discourse/plugins/discourse-ai/lib/agents/tools/delete_topic.rb
Rafael dos Santos Silva fe5e4a27e9
FEATURE: Add human-in-the-loop approval queue for AI agent tool actions (#38446)
## Summary

AI agents have 13 moderation tools (close_topic, delete_topic,
edit_tags, edit_post, etc.) that currently execute immediately without
human oversight. This adds an optional approval queue that routes these
tool actions through Discourse's review queue for moderator approval
before execution.

- **New `require_approval` toggle** on AI agents — when enabled,
moderation tool calls are intercepted and sent to the review queue
instead of executing immediately
- **Review queue integration** — moderators see the agent name, tool
name, parameters, and a rendered snippet of the triggering post, then
approve or reject
- **Loop prevention** — approved tool execution is wrapped in
`DiscourseAutomation.set_active_automation` to prevent automation
re-trigger loops (e.g., `edit_tags` → `topic_tags_changed` → automation
fires again)

### New files
- `AiToolAction` model — stores tool name, parameters (JSONB), agent/bot
user refs, and triggering post ID
- `ReviewableAiToolAction` — Reviewable subclass with approve (executes
tool) and reject (discards) actions
- `ReviewableAiToolActionSerializer` — serializes target tool data and
payload context
- Review queue frontend component — displays tool action details and
post snippet
- Two migrations: `ai_tool_actions` table and `require_approval` column
on `ai_agents`

### Modified files
- `Tool` base class gains `requires_approval?` (default `false`),
overridden to `true` on all 13 moderation tools
- `Bot#invoke_tool` — intercepts tools when both tool and agent opt in
to approval
- Agent admin editor — new "Require approval" checkbox
- Agent REST model — `require_approval` added to attribute whitelists
for save payloads
- Serializer, controller, plugin.rb — wired up for the new field and
reviewable type
2026-03-13 12:46:59 -03:00

82 lines
2.4 KiB
Ruby
Vendored

# frozen_string_literal: true
module DiscourseAi
module Agents
module Tools
class DeleteTopic < Tool
def self.signature
{
name: name,
description: "Deletes or recovers a topic based on the deleted parameter.",
parameters: [
{
name: "topic_id",
description: "The ID of the topic",
type: "integer",
required: true,
},
{
name: "deleted",
description: "true to delete the topic, false to recover it",
type: "boolean",
required: true,
},
{
name: "reason",
description: "Short explanation of why the topic is being deleted or recovered",
type: "string",
required: true,
},
],
}
end
def self.name
"delete_topic"
end
def self.requires_approval?
true
end
def invoke
topic = Topic.with_deleted.find_by(id: parameters[:topic_id])
if !topic
return error_response(I18n.t("discourse_ai.ai_bot.delete_topic.errors.not_found"))
end
allowed =
if !!parameters[:deleted]
guardian.can_delete_topic?(topic)
else
guardian.can_recover_topic?(topic)
end
if !allowed
return error_response(I18n.t("discourse_ai.ai_bot.delete_topic.errors.not_allowed"))
end
if reason.blank?
return error_response(I18n.t("discourse_ai.ai_bot.delete_topic.errors.no_reason"))
end
first_post = Post.with_deleted.find_by(topic_id: topic.id, post_number: 1)
if !first_post
return error_response(I18n.t("discourse_ai.ai_bot.delete_topic.errors.not_found"))
end
if !!parameters[:deleted]
PostDestroyer.new(acting_user, first_post, context: reason).destroy
else
PostDestroyer.new(acting_user, first_post, context: reason).recover
end
{ status: "success", message: I18n.t("discourse_ai.ai_bot.delete_topic.success") }
end
def description_args
{ topic_id: parameters[:topic_id], deleted: parameters[:deleted] }
end
end
end
end
end