disarm 0.17.2 → 0.19.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 359f83c7f8f014a863c70caaa5bbea011530f5dc4866013bdd087ce6de77c7b4
-  data.tar.gz: 419a067a9dd9fde079844c8e5047b9be0b88cdb9a0f781a38c3f29a5e120ab10
+  metadata.gz: 1fe7093d6eacd02aaefd2c58728e86cf7722c11eace2868138bc7c8389998469
+  data.tar.gz: 42ae4ab7b64ce29af6fa9026076694bf2a4527f660da846a7931a9fb05ee4cb3
 SHA512:
-  metadata.gz: 9831ccfdd4b6fb49d8f5eb1df058226403fae7afc2ae933118f516fd1203a6e4dcd2c0d1dafd3ab5c63a081aa16013f95203c5df444a5bd8f1b6a5f479bb937a
-  data.tar.gz: a410e078c2b8092815673eaa244d1747a3dbff70e9ddcb789143c77f1617816715ea1dbe8f23fd1bf0231768c704da5c3dd7a197ed91c5af2fa3a7e157a6c741
+  metadata.gz: b2a1582a1a35164a6de6b17b03b89fac792d66c8e9a8097555fb08508bd845525cb015175effc8f84c9dbcad826491da007c0afd23c03d661ad9923bd2029a2d
+  data.tar.gz: 1463ecfca3ce4e3c3a0faec46ed0f4d3ea465cd22a00a262b8eba016c44ad9583821ff031ed906cf2a550d22d213ecc71c1abc6ece33e73e21f85d94e864bcc1

data/NOTICE

@@ -0,0 +1,89 @@
+disarm
+Copyright (c) 2026 Richard Quinn
+Licensed under the MIT License; see LICENSE.
+
+disarm includes data adapted from the following works, which remain under
+their own licences.
+
+confusable-vision
+  (c) 2026 Paul Wood FRSA (@paultendo)
+  https://github.com/paultendo/confusable-vision
+  Data licensed under the Creative Commons Attribution 4.0 International
+  License (CC-BY-4.0): https://creativecommons.org/licenses/by/4.0/
+  The data is provided as-is; see the licence for its disclaimer of warranties.
+
+  Used:
+    data/output/confusable-weights-v2.json (v2026-03-02)
+    data/output/candidate-discoveries.json (2026-02-27 revision)
+    data/output/m2b-verification-report.json (2026-02-27 revision)
+
+  Changed: disarm selects confusable pairs from those files by the admission
+  rules stated in data/confusables_supplement.tsv and
+  data/confusables_vision.tsv, and folds the selected pairs into its confusable
+  tables (src/tables/data/confusables_to_latin.tsv and
+  src/tables/data/confusables_to_cyrillic.tsv). Those tables are compiled into
+  every disarm package. The measurements themselves are not redistributed.
+  The author does not endorse disarm by this credit.
+
+Unicode data
+  Copyright © 1991-2025 Unicode, Inc.
+  https://www.unicode.org/
+  Licensed under the Unicode License v3 (SPDX: Unicode-3.0), reproduced below.
+
+  Used:
+    the Unicode Character Database (UCD): Scripts.txt (vendored as
+      data/Scripts.txt), CaseFolding.txt, DerivedCoreProperties.txt and
+      emoji/emoji-data.txt, and the character properties (General_Category,
+      East_Asian_Width, Bidi_Class, Numeric_Type and others) read through
+      Python's unicodedata module
+    Unicode Security Mechanisms (UTS #39): confusables.txt (vendored as
+      data/confusables.txt)
+    The Ideographic Variation Database (IVD): IVD_Sequences.txt
+    Unicode CLDR emoji annotations: common/annotations/en.xml and
+      common/annotationsDerived/en.xml (vendored as data/cldr/en.xml and
+      data/cldr/en_derived.xml)
+    The version of each, per table, is listed in docs/provenance.md.
+
+  Changed: disarm's generators (scripts/gen_*.py) read these files and write
+  the lookup tables under src/tables/, folding, filtering and re-keying them;
+  the tables are compiled into every disarm package.
+
+  UNICODE LICENSE V3
+
+  COPYRIGHT AND PERMISSION NOTICE
+
+  Copyright © 1991-2025 Unicode, Inc.
+
+  NOTICE TO USER: Carefully read the following legal agreement. BY
+  DOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING DATA FILES, AND/OR
+  SOFTWARE, YOU UNEQUIVOCALLY ACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE
+  TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE, DO NOT
+  DOWNLOAD, INSTALL, COPY, DISTRIBUTE OR USE THE DATA FILES OR SOFTWARE.
+
+  Permission is hereby granted, free of charge, to any person obtaining a
+  copy of data files and any associated documentation (the "Data Files") or
+  software and any associated documentation (the "Software") to deal in the
+  Data Files or Software without restriction, including without limitation
+  the rights to use, copy, modify, merge, publish, distribute, and/or sell
+  copies of the Data Files or Software, and to permit persons to whom the
+  Data Files or Software are furnished to do so, provided that either (a)
+  this copyright and permission notice appear with all copies of the Data
+  Files or Software, or (b) this copyright and permission notice appear in
+  associated Documentation.
+
+  THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
+  KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+  MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF
+  THIRD PARTY RIGHTS.
+
+  IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS NOTICE
+  BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES,
+  OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+  WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+  ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THE DATA
+  FILES OR SOFTWARE.
+
+  Except as contained in this notice, the name of a copyright holder shall
+  not be used in advertising or otherwise to promote the sale, use or other
+  dealings in these Data Files or Software without prior written
+  authorization of the copyright holder.

data/ext/disarm/Cargo.toml

@@ -30,7 +30,7 @@ crate-type = ["cdylib"]
 # dep — not a path — so the gem is self-contained and the rb-sys-dock cross-gem
 # build (which mounts only this gem dir) can fetch it. Imported as `disarm_core`
 # because the package name `disarm` would otherwise clash with this crate.
-disarm_core = { package = "disarm", version = "0.17", default-features = false }
+disarm_core = { package = "disarm", version = "0.19", default-features = false }
 # magnus: ergonomic, safe Ruby<->Rust bindings over rb-sys. 0.8 supports Ruby >= 3.0
 # (the gem's required_ruby_version); rb-sys handles the platform glue.
-magnus = "0.8"
+magnus = "0.9"

data/ext/disarm/src/lib.rs

@@ -916,6 +916,12 @@ fn inspect_anomalies_impl(text: &str, lex: &HashSet<String>) -> AnomalyReportTup
     (r.anomalous, kinds, findings, r.reason)
 }
 
+/// `Disarm._anomaly_severity(kind)` — the level a finding of this kind carries (#946).
+fn anomaly_severity(kind: String) -> Result<String, Error> {
+    let kind: api::AnomalyKind = kind.parse().map_err(|e| map_err(&e))?;
+    Ok(kind.severity().as_str().to_owned())
+}
+
 /// `Disarm._inspect_anomalies(text, lexicon)` — `[anomalous, kinds, findings,
 /// reason]` where each finding is `[kind, token, start, end, detail, reason]` (the
 /// Ruby layer maps it to a hash).
@@ -1078,6 +1084,7 @@ fn init(ruby: &Ruby) -> Result<(), Error> {
     module.define_singleton_method("_list_context_langs", function!(list_context_langs, 0))?;
 
     module.define_singleton_method("_has_anomalies?", function!(has_anomalies, 2))?;
+    module.define_singleton_method("_anomaly_severity", function!(anomaly_severity, 1))?;
     module.define_singleton_method("_inspect_anomalies", function!(inspect_anomalies, 2))?;
 
     // Reusable lexicon handle (HAI-SDLC 6.1): build the HashSet once, reuse it

data/lib/disarm/version.rb

@@ -2,5 +2,5 @@
 
 module Disarm
   # Kept in lockstep with the Rust crate / Python package version.
-  VERSION = "0.17.2"
+  VERSION = "0.19.0"
 end

data/lib/disarm.rb

@@ -633,6 +633,14 @@ module Disarm
       end
     end
 
+    # The level a finding of this kind carries, by the name a report holds: "error" or
+    # "warning", which are SARIF's names. `smuggled` is the one "error", because it fires
+    # only on a run that decodes to readable text. Raises Disarm::InvalidArgument on a
+    # name that is no kind.
+    def anomaly_severity(kind)
+      translate_errors { _anomaly_severity(kind.to_s) }
+    end
+
     # Full anomaly analysis: a hash with `:anomalous`, `:kinds` (in first-appearance
     # order), `:findings` (each `{ kind:, token:, start:, end:, detail:, reason: }`,
     # with byte offsets), and `:reason` (the first finding's reason, or nil).

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: disarm
 version: !ruby/object:Gem::Version
-  version: 0.17.2
+  version: 0.19.0
 platform: ruby
 authors:
 - Richard Quinn
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-09-26 00:00:00.000000000 Z
+date: 2026-11-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rb_sys
@@ -108,6 +108,7 @@ extensions:
 extra_rdoc_files: []
 files:
 - LICENSE
+- NOTICE
 - README.md
 - ext/disarm/Cargo.toml
 - ext/disarm/extconf.rb