ecoportal-api-graphql 1.3.16 → 1.3.17

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2eada698a590c0214f8eb7a37255efe68c2573de6c73e3e1ce42ba6a8ff5accb
-  data.tar.gz: 316b65e4027224711711d2248ada651911b1e64ce48aeff6bffb22144e53cd11
+  metadata.gz: e8ab1262f84b1fada9c29cfcaa29ec70f38aa6e8d05762b3bb580ece22910eec
+  data.tar.gz: 25240f9c150f55a10a55284e647b42c3d96426fedafdc2ac866ada347e3a1794
 SHA512:
-  metadata.gz: f0894ce98e42628e50bb594ccbaa0050ae07518517a08745d54f5f61dc4031f959163b69caa1768ed978d0499abbb478c2dc4811867239373c324cac8008cc2a
-  data.tar.gz: 43e3dcf9dd61f521573a2249d26c92a571c23f06f2c742e9b19aa5554832b1195b251f0832da70f6231c68c0f94e108ff6487738a1e81e1c8c7d214944a98e0d
+  metadata.gz: 89e3340050db60aa9114b595b6d63f7e0d1bfc9aa3c36c273c14fb680ce78573318440a25c35c79b5d8413e668b275837d509572b3c93fceed965458056d6f43
+  data.tar.gz: bd9641bd8aad69ee8e1db51cda0c59ee46225c913f0fa19ee1ed2834f6ebd58493eb26b77b0ca1170abef1d058ae613f0c4ebb0541adb0f677169def9eeb3a7f

data/CHANGELOG.md

@@ -2,12 +2,21 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.3.17] - 2026-09-30
+
+### Security
+
+- Security republish of `1.3.16` -- backwards-compatible, no code change: removes customer and
+  internal identifiers from shipped comments and this changelog; stops shipping internal
+  files (packaging allowlist: only `lib/**/*.rb` plus the named root docs ship, so the internal
+  `CLAUDE.md` files under `lib/` no longer do).
+
 ## [1.3.16] - 2026-08-13
 
 ### Fixed
 
 - Packaging-only republish of `1.3.15` with an allowlisted gemspec (backported from `2.0.0`).
-  Versions `1.3.9`-`1.3.15` shipped internal repository content (`.ai-assistance/` project notes,
+  Versions `1.3.9`-`1.3.15` shipped internal repository content (internal AI-tooling project notes,
   `docs/worklog.md`, architecture docs) to rubygems.org via the old denylist `spec.files`; they
   will be yanked. `1.3.16` is the identical `lib/` code (including the `1.3.15` OozeRedirect
   `executeWorkflowCommands` fix) packaged clean, so the `1.x` line keeps a clean latest release.
@@ -136,7 +145,7 @@ signed-off future decision.)
     (`external_id`/`id`/`state`) — a spurious path produced term `membranes.external_id.external_id`
     → 0 results (silent miss → dup-on-upsert). Register FIELD keys still get the nested path.
   - Verified against the backend filter definitions; catalogued in
-    `.ai-assistance/code/filter_contract_matrix.md`.
+    the repo's internal docs.
 
 ### Added
 
@@ -208,7 +217,7 @@ shapes checked against the live schema dump); the live UAT→PROD round trip is
   longer exists (fragments are a registry now) → `uninitialized constant … Fragment::… (NameError)` at
   render time. Now `spread :Action` / `spread :ContractorEntity`, matching the already-migrated queries.
   (The sibling breakage in eco-helpers' location-command optimizations is fixed in eco-helpers 3.2.17;
-  it crashed the live act-gov locations sync.)
+  it crashed a customer's live locations sync.)
 - **Kickstand workflow mutations — bare `DateTime` selection.** `Kickstand::{Start,Stop,Fail}Workflow`
   selected `startedAt`/`stoppedAt`/`failedAt` bare → "Field must have selections". Now
   `{ dateTime timeZone }` (same class as the 1.3.10 LocationStructure fix).
@@ -236,7 +245,7 @@ shapes checked against the live schema dump); the live UAT→PROD round trip is
 
 ## [1.3.10] - 2026-07-03
 
-Hotfix (backwards-compatible). Resolves a live failure on the Turners & Growers users sync.
+Hotfix (backwards-compatible). Resolves a live failure on a customer's users sync.
 
 ### Fixed
 

data/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2022 ecoPortal
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2022 ecoPortal
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -1,24 +1,24 @@
-# Ecoportal::API::GraphQL
-
-This is a basic collection of helpers that can be used to interact with the
-[ecoPortal](https://www.ecoportal.com) `GraphQL` API
-
-## Installation
-
-Add this line to your application's Gemfile:
-
-```ruby
-gem 'ecoportal-api-graphql', require: %w[ecoportal/api-graphql]
-```
-
-And then execute:
-
-    $ bundle
-
-Or install it yourself as:
-
-    $ gem install ecoportal-api-graphql
-
-## Changelog
-
-See {file:CHANGELOG.md} for a list of changes.
+# Ecoportal::API::GraphQL
+
+This is a basic collection of helpers that can be used to interact with the
+[ecoPortal](https://www.ecoportal.com) `GraphQL` API
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'ecoportal-api-graphql', require: %w[ecoportal/api-graphql]
+```
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install ecoportal-api-graphql
+
+## Changelog
+
+See {file:CHANGELOG.md} for a list of changes.

data/lib/ecoportal/api/common/graphql/auth_service.rb

@@ -1,115 +1,115 @@
-module Ecoportal
-  module API
-    module Common
-      module GraphQL
-        module AuthService
-          DEFAULT_SERVER  = 'live.ecoportal.com'.freeze
-          TOKEN_AUTORENEW = 90 # minutes
-
-          module InstanceMethods
-            def session_token(host: server, auto_renew: true)
-              session_token_data(host: host).then do |body|
-                next unless body
-
-                if auto_renew && token_renew?(body['expires_in'])
-                  session_token_renewed(
-                    host:          host,
-                    refresh_token: body['refresh_token']
-                  )
-                else
-                  body['access_token']
-                end
-              end
-            end
-
-            def session_token_renewed(host: server, refresh_token: nil)
-              unless refresh_token
-                return unless (body = session_token_data(host: host))
-                return unless (refresh_token = body['resfresh_token'])
-              end
-
-              session_refresh_token_data(
-                host:          host,
-                refresh_token: refresh_token
-              ).then do |bdy|
-                bdy['access_token'] if bdy
-              end
-            end
-
-            private
-
-            def session_token_data(host: server)
-              auth_http_client(host: host).post(
-                '/oauth/token',
-                data: {
-                  'grant_type' => 'password',
-                  'email'      => user_email,
-                  'password'   => user_pass
-                }
-              ).then do |response|
-                next response.body if response.success?
-              end
-            end
-
-            def session_refresh_token_data(refresh_token:, host: server)
-              auth_http_client(host: host).post(
-                '/oauth/token',
-                data: {
-                  'grant_type'    => 'refresh_token',
-                  'refresh_token' => refresh_token
-                }
-              ).then do |response|
-                next response.body if response.success?
-              end
-            end
-
-            def token_renew?(seconds)
-              (TOKEN_AUTORENEW * 60) > seconds
-            end
-
-            def auth_http_client(host: server)
-              @auth_http_client ||= Ecoportal::API::Common::GraphQL::HttpClient.new(
-                host:    host,
-                version: 'http'
-              )
-            end
-
-            def user_email
-              @user_email || fetch_env_required('USER_EMAIL')
-            end
-
-            def user_pass
-              @user_pass || fetch_env_required('USER_PASS')
-            end
-
-            def server(default = DEFAULT_SERVER)
-              ENV['SERVER'] || default
-            end
-
-            def fetch_env_required(name)
-              raise "Missing ENV '#{name}'" unless ENV.key?(name)
-              ENV[name]
-            end
-
-            def abort(msg)
-              puts msg
-              exit(1)
-            end
-          end
-
-          module ClassMethods
-          end
-
-          class << self
-            include InstanceMethods
-
-            def included(base)
-              base.send(:include, InstanceMethods)
-              base.extend(ClassMethods)
-            end
-          end
-        end
-      end
-    end
-  end
-end
+module Ecoportal
+  module API
+    module Common
+      module GraphQL
+        module AuthService
+          DEFAULT_SERVER  = 'live.ecoportal.com'.freeze
+          TOKEN_AUTORENEW = 90 # minutes
+
+          module InstanceMethods
+            def session_token(host: server, auto_renew: true)
+              session_token_data(host: host).then do |body|
+                next unless body
+
+                if auto_renew && token_renew?(body['expires_in'])
+                  session_token_renewed(
+                    host:          host,
+                    refresh_token: body['refresh_token']
+                  )
+                else
+                  body['access_token']
+                end
+              end
+            end
+
+            def session_token_renewed(host: server, refresh_token: nil)
+              unless refresh_token
+                return unless (body = session_token_data(host: host))
+                return unless (refresh_token = body['resfresh_token'])
+              end
+
+              session_refresh_token_data(
+                host:          host,
+                refresh_token: refresh_token
+              ).then do |bdy|
+                bdy['access_token'] if bdy
+              end
+            end
+
+            private
+
+            def session_token_data(host: server)
+              auth_http_client(host: host).post(
+                '/oauth/token',
+                data: {
+                  'grant_type' => 'password',
+                  'email'      => user_email,
+                  'password'   => user_pass
+                }
+              ).then do |response|
+                next response.body if response.success?
+              end
+            end
+
+            def session_refresh_token_data(refresh_token:, host: server)
+              auth_http_client(host: host).post(
+                '/oauth/token',
+                data: {
+                  'grant_type'    => 'refresh_token',
+                  'refresh_token' => refresh_token
+                }
+              ).then do |response|
+                next response.body if response.success?
+              end
+            end
+
+            def token_renew?(seconds)
+              (TOKEN_AUTORENEW * 60) > seconds
+            end
+
+            def auth_http_client(host: server)
+              @auth_http_client ||= Ecoportal::API::Common::GraphQL::HttpClient.new(
+                host:    host,
+                version: 'http'
+              )
+            end
+
+            def user_email
+              @user_email || fetch_env_required('USER_EMAIL')
+            end
+
+            def user_pass
+              @user_pass || fetch_env_required('USER_PASS')
+            end
+
+            def server(default = DEFAULT_SERVER)
+              ENV['SERVER'] || default
+            end
+
+            def fetch_env_required(name)
+              raise "Missing ENV '#{name}'" unless ENV.key?(name)
+              ENV[name]
+            end
+
+            def abort(msg)
+              puts msg
+              exit(1)
+            end
+          end
+
+          module ClassMethods
+          end
+
+          class << self
+            include InstanceMethods
+
+            def included(base)
+              base.send(:include, InstanceMethods)
+              base.extend(ClassMethods)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/common/graphql/class_helpers.rb

@@ -1,46 +1,46 @@
-module Ecoportal
-  module API
-    module Common
-      module GraphQL
-        module ClassHelpers
-          module InstanceMethods
-            def becomes(klass)
-              klass.new.tap do |becoming|
-                instance_variables.each do |var|
-                  becoming.instance_variable_set(
-                    var,
-                    instance_variable_get(var)
-                  )
-                end
-              end
-            end
-
-            def becomes_parent_class
-              becomes(self.class.superclass)
-            end
-          end
-
-          module ClassMethods
-            include Ecoportal::API::Common::Content::ClassHelpers
-
-            def const?(value)
-              begin
-                const_get(value)
-              rescue NameError
-                return false
-              end
-              true
-            end
-          end
-
-          class << self
-            def included(base)
-              base.send(:include, InstanceMethods)
-              base.extend(ClassMethods)
-            end
-          end
-        end
-      end
-    end
-  end
-end
+module Ecoportal
+  module API
+    module Common
+      module GraphQL
+        module ClassHelpers
+          module InstanceMethods
+            def becomes(klass)
+              klass.new.tap do |becoming|
+                instance_variables.each do |var|
+                  becoming.instance_variable_set(
+                    var,
+                    instance_variable_get(var)
+                  )
+                end
+              end
+            end
+
+            def becomes_parent_class
+              becomes(self.class.superclass)
+            end
+          end
+
+          module ClassMethods
+            include Ecoportal::API::Common::Content::ClassHelpers
+
+            def const?(value)
+              begin
+                const_get(value)
+              rescue NameError
+                return false
+              end
+              true
+            end
+          end
+
+          class << self
+            def included(base)
+              base.send(:include, InstanceMethods)
+              base.extend(ClassMethods)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/common/graphql/client.rb

@@ -1,69 +1,69 @@
-require 'graphlient'
-module Ecoportal
-  module API
-    module Common
-      module GraphQL
-        class Client < ::Graphlient::Client
-          ENDPOINT_PATH = 'external/graphql'.freeze
-
-          attr_accessor :host, :http_client
-
-          READ_TIMEOUT  = 90
-          WRITE_TIMEOUT = 90
-
-          include Ecoportal::API::Common::GraphQL::AuthService
-
-          def initialize(
-            email:       nil,
-            pass:        nil,
-            org_id:      self.org_id,
-            host:        server,
-            schema_path: host,
-            no_schema:   false
-          )
-            @org_id      = org_id
-            @host        = host
-            @no_schema   = no_schema
-            @user_email  = email
-            @user_pass   = pass
-
-            puts "Configuring GraphQL Client onto '#{url}'"
-
-            super(
-              url,
-              headers:      {
-                'Authorization' => "Bearer #{session_token(host: host)}"
-              },
-              http_options: {
-                read_timeout:  READ_TIMEOUT,
-                write_timeout: WRITE_TIMEOUT
-              }.tap do |options|
-                options.merge!(schema_path: schema_path) unless @no_schema
-              end
-            )
-          end
-
-          def new(org_id: self.org_id, host: self.host, schema_path: host, no_schema: @no_schema)
-            self.class.new(
-              org_id:      org_id,
-              host:        host,
-              schema_path: schema_path,
-              no_schema:   no_schema
-            )
-          end
-
-          def org_id
-            @org_id || fetch_env_required('ORGANIZATION_ID')
-          end
-
-          private
-
-          def url
-            base_url = Ecoportal::API::Common::GraphQL::HttpClient.base_url(host)
-            "#{base_url}/api/#{org_id}/#{ENDPOINT_PATH}"
-          end
-        end
-      end
-    end
-  end
-end
+require 'graphlient'
+module Ecoportal
+  module API
+    module Common
+      module GraphQL
+        class Client < ::Graphlient::Client
+          ENDPOINT_PATH = 'external/graphql'.freeze
+
+          attr_accessor :host, :http_client
+
+          READ_TIMEOUT  = 90
+          WRITE_TIMEOUT = 90
+
+          include Ecoportal::API::Common::GraphQL::AuthService
+
+          def initialize(
+            email:       nil,
+            pass:        nil,
+            org_id:      self.org_id,
+            host:        server,
+            schema_path: host,
+            no_schema:   false
+          )
+            @org_id      = org_id
+            @host        = host
+            @no_schema   = no_schema
+            @user_email  = email
+            @user_pass   = pass
+
+            puts "Configuring GraphQL Client onto '#{url}'"
+
+            super(
+              url,
+              headers:      {
+                'Authorization' => "Bearer #{session_token(host: host)}"
+              },
+              http_options: {
+                read_timeout:  READ_TIMEOUT,
+                write_timeout: WRITE_TIMEOUT
+              }.tap do |options|
+                options.merge!(schema_path: schema_path) unless @no_schema
+              end
+            )
+          end
+
+          def new(org_id: self.org_id, host: self.host, schema_path: host, no_schema: @no_schema)
+            self.class.new(
+              org_id:      org_id,
+              host:        host,
+              schema_path: schema_path,
+              no_schema:   no_schema
+            )
+          end
+
+          def org_id
+            @org_id || fetch_env_required('ORGANIZATION_ID')
+          end
+
+          private
+
+          def url
+            base_url = Ecoportal::API::Common::GraphQL::HttpClient.base_url(host)
+            "#{base_url}/api/#{org_id}/#{ENDPOINT_PATH}"
+          end
+        end
+      end
+    end
+  end
+end