lowkey 0.6.0 → 0.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1a54c7a7c2d38827bf0eec31f56a83ca054e46b44312ee2ead8a39d0630f00c8
-  data.tar.gz: 4e77aca4128ce3cec24cd077c75922aa8a2ef22e6cccb76fefbab0cbfe41f5c0
+  metadata.gz: 5990301db8e248a6bc99c209512593b48d6e97c34070e8f9389b69648be06c2f
+  data.tar.gz: 4d7ce17a69589f2103b03f446d583bfc128089fe4224c9f4fa91aaa87ac75fb6
 SHA512:
-  metadata.gz: 5a76a77c867d1051d553f8af3309dc389b3d8b37e168cd7152e954625306f2666dd4ab8b3ac78c2a5c2063a4adfa7b738a5f3cadb220c3bd6804fedeaf42dd8d
-  data.tar.gz: ee32de9dd6b3fe80c96422744ba8077605babe0ed3d5ffaa9a28a8609fd20873bd404dd04b3e453628b6567e909575c33f9159fa65120a891e319df15372327e
+  metadata.gz: 9feb9cc6d8e19325ada9fa42d043c3bcade1d3c6004f98c7c8febd74768c1dd84a822820edbfc82308409595322fb9c1d6c2c26d864c98431a535599cd23e826
+  data.tar.gz: 10328e823b9ff040080a0671794887207e9458173fba13db61552755b88c3237cf9376950b961df17cf2ac3b1e774494f2cf00c8c81b025dfe73b20e4bcfc812

data/lib/lowkey.rb

@@ -7,6 +7,7 @@ require_relative 'factories/proxy_factory'
 require_relative 'maps/parent_map'
 require_relative 'visitors/visitor'
 require_relative 'proxies/file_proxy'
+require_relative 'queries/value_parser'
 
 module Lowkey
   NAMESPACE_PATTERN = /\A[A-Z]\w*(::[A-Z]\w*)*\z/

data/lib/queries/query.rb

@@ -4,6 +4,9 @@ require 'prism'
 
 module Lowkey
   module Query
+    # Prism 2 renamed MissingNode to ErrorRecoveryNode.
+    MISSING_NODE = defined?(Prism::ErrorRecoveryNode) ? Prism::ErrorRecoveryNode : Prism::MissingNode
+
     # TODO: Make name a keypath.
     def query(node:, namespace:, name:) # rubocop:disable Lint/UnusedMethodArgument
       node.breadth_first_search do |n|
@@ -30,7 +33,7 @@ module Lowkey
 
     def resolve_namespace_path(node:, parent_map:)
       # When inside RBX, Prism thinks we're defining a class because of "<".
-      return nil if node.respond_to?(:constant_path) && node.constant_path.is_a?(Prism::MissingNode)
+      return nil if node.respond_to?(:constant_path) && node.constant_path.is_a?(MISSING_NODE)
       return '' if (parent = parent_map[node]).nil?
 
       path = namespace_path(node: parent, parent_map:)

data/lib/queries/value_parser.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+require 'prism'
+
+module Lowkey
+  # Reads Ruby values like nil, true, 'text', 3, -1.5 or :symbol from Prism nodes or text, without evaluating any code.
+  # Ignores potentially malicious values like variables, method calls or interpolated strings.
+  module ValueParser
+    VALUE_NODES = [
+      Prism::NilNode,
+      Prism::TrueNode,
+      Prism::FalseNode,
+      Prism::IntegerNode,
+      Prism::FloatNode,
+      Prism::StringNode,
+      Prism::SymbolNode
+    ].freeze
+
+    VALUE_KEYWORDS = %w[nil true false].freeze
+    VALUE_STARTS = ["'", '"', ':', '-', *'0'..'9'].freeze
+
+    module_function
+
+    # Returns the AST node's value or yields a block.
+    def parse(input)
+      return yield(input) unless possible_value?(input)
+
+      result = Prism.parse(input)
+      statements = result.value.statements.body
+      return yield(input) unless result.errors.empty? && statements.one? && value?(statements.first)
+
+      value(statements.first)
+    end
+
+    def possible_value?(input)
+      text = input.strip
+      VALUE_KEYWORDS.include?(text) || text.start_with?(*VALUE_STARTS)
+    end
+
+    def value?(node)
+      VALUE_NODES.include?(node.class)
+    end
+
+    # Returns the AST node's value or yields a block.
+    def value(node)
+      case node
+      when Prism::NilNode then nil
+      when Prism::TrueNode then true
+      when Prism::FalseNode then false
+      when Prism::StringNode then node.unescaped
+      when Prism::SymbolNode then node.unescaped.to_sym
+      when Prism::IntegerNode, Prism::FloatNode then node.value
+      else yield
+      end
+    end
+  end
+end

data/lib/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Lowkey
-  VERSION = '0.6.0'
+  VERSION = '0.7.1'
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: lowkey
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.7.1
 platform: ruby
 authors:
 - maedi
 bindir: exe
 cert_chain: []
-date: 2026-10-17 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: prism
@@ -50,6 +50,7 @@ files:
 - lib/proxies/param_proxy.rb
 - lib/proxies/return_proxy.rb
 - lib/queries/query.rb
+- lib/queries/value_parser.rb
 - lib/version.rb
 - lib/visitors/class_visitor.rb
 - lib/visitors/method_call_visitor.rb
@@ -75,7 +76,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.2
+rubygems_version: 4.0.6
 specification_version: 4
 summary: An API for accessing PRISM metadata easily and efficiently
 test_files: []