chamber 3.0.1 → 3.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9e37ed83e4c76419880c6abbfdc967f2e82a6fc8824b868904cae1fcb26878d0
-  data.tar.gz: a61415b6fcce618cbd452a7373b22b3ea1093cb8150b12df6798021743ff02d3
+  metadata.gz: d3c926bcc85c9ee059234c9c2098bf1ae3856fe8fbd104b5fb735c9e9563b544
+  data.tar.gz: 1a95f2a3b154ac32cddb9b57634897c83e963401feb1a53445b63f92ef70ee33
 SHA512:
-  metadata.gz: c55d1d457aa0a4d908d4be0e790dc86f10895a2d6514613e1d2d27bfb6ebbde69a7d5e4bb4f0695e6f8da1d993f7d820644b3a975b88d2d91237936c15a6c5e3
-  data.tar.gz: d0cecb00b849c518ac20f1fefd6c76029e6dbd6a54a9676b28a94529a7df5da9e8a0ef8ea2301cfc9460a627ae168bbab3f07954a48931e5c9a9dd1d60d8f087
+  metadata.gz: 0e606a46915ca345ce0d5983fcd03a2a1befbfc01bd0bfae11db4533c2fd860caf05fe51bb1a1b5a2c5f3c636f88822b21c30cc89b7e321164ba578651412b5e
+  data.tar.gz: 86d7d2379a89dc954d8c253a22ddaa1eedca2def81f24471205dda362a8225e34d1956b57f9b8181431c0571f248276e8407dce1520fcaca769bffe95b8d754f

data/lib/chamber/binary/runner.rb

@@ -5,6 +5,7 @@ require 'chamber/rubinius_fix'
 require 'chamber/commands/show'
 require 'chamber/commands/files'
 require 'chamber/commands/secure'
+require 'chamber/commands/unsecure'
 require 'chamber/commands/sign'
 require 'chamber/commands/verify'
 require 'chamber/commands/compare'
@@ -137,6 +138,21 @@ class   Runner < Thor
 
   ################################################################################
 
+  desc 'unsecure',
+       'Decrypts all encrypted values using the current key(s)' \
+
+  method_option :dry_run,
+                type:    :boolean,
+                aliases: '-d',
+                desc:    'Does not actually decrypt anything, but instead displays ' \
+                         'what values would be decrypted'
+
+  def unsecure
+    Commands::Unsecure.call(**options.transform_keys(&:to_sym).merge(shell: self))
+  end
+
+  ################################################################################
+
   desc 'sign',
        'Creates or verifies signatures for all current settings files using ' \
        'the signature private key.'

data/lib/chamber/commands/show.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require 'pp'
 require 'chamber/commands/base'
 
 module  Chamber

data/lib/chamber/commands/unsecure.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+require 'chamber/commands/base'
+require 'chamber/commands/securable'
+
+module  Chamber
+module  Commands
+class   Unsecure < Chamber::Commands::Base
+  include Chamber::Commands::Securable
+
+  def initialize(**args)
+    super(**args.merge(namespaces: ['*']))
+  end
+
+  def call
+    disable_warnings do
+      current_settings.secure.to_environment.each_key do |key|
+        color = dry_run ? :blue : :green
+
+        shell.say_status 'decrypt', key, color
+      end
+    end
+
+    chamber.unsecure unless dry_run
+  end
+
+  private
+
+  def disable_warnings
+    $stderr = ::File.open('/dev/null', 'w')
+
+    yield
+
+    $stderr = STDERR
+  end
+end
+end
+end

data/lib/chamber/context_resolver.rb

@@ -18,7 +18,7 @@ class   ContextResolver
     self.options = args
   end
 
-  # rubocop:disable Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity, Metrics/AbcSize, Layout/LineLength
+  # rubocop:disable Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity, Metrics/AbcSize, Layout/LineLength, Lint/SelfAssignment
   def resolve
     options[:rootpath]   ||= Pathname.pwd
     options[:rootpath]     = Pathname.new(options[:rootpath])
@@ -50,7 +50,7 @@ class   ContextResolver
 
     options
   end
-  # rubocop:enable Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity, Metrics/AbcSize, Layout/LineLength
+  # rubocop:enable Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity, Metrics/AbcSize, Layout/LineLength, Lint/SelfAssignment
 
   protected
 

data/lib/chamber/file.rb

@@ -49,7 +49,7 @@ class   File < Pathname
     self.encryption_keys = encryption_keys
     self.signature_name  = signature_name
 
-    super path
+    super(path)
   end
 
   ###
@@ -107,6 +107,43 @@ class   File < Pathname
   end
   # rubocop:enable Layout/LineLength, Metrics/AbcSize
 
+  # rubocop:disable Metrics/AbcSize
+  def decrypt
+    decrypted_settings = to_settings.decrypted.to_flattened_name_hash
+    secure_settings    = to_settings.encrypted.to_flattened_name_hash
+    file_contents      = read
+
+    decrypted_settings.each_pair do |name_pieces, decrypted_value|
+      encrypted_value = secure_settings[name_pieces]
+
+      next unless encrypted_value.is_a?(String)
+
+      escaped_name      = Regexp.escape(name_pieces.last)
+      escaped_value     = Regexp.escape(encrypted_value)
+      line_pattern      = /^(\s*)#{escaped_name}(\s*):(\s*)#{escaped_value}$/
+      indentation_level = file_contents
+                            .match(line_pattern)
+                            &.[](1)
+                            &.<<('  ')
+
+      if decrypted_value.include?("\n")
+        decrypted_value = decrypted_value
+                            .chomp
+                            .gsub("\n", "\n#{indentation_level}")
+                            .prepend("|\n#{indentation_level}")
+      end
+
+      file_contents
+        .sub!(
+          line_pattern,
+          "\\1#{name_pieces.last}\\2:\\3#{decrypted_value}",
+        )
+    end
+
+    write(file_contents)
+  end
+  # rubocop:enable Metrics/AbcSize
+
   def sign
     signature_key_contents = decryption_keys[:signature]
 

data/lib/chamber/file_set.rb

@@ -192,6 +192,10 @@ class   FileSet
     files.each(&:secure)
   end
 
+  def unsecure
+    files.each(&:decrypt)
+  end
+
   def sign
     files.each(&:sign)
   end

data/lib/chamber/instance.rb

@@ -38,6 +38,10 @@ class   Instance
     files.secure
   end
 
+  def unsecure
+    files.unsecure
+  end
+
   def sign
     files.sign
   end

data/lib/chamber/key_pair.rb

@@ -58,7 +58,7 @@ class  KeyPair
   private
 
   def encrypted_private_key
-    @encrypted_private_key ||= \
+    @encrypted_private_key ||=
       unencrypted_private_key.export(encryption_cipher, passphrase)
   end
 

data/lib/chamber/settings.rb

@@ -286,6 +286,21 @@ class   Settings
                  ))
   end
 
+  def decrypted
+    Settings.new(**metadata.merge(
+                   settings:     raw_data,
+                   post_filters: [Filters::DecryptionFilter],
+                 ))
+  end
+
+  def encrypted
+    Settings.new(**metadata.merge(
+                   settings:     raw_data,
+                   pre_filters:  [Filters::EncryptionFilter],
+                   post_filters: [],
+                 ))
+  end
+
   def insecure
     Settings.new(**metadata.merge(
                    settings:     raw_data,
@@ -302,14 +317,14 @@ class   Settings
   # rubocop:disable Naming/MemoizedInstanceVariableName
   def raw_data
     @filtered_raw_data ||= pre_filters.inject(@raw_data) do |filtered_data, filter|
-      filter.execute(**{ data: filtered_data }.merge(metadata))
+      filter.execute(data: filtered_data, **metadata)
     end
   end
   # rubocop:enable Naming/MemoizedInstanceVariableName
 
   def data
     @data ||= post_filters.inject(raw_data) do |filtered_data, filter|
-      filter.execute(**{ data: filtered_data }.merge(metadata))
+      filter.execute(data: filtered_data, **metadata)
     end
   end
 

data/lib/chamber/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Chamber
-  VERSION = '3.0.1'
+  VERSION = '3.1.1'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: chamber
 version: !ruby/object:Gem::Version
-  version: 3.0.1
+  version: 3.1.1
 platform: ruby
 authors:
 - thekompanee
@@ -38,7 +38,7 @@ cert_chain:
   Z6HMkN0PHJ6eG0Zl3/H4H8Xb+KreWlEx3sXXfZj6UscrdHAVffRQnM1E98PCqnRX
   l5EwT4ShG/HorJMQSTY1EoBLZf54NrD5WlWcfM0CLrcvT7QM77dIqmue
   -----END CERTIFICATE-----
-date: 2023-03-07 00:00:00.000000000 Z
+date: 2024-10-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor
@@ -155,6 +155,7 @@ files:
 - lib/chamber/commands/show.rb
 - lib/chamber/commands/sign.rb
 - lib/chamber/commands/travis.rb
+- lib/chamber/commands/unsecure.rb
 - lib/chamber/commands/verify.rb
 - lib/chamber/configuration.rb
 - lib/chamber/context_resolver.rb