libddwaf 1.25.1.0.1-arm64-darwin → 1.25.1.1.0-arm64-darwin

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 29da4a380625b6e851ffaf8497211f0fd69c01e02bd6238d14092ed294fc1ed5
-  data.tar.gz: b7d5945a29a8773c18534d598069232732c4dce7bee385a5c609c1f8d04c427a
+  metadata.gz: c2f86f8104fb75e40fe1257dbc7bb880d3169b0657b974f543bffa34695187ba
+  data.tar.gz: 9c641a479725a12f8f45e7fb9e93640747eb2094a3d438c508157f2e9d811e6b
 SHA512:
-  metadata.gz: 757a45d304154e1cb1ae907176d4d287b1a46e549b135e0a3f1005edc138b802d1f18976719c44b7c62927ae6d92269e5ae1878463472b9e2b08fa31820f1bd6
-  data.tar.gz: f88dde8ae0d58d1d7dd50f2c98c9c637ea3e3a25c80713323c52521f6c22f3f8479890cd71a9c8cad9afc5078d34ce420779282fbb930786acd1f7c9d9e6893f
+  metadata.gz: 55e303fc93d4834b7cf67ba6ee131b5044d6164eea418d28164517b41dd45454c7cf6f44b88c6845bdcbb7792fc804d77e1b6905b03d2d63a221b8043a4e4166
+  data.tar.gz: afab34467bb649dc1d190b3a43bd856e6647d26f38719eb63d630d44f7eb70a398ce573a6ae86d677418ecd97192052e67fb99ac99ad4935dd8aa73b001080d8

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Unreleased
 
+# 2025-09-24 v1.25.1.1.0
+
+## Changed
+
+- Change coersion of the values in WAF rules to use `libddwaf` primitives
+
 # 2025-09-18 v1.25.1.0.1
 
 ## Fixed

data/lib/datadog/appsec/waf/context.rb

@@ -7,9 +7,9 @@ module Datadog
       # See https://github.com/DataDog/libddwaf/blob/10e3a1dfc7bc9bb8ab11a09a9f8b6b339eaf3271/BINDING_IMPL_NOTES.md?plain=1#L125-L158
       class Context
         EMPTY_RESULT = {
-          "events" => [],     #: ::Array[WAF::output]
-          "actions" => {},    #: ::Hash[::String, WAF::output]
-          "attributes" => {}, #: ::Hash[::String, WAF::output]
+          "events" => [],     #: WAF::events
+          "actions" => {},    #: WAF::actions
+          "attributes" => {}, #: WAF::attributes
           "duration" => 0,
           "timeout" => false,
           "keep" => false

data/lib/datadog/appsec/waf/converter.rb

@@ -164,13 +164,13 @@ module Datadog
           when :ddwaf_obj_float
             obj[:valueUnion][:f64]
           when :ddwaf_obj_array
-            (0...obj[:nbEntries]).each.with_object([]) do |i, a| #$ ::Array[WAF::output]
+            (0...obj[:nbEntries]).each.with_object([]) do |i, a| #$ ::Array[WAF::opaque]
               ptr = obj[:valueUnion][:array] + i * LibDDWAF::Object.size
               e = Converter.object_to_ruby(LibDDWAF::Object.new(ptr))
               a << e
             end
           when :ddwaf_obj_map
-            (0...obj[:nbEntries]).each.with_object({}) do |i, h| #$ ::Hash[::String, WAF::output]
+            (0...obj[:nbEntries]).each.with_object({}) do |i, h| #$ ::Hash[::String, WAF::opaque]
               ptr = obj[:valueUnion][:array] + i * Datadog::AppSec::WAF::LibDDWAF::Object.size
               o = Datadog::AppSec::WAF::LibDDWAF::Object.new(ptr)
               l = o[:parameterNameLength]

data/lib/datadog/appsec/waf/handle_builder.rb

@@ -58,7 +58,7 @@ module Datadog
         def add_or_update_config(config, path:)
           ensure_pointer_presence!
 
-          config_obj = Converter.ruby_to_object(config)
+          config_obj = Converter.ruby_to_object(config, coerce: false)
           diagnostics_obj = LibDDWAF::Object.new
 
           LibDDWAF.ddwaf_builder_add_or_update_config(@builder_ptr, path, path.length, config_obj, diagnostics_obj)

data/lib/datadog/appsec/waf/version.rb

@@ -5,7 +5,7 @@ module Datadog
         BASE_STRING = "1.25.1"
         # NOTE: Every change to the `BASE_STRING` should be accompanied
         #       by a reset of the patch version in the `STRING` below.
-        STRING = "#{BASE_STRING}.0.1"
+        STRING = "#{BASE_STRING}.1.0"
         MINIMUM_RUBY_VERSION = "2.5"
       end
     end

data/sig/datadog/appsec/waf/context.rbs

@@ -4,12 +4,12 @@ module Datadog
       class Context
         @context_ptr: ::FFI::Pointer
 
-        @retained: Array[top]
+        @retained: Array[untyped]
 
         EMPTY_RESULT: {
-          "events" => ::Array[WAF::output],
-          "actions" => ::Hash[::String, WAF::output],
-          "attributes" => ::Hash[::String, WAF::output],
+          "events" => WAF::events,
+          "actions" => WAF::actions,
+          "attributes" => WAF::attributes,
           "duration" => ::Integer,
           "timeout" => bool,
           "keep" => bool

data/sig/datadog/appsec/waf/converter.rbs

@@ -11,7 +11,7 @@ module Datadog
           ?coerce: bool?
         ) -> LibDDWAF::Object
 
-        def self?.object_to_ruby: (LibDDWAF::Object obj) -> WAF::output
+        def self?.object_to_ruby: (LibDDWAF::Object obj) -> WAF::opaque
       end
     end
   end

data/sig/datadog/appsec/waf/errors.rbs

@@ -11,9 +11,9 @@ module Datadog
       end
 
       class LibDDWAFError < Error
-        attr_reader diagnostics: WAF::output
+        attr_reader diagnostics: WAF::opaque
 
-        def initialize: (::String msg, ?diagnostics: WAF::output?) -> void
+        def initialize: (::String msg, ?diagnostics: WAF::opaque?) -> void
       end
     end
   end

data/sig/datadog/appsec/waf/handle_builder.rbs

@@ -10,7 +10,7 @@ module Datadog
 
         def build_handle: () -> Handle
 
-        def add_or_update_config: (WAF::input config, path: ::String) -> WAF::output
+        def add_or_update_config: (WAF::input config, path: ::String) -> WAF::opaque
 
         def remove_config_at_path: (::String path) -> bool
 

data/sig/datadog/appsec/waf/result.rbs

@@ -2,16 +2,13 @@ module Datadog
   module AppSec
     module WAF
       class Result
-        type list = ::Array[WAF::output]
-        type map = ::Hash[::String, WAF::output]
-
         @status: ::Symbol
 
-        @events: list
+        @events: WAF::events
 
-        @actions: map
+        @actions: WAF::actions
 
-        @attributes: map
+        @attributes: WAF::attributes
 
         @duration: ::Integer
 
@@ -23,19 +20,19 @@ module Datadog
 
         attr_reader status: ::Symbol
 
-        attr_reader events: list
+        attr_reader events: WAF::events
 
-        attr_reader actions: map
+        attr_reader actions: WAF::actions
 
-        attr_reader attributes: map
+        attr_reader attributes: WAF::attributes
 
         attr_reader duration: ::Integer
 
         def initialize: (
           status: ::Symbol,
-          events: list,
-          actions: map,
-          attributes: map,
+          events: WAF::events,
+          actions: WAF::actions,
+          attributes: WAF::attributes,
           duration: ::Integer,
           timeout: bool,
           keep: bool
@@ -49,7 +46,7 @@ module Datadog
 
         def input_truncated?: () -> bool
 
-        def to_h: () -> ::Hash[::Symbol, (::Symbol | WAF::output)]
+        def to_h: () -> ::Hash[::Symbol, (::Symbol | WAF::opaque)]
       end
     end
   end

data/sig/datadog/appsec/waf.rbs

@@ -2,8 +2,45 @@ module Datadog
   module AppSec
     module WAF
       type input = nil | bool | ::String | ::Symbol | ::Integer | ::Float | ::Array[input] | ::Hash[input, input]
-      type output = nil | bool | ::String | ::Integer | ::Float | ::Array[output] | ::Hash[::String, output]
       type known_addresses = ::Array[::String]
+      type result = {
+        "keep" => bool,
+        "events" => events,
+        "actions" => actions,
+        "attributes" => attributes,
+        "timeout" => bool,
+        # NOTE: Schema defines it as a `number`, but we alway get it as `Integer`
+        #       That will be fixed in the libddwaf specs
+        "duration" => ::Integer
+      }
+      type events = ::Array[event]
+      type event = {"rule" => rule, "rule_matches" => ::Array[rule_match]}
+      type rule = {
+        "id" => ::String,
+        "name" => ::String,
+        "tags" => {
+          "type" => ::String,
+          # optional key
+          "category" => ::String?
+        },
+        # optional key
+        "on_match" => ::Array[::String]?
+      }
+      type rule_match = {
+        "operator" => ::String,
+        "operator_value" => ::String,
+        "parameters" => ::Array[rule_match_parameter]
+      }
+      type rule_match_parameter = {
+        "address" => ::String,
+        "key_path" => ::Array[::String | ::Integer],
+        "value" => ::String,
+        "highlight" => ::Array[::String]
+      }
+      type actions = ::Hash[::String, action]
+      type action = ::Hash[::String, ::String]
+      type attributes = ::Hash[::String, opaque]
+      type opaque = nil | bool | ::String | ::Integer | ::Float | ::Array[opaque] | ::Hash[::String, opaque]
 
       self.@logger: ::Logger
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libddwaf
 version: !ruby/object:Gem::Version
-  version: 1.25.1.0.1
+  version: 1.25.1.1.0
 platform: arm64-darwin
 authors:
 - Datadog, Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-09-18 00:00:00.000000000 Z
+date: 2025-09-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ffi