eco-rake 0.3.2 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7a1ba96010109294f444deef656029ca05be31e9b099c0a5cb3b7ff824c66483
-  data.tar.gz: 5796ba024c12bf269d8791ee0c7be547ebbf14aaa94e788bb234313eeb7cd4f8
+  metadata.gz: 353d8e00a1f5ed96338ccbd9951ee6bd798531cb96f82e1c8c611cc21462f263
+  data.tar.gz: 7477b263eb7234f94b3d3bc15131ff0e90bfe635f843593c29f2b037d5bf364b
 SHA512:
-  metadata.gz: 84a590632c68ed9e0cffb835db1d8a1863356265e4749814de67af2a06f55a4c41399d4ddae5f251231423af47bbf156b5d46f5a400ecb05cfcb2a95452dc22b
-  data.tar.gz: '0081f5eb3714944a67b4b0231cc6a06f50fd57f5ae9a472d10858b92be0d0281a24690d01c36ce2bdf1ee37617a212a09f868d19f1ff7f948a88a905dc9a2876'
+  metadata.gz: 648d75aa71b1dd589474c8298451f8b27a4275603f6a59523d9f2798aca93435458f91d03fe22aa7055dc4362dfcd049b049f87af6fa571e58c290709062488b
+  data.tar.gz: bd4491278b7d79ba9d4e2b4a4c7955ce7ce759952122182afdc413d16df8a405da18182892a6af145f310069403aeea9f21cf9f112a885aa54f48c3b49673b69

data/CHANGELOG.md

@@ -2,7 +2,59 @@
 
 All notable changes to this project will be documented in this file.
 
-## [0.3.3] - 2025-11-xx
+## [Unreleased]
+
+## [0.4.0] - 2026-10-03
+
+### Changed
+
+- BREAKING (hence 0.4.0): `Shell::Gpg#decrypt_command` now RUNS gpg and returns its exit status
+  (`Integer`) instead of returning a command `String` for the caller to `sh`. Fleet sweep
+  2026-10-02: no consumer calls it (the consumers' own `decrypt_command` methods are private
+  wrappers of other tools), and the consumers pin `~> 0.3` / `< 0.2`, so none picks this up
+  without a deliberate bump.
+
+### Security
+
+- `Shell::Gpg#decrypt_command` no longer interpolates the gpg passphrase into a shell
+  string: the passphrase now travels on the child process' stdin (`--passphrase-fd 0`,
+  with `--batch --yes`, plus `--pinentry-mode=loopback` on `gpg >= 2.1`, same version
+  detection as before), and the rest of the command is built as an argv array run via
+  `Open3.capture2e` -- no shell is ever invoked, so there is no `sh -c`/`cmd /c` quoting
+  surface and the passphrase never reaches `argv` (previously visible in the process
+  list for the life of the `gpg` child). `Shell::Command#sh_default_block` (the generic
+  failure-echo used by `sh_continue`/`sh_exit_on_fail`) now redacts any `--passphrase`/
+  `--passphrase-fd` fragment before printing a failed command, and the gpg failure path
+  logs a redacted argv instead of a raw command string, closing the log leak an
+  internal secrets-in-commands audit found alongside the argv exposure. `decrypt_command`'s return value changed
+  from a shell-command `String` (the vulnerability itself) to the process exit status
+  (`Integer`) -- `Lib::Files::Decrypt#task` was updated accordingly; any other caller
+  relying on the old `String` return should check for this.
+
+### Fixed
+
+- Gemspec `spec.files` allowlisted by ROOT DIRECTORY (`lib/`) rather than by full path, so any
+  non-`.rb` file added under `lib/` shipped silently. `spec.files` is now a full-path allowlist
+  -- `lib/**/*.rb` plus `README.md` / `CHANGELOG.md` / `LICENSE` at the root -- intersected
+  with `git ls-files`. Also dropped the dead `spec.bindir` / `spec.executables` clause: it read
+  `spec.files` before that was ever assigned (always empty regardless of `exe/` contents), and
+  `exe/` itself carries no tracked files today, so a bare directory-prefix executables clause
+  was the same disguised-denylist defect this standard forbids. `spec/packaging_spec.rb` pins
+  the allowlist so this cannot regress silently again. Standard:
+  `governance/gem-packaging-and-publish-gate` in ep-ai-standards.
+
+## [0.3.5] - 2026-07-17
+
+### Added
+
+- `Lib::Task::RunnerLaunch#notify_exception` — a base exception notifier for task
+  runners. Honours the standard `eco-rake` suppression convention (`-no-email` and
+  `-simulate` suppress the email unless `-notify` forces it). Provides a single
+  chokepoint so per-runner subclasses no longer need their own copy (the copies
+  omitted the `no_email` guard, which leaked exception emails to customers during
+  `-no-email` runs).
+
+## [0.3.4] - 2026-04-xx
 
 ### Added
 
@@ -10,6 +62,16 @@ All notable changes to this project will be documented in this file.
 
 ### Fixed
 
+## [0.3.3] - 2026-04-15
+
+### Added
+
+- new option `no-sftp-pull` for data extracts.
+
+### Fixed
+
+- upgraded `rake-commander`
+
 ## [0.3.2] - 2025-11-22
 
 ### Fixed

data/README.md

@@ -27,3 +27,13 @@ See {file:CHANGELOG.md} for a list of changes.
 To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
 
 For more info on available `Rake` tasks: `rake -T`
+
+<!-- audit-status:start -->
+### Fleet audit status
+
+This repo is under the Fleet Audit & Amendment Programme (FAAP). No audit run yet -- this is the notice MR; the first `granular`-tier run populates this block with counts by severity and status.
+
+Guidelines (read before any change): `docs/audits/guidelines.md`
+Deviations register: `docs/audits/deviations.md`
+Run index: `docs/audits/README.md`
+<!-- audit-status:end -->

data/lib/eco-rake/lib/export/payload.rb

@@ -20,7 +20,8 @@ class EcoRake
           col_sep:   ->(sep)  { "-col-sep #{sep}"     },
           multi_sep: ->(sep)  { "-multi-sep #{sep}"   },
           full:      ->(full) { full ? nil : '-delta' },
-          asat:      ->(asat) { "-asatdate #{asat}"   }
+          asat:      ->(asat) { "-asatdate #{asat}"   },
+          sftp_pull: ->(pull) { pull ? '' : '-no-sftp-pull' }
         }.freeze
 
         attr_const :mail_to
@@ -56,6 +57,9 @@ class EcoRake
           value&.iso8601
         end
 
+        str_desc = 'Whether or not to pull data files from the SFTP.'
+        option '-l', '--[no-]sftp-pull', TrueClass, default: true, desc: str_desc
+
         option '-m', '--no-email', TrueClass, desc: 'Do not notify', default: false
 
         str_desc = 'Notify (even if dry-run or not remote)'
@@ -91,7 +95,7 @@ class EcoRake
         end
 
         def export_registers
-          forward_command('-extract-registers', :multi_sep)
+          forward_command('-extract-registers', :multi_sep, :sftp_pull)
         end
 
         def export_pack

data/lib/eco-rake/lib/files/decrypt.rb

@@ -17,9 +17,7 @@ class EcoRake
           target_files.each do |file|
             delete_file(gpg_to_csv_filename(file))
 
-            stat = sh_continue(
-              decrypt_command(file, ignore_mdc_error: ignore_mdc_error)
-            )
+            stat = decrypt_command(file, ignore_mdc_error: ignore_mdc_error)
 
             status = stat unless stat.zero?
           end

data/lib/eco-rake/lib/task/runner_launch.rb

@@ -79,6 +79,28 @@ class EcoRake
 
         private
 
+        # Default exception notifier for task runners.
+        #
+        # Honours the same suppression convention as the rest of `eco-rake`
+        # (see `Export::Payload`, `People::SyncLaunch`): `-no-email` and
+        # `-simulate` suppress the notification unless `-notify` forces it.
+        # This is the single chokepoint so per-runner subclasses do not need to
+        # re-implement (and drop) the `no_email` guard — the bug that leaked
+        # exception emails to customers during `-no-email` runs.
+        #
+        # Requires the subclass to expose `mail_to` (e.g. via `attr_const :mail_to`).
+        # @param err [Exception, nil] the raised error (nil ⇒ clean exit 0).
+        def notify_exception(err)
+          exit 0 unless err
+          exit 1 if options[:simulate] && !options[:notify]
+          exit 1 if options[:no_email] && !options[:notify]
+          exit 1 unless respond_to?(:mail_to, true) && (inbox = mail_to)
+
+          subject = "There was an exception on #{options[:task]}"
+          email(enviro: target_enviro, to: inbox, subject: subject, body: err.to_s)
+          exit 1
+        end
+
         def command(*args)
           cmd = [ruby_runner]
           cmd.push(*forward_options(:enviro, :space, :simulate, :no_email, :notify))

data/lib/eco-rake/options/forwarding/proxy.rb

@@ -15,12 +15,14 @@ class EcoRake
           pklass = parent.is_a?(Class)? parent : parent.class
           msg    = "Expecting parent to be RakeCommander::Options::Class. Given: #{pklass}"
           raise ArgumentError, msg unless parent.is_a?(Class) && parent <= RakeCommander::Options
+
           @parent = parent
           @rules  = {}
         end
 
         def each(&block)
           return to_enum(:each) unless block_given?
+
           @rules.values.each(&block)
         end
 
@@ -83,8 +85,9 @@ class EcoRake
           raise ArgumentError, msg unless (opt = option(rule.sym)) || !require_option
 
           rule.sym = opt&.name
-          if existing_rule = self[rule.sym]
+          if (existing_rule = self[rule.sym])
             return false unless override
+
             puts "Warning: Overriding forwarding '#{existing_rule.desc}'" if warning
           end
 

data/lib/eco-rake/options/forwarding/rule.rb

@@ -17,6 +17,7 @@ class EcoRake
           raise ArgumentError, msg unless RULE_TYPES.any? {|type| rule.is_a?(type)}
           msg = "Accepted Symbol rules are: :#{SYMBOL_TYPES.join(', :')}. Given :#{rule}"
           raise ArgumentError, msg if rule.is_a?(Symbol) && SYMBOL_TYPES.none? {|type| rule == type}
+
           @parent = parent
           @sym    = sym
           @rule   = rule
@@ -37,12 +38,13 @@ class EcoRake
         end
 
         # @note
-        #   1. Retrives value from parsed options results by using the option name, short or sym.
+        #   1. Retrieves value from parsed options results by using the option name, short or sym.
         #   2. It then applies the rule on it.
         # @param option_results [Hash] the parsed option results.
         # @return [NilClass, Value] the value that the rule returns, `nil` if rule inactive/not-applicable.
         def apply(option_results)
           return nil unless active?(option_results)
+
           opt = option
           return nil unless opt || rule != :mirror
 

data/lib/eco-rake/shell/command.rb

@@ -3,6 +3,13 @@ class EcoRake
     module Command
       include Rake::DSL
 
+      # Patterns matched against a command string/argv-joined-string and redacted
+      # before it is ever logged or echoed (defence in depth: callers should not be
+      # passing secrets into `comm`/`sh` at all, but this guards against it anyway).
+      REDACT_PATTERNS = [
+        /--passphrase(?:-fd)?\s+\S+/i
+      ].freeze
+
       # It double quotes a string (escapes the double quotes)
       # @param str [String]
       # @return [String]
@@ -27,6 +34,18 @@ class EcoRake
         array_cmd(base, *options).join(join)
       end
 
+      # Redacts any known secret-bearing fragment from a command string before it is
+      # logged or echoed anywhere.
+      # @param comm [String]
+      # @return [String]
+      def redact_command(comm)
+        str = comm.to_s
+        REDACT_PATTERNS.each do |pattern|
+          str = str.gsub(pattern) {|match| "#{match.split(/\s+/).first} [REDACTED]" }
+        end
+        str
+      end
+
       # @param continue [Boolean] whether it should continue when one failed.
       # @param arr [Array<String>] array of commands to be run
       def sh_chain(cmds, continue: false, &block)
@@ -47,7 +66,7 @@ class EcoRake
       # @note if doesn't raise (prevents) a RuntimeError
       # @param comm [String] the command line
       def sh_exit_on_fail(comm)
-        callback = middlewared_callback(sh_default_block(comm)) do |ok, res|
+        callback = middlewared_callback(sh_default_block(comm)) do |ok, _res|
           next if ok
 
           exit(1)
@@ -56,7 +75,8 @@ class EcoRake
       end
 
       # Returns the default block for `sh` native method.
-      # @note it wraps `block` if given
+      # @note it wraps `block` if given. The echoed command is redacted (see
+      #   {#redact_command}) so a secret accidentally carried in `comm` is never printed.
       # @return [Proc]
       def sh_default_block(comm)
         proc do |ok, res|
@@ -64,7 +84,7 @@ class EcoRake
 
           unless ok
             msg = "Command failed (status = #{res.exitstatus})"
-            puts "#{msg}\n  * #{comm}"
+            puts "#{msg}\n  * #{redact_command(comm)}"
           end
 
           res.exitstatus

data/lib/eco-rake/shell/gpg.rb

@@ -1,3 +1,5 @@
+require 'open3'
+
 class EcoRake
   module Shell
     module Gpg
@@ -5,32 +7,79 @@ class EcoRake
       include EcoRake::Shell::Files
 
       GPG_VERSION_REGEX = /^gpg.*?gnupg.*?(?<maj>\d+)\.(?<min>\d+)\./i
+      PASSPHRASE_REDACTED = '[REDACTED]'.freeze
 
       # @note
       #   1. The ENV var `GPG_KEY` specifies the `passphrase` to be able to use the
       #     private gpg key (suppsedly installed in the user's local `gpg keyring`).
       #   2. Depending on the `gpg` version, the option to prevent the interactive passphrase to prompt
       #     is different. This is the reason why we check what is the option for a `loopback`
+      #   3. The passphrase is **never** placed in `argv` (visible in the process list) nor logged:
+      #     it is streamed to the child process' `stdin` via `--passphrase-fd 0`, and the logged
+      #     argv has the passphrase slot redacted (see {#decrypt_argv}).
       # @param gpg_file [String] the file meant to be decrypted.
-      # @return [String] the command to decrypt `gpg_file`
+      # @param gpg_key [String] the passphrase, streamed via stdin (never put in argv or logs).
+      # @param ignore_mdc_error [Boolean]
+      # @return [Integer] the process exit status (`0` on success)
       def decrypt_command(gpg_file, gpg_key: ENV['GPG_KEY'], ignore_mdc_error: false)
+        argv = decrypt_argv(gpg_file, ignore_mdc_error: ignore_mdc_error)
+        run_gpg(argv, passphrase: gpg_key)
+      end
+
+      private
+
+      # Builds the `gpg` decrypt command as an **argv array** (never a shell string).
+      # @note the passphrase is deliberately **not** included here: it travels via stdin
+      #   (`--passphrase-fd 0`), so it never reaches argv (process list) or any log of this array.
+      # @param gpg_file [String] the file meant to be decrypted.
+      # @param ignore_mdc_error [Boolean]
+      # @return [Array<String>] the argv (command + arguments), passphrase-free
+      def decrypt_argv(gpg_file, ignore_mdc_error: false)
         csv_file = gpg_to_csv_filename(gpg_file)
         no_error = ignore_mdc_error ? '--ignore-mdc-error' : nil
 
-        loopback = '--batch --yes'
+        loopback = nil
         loopback = '--pinentry-mode=loopback' if gpg_version_gte?(major: 2, minor: 1)
 
-        args     = [
+        array_cmd(
+          'gpg',
+          '--batch', '--yes',
           no_error, loopback,
-          '--passphrase', double_quote(gpg_key),
-          '-o', double_quote(csv_file),
-          '-d', double_quote(gpg_file)
-        ]
+          '--passphrase-fd', '0',
+          '-o', csv_file,
+          '-d', gpg_file
+        )
+      end
+
+      # Runs a `gpg` argv array, streaming `passphrase` to the child's stdin.
+      # @note never logs or echoes `passphrase`; only the redacted argv is logged.
+      # @param argv [Array<String>] command + arguments, as built by {#decrypt_argv}.
+      # @param passphrase [String]
+      # @return [Integer] the process exit status (`0` on success)
+      def run_gpg(argv, passphrase:)
+        stdout_err, status = Open3.capture2e(*argv, stdin_data: passphrase.to_s)
+
+        exitstatus = status.exitstatus
+        unless status.success?
+          msg = "Command failed (status = #{exitstatus})"
+          puts "#{msg}\n  * #{redact_argv(argv).join(' ')}\n#{stdout_err}"
+        end
 
-        string_cmd('gpg', *args)
+        exitstatus
       end
 
-      private
+      # Redacts any secret-bearing slot from a `gpg` argv array before it is logged.
+      # @note `--passphrase-fd 0` carries no secret value itself (the secret travels via
+      #   stdin, not argv), but this also redacts a legacy `--passphrase <value>` pair
+      #   defensively, in case any caller still builds one.
+      # @param argv [Array<String>] command + arguments
+      # @return [Array<String>] a redacted copy, safe to log
+      def redact_argv(argv)
+        argv.each_with_index.map do |arg, i|
+          prev = i.zero? ? nil : argv[i - 1]
+          prev == '--passphrase' ? PASSPHRASE_REDACTED : arg
+        end
+      end
 
       # TODO: use a common end point from `Command`
       def shell_gpg_version

data/lib/eco-rake/version.rb

@@ -1,5 +1,5 @@
 require 'rake-commander'
 
 class EcoRake < RakeCommander
-  VERSION = '0.3.2'.freeze
+  VERSION = '0.4.0'.freeze
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: eco-rake
 version: !ruby/object:Gem::Version
-  version: 0.3.2
+  version: 0.4.0
 platform: ruby
 authors:
 - Oscar Segura Samper
-autorequire:
-bindir: exe
+bindir: bin
 cert_chain: []
-date: 2025-11-21 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -150,14 +149,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.4.2
+        version: 0.4.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.4.2
+        version: 0.4.3
 - !ruby/object:Gem::Dependency
   name: sendgrid-ruby
   requirement: !ruby/object:Gem::Requirement
@@ -172,26 +171,15 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 6.7.0
-description:
 email:
 - oscar@ecoportal.co.nz
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".gitignore"
-- ".gitlab-ci.yml"
-- ".markdownlint.json"
-- ".rspec"
-- ".rubocop.yml"
-- ".ruby-version"
-- ".yardopts"
 - CHANGELOG.md
-- Gemfile
 - LICENSE
 - README.md
-- Rakefile
-- eco-rake.gemspec
 - lib/eco-rake.rb
 - lib/eco-rake/base.rb
 - lib/eco-rake/base/method_helpers.rb
@@ -260,7 +248,6 @@ licenses:
 - MIT
 metadata:
   rubygems_mfa_required: 'true'
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -275,8 +262,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.23
-signing_key:
+rubygems_version: 4.0.8
 specification_version: 4
 summary: A set of helpers to build re-usable `rake` integration helpers.
 test_files: []

data/.gitignore

@@ -1,29 +0,0 @@
-# env files
-.env*
-
-# core development-only executables
-/bin/raked*
-
-# it's a gem, ignore the lockfile
-Gemfile.lock
-
-# build artifacts
-*.gem
-/.bundle/
-/vendor/bundle
-/spec/reports/
-/tmp/
-/pkg/
-
-# docs
-/.yardoc
-/_yardoc/
-/coverage/
-/doc/
-
-# rspec failure tracking
-.rspec_status
-scratch.rb
-
-/.byebug_history
-.solargraph.yml

data/.gitlab-ci.yml

@@ -1,13 +0,0 @@
-# You can override the included template(s) by including variable overrides
-# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
-# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings
-# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
-# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings
-# Note that environment variables can be set in several places
-# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
-stages:
-- test
-sast:
-  stage: test
-include:
-- template: Security/SAST.gitlab-ci.yml

data/.markdownlint.json

@@ -1,4 +0,0 @@
-{
-  "MD013": false,
-  "MD024": false
-}

data/.rspec

@@ -1,3 +0,0 @@
---format documentation
---color
---require spec_helper

data/.rubocop.yml

@@ -1,100 +0,0 @@
-AllCops:
-  TargetRubyVersion: 3.2
-  NewCops: enable
-
-Metrics/ClassLength:
-  Max: 500
-Metrics/ModuleLength:
-  Max: 300
-Metrics/MethodLength:
-  Max: 50
-Metrics/AbcSize:
-  Max: 30
-Metrics/ParameterLists:
-  Max: 5
-  CountKeywordArgs: false
-Metrics/BlockLength:
-  CountAsOne: ['array', 'heredoc', 'method_call']
-  Max: 50
-Metrics/CyclomaticComplexity:
-  Max: 30
-Metrics/PerceivedComplexity:
-  Max: 30
-
-Style/AccessorGrouping:
-  Enabled: false
-Style/ConditionalAssignment:
-  Enabled: false
-Style/BlockDelimiters:
-  BracesRequiredMethods: ['log']
-  AllowedPatterns: ['proc', 'new']
-Style/HashSyntax:
-  EnforcedShorthandSyntax: either
-  EnforcedStyle: no_mixed_keys
-Style/ArgumentsForwarding:
-  UseAnonymousForwarding: false
-Style/ClassAndModuleChildren:
-  Enabled: false
-Style/FrozenStringLiteralComment:
-  Enabled: false
-Style/StringLiterals:
-  Enabled: false
-Style/StringLiteralsInInterpolation:
-  Enabled: false
-Style/Documentation:
-  Enabled: false
-Style/CommentedKeyword:
-  Enabled: false
-Style/MultilineBlockChain:
-  Enabled: false
-Style/AndOr:
-  Enabled: false
-Style/Alias:
-  EnforcedStyle: prefer_alias_method
-Style/FetchEnvVar:
-  Enabled: false
-Style/RegexpLiteral:
-  EnforcedStyle: mixed
-  AllowInnerSlashes: true
-
-Layout/HashAlignment:
-  EnforcedColonStyle: table
-  EnforcedHashRocketStyle: table
-Layout/LeadingCommentSpace:
-  Enabled: false
-  AllowGemfileRubyComment: true
-Layout/ParameterAlignment:
-  Enabled: false
-Layout/MultilineMethodDefinitionBraceLayout:
-  EnforcedStyle: symmetrical
-Layout/LineLength:
-  Enabled: true
-Layout/SpaceInsideHashLiteralBraces:
-  Enabled: false
-Layout/SpaceInsideBlockBraces:
-  Enabled: false
-Layout/SpaceAroundOperators:
-  Enabled: false
-Layout/ExtraSpacing:
-  AllowForAlignment: true
-  AllowBeforeTrailingComments: true
-Layout/AccessModifierIndentation:
-  EnforcedStyle: indent
-Layout/DotPosition:
-  EnforcedStyle: trailing
-Layout/MultilineMethodCallIndentation:
-  EnforcedStyle: indented
-Layout/FirstHashElementIndentation:
-  Enabled: false
-Layout/EmptyLineAfterGuardClause:
-  Enabled: false
-
-Naming/VariableNumber:
-  EnforcedStyle: snake_case
-  CheckSymbols: false
-Naming/MethodParameterName:
-  AllowedNames: ['x', 'y', 'i', 'j', 'id', 'io', 'to']
-Naming/RescuedExceptionsVariableName:
-  Enabled: false
-Naming/BlockForwarding:
-  Enabled: false

data/.ruby-version

@@ -1 +0,0 @@
-3.2.2

data/.yardopts

@@ -1,10 +0,0 @@
---readme README.md
---charset utf-8
---markup-provider=redcarpet
---markup=markdown
---no-private
---output-dir ./doc
-'lib/**/*.rb'
--
-CHANGELOG.md
-LICENSE

data/Gemfile

@@ -1,6 +0,0 @@
-source "https://rubygems.org"
-
-git_source(:github) {|repo_name| "https://github.com/#{repo_name}" }
-
-# Specify your gem's dependencies in eco-rake.gemspec
-gemspec

data/Rakefile

@@ -1,27 +0,0 @@
-require "bundler/gem_tasks"
-require "rspec/core/rake_task"
-require "yard"
-require "redcarpet"
-
-desc "run the specs"
-RSpec::Core::RakeTask.new(:spec)
-
-desc "run rspec showing backtrace"
-RSpec::Core::RakeTask.new(:spec_trace) do |task|
-  task.rspec_opts = ['--backtrace']
-end
-
-desc "run rspec stopping on first fail, and show backtrace"
-RSpec::Core::RakeTask.new(:spec_fast) do |task|
-  task.rspec_opts = ['--fail-fast', '--backtrace']
-end
-
-# default task name is yard
-desc "Yard: generate all the documentation"
-YARD::Rake::YardocTask.new(:doc) do |t|
-  #t.files = ['lib/**/*.rb']
-end
-
-task default: [:spec]
-task rspec_trace: :spec_trace
-task rspec_fast: :spec_fast

data/eco-rake.gemspec

@@ -1,42 +0,0 @@
-# rubocop:disable Gemspec/DevelopmentDependencies
-lib = File.expand_path('lib', __dir__)
-$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
-
-require 'eco-rake/version'
-
-Gem::Specification.new do |spec|
-  spec.name          = 'eco-rake'
-  spec.version       = EcoRake::VERSION
-  spec.authors       = ['Oscar Segura Samper']
-  spec.email         = ['oscar@ecoportal.co.nz']
-
-  spec.summary       = 'A set of helpers to build re-usable `rake` integration helpers.'
-  spec.homepage      = 'https://www.ecoportal.com'
-  spec.licenses      = %w[MIT]
-
-  spec.bindir        = 'exe'
-  spec.executables   = spec.files.grep(/^exe\//) { |f| File.basename(f) }
-
-  spec.metadata['rubygems_mfa_required'] = 'true'
-
-  spec.required_ruby_version = '>= 3.2.2'
-
-  spec.files = `git ls-files -z`.split("\x0").reject do |f|
-    f.match(/^(test|spec|features)\//)
-  end
-
-  spec.require_paths = ['lib']
-
-  spec.add_development_dependency 'rake',      '>= 13.0.6', '< 14'
-  spec.add_development_dependency 'redcarpet', '>= 3.6.0',  '< 4'
-  spec.add_development_dependency 'rspec',     '>= 3.10.0', '< 4'
-  spec.add_development_dependency 'yard',      '>= 0.9.34', '< 1'
-
-  spec.add_dependency 'aws-sdk-ses',    '~> 1', '>= 1.58.0'
-  spec.add_dependency 'dotenv',         '~> 3'
-  spec.add_dependency 'nokogiri',       '>= 1.13', '< 1.17'
-  spec.add_dependency 'rake-commander', '~> 0.4.2'
-  spec.add_dependency 'sendgrid-ruby',  '~> 6.7.0'
-end
-
-# rubocop:enable Gemspec/DevelopmentDependencies