lowkey 0.6.0 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1a54c7a7c2d38827bf0eec31f56a83ca054e46b44312ee2ead8a39d0630f00c8
-  data.tar.gz: 4e77aca4128ce3cec24cd077c75922aa8a2ef22e6cccb76fefbab0cbfe41f5c0
+  metadata.gz: df07c14efcf3addf6d3df7c5a1a84b7ca60cb6334953b0f2d2446c10f479b5ac
+  data.tar.gz: 7b36824688cb4b2b1c7edbe8aef25d2f5dbd14a339749d91e37ca61733fca4e5
 SHA512:
-  metadata.gz: 5a76a77c867d1051d553f8af3309dc389b3d8b37e168cd7152e954625306f2666dd4ab8b3ac78c2a5c2063a4adfa7b738a5f3cadb220c3bd6804fedeaf42dd8d
-  data.tar.gz: ee32de9dd6b3fe80c96422744ba8077605babe0ed3d5ffaa9a28a8609fd20873bd404dd04b3e453628b6567e909575c33f9159fa65120a891e319df15372327e
+  metadata.gz: 87b8cd86f86037131b3ae4dea4c5b1e963adbae2eadd47b2c256843301c001608d5cdd4e8c76a2508c0ab84f372b40413c3c2a025143c3e3efe9bd73c8d5e74c
+  data.tar.gz: 5ea4f138dbe0d41a2f8643d13bba10f94b5ac61b31da0c964eeeb8858ba15f7c35a744bee48b73aca27dfe3bb982b7352b3ababd1bbd0411c17dfdb1072b1432

data/lib/lowkey.rb

@@ -7,6 +7,7 @@ require_relative 'factories/proxy_factory'
 require_relative 'maps/parent_map'
 require_relative 'visitors/visitor'
 require_relative 'proxies/file_proxy'
+require_relative 'queries/value_parser'
 
 module Lowkey
   NAMESPACE_PATTERN = /\A[A-Z]\w*(::[A-Z]\w*)*\z/

data/lib/queries/value_parser.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+require 'prism'
+
+module Lowkey
+  # Reads Ruby values like nil, true, 'text', 3, -1.5 or :symbol from Prism nodes or text, without evaluating any code.
+  # Ignores potentially malicious values like variables, method calls or interpolated strings.
+  module ValueParser
+    VALUE_NODES = [
+      Prism::NilNode,
+      Prism::TrueNode,
+      Prism::FalseNode,
+      Prism::IntegerNode,
+      Prism::FloatNode,
+      Prism::StringNode,
+      Prism::SymbolNode
+    ].freeze
+
+    VALUE_KEYWORDS = %w[nil true false].freeze
+    VALUE_STARTS = ["'", '"', ':', '-', *'0'..'9'].freeze
+
+    module_function
+
+    # Returns the AST node's value or yields a block.
+    def parse(input)
+      return yield(input) unless possible_value?(input)
+
+      result = Prism.parse(input)
+      statements = result.value.statements.body
+      return yield(input) unless result.errors.empty? && statements.one? && value?(statements.first)
+
+      value(statements.first)
+    end
+
+    def possible_value?(input)
+      text = input.strip
+      VALUE_KEYWORDS.include?(text) || text.start_with?(*VALUE_STARTS)
+    end
+
+    def value?(node)
+      VALUE_NODES.include?(node.class)
+    end
+
+    # Returns the AST node's value or yields a block.
+    def value(node)
+      case node
+      when Prism::NilNode then nil
+      when Prism::TrueNode then true
+      when Prism::FalseNode then false
+      when Prism::StringNode then node.unescaped
+      when Prism::SymbolNode then node.unescaped.to_sym
+      when Prism::IntegerNode, Prism::FloatNode then node.value
+      else yield
+      end
+    end
+  end
+end

data/lib/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Lowkey
-  VERSION = '0.6.0'
+  VERSION = '0.7.0'
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: lowkey
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.7.0
 platform: ruby
 authors:
 - maedi
 bindir: exe
 cert_chain: []
-date: 2026-10-17 00:00:00.000000000 Z
+date: 2026-10-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: prism
@@ -50,6 +50,7 @@ files:
 - lib/proxies/param_proxy.rb
 - lib/proxies/return_proxy.rb
 - lib/queries/query.rb
+- lib/queries/value_parser.rb
 - lib/version.rb
 - lib/visitors/class_visitor.rb
 - lib/visitors/method_call_visitor.rb