clamo 0.8.0 → 0.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 97084b2761bd6af3549fd2444f981da0a23ce6f1ebbc740f4c2fb237e90ee1fe
-  data.tar.gz: dde0cc4f7187bc58aeb2d1be4169f3cc6331d4008c7a10539317cb80e2a68480
+  metadata.gz: e1a61a818aab987fe6d621d2f3bf642fd7993044933b0b258f2a515d896bb7a5
+  data.tar.gz: b68b313c737400cda3d739902d1d2d498a2d28344cf9cc0afc5c8b481850bcb5
 SHA512:
-  metadata.gz: 18a87542a9340025ff18f60594ae32e941bca85f4f268c2dd99ca207dc2c4296c74f2809531e7e43034f27219b4d43fec4f380f61def8e37af6477fa979c273e
-  data.tar.gz: 976d81d554ff643ddfcbbaa5185094fda802657b5adee586d60e7c31e7aee27b0f6f141263f23dc8ebbc4d7b0a288beb3e1dc78a41b4209c18c266f2c64931a8
+  metadata.gz: b2a1ac30f5f40c035d683d54a36c0164ea24dc56b8ca9af694de499862732faf22cc572029e6bfac1f05413c4d4cf56a737b9b29af96b870fcf23eee5305e756
+  data.tar.gz: ccb5a26f16ab0492e3d77e27eeed648e26b6fdcb9bda59c37a264cc3e419ba45a77bede078863e9ea18dface1f9f5c0be13a1629e6b37d4a8fb2da2f8cc291b4

data/CHANGELOG.md

@@ -4,6 +4,21 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.9.0] - 2026-03-14
+
+### Changed
+
+- **Breaking:** All response and request builder hashes now use string keys (`"jsonrpc"`, `"result"`, `"id"`, `"error"`) instead of symbol keys. This makes the entire pipeline consistent — `JSON.parse` produces string keys, `normalize_request_keys` uses string keys, and now responses match. Callers using the lower-level `parsed_dispatch_to_object` or `unparsed_dispatch_to_object` must update hash access from `response[:result]` to `response["result"]`. The `handle` method (JSON string in/out) is unaffected.
+- `after_dispatch` hook now receives the actual return value for notifications. Previously always passed `nil`; now passes the value returned by the dispatched method.
+
+### Fixed
+
+- **Security:** `method_known?` no longer exposes inherited `Module` methods (`define_method`, `class_eval`, `const_set`, `freeze`, `include`, and 55 others) on module-based service objects. The previous `public_methods(false)` implementation included these; the new `public_method_defined?` check restricts dispatch to methods explicitly defined on the service object.
+
+### Internal
+
+- `method_known?` replaced array-allocating `public_methods(false).map(&:to_sym).include?` with zero-allocation `public_method_defined?` lookups. Handles both module targets (singleton class) and class instance targets (class + singleton class).
+
 ## [0.8.0] - 2026-03-14
 
 ### Added

data/README.md

@@ -43,7 +43,7 @@ response = Clamo::Server.unparsed_dispatch_to_object(
   request: '{"jsonrpc": "2.0", "method": "add", "params": [1, 2], "id": 1}',
   object: MyService
 )
-# => {jsonrpc: "2.0", result: 3, id: 1}
+# => {"jsonrpc" => "2.0", "result" => 3, "id" => 1}
 
 # From a pre-parsed hash
 response = Clamo::Server.parsed_dispatch_to_object(
@@ -82,7 +82,7 @@ batch_response = Clamo::Server.unparsed_dispatch_to_object(
 )
 
 puts batch_response
-# => [{jsonrpc: "2.0", result: 3, id: 1}, {jsonrpc: "2.0", result: 2, id: 2}]
+# => [{"jsonrpc" => "2.0", "result" => 3, "id" => 1}, {"jsonrpc" => "2.0", "result" => 2, "id" => 2}]
 ```
 
 ### Notifications
@@ -112,7 +112,7 @@ request = Clamo::JSONRPC.build_request(
 )
 
 puts request
-# => {jsonrpc: "2.0", method: "add", params: [1, 2], id: 1}
+# => {"jsonrpc" => "2.0", "method" => "add", "params" => [1, 2], "id" => 1}
 ```
 
 ## Error Handling

data/lib/clamo/jsonrpc.rb

@@ -35,26 +35,26 @@ module Clamo
 
         validate_params_type!(opts[:params]) if opts.key?(:params)
 
-        { jsonrpc: "2.0", method: opts[:method] }
-          .then { |r| opts.key?(:params) ? r.merge(params: opts[:params]) : r }
-          .then { |r| opts.key?(:id) ? r.merge(id: opts[:id]) : r }
+        { "jsonrpc" => "2.0", "method" => opts[:method] }
+          .then { |r| opts.key?(:params) ? r.merge("params" => opts[:params]) : r }
+          .then { |r| opts.key?(:id) ? r.merge("id" => opts[:id]) : r }
       end
 
       def build_result_response(id:, result:)
-        { jsonrpc: "2.0", result: result, id: id }
+        { "jsonrpc" => "2.0", "result" => result, "id" => id }
       end
 
       def build_error_response(**opts)
         raise ArgumentError, "error code is required" unless opts.dig(:error, :code)
         raise ArgumentError, "error message is required" unless opts.dig(:error, :message)
 
-        { jsonrpc: "2.0",
-          id: opts[:id],
-          error: {
-            code: opts.dig(:error, :code),
-            message: opts.dig(:error, :message),
-            data: opts.dig(:error, :data)
-          }.reject { |k, _| k == :data && !opts[:error].key?(:data) } }
+        { "jsonrpc" => "2.0",
+          "id" => opts[:id],
+          "error" => {
+            "code" => opts.dig(:error, :code),
+            "message" => opts.dig(:error, :message),
+            "data" => opts.dig(:error, :data)
+          }.reject { |k, _| k == "data" && !opts[:error].key?(:data) } }
       end
 
       def build_error_response_from(descriptor:, id: nil)

data/lib/clamo/server.rb

@@ -74,7 +74,13 @@ module Clamo
       end
 
       def method_known?(object:, method:)
-        object.public_methods(false).map(&:to_sym).include?(method.to_sym)
+        name = method.to_sym
+        if object.is_a?(Module)
+          object.singleton_class.public_method_defined?(name, false)
+        else
+          object.class.public_method_defined?(name, false) ||
+            object.singleton_class.public_method_defined?(name, false)
+        end
       end
 
       def dispatch_to_ruby(object:, method:, params:)
@@ -152,8 +158,8 @@ module Clamo
         method = request["method"]
         params = request["params"]
         config.before_dispatch&.call(method, params)
-        with_timeout(config.timeout) { block.yield(method, params) }
-        config.after_dispatch&.call(method, params, nil)
+        result = with_timeout(config.timeout) { block.yield(method, params) }
+        config.after_dispatch&.call(method, params, result)
         nil
       rescue StandardError => e
         config.on_error&.call(e, method, params)

data/lib/clamo/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Clamo
-  VERSION = "0.8.0"
+  VERSION = "0.9.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: clamo
 version: !ruby/object:Gem::Version
-  version: 0.8.0
+  version: 0.9.0
 platform: ruby
 authors:
 - Andriy Tyurnikov