flagkit 1.0.8 → 1.0.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b3ba83a1fc643ed1bbdcf80d9695a3ae28302ec5dbf7d039a21c5c11790f7a62
-  data.tar.gz: b1fd7d1a6d11c2a6ce3b6f6de65bc590a0d079c737b2fa6d6b79ec697c5cdc0e
+  metadata.gz: 3e2d0b53a53b1d0116535ec2dc9b9ec7b113ea8fa5c4fe5c7f8bd5f6cee0e3d1
+  data.tar.gz: 3ec79923ba3b252727b310cf714def3914fd3cb02b2256b3e19a3f406cf10322
 SHA512:
-  metadata.gz: 6bc92efe9c63d284ea821ddc647d25e965b75733e95e97235159e3311c2d2c0857dbbfe003fb9cb76a624cbea6a480c3651ef16acc8246cdd3439247c5c926b5
-  data.tar.gz: cd0b81515495aea25cc104fa71f336e4ead228a6d3312c9f5754bc8645037c88e46fee220aadbac3f545e8609e5080cccc2169ca7ae647cb433a3bf4c114e2cc
+  metadata.gz: 1e9e1d1c19c15e7a9aec498d58e8ff8743086e71c69d79bfa6dd0dacd73b7c2beb313136df8fcc51f826f7e6e2953d8d2f3b05022dc41a1e1fd44ec120062bf9
+  data.tar.gz: 1a2e335d182040483745f2cad2fbf51c7475d9a65dedf00314884738e62e45551d65f9e5c6e5bf1a2f9baa688ddf3191c1f2e7b07772bb997a0837f0788af3bf

data/README.md

@@ -75,7 +75,6 @@ client = FlagKit.initialize(
   retry_attempts: 3,                            # Number of retry attempts
   circuit_breaker_threshold: 5,                 # Failures before circuit opens
   circuit_breaker_reset_timeout: 30,            # Seconds before half-open
-  local_port: nil                               # Local dev server port (uses http://localhost:{port}/api/v1)
 )
 ```
 
@@ -83,12 +82,10 @@ Security features such as PII detection, request signing, bootstrap verification
 
 ## Local Development
 
-For local development, use the `local_port` option to connect to a local FlagKit server:
 
 ```ruby
 client = FlagKit.initialize(
   'sdk_your_api_key',
-  local_port: 8200  # Uses http://localhost:8200/api/v1
 )
 ```
 

data/lib/flagkit/error/error_code.rb

@@ -71,7 +71,6 @@ module FlagKit
     CONFIG_INVALID_BOOTSTRAP = "CONFIG_INVALID_BOOTSTRAP"
 
     # Security errors
-    SECURITY_LOCAL_PORT_IN_PRODUCTION = "SECURITY_LOCAL_PORT_IN_PRODUCTION"
     SECURITY_PII_DETECTED = "SECURITY_PII_DETECTED"
     SECURITY_ENCRYPTION_ERROR = "SECURITY_ENCRYPTION_ERROR"
 

data/lib/flagkit/http/http_client.rb

@@ -39,6 +39,8 @@ module FlagKit
     # request signing, and key rotation support.
     class HttpClient
       BASE_URL = "https://api.flagkit.dev/api/v1"
+      BETA_BASE_URL = "https://api.beta.flagkit.dev/api/v1"
+      LOCAL_BASE_URL = "https://api.flagkit.on/api/v1"
       BASE_RETRY_DELAY = 1.0
       MAX_RETRY_DELAY = 30.0
       RETRY_MULTIPLIER = 2.0
@@ -46,12 +48,18 @@ module FlagKit
 
       attr_reader :timeout, :retry_attempts, :circuit_breaker
 
-      # Returns the base URL for the given local port, or the default production URL.
+      # Returns the base URL based on internal SDK mode.
       #
-      # @param local_port [Integer, nil] The local port number
       # @return [String] The base URL
-      def self.get_base_url(local_port)
-        local_port ? "http://localhost:#{local_port}/api/v1" : BASE_URL
+      def self.get_base_url
+        case ENV.fetch("FLAGKIT_MODE", "").strip.downcase
+        when "local"
+          LOCAL_BASE_URL
+        when "beta"
+          BETA_BASE_URL
+        else
+          BASE_URL
+        end
       end
 
       # Returns the currently active API key.
@@ -83,7 +91,6 @@ module FlagKit
       # @param retry_attempts [Integer] Number of retry attempts
       # @param circuit_breaker [CircuitBreaker] The circuit breaker
       # @param logger [Object, nil] Logger instance
-      # @param local_port [Integer, nil] Local development server port
       # @param secondary_api_key [String, nil] Secondary API key for rotation
       # @param key_rotation_grace_period [Integer] Grace period in seconds
       # @param enable_request_signing [Boolean] Enable HMAC-SHA256 request signing
@@ -94,13 +101,12 @@ module FlagKit
         retry_attempts:,
         circuit_breaker:,
         logger: nil,
-        local_port: nil,
         secondary_api_key: nil,
         key_rotation_grace_period: 300,
         enable_request_signing: true,
         on_usage_update: nil
       )
-        @base_url = self.class.get_base_url(local_port)
+        @base_url = self.class.get_base_url()
         @primary_api_key = api_key
         @secondary_api_key = secondary_api_key
         @current_api_key = api_key

data/lib/flagkit/options.rb

@@ -39,7 +39,6 @@ module FlagKit
                 :bootstrap,
                 :logger,
                 :storage,
-                :local_port,
                 :secondary_api_key,
                 :key_rotation_grace_period,
                 :strict_pii_mode,
@@ -76,7 +75,6 @@ module FlagKit
     # @param bootstrap [Hash, nil] Bootstrap data
     # @param logger [Object, nil] Logger instance
     # @param storage [Object, nil] Storage adapter
-    # @param local_port [Integer, nil] Local development server port (uses http://localhost:{port}/api/v1)
     # @param secondary_api_key [String, nil] Secondary API key for key rotation
     # @param key_rotation_grace_period [Integer] Grace period in seconds during key rotation
     # @param strict_pii_mode [Boolean] Raise SecurityError instead of warning when PII detected
@@ -113,7 +111,6 @@ module FlagKit
       bootstrap: nil,
       logger: nil,
       storage: nil,
-      local_port: nil,
       secondary_api_key: nil,
       key_rotation_grace_period: DEFAULT_KEY_ROTATION_GRACE_PERIOD,
       strict_pii_mode: false,
@@ -150,7 +147,6 @@ module FlagKit
       @bootstrap = bootstrap
       @logger = logger
       @storage = storage
-      @local_port = local_port
       @secondary_api_key = secondary_api_key
       @key_rotation_grace_period = key_rotation_grace_period
       @strict_pii_mode = strict_pii_mode
@@ -176,28 +172,12 @@ module FlagKit
     # Validates the options.
     #
     # @raise [Error] If validation fails
-    # @raise [SecurityError] If local_port is used in production
     def validate!
       validate_api_key!
       validate_positive_integers!
-      validate_local_port_restriction!
     end
 
     private
-
-    def validate_local_port_restriction!
-      return unless local_port
-
-      env = ENV.fetch("RACK_ENV", ENV.fetch("RAILS_ENV", nil))
-      return unless env == "production"
-
-      raise SecurityError.new(
-        ErrorCode::SECURITY_LOCAL_PORT_IN_PRODUCTION,
-        "local_port cannot be used in production environment. " \
-        "This is a security risk as it bypasses HTTPS and may expose traffic to interception."
-      )
-    end
-
     def validate_api_key!
       raise Error.config_error(ErrorCode::CONFIG_INVALID_API_KEY, "API key is required") if api_key.nil? || api_key.empty?
 

data/lib/flagkit/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module FlagKit
-  VERSION = "1.0.8"
+  VERSION = "1.0.9"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: flagkit
 version: !ruby/object:Gem::Version
-  version: 1.0.8
+  version: 1.0.9
 platform: ruby
 authors:
 - FlagKit
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-02-09 00:00:00.000000000 Z
+date: 2026-02-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday