jscontact 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2b5fd75452d4b1982b14996be3513fef5543d65f36e026b75ab0fb320a7d5f16
-  data.tar.gz: 0f938551f087628168cb7a5fe896acf1f339fb5034355305da5c2175b6deada2
+  metadata.gz: 5d92a19bb9e19ed8bc57c8b3382cb2364f80e992109fc4f9bebc2abc1ec2729e
+  data.tar.gz: 83aea8cf6c39aa19696ca6b6085cf236f5f91c52efc59d829579abbef5c358d3
 SHA512:
-  metadata.gz: 053177fa21d75e63a1a4434ba7418aef8096d0a3399a315bd80bc393c05f79ed6509a77202be8197f773172079580fc0e75b75738af1c5f6e57285c5702afaa9
-  data.tar.gz: bd31c7364dca93a41ceb9dd11585b89e584df900d1e722598b5b43b65eec08d23f0324d43bc9eb1cbac5ecf99e3b963b48acec9b7ff10e0bdf3ef105a05e8440
+  metadata.gz: 5c472a9ef316602575a4a82ca62410a1ffd4d782145ad0a29f86d6f7a647e0f7ddc71d86219c5877c8741220102210fe022480c3d3ee6f41c6bd37e858c87909
+  data.tar.gz: 18c076269b700e84346537cd6202c1c376920ba6bcec29ba673b4256b18b27be470975abe26451a68ca54a3c5898459e7879fdc1c708a6af57977f303ecce877

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.2.0 - 2026-10-12
+
+- Preserve leap seconds when converting vCard timestamps to UTC.
+- Retain timestamps without a UTC offset in vCard metadata instead of interpreting them in the system time zone.
+
 ## 0.1.0 - 2026-10-12
 
 Initial release.

data/README.md

@@ -1,12 +1,33 @@
-# JSContact
+<h1 align="center">JSContact</h1>
 
-[![Ruby](https://github.com/ydah/jscontact/actions/workflows/main.yml/badge.svg)](https://github.com/ydah/jscontact/actions/workflows/main.yml)
+<p align="center">JSON contact cards with validation and vCard conversion.</p>
+
+<p align="center">
+  <a href="https://rubygems.org/gems/jscontact"><img src="https://img.shields.io/gem/v/jscontact" alt="Gem version"></a>
+  <a href="https://github.com/ydah/jscontact/actions/workflows/main.yml"><img src="https://github.com/ydah/jscontact/actions/workflows/main.yml/badge.svg?branch=main" alt="CI"></a>
+  <a href="https://www.ruby-lang.org/"><img src="https://img.shields.io/badge/Ruby-%3E%3D%203.3-CC342D?logo=ruby&amp;logoColor=white" alt="Ruby 3.3 or later"></a>
+  <a href="LICENSE.txt"><img src="https://img.shields.io/badge/license-MIT-blue" alt="MIT License"></a>
+</p>
+
+<p align="center">
+  <a href="#installation">Installation</a> &middot;
+  <a href="#quick-start">Quick start</a> &middot;
+  <a href="#supported-scope">Supported scope</a> &middot;
+  <a href="#development">Development</a> &middot;
+  <a href="#license">License</a>
+</p>
 
 Parse, validate, build, and convert JSContact contact cards in Ruby. Supports
 [RFC 9553](https://www.rfc-editor.org/rfc/rfc9553),
 [RFC 9555](https://www.rfc-editor.org/rfc/rfc9555), and
 [RFC 9982](https://www.rfc-editor.org/rfc/rfc9982).
 
+## Features
+
+- Build typed JSContact 2.0 cards and read existing 1.0 cards.
+- Apply patches and localizations while preserving vendor extensions.
+- Convert vCard 4.0 through an optional jcard_jcal integration.
+
 Unknown properties, vendor extensions, and map identifiers survive JSON round
 trips. New cards use JSContact 2.0; reading a 1.0 card keeps its version until you
 explicitly upgrade it.
@@ -15,16 +36,20 @@ explicitly upgrade it.
 
 Requires Ruby 3.3 or later. CI also tests JRuby and TruffleRuby on Linux and macOS.
 
+Add the gem to your Gemfile:
+
 ```ruby
 gem "jscontact"
 # Add only when using the optional vCard converter:
 gem "jcard_jcal", "~> 0.1.0"
 ```
 
+Then run `bundle install`.
+
 The JSON API depends on `json` and `tzinfo`. On systems without a zoneinfo database
 (such as Windows), also install `tzinfo-data` for time zone and country validation.
 
-## Read and build cards
+## Quick start
 
 ```ruby
 require "jscontact"
@@ -124,6 +149,8 @@ vCard 4.0. A missing UID stays absent when converting to JSContact 2.0. Requesti
 Conversion preserves data, rather than the original text's property order,
 folding, or choice of equivalent representation. Date forms without a JSContact
 equivalent and unmatched birth/death place properties are retained in `vCardProps`.
+Timestamp conversion preserves leap seconds. Timestamps without a UTC offset
+remain in `vCardProps` or `vCardParams`, since no UTC instant can be inferred.
 
 JSContact date fields use the Gregorian calendar even when `calendarScale` names
 another calendar. The converter preserves non-Gregorian vCard CALSCALE properties
@@ -177,9 +204,9 @@ vulnerabilities.
 bundle install
 bundle exec rake                      # fetch and verify external RFC inputs, then test
 COVERAGE=1 bundle exec rake            # minimum 90% line coverage
-bundle exec rubocop
 bundle exec rbs -I sig validate
-bundle exec ruby script/interop.rb     # requires stable Rust; pinned calcard comparison
+bundle exec ruby script/check_syntax.rb
+bundle exec ruby script/check_licenses.rb
 bundle exec ruby script/benchmark.rb   # time, allocation and RSS measurements at limits
 bundle exec ruby script/update_registry.rb           # verify pinned IANA registry coverage
 bundle exec ruby script/update_registry.rb --refresh # audit current IANA data and update pins
@@ -188,10 +215,10 @@ bundle exec ruby script/update_registry.rb --refresh # audit current IANA data a
 The suite checks 97 generated RFC examples, both directions of 54 vCard conversion
 pairs, malformed input, patches, limits, and deterministic random round trips.
 See [conformance notes](docs/conformance.md) for extraction corrections, reported
-errata, and the two precisely checked upstream interoperability differences.
+errata, and the current comparison scope.
 The [boundary measurements](docs/performance.md) explain the default limits.
 
-RFC originals, extracted examples, IANA downloads, and external comparison sources
+RFC originals, extracted examples, and IANA downloads
 live only in ignored `tmp/` directories. Downloads retain their applicable notices;
 RFC source hashes and the generated corpus fingerprint are checked before testing.
 The packaged gem contains library code, original schema metadata, RBS, and user
@@ -205,8 +232,14 @@ the gem version and CHANGELOG, then push the matching `vVERSION` tag. The workfl
 tests, builds, publishes through OIDC, and creates a GitHub release from that
 version's CHANGELOG entry. A version already on RubyGems is not published again.
 
+## Contributing
+
+Bug reports and pull requests are welcome on [GitHub](https://github.com/ydah/jscontact/issues). See [Development](#development) for the checks to run before submitting a change. Report security vulnerabilities privately as described in [SECURITY.md](SECURITY.md).
+
 ## License
 
-The Ruby library is available under the [MIT License](LICENSE.txt). External test
-inputs and comparison dependencies retain their own licenses and are not included
-in the gem.
+The Ruby library is available under the [MIT License](LICENSE.txt). Added runtime
+and development libraries must offer MIT terms, including transitive dependencies;
+Ruby runtimes, standard libraries, and bundled tools are explicit exceptions.
+External RFC and registry test inputs retain their notices and are not included
+in the gem. See [provenance and dependency review](docs/provenance.md).

data/SECURITY.md

@@ -4,3 +4,10 @@ Report vulnerabilities through [GitHub private vulnerability reporting](https://
 Please include a minimal reproducer and the affected gem and Ruby versions.
 
 The library treats documents as data. It does not retrieve contact URIs or execute embedded content.
+
+Dependency policy: added runtime and development libraries, including transitive
+dependencies, must offer MIT terms. Ruby runtimes, standard libraries, and bundled
+tools are explicit exceptions. Externally downloaded RFC/registry test data retain
+their own notices and stay outside the repository and gem package. Dependency
+license review does not constitute a cryptographic or application security audit.
+See [provenance and dependency review](docs/provenance.md) for the review scope.

data/lib/jscontact/vcard/to_jscontact.rb

@@ -130,6 +130,8 @@ module Jscontact
 
                  key = SCALARS.fetch(name)
                  converted = %w[created rev].include?(name) ? timestamp(value) : value
+                 return preserve(prop) if converted.nil?
+
                  converted = converted.downcase if name == "kind"
                  converted = normalize_language(converted) if name == "language"
                  @card[key] = converted
@@ -215,10 +217,13 @@ module Jscontact
             consumed << parameter
           end
         when "note"
-          object["created"] = timestamp(params["created"], compact: true) if params["created"]
+          if params["created"] && (created = timestamp(params["created"], compact: true))
+            object["created"] = created
+            consumed << "created"
+          end
           author = { "name" => params["author-name"], "uri" => params["author"] }.compact
           object["author"] = author unless author.empty?
-          consumed += %w[created author author-name]
+          consumed += %w[author author-name]
         when "expertise", "hobby", "interest"
           if params["level"]
             level = params["level"].downcase
@@ -395,7 +400,11 @@ module Jscontact
 
       def timestamp(value, compact: false)
         value = JCardJCal::ValueTypes.from_text(value, "timestamp", format: :vcard) if compact
-        Time.iso8601(value).utc.iso8601
+        return unless value.match?(/(?:Z|[+-]\d{2}(?::\d{2})?)\z/)
+
+        # Convert the minute separately because Ruby Time normalizes leap seconds.
+        minute = Time.iso8601("#{value[0, 17]}00#{value[19..]}").utc
+        "#{minute.strftime("%Y-%m-%dT%H:%M:")}#{value[17, 2]}Z"
       rescue ArgumentError
         raise ConversionError, "invalid vCard timestamp"
       end

data/lib/jscontact/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Jscontact
-  VERSION = "0.1.0"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jscontact
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Yudai Takada
@@ -98,7 +98,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.16
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Read, validate, and convert JSContact contact cards
 test_files: []