diffend-monitor 0.2.28 → 0.2.30

data/lib/diffend/request_verdict.rb

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+require 'json'
+
+module Diffend
+  # Module responsible for fetching diffend verdict on local context
+  module RequestVerdict
+    class << self
+      # @param command [String] either install or update
+      # @param definition [Bundler::Definition] definition for your source
+      # @param config [OpenStruct] diffend config
+      def call(command, config, definition)
+        payload = Diffend::LocalContext.call(command, config.project_id, definition)
+
+        response = Diffend::Request.call(
+          build_request_object(command, config, payload)
+        )
+
+        JSON.parse(response.body)
+      rescue Bundler::GemNotFound
+        raise ::Diffend::Errors::DependenciesResolveException
+      rescue StandardError => e
+        Diffend::HandleErrors::Report.call(
+          exception: e,
+          payload: payload || {},
+          config: config,
+          message: :unhandled_exception,
+          report: true
+        )
+      end
+
+      # @param command [String] either install or update
+      # @param config [OpenStruct] diffend config
+      # @param payload [Hash]
+      #
+      # @return [Diffend::RequestObject]
+      def build_request_object(command, config, payload)
+        Diffend::RequestObject.new(
+          config: config,
+          url: commands_url(command, config.project_id),
+          payload: payload,
+          request_method: :post
+        )
+      end
+
+      # Provides diffend command endpoint url
+      #
+      # @param command [String] either install or update
+      # @param project_id [String] diffend project_id
+      #
+      # @return [String] diffend endpoint
+      def commands_url(command, project_id)
+        return ENV['DIFFEND_COMMAND_URL'] if ENV.key?('DIFFEND_COMMAND_URL')
+
+        "https://my.diffend.io/api/projects/#{project_id}/bundle/#{command}"
+      end
+    end
+  end
+end

data/lib/diffend/track.rb

@@ -11,7 +11,7 @@ module Diffend
     # Initialize tracking
     def initialize
       @mutex = Mutex.new
-      @config = fetch_config
+      @config = Diffend::Config.call
     end
 
     # Start tracking
@@ -50,15 +50,7 @@ module Diffend
 
     # Perform an exec request
     def exec_request
-      Diffend::Voting.call(
-        Diffend::Commands::EXEC,
-        @config,
-        Diffend::BuildBundlerDefinition.call(
-          Diffend::Commands::EXEC,
-          Bundler.default_gemfile,
-          Bundler.default_lockfile
-        )
-      )
+      Diffend::Execute.call(Diffend::Commands::EXEC, @config)
     end
 
     # Perform a track request
@@ -82,17 +74,6 @@ module Diffend
       ).freeze
     end
 
-    # Fetch diffend config file
-    #
-    # @return [OpenStruct, nil] configuration object
-    #
-    # @raise [Errors::MissingConfigurationFile] when no config file
-    def fetch_config
-      Config::Fetcher.call(
-        File.expand_path('..', Bundler.bin_path)
-      )
-    end
-
     # @param project_id [String] diffend project_id
     # @param request_id [String]
     #

data/lib/diffend/version.rb

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+module Diffend
+  # Current version
+  VERSION = '0.2.30'
+end

data/plugins.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
-require 'diffend'
+require 'diffend/plugin'
 
-Diffend.register
+Diffend::Plugin.register

data/scripts/generate_payload_for_file.rb

@@ -3,7 +3,6 @@
 require 'byebug'
 require 'diffend'
 
-
 command = 'install'
 project_id = nil
 
@@ -12,4 +11,4 @@ lockfile = ARGV[1]
 
 definition = Diffend::BuildBundlerDefinition.call(command, gemfile lockfile)
 
-pp Diffend::Voting::Versions::Remote.payload(command, project_id, definition)
+pp Diffend::LocalContext.call(command, project_id, definition)

metadata

@@ -1,41 +1,40 @@
 --- !ruby/object:Gem::Specification
 name: diffend-monitor
 version: !ruby/object:Gem::Version
-  version: 0.2.28
+  version: 0.2.30
 platform: ruby
 authors:
 - Tomasz Pajor
-- Maciej Mensfeld
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain:
 - |
   -----BEGIN CERTIFICATE-----
-  MIIEODCCAqCgAwIBAgIBATANBgkqhkiG9w0BAQsFADAjMSEwHwYDVQQDDBhtYWNp
-  ZWovREM9bWVuc2ZlbGQvREM9cGwwHhcNMjAwODExMDkxNTM3WhcNMjEwODExMDkx
-  NTM3WjAjMSEwHwYDVQQDDBhtYWNpZWovREM9bWVuc2ZlbGQvREM9cGwwggGiMA0G
-  CSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDCpXsCgmINb6lHBXXBdyrgsBPSxC4/
-  2H+weJ6L9CruTiv2+2/ZkQGtnLcDgrD14rdLIHK7t0o3EKYlDT5GhD/XUVhI15JE
-  N7IqnPUgexe1fbZArwQ51afxz2AmPQN2BkB2oeQHXxnSWUGMhvcEZpfbxCCJH26w
-  hS0Ccsma8yxA6hSlGVhFVDuCr7c2L1di6cK2CtIDpfDaWqnVNJEwBYHIxrCoWK5g
-  sIGekVt/admS9gRhIMaIBg+Mshth5/DEyWO2QjteTodItlxfTctrfmiAl8X8T5JP
-  VXeLp5SSOJ5JXE80nShMJp3RFnGw5fqjX/ffjtISYh78/By4xF3a25HdWH9+qO2Z
-  tx0wSGc9/4gqNM0APQnjN/4YXrGZ4IeSjtE+OrrX07l0TiyikzSLFOkZCAp8oBJi
-  Fhlosz8xQDJf7mhNxOaZziqASzp/hJTU/tuDKl5+ql2icnMv5iV/i6SlmvU29QNg
-  LCV71pUv0pWzN+OZbHZKWepGhEQ3cG9MwvkCAwEAAaN3MHUwCQYDVR0TBAIwADAL
-  BgNVHQ8EBAMCBLAwHQYDVR0OBBYEFImGed2AXS070ohfRidiCEhXEUN+MB0GA1Ud
-  EQQWMBSBEm1hY2llakBtZW5zZmVsZC5wbDAdBgNVHRIEFjAUgRJtYWNpZWpAbWVu
-  c2ZlbGQucGwwDQYJKoZIhvcNAQELBQADggGBAKiHpwoENVrMi94V1zD4o8/6G3AU
-  gWz4udkPYHTZLUy3dLznc/sNjdkJFWT3E6NKYq7c60EpJ0m0vAEg5+F5pmNOsvD3
-  2pXLj9kisEeYhR516HwXAvtngboUcb75skqvBCU++4Pu7BRAPjO1/ihLSBexbwSS
-  fF+J5OWNuyHHCQp+kGPLtXJe2yUYyvSWDj3I2//Vk0VhNOIlaCS1+5/P3ZJThOtm
-  zJUBI7h3HgovwRpcnmk2mXTmU4Zx/bCzX8EA6VY0khEvnmiq7S6eBF0H9qH8KyQ6
-  EkVLpvmUDFcf/uNaBQdazEMB5jYtwoA8gQlANETNGPi51KlkukhKgaIEDMkBDJOx
-  65N7DzmkcyY0/GwjIVIxmRhcrCt1YeCUElmfFx0iida1/YRm6sB2AXqScc1+ECRi
-  2DND//YJUikn1zwbz1kT70XmHd97B4Eytpln7K+M1u2g1pHVEPW4owD/ammXNpUy
-  nt70FcDD4yxJQ+0YNiHd0N8IcVBM1TMIVctMNQ==
+  MIIERDCCAqygAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBt0b21l
+  ay9EQz1wb2xpc2hnZWVrcy9EQz1jb20wHhcNMjAwNzA3MTY0NjU0WhcNMjEwNzA3
+  MTY0NjU0WjAmMSQwIgYDVQQDDBt0b21lay9EQz1wb2xpc2hnZWVrcy9EQz1jb20w
+  ggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDPRTvPuofdtL/wFEPOwPUr
+  vR0XHzM/ADb2GBuzu6fzgmoxaYXBe8A++0BbgFvK47T04i8bsbXnfkxrkz/nupQ5
+  SK2DPgS4HWnADuyBuyBY7LT4O1wwlytdlHtJgQV6NIcbprcOs/ZQKnimZpW9uByu
+  FoN3i94pAEQhuzK0S+wWPvSm22+6XGtCuOzyFGdnCJjGUOkCRno5Nx34MWz0NpJ3
+  9Ekkyy8g2cLvBcUdfeSrY7WsJ5cPCNrBs5cMuV426s1dDrhuvsW+sacwwY/4/LBw
+  JzEX4/zS+lsVIX+iOoIFGJdeGnpEWqKgWoaskxqseFi661td1n9UaMXxgoaYh/oX
+  3fJOy2jsZFboZ/eJ5rfciXLiCqSERGkEA+QcA2/jC/d77YJ1FfJW9uwJs3kptf4D
+  p6h8wuA3T6rN4QrxkGBYzOfUJ2zSQy1cFu0rTZiYdKo9X6BunnxhmUExNng7advu
+  qo8IDinyRlqA5+sOLXd4W3AS/RfF2nrayZNa3khTmmUCAwEAAaN9MHswCQYDVR0T
+  BAIwADALBgNVHQ8EBAMCBLAwHQYDVR0OBBYEFHRFOZPwpgOd2m8FIOodOii+OiID
+  MCAGA1UdEQQZMBeBFXRvbWVrQHBvbGlzaGdlZWtzLmNvbTAgBgNVHRIEGTAXgRV0
+  b21la0Bwb2xpc2hnZWVrcy5jb20wDQYJKoZIhvcNAQELBQADggGBAKWFwYTGZVoy
+  Bj3L9lvGOXpz8VWNoptFNHdncpaw1MMhS8UHcPQOUEiExX5ZH7MARy1fBjMXzIh9
+  41ZpCjR+S6uCEpzUcg5Z/kEWa/wOW6tqrX+zfyxFATDI20pYaQWOLepjbDxePFMZ
+  GAlIX5UNsze04A+wArXAttZB4oPt6loS1ao0GNdMb+syYMLzZUTW/sY2rm8zP4Mz
+  Kt+zjoqMxQ1Jf+EwH+0uq8Tj5BJcmG6mWYM+ljvRbxBwfimoUBUCQe6KIDouF0Og
+  uwLMY7X3jSERta4SxyY+iY7qNLsmG370GIGYbHuIiCwubFXt8jiPJZEdPE1xuzVF
+  CLsYItzC28UQEWrVe6sJ0Fuqv5VHM6t8jNClkXDwzf95efFlGSCFN4t+/dywVIK8
+  9MmF6uCQa1EjK2p8tYT0MnbHrFkoehxdX4VO9y99GAkhZyJNKPYPtyAUFV27sT2V
+  LfCJRk4ifKIN/FUCwDSn8Cz0m6oH265q0p6wdzI6qrWOjP8tGOMBTA==
   -----END CERTIFICATE-----
-date: 2020-09-19 00:00:00.000000000 Z
+date: 2020-09-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -65,7 +64,7 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description: 
+description:
 email:
 - contact@diffend.io
 executables: []
@@ -95,28 +94,35 @@ files:
 - lib/diffend.rb
 - lib/diffend/build_bundler_definition.rb
 - lib/diffend/commands.rb
+- lib/diffend/config.rb
 - lib/diffend/config/fetcher.rb
 - lib/diffend/config/file_finder.rb
 - lib/diffend/config/validator.rb
 - lib/diffend/errors.rb
+- lib/diffend/execute.rb
 - lib/diffend/handle_errors/build_exception_payload.rb
 - lib/diffend/handle_errors/display_to_stdout.rb
 - lib/diffend/handle_errors/messages.rb
 - lib/diffend/handle_errors/report.rb
+- lib/diffend/local_context.rb
+- lib/diffend/local_context/diffend.rb
+- lib/diffend/local_context/host.rb
+- lib/diffend/local_context/packages.rb
+- lib/diffend/local_context/platform.rb
 - lib/diffend/monitor.rb
+- lib/diffend/plugin.rb
 - lib/diffend/request.rb
 - lib/diffend/request_object.rb
+- lib/diffend/request_verdict.rb
 - lib/diffend/track.rb
-- lib/diffend/voting.rb
-- lib/diffend/voting/versions/local.rb
-- lib/diffend/voting/versions/remote.rb
+- lib/diffend/version.rb
 - plugins.rb
 - scripts/generate_payload_for_file.rb
 homepage: https://diffend.io
 licenses:
 - Prosperity Public License
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -124,15 +130,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 2.5.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.4
-signing_key: 
+rubygems_version: 3.1.2
+signing_key:
 specification_version: 4
-summary: OSS supply chain security and management platform.
+summary: OSS supply chain security and management platform
 test_files: []

data/lib/diffend/voting/versions/local.rb

@@ -1,304 +0,0 @@
-# frozen_string_literal: true
-
-module Diffend
-  module Voting
-    # Module responsible for handling both local and remote gem versions
-    module Versions
-      # Module responsible for preparing current or current/new versions of gems
-      class Local
-        # Definition of a local path, if it matches it means that we are the source
-        ME_PATH = '.'
-        # Sources that we expect to match ourselves too
-        ME_SOURCES = [
-          Bundler::Source::Gemspec,
-          Bundler::Source::Path
-        ].freeze
-        # List of dependency types
-        DEPENDENCIES_TYPES = {
-          direct: 0,
-          dependency: 1
-        }.freeze
-        # List of sources types
-        SOURCES_TYPES = {
-          valid: 0,
-          multiple_primary: 1
-        }.freeze
-        # List of gem sources types
-        GEM_SOURCES_TYPES = {
-          local: 0,
-          gemfile_source: 1,
-          gemfile_git: 2,
-          gemfile_path: 3
-        }.freeze
-
-        class << self
-          # @param command [String] either install or update
-          # @param definition [Bundler::Definition] definition for your source
-          def call(command, definition)
-            Bundler.ui.silence { definition.resolve_remotely! }
-
-            instance = new(definition)
-
-            case command
-            when Commands::INSTALL, Commands::EXEC then instance.build_install
-            when Commands::UPDATE then instance.build_update
-            else
-              raise ArgumentError, "invalid command: #{command}"
-            end
-          end
-        end
-
-        # @param definition [Bundler::Definition] definition for your source
-        #
-        # @return [Hash] local dependencies
-        def initialize(definition)
-          @definition = definition
-          @direct_dependencies = Hash[definition.dependencies.map { |val| [val.name, val] }]
-          # Support case without Gemfile.lock
-          @locked_specs = @definition.locked_gems ? @definition.locked_gems.specs : []
-        end
-
-        # Build install specification
-        #
-        # @return [Hash]
-        def build_install
-          hash = build_main
-
-          @definition.specs.each do |spec|
-            next if skip?(spec.source)
-
-            locked_spec = @locked_specs.find { |s| s.name == spec.name }
-
-            hash['dependencies'][spec.name] = {
-              'platform' => build_spec_platform(spec, locked_spec),
-              'source' => build_spec_source(spec),
-              'type' => build_dependency_type(spec.name),
-              'versions' => build_versions(spec, locked_spec)
-            }
-          end
-
-          hash
-        end
-
-        # Build update specification
-        #
-        # @return [Hash]
-        def build_update
-          hash = build_main
-
-          @definition.specs.each do |spec|
-            next if skip?(spec.source)
-
-            locked_spec = @locked_specs.find { |s| s.name == spec.name }
-
-            hash['dependencies'][spec.name] = {
-              'platform' => build_spec_platform(spec, locked_spec),
-              'source' => build_spec_source(spec),
-              'type' => build_dependency_type(spec.name),
-              'versions' => build_versions(spec, locked_spec)
-            }
-          end
-
-          hash
-        end
-
-        private
-
-        # Build default specification
-        #
-        # @return [Hash]
-        def build_main
-          {
-            'dependencies' => {},
-            'sources' => build_sources,
-            'plugins' => {},
-            'platforms' => @definition.platforms.map(&:to_s)
-          }
-        end
-
-        # Build gem versions
-        #
-        # @param spec [Bundler::StubSpecification, Bundler::LazySpecification, Gem::Specification]
-        # @param locked_spec [Bundler::LazySpecification, Gem::Specification, NilClass]
-        #
-        # @return [Array<String>]
-        def build_versions(spec, locked_spec = nil)
-          if locked_spec && locked_spec.version.to_s != spec.version.to_s
-            [locked_spec.version.to_s, spec.version.to_s]
-          else
-            [spec.version.to_s]
-          end
-        end
-
-        # @param specs [Array] specs that are direct dependencies
-        # @param name [String] spec name
-        #
-        # @return [Boolean] dependency type
-        def build_dependency_type(name)
-          if @direct_dependencies.key?(name)
-            DEPENDENCIES_TYPES[:direct]
-          else
-            DEPENDENCIES_TYPES[:dependency]
-          end
-        end
-
-        # Build gem platform
-        #
-        # @param spec [Bundler::StubSpecification, Bundler::LazySpecification, Gem::Specification]
-        # @param locked_spec [Bundler::LazySpecification, Gem::Specification, NilClass]
-        #
-        # @return [String]
-        def build_spec_platform(spec, locked_spec)
-          parse_platform(
-            spec.platform || locked_spec&.platform || spec.send(:generic_local_platform)
-          )
-        end
-
-        # Parse gem platform
-        #
-        # @param platform [String, Gem::Platform]
-        #
-        # @return [String]
-        def parse_platform(platform)
-          case platform
-          when String then platform
-          when Gem::Platform then platform.os
-          end
-        end
-
-        # Build gem source type
-        #
-        # @param source [Bundler::Source] gem source type
-        #
-        # @return [Integer] internal gem source type
-        def build_spec_gem_source_type(source)
-          case source
-          when Bundler::Source::Metadata
-            GEM_SOURCES_TYPES[:local]
-          when Bundler::Source::Rubygems, Bundler::Source::Rubygems::Remote
-            GEM_SOURCES_TYPES[:gemfile_source]
-          when Bundler::Source::Git
-            GEM_SOURCES_TYPES[:gemfile_git]
-          when Bundler::Source::Path
-            GEM_SOURCES_TYPES[:gemfile_path]
-          else
-            raise ArgumentError, "unknown source #{source.class}"
-          end
-        end
-
-        # Build gem source
-        #
-        # @param spec [Bundler::StubSpecification, Bundler::LazySpecification, Gem::Specification]
-        #
-        # @return [Hash]
-        def build_spec_source(spec)
-          source = source_for_spec(spec)
-
-          {
-            'type' => build_spec_gem_source_type(source),
-            'value' => source_name_from_source(source)
-          }
-        end
-
-        # Figure out source for gem
-        #
-        # @param spec [Bundler::StubSpecification, Bundler::LazySpecification, Gem::Specification]
-        #
-        # @return [Bundler::Source] gem source type
-        def source_for_spec(spec)
-          return spec.remote if spec.remote
-
-          case spec.source
-          when Bundler::Source::Rubygems
-            spec
-              .source
-              .send(:remote_specs)
-              .search(Bundler::Dependency.new(spec.name, spec.version))
-              .last
-              .remote
-          when Bundler::Source::Metadata, Bundler::Source::Git, Bundler::Source::Path
-            spec.source
-          else
-            raise ArgumentError, "unknown source #{spec.source.class}"
-          end
-        end
-
-        # Build gem source name
-        #
-        # @param source [Bundler::Source] gem source type
-        #
-        # @return [String]
-        def source_name_from_source(source)
-          case source
-          when Bundler::Source::Metadata
-            ''
-          when Bundler::Source::Rubygems::Remote
-            source_name(source.anonymized_uri)
-          when Bundler::Source::Git
-            source.instance_variable_get(:@safe_uri)
-          when Bundler::Source::Path
-            source.path
-          else
-            raise ArgumentError, "unknown source #{source.class}"
-          end
-        end
-
-        # @param uri [Bundler::URI]
-        #
-        # @return [String]
-        def source_name(uri)
-          uri.to_s[0...-1]
-        end
-
-        # Build sources used in the Gemfile
-        #
-        # @return [Array<Hash>]
-        def build_sources
-          sources = @definition.send(:sources).rubygems_sources
-          hash = {}
-
-          sources.each do |source|
-            type = build_source_type(source.remotes)
-
-            source.remotes.each do |src|
-              hash[source_name(src)] = type
-            end
-          end
-
-          hash.map { |name, type| { 'name' => name, 'type' => type } }
-        end
-
-        # Build gem source type
-        #
-        # @param remotes [Array<Bundler::URI>]
-        #
-        # @return [Integer] internal source type
-        def build_source_type(remotes)
-          remotes.count > 1 ? SOURCES_TYPES[:multiple_primary] : SOURCES_TYPES[:valid]
-        end
-
-        # Checks if we should skip a source
-        #
-        # @param source [Bundler::Source] gem source type
-        #
-        # @return [Boolean] true if we should skip this source, false otherwise
-        def skip?(source)
-          return true if me?(source)
-
-          false
-        end
-
-        # Checks if it's a self source, this happens for repositories that are a gem
-        #
-        # @param source [Bundler::Source] gem source type
-        #
-        # @return [Boolean] true if it's a self source, false otherwise
-        def me?(source)
-          return false unless ME_SOURCES.include?(source.class)
-
-          source.path.to_s == ME_PATH
-        end
-      end
-    end
-  end
-end