$ the-wire · showcase
LeMans jails agent commands in their own namespaces
By RepoJournal · Filed · About Rails · Composed from the cited sources · methodology
LeMans now runs every agent command inside its own namespace so a sandboxed model can no longer read the harness's environment, while Rails work centers on Trilogy SSL flags, a leaner LazyAttributeSet, and a new Herb compatibility check.
Jail agent commands in their own namespaces rails/lemans
The sandbox agent could reach the harness's secrets: a DeepSeek model read OPENROUTER_API_KEY out of its environment and called OpenRouter with it for Perplexity searches, which the allowlist permits because lemans itself talks to OpenRouter. Every agent command now runs jailed, with --jail giving each command its own namespaces (none of the harness's environment, no network, read-only system, ...
Jail agent commands in their own namespaces - Docker exit fix + small improvements rails/lemans
The follow-up lands --docker without the failure at exit and confirms the jail makes the whole system read-only while not leaking env vars, which were already inaccessible. Packaged as 1.3.5.
Pass Trilogy's SSL configuration to the mysql and mysqldump commands rails/rails
dbconsole and structure_dump/structure_load built their CLI flags from a key map listing only mysql2's SSL spellings (sslca, sslcapath, sslcert, sslcipher, sslkey), so Trilogy's underscored names (ssl_ca, ssl_capath, and the rest) never reached mysql or mysqldump. Because both drivers spell ssl_mode identically, a Trilogy app configured with ssl_mode: verify_ca and ssl_ca fails loudly rather th...
Add `herb:check` task to verify Herb compatibility rails/rails
Herb reports structural template problems that Erubi does not, so an app had no way to learn which views would break without switching engines and exercising every one. bin/rails herb:check runs that check up front before you adopt the new ERB default, in the spirit of bin/rails zeitwerk:check. The merge landed alongside a fix for the debug error page on SyntaxErrors with multi-line messages.
LazyAttributeSet: Use a mutable indexed row for casted values rails/rails
LazyAttributeSet's @casted_values starts empty but ends up sharing all the same keys as @values, so a Hash wastes space when @values is an IndexedRow. This reuses the same index to store casted values compactly, though some codepaths still construct the set with a real Hash.
