kiosk-server 0.5.20

data/listen.py

@@ -0,0 +1,278 @@
+#!/usr/bin/env python3
+"""Kiosk event-stream listener — the pinned reference client.
+
+Opens ONE WebSocket to an operator's `events_url`, subscribes to the topics you
+name, and writes every message it receives as one JSON line on stdout. The
+operator pushes when something happens, so there is nothing to poll and no
+cadence to invent.
+
+    python3 listen.py --url wss://shop.example/kiosk/events \
+                      --token-file ~/.kiosk/https_shop.example_443/token \
+                      --topic order_delivery:<order-id>
+
+The bearer token is read from a file, never from the command line, where every
+process listing and shell history would show it.
+
+WAKE ON THE EVENT: run it as a background process your runtime TRACKS and wakes
+you on when it exits. With `--until-event` it prints the first event and exits 0
+the moment it arrives, or exits 5 at `--max-seconds` with nothing. On waking, act
+on the event, tell your human, and start it again with `--since <its id>`. Keep
+`--max-seconds` below the longest your runtime lets a background process live. A
+process the runtime does not track -- nohup, `&`, setsid -- wakes nobody, and
+neither does a line landing in a file.
+
+    python3 listen.py --url … --token-file … --topic kyc_verification \
+                      --until-event --max-seconds 300
+
+Each line is a JSON object with a `type`:
+
+    {"type":"open"}                        the socket is up and authenticated
+    {"type":"subscribed","topic":…,"head":…,"truncated":…}
+    {"type":"event","id":…,"topic":…,"subject":…,"occurred_at":…,"data":{…}}
+    {"type":"rejected","topic":…}          that topic is not yours to read
+    {"type":"unsubscribed","topic":…,"reason":…}   you lost reach mid-stream
+    {"type":"disconnect","reason":…,"reconnect":…}
+    {"type":"reconnecting","in":…,"since":…}
+    {"type":"error","message":…}
+
+EXIT CODES: 0 you asked it to stop (--max-seconds), or --until-event got its
+event; 2 the arguments or the URL are wrong; 3 the operator will not have this
+token back and no --token-command was given — mint a fresh one and start it
+again; 4 nothing you asked for can arrive: every topic you named was refused,
+or the origin serves no event stream (`501 module_not_served`); 5
+--until-event reached the deadline with nothing.
+
+It needs `websockets` from PyPI (>= 12, the release that added the threading
+client). Add it to the same venv the skill already has you create:
+
+    pip install 'websockets>=12'
+
+Do NOT replace this file with a client of your own. The subprotocol token, the
+string-inside-a-string `identifier`, and the resume contract are each a place a
+hand-rolled client is dropped with no diagnostic, and you would read that
+silence as "nothing happened".
+"""
+
+import argparse
+import json
+import os
+import random
+import subprocess
+import sys
+import time
+from urllib.parse import urlencode, urlsplit, urlunsplit
+
+import websockets
+from websockets.sync.client import connect
+
+SUBPROTOCOL = "actioncable-v1-json"
+# The operator's own beat is one ping every thirty seconds. Three missed in a
+# row is a socket that is gone without having said so — half-open TCP, a dozing
+# laptop, an edge that dropped us — and the only way to find out is to stop
+# waiting.
+IDLE_TIMEOUT = 95
+BACKOFF_CAP = 30
+
+
+def emit(**line):
+    """One JSON object per line, flushed, so a tail sees it immediately."""
+    sys.stdout.write(json.dumps(line, separators=(",", ":")) + "\n")
+    sys.stdout.flush()
+
+
+def problem_code(response):
+    """The `code` of a refused upgrade's problem document, when it carries one."""
+    try:
+        return json.loads(response.body)["code"]
+    except (TypeError, ValueError, KeyError):
+        return None
+
+
+def stream_url(url, topics, since):
+    """`?topic=` is how you subscribe: the operator reads it on connect and
+    confirms each one, so a round trip per topic is not needed."""
+    query = [("topic", ",".join(topics))]
+    if since is not None:
+        query.append(("since", str(since)))
+    parts = urlsplit(url)
+    return urlunsplit((parts.scheme, parts.netloc, parts.path, urlencode(query), ""))
+
+
+def read_frames(socket, state, deadline):
+    """Drain one connection, and say what to do next.
+
+    "retry" reconnect · "stop" --max-seconds is up · "event" --until-event got
+    its event · "credential" the operator will not have this token back ·
+    "unreadable" every topic was refused.
+
+    The read is bounded rather than blocking forever: a deadline nothing
+    checks is not a deadline, and a socket that died without saying so looks
+    exactly like a quiet one.
+    """
+    while True:
+        budget = IDLE_TIMEOUT
+        if deadline:
+            budget = min(budget, deadline - time.monotonic())
+            if budget <= 0:
+                return "stop"
+        try:
+            raw = socket.recv(timeout=budget)
+        except TimeoutError:
+            # The deadline, or three of the operator's beats missed — a socket
+            # that died without saying so. Neither is an error worth a line.
+            return "stop" if deadline and time.monotonic() >= deadline else "retry"
+        frame = json.loads(raw)
+        kind = frame.get("type")
+
+        if kind in ("ping", "welcome"):
+            continue
+
+        if kind == "confirm_subscription":
+            state["confirmed"] += 1
+            continue
+
+        if kind == "reject_subscription":
+            emit(type="rejected", topic=topic_of(frame))
+            state["rejected"] += 1
+            # EVERY topic refused and none confirmed: there is nothing on
+            # this socket to wait for, ever. Say so rather than sit on it.
+            if state["confirmed"] == 0 and state["rejected"] >= state["wanted"]:
+                return "unreadable"
+            continue
+
+        if kind == "disconnect":
+            emit(type="disconnect", reason=frame.get("reason"),
+                 reconnect=frame.get("reconnect", True))
+            # `reconnect: false` is the operator saying this credential is done:
+            # it expired, or the human revoked the assistant. A retry with the
+            # same bearer loses the same argument, so mint a new one or stop.
+            if frame.get("reconnect", True):
+                return "retry"
+            return "retry" if state["refresh"] else "credential"
+
+        message = frame.get("message")
+        if not isinstance(message, dict):
+            continue
+
+        if message.get("type") == "subscribed":
+            # `head` is where the operator's tail stood when this subscription
+            # opened. Adopt it as the resume floor NOW rather than waiting for
+            # a first event: a socket that drops before anything arrives would
+            # otherwise reconnect asking for nothing in particular, and every
+            # event emitted during the gap would be missed in silence.
+            if message.get("head") is not None:
+                state["since"] = max(state["since"] or 0, int(message["head"]))
+            emit(**message)
+            continue
+
+        if message.get("type") == "unsubscribed":
+            emit(**message)
+            continue
+
+        # An event. Its `id` is per-operator and monotonic, so the highest one
+        # seen is exactly what `since` wants after a drop.
+        if message.get("id") is not None:
+            state["since"] = max(state["since"] or 0, int(message["id"]))
+        emit(type="event", **message)
+        # The one-shot wait is over the moment the thing you waited for lands.
+        # A `subscribed` confirmation is not that, and neither is a beat.
+        if state["one_shot"]:
+            return "event"
+
+
+def topic_of(frame):
+    try:
+        return json.loads(frame.get("identifier") or "{}").get("topic")
+    except ValueError:
+        return None
+
+
+def main():
+    parser = argparse.ArgumentParser(description="Kiosk event-stream listener")
+    parser.add_argument("--url", required=True, help="the operator's events_url")
+    parser.add_argument("--token-file", required=True, metavar="PATH",
+                        help="a file holding your bearer token")
+    parser.add_argument("--topic", action="append", required=True, metavar="NAME[:SUBJECT]",
+                        help="repeatable; NAME:SUBJECT narrows to one row")
+    parser.add_argument("--since", type=int, help="resume after this event id")
+    parser.add_argument("--token-command",
+                        help="shell command printing a fresh bearer token; run when the "
+                             "operator says this one will not be accepted back")
+    parser.add_argument("--max-seconds", type=float, help="stop after this long")
+    parser.add_argument("--until-event", action="store_true",
+                        help="exit 0 on the first event, 5 at --max-seconds with none")
+    args = parser.parse_args()
+
+    if urlsplit(args.url).scheme not in ("ws", "wss"):
+        parser.error("--url must be ws:// or wss://")
+    if args.until_event and not args.max_seconds:
+        parser.error("--until-event needs --max-seconds: a wait with no deadline never returns")
+
+    try:
+        with open(os.path.expanduser(args.token_file)) as file:
+            token = file.read().strip()
+    except OSError as error:
+        parser.error(f"--token-file: {error.strerror}")
+
+    state = {"since": args.since, "token": token, "refresh": args.token_command,
+             "wanted": len(args.topic), "confirmed": 0, "rejected": 0,
+             "one_shot": args.until_event}
+    deadline = time.monotonic() + args.max_seconds if args.max_seconds else None
+    attempt = 0
+
+    while True:
+        if deadline and time.monotonic() >= deadline:
+            return 5 if args.until_event else 0
+        renew = True
+        try:
+            with connect(stream_url(args.url, args.topic, state["since"]),
+                         subprotocols=[SUBPROTOCOL],
+                         additional_headers={"Authorization": f"Bearer {state['token']}"},
+                         open_timeout=15, close_timeout=5) as socket:
+                emit(type="open")
+                attempt = 0
+                state["confirmed"] = state["rejected"] = 0
+                verdict = read_frames(socket, state, deadline)
+                if verdict == "event":
+                    return 0
+                if verdict == "stop":
+                    return 5 if args.until_event else 0
+                if verdict == "unreadable":
+                    return 4
+                if verdict == "credential":
+                    return 3
+        except KeyboardInterrupt:
+            return 0
+        except websockets.InvalidStatus as error:
+            status = error.response.status_code
+            code = problem_code(error.response)
+            emit(type="error", message=f"upgrade refused: {status}" + (f" {code}" if code else ""))
+            # 501: this origin serves no event stream, for any credential.
+            if status == 501:
+                return 4
+            if status not in (401, 403):
+                renew = False
+            elif state["refresh"] is None:
+                return 3
+        except Exception as error:  # noqa: BLE001 — every transport fault is one retry
+            emit(type="error", message=f"{type(error).__name__}: {error}")
+
+        if renew and state["refresh"] is not None:
+            fresh = subprocess.run(state["refresh"], shell=True, capture_output=True,
+                                   text=True, check=False)
+            if fresh.returncode == 0 and fresh.stdout.strip():
+                state["token"] = fresh.stdout.strip()
+            else:
+                emit(type="error", message="--token-command produced no token")
+                return 3
+
+        attempt += 1
+        wait = min(2 ** (attempt - 1), BACKOFF_CAP) * (0.5 + random.random())
+        if deadline:
+            wait = min(wait, max(0.0, deadline - time.monotonic()))
+        emit(type="reconnecting", **{"in": round(wait, 2), "since": state["since"]})
+        time.sleep(wait)
+
+
+if __name__ == "__main__":
+    sys.exit(main())

data/requirements.txt

@@ -0,0 +1 @@
+websockets>=12

metadata

@@ -0,0 +1,349 @@
+--- !ruby/object:Gem::Specification
+name: kiosk-server
+version: !ruby/object:Gem::Version
+  version: 0.5.20
+platform: ruby
+authors:
+- Phil Pirozhkov
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: kiosk-core
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.5.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.5.0
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.8'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.8'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+- !ruby/object:Gem::Dependency
+  name: base64
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: zeitwerk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.6'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.6'
+- !ruby/object:Gem::Dependency
+  name: json_schemer
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.3'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.3'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: railties
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '8.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '8.1'
+- !ruby/object:Gem::Dependency
+  name: actionpack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '8.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '8.1'
+- !ruby/object:Gem::Dependency
+  name: actioncable
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '8.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '8.1'
+- !ruby/object:Gem::Dependency
+  name: activerecord
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '8.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '8.1'
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '8.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '8.1'
+description: |
+  kiosk-server is the host-side surface for Kiosk. The full surface ships:
+
+    - The controllers — the per-verb wire (GET <endpoint>/<query-name>,
+      POST <endpoint>/<action-name>) and the reserved endpoints
+      (/kiosk/schema, /kiosk/pay), a derived OpenAPI description of both,
+      the register/login proof-of-possession auth plane, JWKS, the KYC
+      attestation endpoint, agents.txt / agents.json / kiosk.json
+      discovery, and the account-binding ceremony (RFC 8628-shaped device
+      authorization, the possession-proof-gated token poll, the verify and
+      «Link an assistant» pages).
+    - Kiosk::Server::Executor — dispatches a resolved command to the
+      queries and actions the host registered.
+    - Agent registration and login, with a pluggable agent-IdP.
+    - The PoW gate that enforces a kiosk-reputation policy's challenge
+      (soft dependency; zero overhead when no policy is set).
+    - A Rack middleware injecting the Kiosk-Server-Version /
+      Kiosk-API-Version / Kiosk-Min-Client response headers, a pure-Ruby
+      builder for the discovery documents, SQL generators for the
+      canonical schema migrations, and a `kiosk:install` generator that
+      lays down the initializer and the migrations.
+
+  The Rails engine serves that whole surface from one `kiosk` block in
+  config/routes.rb, which mounts it at Kiosk.configuration.mount_path —
+  drawing the wire/auth/JWKS/KYC/binding routes under the mount and
+  installing the root-relative discovery routes (agents.txt, .well-known)
+  into the host — then one route per query and action the block names. It
+  also auto-injects the headers middleware.
+email:
+- hello@fili.pp.ru
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- LICENSE.txt
+- README.md
+- app/channels/kiosk_events.rb
+- app/controllers/kiosk/server/application_controller.rb
+- app/controllers/kiosk/server/assistants_controller.rb
+- app/controllers/kiosk/server/auth_controller.rb
+- app/controllers/kiosk/server/device_verify_controller.rb
+- app/controllers/kiosk/server/discovery_controller.rb
+- app/controllers/kiosk/server/jwks_controller.rb
+- app/controllers/kiosk/server/kyc_attestation_controller.rb
+- app/controllers/kiosk/server/kyc_callback_controller.rb
+- app/controllers/kiosk/server/oauth_device_authorization_controller.rb
+- app/controllers/kiosk/server/oauth_token_controller.rb
+- app/controllers/kiosk/server/open_api_controller.rb
+- app/controllers/kiosk/server/payment_setup_controller.rb
+- app/controllers/kiosk/server/verb_controller.rb
+- app/controllers/kiosk/server/wire_controller.rb
+- app/models/kiosk/cart_mandate.rb
+- app/models/kiosk/server/application_record.rb
+- app/models/kiosk/settlement.rb
+- app/models/kiosk/visit.rb
+- app/views/kiosk/server/assistants/show.html.erb
+- app/views/kiosk/server/device_verify/decided.html.erb
+- app/views/kiosk/server/device_verify/show.html.erb
+- lib/generators/kiosk/install/install_generator.rb
+- lib/generators/kiosk/install/templates/create_kiosk_auth_challenges.rb.tt
+- lib/generators/kiosk/install/templates/create_kiosk_device_authorizations.rb.tt
+- lib/generators/kiosk/install/templates/create_kiosk_events.rb.tt
+- lib/generators/kiosk/install/templates/create_kiosk_identity_tables.rb.tt
+- lib/generators/kiosk/install/templates/create_kiosk_kyc_attributes.rb.tt
+- lib/generators/kiosk/install/templates/create_kiosk_mandates.rb.tt
+- lib/generators/kiosk/install/templates/create_kiosk_pow_spent.rb.tt
+- lib/generators/kiosk/install/templates/create_kiosk_refunds.rb.tt
+- lib/generators/kiosk/install/templates/create_kiosk_revocations.rb.tt
+- lib/generators/kiosk/install/templates/create_kiosk_schema.rb.tt
+- lib/generators/kiosk/install/templates/create_kiosk_visits.rb.tt
+- lib/generators/kiosk/install/templates/initializer.rb.tt
+- lib/kiosk/handler.rb
+- lib/kiosk/owned.rb
+- lib/kiosk/payable.rb
+- lib/kiosk/server.rb
+- lib/kiosk/server/account_binding.rb
+- lib/kiosk/server/account_holder_gate.rb
+- lib/kiosk/server/action_event.rb
+- lib/kiosk/server/actions.rb
+- lib/kiosk/server/agent_identity_providers/default_agent_idp.rb
+- lib/kiosk/server/agent_login.rb
+- lib/kiosk/server/agent_registration.rb
+- lib/kiosk/server/argument_decoder.rb
+- lib/kiosk/server/audit_sink.rb
+- lib/kiosk/server/auth_challenge.rb
+- lib/kiosk/server/auth_challenge_stores.rb
+- lib/kiosk/server/auth_toll.rb
+- lib/kiosk/server/binding_module_gate.rb
+- lib/kiosk/server/caller_timezone.rb
+- lib/kiosk/server/column_spending_cap.rb
+- lib/kiosk/server/configuration_extension.rb
+- lib/kiosk/server/controller_verb.rb
+- lib/kiosk/server/current_request.rb
+- lib/kiosk/server/cursor.rb
+- lib/kiosk/server/device_authorization.rb
+- lib/kiosk/server/device_authorization_stores.rb
+- lib/kiosk/server/device_code_grant.rb
+- lib/kiosk/server/device_verification.rb
+- lib/kiosk/server/engine.rb
+- lib/kiosk/server/errors.rb
+- lib/kiosk/server/event_stores.rb
+- lib/kiosk/server/events.rb
+- lib/kiosk/server/events_cable.rb
+- lib/kiosk/server/events_connection.rb
+- lib/kiosk/server/executor.rb
+- lib/kiosk/server/executor/repeat.rb
+- lib/kiosk/server/executor/spending_cap.rb
+- lib/kiosk/server/failure_log.rb
+- lib/kiosk/server/handler_mixin.rb
+- lib/kiosk/server/handler_registrations.rb
+- lib/kiosk/server/handler_serving.rb
+- lib/kiosk/server/headers.rb
+- lib/kiosk/server/headers_middleware.rb
+- lib/kiosk/server/identity_resolution.rb
+- lib/kiosk/server/issuer_middleware.rb
+- lib/kiosk/server/jwks.rb
+- lib/kiosk/server/jwt_issuer.rb
+- lib/kiosk/server/kyc.rb
+- lib/kiosk/server/kyc_verifier.rb
+- lib/kiosk/server/link_code.rb
+- lib/kiosk/server/linked_assistants.rb
+- lib/kiosk/server/mandate_verifier.rb
+- lib/kiosk/server/open_api.rb
+- lib/kiosk/server/page.rb
+- lib/kiosk/server/payment_claim.rb
+- lib/kiosk/server/payment_setup.rb
+- lib/kiosk/server/pop_verifier.rb
+- lib/kiosk/server/pow_gate.rb
+- lib/kiosk/server/pow_spent_stores.rb
+- lib/kiosk/server/pow_toll.rb
+- lib/kiosk/server/queries.rb
+- lib/kiosk/server/reputation_factors.rb
+- lib/kiosk/server/request_validation.rb
+- lib/kiosk/server/response_validation.rb
+- lib/kiosk/server/result.rb
+- lib/kiosk/server/revocation_stores.rb
+- lib/kiosk/server/routing.rb
+- lib/kiosk/server/schema_definitions.rb
+- lib/kiosk/server/schema_document.rb
+- lib/kiosk/server/schema_slots.rb
+- lib/kiosk/server/schemas/auth.schema.json
+- lib/kiosk/server/schemas/binding.schema.json
+- lib/kiosk/server/schemas/kyc.schema.json
+- lib/kiosk/server/schemas/mandates.schema.json
+- lib/kiosk/server/schemas/pow.schema.json
+- lib/kiosk/server/session_context.rb
+- lib/kiosk/server/settled_spend.rb
+- lib/kiosk/server/signing_key.rb
+- lib/kiosk/server/verb_registry.rb
+- lib/kiosk/server/verb_vocabulary.rb
+- lib/kiosk/server/verb_wire.rb
+- lib/kiosk/server/version.rb
+- lib/kiosk/server/well_known.rb
+- lib/kiosk/server/wire_rendering.rb
+- lib/kiosk/server/wrong_door.rb
+- lib/kiosk/skill_link.rb
+- listen.py
+- requirements.txt
+homepage: https://kiosk.tech
+licenses:
+- Apache-2.0
+metadata:
+  homepage_uri: https://kiosk.tech
+  source_code_uri: https://github.com/kiosk-hq/kiosk
+  changelog_uri: https://github.com/kiosk-hq/kiosk/blob/main/kiosk-server/CHANGELOG.md
+  bug_tracker_uri: https://github.com/kiosk-hq/kiosk/issues
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '4.0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.3
+specification_version: 4
+summary: Rails engine + Rack middleware + pure-Ruby helpers for the Kiosk framework
+test_files: []