discourse/plugins/discourse-ai/lib/agents/tools/edit_post.rb
Rafael dos Santos Silva fe5e4a27e9
FEATURE: Add human-in-the-loop approval queue for AI agent tool actions (#38446)
## Summary

AI agents have 13 moderation tools (close_topic, delete_topic,
edit_tags, edit_post, etc.) that currently execute immediately without
human oversight. This adds an optional approval queue that routes these
tool actions through Discourse's review queue for moderator approval
before execution.

- **New `require_approval` toggle** on AI agents — when enabled,
moderation tool calls are intercepted and sent to the review queue
instead of executing immediately
- **Review queue integration** — moderators see the agent name, tool
name, parameters, and a rendered snippet of the triggering post, then
approve or reject
- **Loop prevention** — approved tool execution is wrapped in
`DiscourseAutomation.set_active_automation` to prevent automation
re-trigger loops (e.g., `edit_tags` → `topic_tags_changed` → automation
fires again)

### New files
- `AiToolAction` model — stores tool name, parameters (JSONB), agent/bot
user refs, and triggering post ID
- `ReviewableAiToolAction` — Reviewable subclass with approve (executes
tool) and reject (discards) actions
- `ReviewableAiToolActionSerializer` — serializes target tool data and
payload context
- Review queue frontend component — displays tool action details and
post snippet
- Two migrations: `ai_tool_actions` table and `require_approval` column
on `ai_agents`

### Modified files
- `Tool` base class gains `requires_approval?` (default `false`),
overridden to `true` on all 13 moderation tools
- `Bot#invoke_tool` — intercepts tools when both tool and agent opt in
to approval
- Agent admin editor — new "Require approval" checkbox
- Agent REST model — `require_approval` added to attribute whitelists
for save payloads
- Serializer, controller, plugin.rb — wired up for the new field and
reviewable type
2026-03-13 12:46:59 -03:00

89 lines
2.7 KiB
Ruby
Vendored

# frozen_string_literal: true
module DiscourseAi
module Agents
module Tools
class EditPost < Tool
def self.signature
{
name: name,
description: "Edits the content of a post, and optionally the topic title.",
parameters: [
{
name: "post_id",
description: "The ID of the post to edit",
type: "integer",
required: true,
},
{ name: "raw", description: "The new raw content for the post", type: "string" },
{
name: "title",
description: "The new title for the topic (only applies to the first post)",
type: "string",
},
{
name: "edit_reason",
description: "Short explanation of what was changed",
type: "string",
required: true,
},
{
name: "public_edit_reason",
description:
"Whether the edit reason should be visible in the post's revision history",
type: "boolean",
},
],
}
end
def self.name
"edit_post"
end
def self.requires_approval?
true
end
def invoke
post = Post.find_by(id: parameters[:post_id])
return error_response(I18n.t("discourse_ai.ai_bot.edit_post.errors.not_found")) if !post
if !guardian.can_edit_post?(post)
return error_response(I18n.t("discourse_ai.ai_bot.edit_post.errors.not_allowed"))
end
raw = parameters[:raw]
title = parameters[:title]
edit_reason = parameters[:edit_reason].to_s.strip
if raw.blank? && title.blank?
return error_response(I18n.t("discourse_ai.ai_bot.edit_post.errors.nothing_to_edit"))
end
if edit_reason.blank?
return error_response(I18n.t("discourse_ai.ai_bot.edit_post.errors.no_reason"))
end
fields = {}
fields[:edit_reason] = edit_reason if !!parameters[:public_edit_reason]
fields[:raw] = raw if raw.present?
fields[:title] = title if title.present?
revisor = PostRevisor.new(post, post.topic)
result = revisor.revise!(acting_user, fields)
if result
{ status: "success", message: I18n.t("discourse_ai.ai_bot.edit_post.success") }
else
error_response(I18n.t("discourse_ai.ai_bot.edit_post.errors.revision_failed"))
end
end
def description_args
{ post_id: parameters[:post_id] }
end
end
end
end
end