k9o 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 7181cb157e2075ffed56c186db0de091dc3bffb8e87ed498451e3b4dc4629e9f
+  data.tar.gz: 41415d026e53bea0e505e702b5fefe58200a26092ae3176c684385bd49bad18d
+SHA512:
+  metadata.gz: ea526dce965974039710f5ab14776ac274271793e0ea95ac979d46a51bba7ab5b552e418a0401fc8cf138ddaade8e169f13ca96df9b4bac51a3d491e2a0f7acb
+  data.tar.gz: bed73f779902b19472006ad86eac056c8a47f89da96c94675a70f201fdfbdd6dd1e5aaf5a2e15e2a59f0bfb4e4b9024b2b61e078696e8dd144e8e36af305af2e

data/CHANGELOG.md

@@ -0,0 +1,38 @@
+# Changelog — k9o (Ruby)
+
+## Unreleased
+
+- `client.storage` buckets and objects — flat methods `create_bucket(name, ...)` / `get_bucket` / `list_buckets` / `update_bucket(name, patch)` / `delete_bucket(name, empty: false)` against `/@<slug>/storage/buckets[/<bucket>]` (`?empty=true` sent only when `empty: true`), and `storage.from(bucket)` handles with `upload(path, data, content_type:, upsert:, metadata:)` (a real `multipart/form-data` body built with the stdlib; the transport no longer forces a JSON content type for it), `create_signed_url(path, expires_in:, download:)`, `list(prefix:)` and `remove(path)`. `expires_in` is required, an Integer 1..604800, refused client-side with `K9O_INVALID_FIELD_VALUE` before any request; no default. Bucket and path values are always URL-encoded and never rewritten. No signed-PUT upload URL and no copy (no gateway route). Requires a bound `project_slug`. Adds `K9o::Storage` and `K9o::Multipart`; `HttpTransport.request(multipart:)`.
+- `client.gate.hosted` — `GET /@<slug>/gate/hosted`; returns the envelope `{ 'signInUrl', 'rpId' }` for the project's hosted sign-in page. Unauthenticated: no `Authorization` or `Cookie` header is sent even when `api_key` is configured. An unknown org, a deleted project and a non-Gate project all surface the same 404 `K9O_PROJECT_NOT_FOUND`. Requires a bound `project_slug`. Adds `HttpTransport.request(authenticated: false)`.
+- `client.ai.embed(input:, model: nil)` — `POST /@<slug>/ai/embeddings`; `input` is one string or an array of strings, sent exactly as given; `model` is omitted from the body when not given. Requires a bound `project_slug` (`K9O_MISSING_PROJECT_CONTEXT` otherwise). The input text never appears in an SDK-constructed error. Adds `K9o::Ai`.
+
+## v0.1.0 — 2026-05-26 (P3 wave 7 — Ruby idiomatic reshape; FINAL P3 WAVE)
+
+**Reshape** of `packages/ruby` from prior OpenAPI-generated `k9o-gate@0.3.0` raw client (214-file output; wrong gem name; not idiomatic) to hand-authored idiomatic `k9o` gem.
+
+NEW surfaces:
+
+- `K9o.create_client(base_url:, api_key:, org_slug:, project_slug:, ...)` factory + baseUrl validation (keyword arguments per Ruby idiom)
+- `K9o::KError < StandardError` — `.code` / `.message` / `.context` (frozen) / `.recommendation` / `.status` / `.request_id` readers; `#message` overridden to return raw text (avoids infinite recursion with `#to_s` override); `with_recommendation` helper
+- `K9o::Envelope` + `K9o::Meta` with 6 typed sub-accessor classes (`MetaCursor` / `MetaSubscription` Struct / `MetaIdempotency` Struct / `MetaWarning` Struct / `MetaTiming` Struct / `MetaContext` Struct); `from_wire` constructs from gateway JSON
+- `K9o::UrlGrammar.{validate_base_url, validate_slug, project_path, org_path, platform_path}` module functions; raises KError on violation
+- Data-plane DSL `client.from('collection')` chainable filter builder (11 ops: eq / neq / gt / gte / lt / lte / like / ilike / is + `in_(col, [...])` / `not_in` + generic `filter`) + `.limit(n)` / `.cursor(s)` / `.count(mode)` + `.execute` terminal; insert/update/delete with `.eq("id", ...)` discipline
+- `client.projects.{list, create(slug:, name:), get(slug), update(slug, name:)}` (keyword args)
+- `client.gate.{sign_up(email:, password:), sign_in(email:, password:), sign_out(refresh_token:), whoami, refresh_token(refresh_token:), verify_session}` (project-scoped; keyword args)
+- HTTP layer: `Net::HTTP` stdlib; KError rehydration on non-2xx; transport failure → K9O_UPSTREAM_UNAVAILABLE; malformed envelope → K9O_INTERNAL_ERROR; injectable `http_client:` for tests
+
+**Tests:** 21 pass / 54 assertions / 0 fail (`ruby test/*.rb` against system Ruby 2.6; gem targets 3.2+ per ch13 spec):
+- 5 KErrorTest (construct + raisable + to_s with status + with_recommendation + from_wire rehydration)
+- 8 UrlGrammarTest (accepts/rejects + path builders)
+- 8 ClientTest (construct + normalise + reject + DSL select/update requirements + projects + gate + collection validation)
+
+**Dependencies:** Ruby 3.2+ runtime; stdlib only (`Net::HTTP`, `json`, `uri`).
+**Dev:** minitest 5.20.
+
+Dropped Ruby from `openapitools.json` + `package.json` `sdks:generate:ruby` — hand-authored against `services/gateway/openapi.json` contract going forward.
+
+**P3 7-wave reshape COMPLETE.** All 7 server SDKs (Python + Go + Rust + Java + .NET + PHP + Ruby) shipped as idiomatic per-language reshapes.
+
+---
+
+**Prior history**: `k9o-gate@0.3.0` OpenAPI-generator output retired at this version.

data/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

data/NOTICE

@@ -0,0 +1,4 @@
+Kilimanjaro SDK
+Copyright 2026 Formelo Inc.
+
+This product is licensed under the Apache License, Version 2.0 (see LICENSE).

data/README.md

@@ -0,0 +1,67 @@
+# k9o — Kilimanjaro platform SDK (Ruby)
+
+Idiomatic Ruby SDK. `snake_case` methods; raise `K9o::KError`; keyword arguments; Net::HTTP stdlib transport.
+
+## Status
+
+v0.1.0 — first-pass idiomatic ship (P3 wave 7; reshape from prior `k9o-gate@0.3.0` OpenAPI codegen).
+
+## Install (when published to RubyGems)
+
+```bash
+gem install k9o
+```
+
+## Quick start
+
+```ruby
+require 'k9o'
+
+k9o = K9o.create_client(
+  base_url: "https://acme.api.k9o.io",
+  api_key: ENV["K9O_API_KEY"],
+  org_slug: "acme",
+  project_slug: "member-portal"
+)
+
+begin
+  response = k9o.from("posts").select.limit(10).execute
+  response.data.each { |row| puts row }
+  puts "next cursor: #{response.meta.cursor&.next}"
+
+  session = k9o.gate.sign_in(email: "u@x.com", password: "...")
+  puts "signed in: #{session.data['user']['id']}"
+rescue K9o::KError => e
+  warn "[#{e.code}] #{e.message}: #{e.recommendation}"
+  raise
+end
+```
+
+## Idiomatic shape (per ch13)
+
+| Aspect | This SDK |
+|---|---|
+| Gem name | `k9o` (RubyGems) |
+| Module | `K9o` |
+| Method casing | `snake_case` |
+| Error delivery | `raise K9o::KError < StandardError` |
+| Factory pattern | `K9o.create_client(base_url:, api_key:, org_slug:, project_slug:)` (keyword args) |
+| Data DSL entry | `client.from('collection')` |
+| Filter chain | `.eq(col, val)` / `.gt()` / `.in_(col, [...])` / `.is(col, val)` / `.filter(col, op, val)` |
+| Terminal verb | `.execute` (parameterless method chain — Ruby idiom) |
+| Meta accessor | `response.meta.cursor&.next` (safe-navigation `&.`); `.meta.timing&.total_ms`; `.meta.context&.request_id` |
+| Wire format | Always camelCase JSON; explicit field-name translation in `Envelope.from_wire` |
+| Runtime | Ruby 3.2+ (per ch13 §2.1.8 spec) |
+| HTTP library | `Net::HTTP` (stdlib; no external deps) |
+
+## Architectural notes
+
+- **Stdlib only**: uses `Net::HTTP` + `json` + `uri`; no Typhoeus or Faraday.
+- **Keyword arguments throughout**: `K9o.create_client(base_url:, api_key:, ...)` and `k9o.gate.sign_in(email:, password:)` per Ruby 3.x idiom.
+- **`&.` safe navigation**: caller pattern `response.meta.cursor&.next` (cursor may be nil if gateway omits the sub-namespace).
+- **`message` override**: `K9o::KError#message` returns the raw text directly to avoid infinite recursion with `to_s` override (Ruby's `Exception#message` calls `to_s` by default).
+- **`.execute` method**: no parens for terminal verb per Ruby convention; chain reads naturally.
+
+## License
+
+UNLICENSED — internal to Kilimanjaro.

data/k9o.gemspec

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+require_relative 'lib/k9o/version'
+
+Gem::Specification.new do |spec|
+  spec.name        = 'k9o'
+  spec.version     = K9o::VERSION
+  spec.authors     = ['Kilimanjaro']
+  spec.email       = ['engineering@kilimanjaro.dev']
+
+  spec.summary     = 'Kilimanjaro platform SDK for Ruby'
+  spec.description = 'Idiomatic Ruby SDK — create_client + data DSL + projects + KError. snake_case + raise K9o::KError.'
+  spec.homepage    = 'https://kilimanjaro.dev'
+  spec.license     = 'Apache-2.0'
+
+  spec.required_ruby_version = '>= 3.2.0'
+
+  # Platform gems: the publish pipeline sets K9O_GEM_PLATFORM (e.g. arm64-darwin,
+  # x86_64-linux) when building a gem that bundles the kibo ZK native lib for that
+  # platform. Unset → the pure-Ruby gem (the universal fallback; `k9o.kibo` is
+  # simply unavailable where no platform gem matches).
+  if (gem_plat = ENV['K9O_GEM_PLATFORM']) && !gem_plat.empty?
+    spec.platform = gem_plat
+  end
+
+  spec.metadata = {
+    'homepage_uri' => 'https://kilimanjaro.dev',
+    'source_code_uri' => 'https://github.com/k9o-dev/sdk-ruby',
+    'changelog_uri' => 'https://github.com/k9o-dev/sdk-ruby/blob/main/CHANGELOG.md'
+  }
+
+  # Ruby sources + the CI-injected kibo native lib (one per platform gem; the
+  # generated uniffi binding under lib/k9o/_ffi/ is picked up by the .rb glob).
+  spec.files = Dir.glob('lib/**/*.rb') +
+               Dir.glob('lib/k9o/_ffi/*.{dylib,so,bundle,dll}') +
+               Dir.glob('sig/**/*.rbs') +
+               %w[README.md CHANGELOG.md LICENSE NOTICE k9o.gemspec]
+  spec.require_paths = ['lib']
+
+  spec.add_development_dependency 'minitest', '~> 5.20'
+end

data/lib/k9o/ai.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+module K9o
+  # AI namespace — platform AI primitives.
+  # k9o.ai.embed(...)
+  #
+  # Wire (project-plane):
+  #   POST /@<slug>/ai/embeddings  body { model?, input: String | [String] }
+  #   -> { data: { embeddings: [[Float]], model:, dimensions: }, meta }
+  #
+  # Bounds are enforced by the gateway, not here. The SDK sends `input`
+  # exactly as given and never puts it in an error.
+  class Ai
+    def initialize(config)
+      @config = config
+    end
+
+    # POST /@<slug>/ai/embeddings — embed one string or an array of strings.
+    # `model` is omitted from the body when nil (server default).
+    def embed(input:, model: nil)
+      slug = Studio.require_project_slug(@config, 'ai')
+      body = { 'input' => input }
+      body['model'] = model unless model.nil?
+      HttpTransport.request(config: @config, method: 'POST',
+                            path: UrlGrammar.project_path(slug, 'ai/embeddings'), body: body)
+    end
+  end
+end

data/lib/k9o/audit.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module K9o
+  # Project-plane audit log namespace — k9o.audit.*.
+  # Distinct from k9o.org.audit_log + k9o.me.audit_log.
+  class Audit
+    def initialize(config)
+      @config = config
+    end
+
+    # Query the audit log (reverse-chronological; filters AND-compose).
+    # Accepts keyword filters: since/until/type/actor_id/target_kind/
+    # target_id/limit/cursor (wire camelCase mapping applied here).
+    def query(since: nil, until_: nil, type: nil, actor_id: nil,
+              target_kind: nil, target_id: nil, limit: nil, cursor: nil)
+      slug = Studio.require_project_slug(@config, 'audit')
+      q = {}
+      q['since'] = since if since
+      q['until'] = until_ if until_
+      q['type'] = type if type
+      q['actorId'] = actor_id if actor_id
+      q['targetKind'] = target_kind if target_kind
+      q['targetId'] = target_id if target_id
+      q['limit'] = limit if limit
+      q['cursor'] = cursor if cursor
+      HttpTransport.request(config: @config, method: 'GET', path: UrlGrammar.project_path(slug, 'audit-log'), query: q)
+    end
+  end
+end

data/lib/k9o/barbican.rb

@@ -0,0 +1,239 @@
+# frozen_string_literal: true
+
+require_relative 'kerror'
+
+module K9o
+  # Barbican — free, embeddable L2 guardrail. Input normalization -> Aho-Corasick
+  # deny-list matching over a signed ruleset -> local verdict, plus a streaming
+  # output redactor (buffer-and-scan-before-flush).
+  #
+  # Thin wrapper over the bound core (`k9o-keep-core`, via uniffi) — mirrors the
+  # structural pattern of +K9o::Kibo+ (native-load guard evaluated once at
+  # require time; every call forwards typed arguments to the generated binding
+  # and maps its error -> +K9o::KError+). ZERO guardrail logic lives here: every
+  # normalization pass, deny match, verdict, and redaction decision is the
+  # audited native core's.
+  #
+  # CLAIM BOUNDARY: Barbican is advisory / defense-in-depth (edge filtration).
+  # It is never the enforced sandbox boundary.
+  #
+  # The generated uniffi binding + native lib (+lib/k9o/_ffi/+) are build
+  # artifacts (CI-injected per platform; gitignored) — on a platform/Ruby
+  # without them, +require+ still succeeds and +Barbican.new+ raises a clear
+  # +K9o::KError+, so loading +k9o+ never breaks for the rest of the SDK.
+  class Barbican
+    # Attempt to load the native binding; never raises at require time.
+    NATIVE_AVAILABLE =
+      begin
+        require_relative '_ffi/k9o_keep_core_ffi_uniffi'
+        true
+      rescue LoadError
+        false
+      end
+
+    # +decode_depth+ of 0 uses the core default (3) — a bounded base64/leetspeak
+    # de-obfuscation depth (decode-bomb guard).
+    def initialize(fail_open: false, leet: true, decode_depth: 0)
+      self.class.ensure_native!
+      config = K9oKeepCoreFfiUniffi::KeepConfig.new(
+        fail_open: fail_open, leet: leet, decode_depth: decode_depth
+      )
+      @core = K9oKeepCoreFfiUniffi::KeepCore.new(config)
+    end
+
+    # Load a static ruleset bundled with your gem (Mode-A path: provenance is
+    # vouched for by your package, so signature verification is skipped — the
+    # core still enforces anti-rollback, never loading a version <= the current
+    # one). +rules+ = an array of {id:, pattern:, severity:} (severity one of
+    # low|medium|high|critical; string or symbol keys both accepted). Returns
+    # the accepted version.
+    def load_ruleset(ruleset_version, rules)
+      blob = K9oKeepCoreFfiUniffi::KeepRulesetBlob.new(
+        ruleset_version: ruleset_version,
+        rules: rules.map { |r| build_rule(r) }
+      )
+      begin
+        @core.load_ruleset_unsigned(blob)
+      rescue StandardError => e
+        raise self.class.to_kerror(e)
+      end
+    end
+
+    # Load a Barbican key manifest (compact JWS, +typ k9o.barbican.keys.v1+). The
+    # core checks it against the root key compiled into it and, only if it
+    # verifies, REPLACES the trusted ruleset-signing keys with the ones it lists.
+    # A refusal (wrong signer, rollback, a key changing its public key, a
+    # malformed entry) raises +K9O_BARBICAN_RULESET_INVALID+ with
+    # +context[:stage] == 'key_manifest'+ and leaves the trusted keys unchanged.
+    # Returns the manifest +sequence+.
+    def load_key_manifest(jws, now_secs = nil)
+      @core.load_key_manifest(jws, now_secs || Time.now.to_i)
+    rescue StandardError => e
+      raise self.class.to_kerror(e, 'key_manifest')
+    end
+
+    # Verify a ruleset manifest (compact JWS) under a trusted key and return its
+    # authenticated fields (+ruleset_version+ / +signing_key_kid+ /
+    # +artifact_hash+ / +artifact_url+ / +valid_until+).
+    def verify_manifest(jws)
+      @core.verify_manifest(jws)
+    rescue StandardError => e
+      raise self.class.to_kerror(e)
+    end
+
+    # Load a signed ruleset. The core verifies the Ed25519 signature ITSELF, over
+    # its own canonical bytes, under a key from the loaded key manifest: there is
+    # no key or verifier to pass. Any failure (no key manifest loaded, unknown
+    # key, bad or non-canonical signature, stale version, malformed rules) raises
+    # +K9O_BARBICAN_RULESET_INVALID+ with +context[:reason]+ and leaves the
+    # current ruleset running. +signature+ is the raw 64-byte binary String.
+    # Returns the accepted version.
+    def load_ruleset_signed(ruleset_version, rules, signing_key_kid, signature, created_at = 0)
+      @core.load_ruleset_signed(signed_blob(ruleset_version, rules, signing_key_kid, signature, created_at))
+    rescue StandardError => e
+      raise self.class.to_kerror(e)
+    end
+
+    # Lowercase hex SHA-256 of a ruleset's canonical signing bytes — the value a
+    # manifest's +artifact_hash+ names. A digest only; it decides no trust.
+    def ruleset_digest(ruleset_version, rules, signing_key_kid, signature, created_at = 0)
+      @core.ruleset_digest(signed_blob(ruleset_version, rules, signing_key_kid, signature, created_at))
+    rescue StandardError => e
+      raise self.class.to_kerror(e)
+    end
+
+    # The +sequence+ of the key manifest in force (0 before one is loaded).
+    def key_manifest_sequence
+      @core.key_manifest_sequence
+    end
+
+    # The highest VERIFIED ruleset version loaded (0 = none): the anti-rollback floor for signed updates. A refresh
+    # compares a published version against this, not the version in force.
+    def signed_floor
+      @core.signed_floor
+    end
+
+    # Whether the ruleset in force came from a verified load. +false+ when none is loaded, or when +load_ruleset+
+    # (unsigned, host-vouched) replaced a verified one.
+    def active_ruleset_is_signed?
+      @core.active_ruleset_is_signed
+    end
+
+    # The signing kids the loaded key manifest currently trusts, sorted.
+    def trusted_kids
+      @core.trusted_kids
+    end
+
+    # The trusted kids the key manifest flags deprecated, sorted.
+    def deprecated_kids
+      @core.deprecated_kids
+    end
+
+    # +false+ on every shipped build. +true+ means this binding trusts the
+    # PUBLISHED TEST root and must never be used outside tests.
+    def self.uses_test_trust_root?
+      ensure_native!
+      K9oKeepCoreFfiUniffi.uses_test_trust_root
+    end
+
+    # Inspect an input (normalize -> deny -> local verdict). Obfuscation is
+    # peeled BEFORE matching, so static deny-lists aren't defeated by trivial
+    # tricks. +waypoint_class+ is the manifest's meter hint — it NEVER gates the
+    # decision. Returns the verdict object (+decision+ / +reason+ / +matched+ /
+    # +schema_valid+ / +waypoint_class_hint+ / +fail_mode+ / +ruleset_version+ /
+    # +core_version+).
+    def inspect(text, waypoint_class: nil)
+      @core.inspect_input(text, waypoint_class)
+    end
+
+    # Local L3 stand-in classification ("clear"|"suspicious"|"malicious"). No
+    # receipt — a classification is not an enforcement decision.
+    def classify(text)
+      @core.classify_local(text)
+    end
+
+    # Open an output stream-filter bound to the active ruleset's exfil markers.
+    def create_output_filter
+      OutputFilter.new(@core.output_filter)
+    end
+
+    # The bound core's semver (audit anchor; rides every verdict too).
+    def core_version
+      @core.core_version
+    end
+
+    # Guard: raise a clear KError if the native lib is absent (evaluated BEFORE
+    # any reference to the +K9oKeepCoreFfiUniffi+ namespace, which may be
+    # undefined).
+    def self.ensure_native!
+      return if NATIVE_AVAILABLE
+
+      raise K9o::KError.new(
+        code: 'K9O_BARBICAN_WASM_ERROR',
+        message: 'barbican native library not available for this platform/Ruby; install the platform-specific k9o gem.'
+      )
+    end
+
+    # Map the bound core's error -> +K9o::KError+. +KeepError::RulesetInvalid+
+    # is the only typed variant (bad/stale/malformed ruleset) — its reason token
+    # (+version_stale+ / +signature_invalid+ / +malformed+ / an unknown-severity
+    # message) rides in +context[:reason]+. Anything else from the native layer
+    # (e.g. a Rust panic surfaced as +InternalError+) maps to the generic code.
+    def self.to_kerror(e, stage = 'ruleset')
+      if e.respond_to?(:reason)
+        K9o::KError.new(
+          code: 'K9O_BARBICAN_RULESET_INVALID',
+          message: e.to_s,
+          context: { reason: e.reason, stage: stage }
+        )
+      else
+        K9o::KError.new(code: 'K9O_BARBICAN_WASM_ERROR', message: e.to_s)
+      end
+    end
+
+    # Accept string or symbol keys ({"id" => ..} or {id: ..}) for ergonomics.
+    def build_rule(r)
+      K9oKeepCoreFfiUniffi::KeepRule.new(
+        id: r[:id] || r['id'],
+        pattern: r[:pattern] || r['pattern'],
+        severity: r[:severity] || r['severity']
+      )
+    end
+    private :build_rule
+
+    def signed_blob(ruleset_version, rules, signing_key_kid, signature, created_at)
+      K9oKeepCoreFfiUniffi::KeepSignedRulesetBlob.new(
+        ruleset_version: ruleset_version,
+        rules: rules.map { |r| build_rule(r) },
+        signing_key_kid: signing_key_kid,
+        signature: signature.b,
+        created_at: created_at
+      )
+    end
+    private :signed_blob
+  end
+
+  # A streaming output redactor. Buffer-and-scan-before-flush: never emits a
+  # byte the core has not cleared (no RST-after-leak).
+  class OutputFilter
+    def initialize(handle)
+      @handle = handle
+    end
+
+    # Feed a chunk; returns the cleared (redacted) prefix safe to emit now.
+    def push(chunk)
+      @handle.push(chunk)
+    end
+
+    # Flush the residual buffer (also scanned) at end of stream.
+    def finish
+      @handle.finish
+    end
+
+    # Leak report (counts only — never the leaked values): an object with
+    # +emails+ / +secrets+ / +markers+ / +total+.
+    def report
+      @handle.report
+    end
+  end
+end