acting_for 0.1.0 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 416659519f04a4cf5f2639684e6078fe51766cf1eb727ac7b9cde851207d4f9e
-  data.tar.gz: b976be543b26602045c4f0db0152bbf5e051c028c54f18f70e2aae335f702a9e
+  metadata.gz: c2cf10e43b5a53e032b3ed767d98a807a9781e8f02e451782d803b39336da444
+  data.tar.gz: 784c28baa1b257fdbc3628ddfa6d2c9609caba77c0785d93c8f4d6ba088bdb44
 SHA512:
-  metadata.gz: 5173d14fb39328a07f28957a365a4dbafe845f8dfbc4b2a73045f57f2c69a40ba6f96de9306b21a77d7b16d9cd10b6f136e93567f771bb5c0df0df082f4f11b3
-  data.tar.gz: 31cb9911b3a8efa9d4a6e54a5c30fb4eff45f15e0f54a1007391727959d37b10503e8da45ff994cd26389d345d51e26651fa3fdc0f46c490f9ae503c91fb2bab
+  metadata.gz: fa525cb88236196b3751dfa14b362bed7487a799849288191530af319d47bdf95ad95c2602204332f0b02566a7538b9cc3d9ac2fc3e9b508c6077f1ab534dffa
+  data.tar.gz: d9ce75cd4ec4a74e2150aaebb53a6c2da9bdf645c806b3c137136b5bcca7ce69ce83910fcc9640c61d63f0081c92e0a456df7e20505ed75a4388cde0bfe175c1

data/README.md

@@ -14,7 +14,15 @@ AI AgentがPrincipalの代理として何をしてよいかを、委任された
 
 ## Status
 
-> **Implemented and CI verified; Not released.** The Public API, migrations, models, constraints, automatic Audit persistence, and formal test suite are implemented. CI covers Ruby 3.4 / 4.0, Rails 8.0 / 8.1, and PostgreSQL 16. The runnable setup was verified in a new Rails application in [D230](docs/DECISIONS.md#d230-runnable-quick-start-implementation). ActingFor has not been published to RubyGems.
+> **Released: v0.1.1.** ActingFor 0.1.1 is published on [RubyGems](https://rubygems.org/gems/acting_for) and as [GitHub Release v0.1.1](https://github.com/cuichangquan/acting_for/releases/tag/v0.1.1). It adds `Decision#reason_code` while keeping the existing Decision statuses, Delegation semantics, AuditEvent reason values, and database schema unchanged. CI covers Ruby 3.4 / 4.0, Rails 8.0 / 8.1, and PostgreSQL 16.
+
+Next candidate: [0.1.2](docs/release_notes_v0_1_2.md) aligns constraint evaluation with the documented exact Symbol-key Context contract and adds an authorization-to-host-log correlation example. The candidate is not yet published; the released installation instructions below remain on 0.1.1.
+
+## ActingFor at a glance
+
+![ActingFor overview: Principal, Delegation, Agent, authorization decisions, AuditEvent, and Rails Host Application](docs/images/acting_for_overview.svg)
+
+The diagram summarizes the v0.1 responsibility boundary: the Host authenticates/resolves the Agent and Principal and establishes trusted business data; ActingFor evaluates the Delegation and returns `allow`, `deny`, or `require_approval`. Approval workflow and business execution remain Host responsibilities.
 
 ## Why ActingFor?
 
@@ -168,19 +176,22 @@ decision = ActingFor.authorize(
   context: { amount: product.price }
 )
 
+decision.status   # => :allow
 decision.allowed? # => true when product.price is 8_900
+
+decision.reason_code # => :delegation_allowed
 ```
 
-Both calls use the implemented [v0.1 Public API](docs/public_api_v0_1.md). Context values that affect authorization must be established by the host, not trusted directly from an Agent request.
+The released 0.1.0 contract remains documented in the [v0.1 Public API](docs/public_api_v0_1.md). The [0.1.1 `Decision#reason_code` API note](docs/decision_reason_code.md) documents the final-reason accessor added in 0.1.1. Context values that affect authorization must be established by the host, not trusted directly from an Agent request.
 
 ## Quick Start
 
-ActingFor is not yet published to RubyGems. This pre-release setup installs the public GitHub `main` branch.
+Install the released `0.1.1` gem from RubyGems.
 
 1. Add the Gem and install dependencies:
 
    ```ruby
-   gem "acting_for", github: "cuichangquan/acting_for", branch: "main"
+   gem "acting_for", "~> 0.1.1"
    # Rails 8.0 uses JSON options removed in JSON 3.
    gem "json", "< 3"
    ```
@@ -240,7 +251,7 @@ ActingFor is not yet published to RubyGems. This pre-release setup installs the
    # => [:allow, true, false, false]
    ```
 
-For the complete runnable setup—including a new Rails application, public GitHub pre-release installation, host models, all three `¥8,900 / ¥20,000 / ¥50,000` outcomes, Audit behavior, and production security guidance—see [Getting Started](docs/getting_started.md).
+For the complete runnable setup—including a new Rails application, RubyGems installation, host models, all three `¥8,900 / ¥20,000 / ¥50,000` outcomes, Audit behavior, and production security guidance—see [Getting Started](docs/getting_started.md).
 
 ## How does an external AI Agent reach ActingFor?
 
@@ -446,11 +457,15 @@ ActingFor is not an authentication provider, OAuth/OIDC server, Agent framework,
 Project documents are maintained primarily in Japanese:
 
 - [Getting Started](docs/getting_started.md)
+- [Release Runbook](docs/release_runbook.md)
+- [v0.1.0 Release Process and Verification Record](docs/release_process_v0_1_0.md)
+- [v0.1.0 Release Notes](docs/release_notes_v0_1_0.md)
 - [Current State](docs/CURRENT_STATE.md)
 - [Progress](docs/PROGRESS.md)
 - [Project scope, roadmap, and terminology](docs/PROJECT.md)
 - [Decisions and rationale](docs/DECISIONS.md)
 - [v0.1 Public API](docs/public_api_v0_1.md)
+- [Decision reason_code API](docs/decision_reason_code.md)
 - [v0.1 Security Model](docs/security_model_v0_1.md)
 - [v0.1 Domain Model](docs/domain_model_v0_1.md)
 - [v0.1 Gem Structure](docs/gem_structure_v0_1.md)

data/app/services/acting_for/internal/authorization.rb

@@ -158,7 +158,7 @@ module ActingFor
             resource_type: resource_type,
             resource_id: resource_id,
             decision: decision_value,
-            reason_code: ActingFor::AuditEvent::DECISION_REASONS.fetch(decision_value),
+            reason_code: decision.reason_code.to_s,
             matched_delegation_ids: matches.map(&:id).sort,
             sanitized_context: sanitized_context
           }

data/app/services/acting_for/internal/constraint_evaluator.rb

@@ -18,7 +18,7 @@ module ActingFor
 
           field = constraint["field"]
           key = field.to_sym
-          return false unless context.key?(key)
+          return false unless exact_symbol_key?(context, key)
 
           actual = context[key]
           return false if actual.nil?
@@ -45,6 +45,10 @@ module ActingFor
           end
         end
 
+        def exact_symbol_key?(context, key)
+          context.each_key.any? { |existing_key| existing_key.is_a?(Symbol) && existing_key == key }
+        end
+
         def canonical_constraint?(constraint)
           return false unless constraint.is_a?(Hash)
           return false unless constraint.keys.all?(String)

data/lib/acting_for/decision.rb

@@ -1,14 +1,20 @@
 module ActingFor
   class Decision
     STATUSES = %i[allow deny require_approval].freeze
-    private_constant :STATUSES
+    REASON_CODES = {
+      allow: :delegation_allowed,
+      deny: :no_matching_delegation,
+      require_approval: :delegation_requires_approval
+    }.freeze
+    private_constant :STATUSES, :REASON_CODES
 
-    attr_reader :status
+    attr_reader :status, :reason_code
 
     def initialize(status)
       raise ArgumentError, "invalid decision status" unless STATUSES.include?(status)
 
       @status = status
+      @reason_code = REASON_CODES.fetch(status)
       freeze
     end
 

data/lib/acting_for/version.rb

@@ -1,3 +1,3 @@
 module ActingFor
-  VERSION = "0.1.0"
+  VERSION = "0.1.2"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: acting_for
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.2
 platform: ruby
 authors:
 - ChangQuan Cui
 bindir: bin
 cert_chain: []
-date: 1980-01-02 00:00:00.000000000 Z
+date: 2026-11-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rubocop