table) && !conn.column_exists?(memories_table, :status)
+        conn.add_column(memories_table, :status, :string, limit: 20, default: 'proposed', null: false)
+        conn.execute("UPDATE #{conn.quote_table_name(memories_table)} SET status = 'approved'")
+      end
+      if conn.table_exists?(memories_table)
+        conn.add_column(memories_table, :approved_by, :string, limit: 255) unless conn.column_exists?(memories_table, :approved_by)
+        conn.add_column(memories_table, :approved_at, :datetime) unless conn.column_exists?(memories_table, :approved_at)
+        conn.add_index(memories_table, :status) unless conn.index_exists?(memories_table, :status)
+      end
+
       unless conn.table_exists?(versions_table)
         conn.create_table(versions_table) do |t|
           t.integer  :memory_id
           t.string   :name,        limit: 255
           t.text     :content
+          t.string   :status,      limit: 20
           t.string   :edited_by,   limit: 255
           t.text     :change_note
           t.datetime :created_at,  null: false
@@ -264,6 +297,10 @@ module RailsConsoleAi
         conn.add_index(versions_table, :created_at)
         $stdout.puts "\e[32mRailsConsoleAi: created #{versions_table} table.\e[0m"
       end
+
+      if conn.table_exists?(versions_table) && !conn.column_exists?(versions_table, :status)
+        conn.add_column(versions_table, :status, :string, limit: 20)
+      end
     end
 
     def setup_agents_tables!(conn)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rails_console_ai
 version: !ruby/object:Gem::Version
-  version: 0.31.0
+  version: 0.33.0
 platform: ruby
 authors:
 - Cortfr