lucerna 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bf8a610323ba01503dfe245ea129a8cdedfc2d9e916977fd34ce7cc1c85d04d3
-  data.tar.gz: 9c4c0c931b3bc9326a696d849873cd0741d546194eacdd4d038152e994bdb168
+  metadata.gz: ab459063d160fe1c8b84f00d8c15413956871c59200850a10fd888286e338d1d
+  data.tar.gz: 1330ddac2d1636e4eafeebf3638f10fc817ff5f183bb637146ada3a3dc04991e
 SHA512:
-  metadata.gz: d3cedc4e00127c55d42fb9436acb15570d38f206f1aa2d2cce1c578fdf691a713b19d6940164b2bf35de6c012550b9894f432ca275027d7f74bf68825b7e6a59
-  data.tar.gz: 25c3407e10189105c8cbf1f37ac7b4513303308e669fcfed5409c24a949f913c273c36c1ac1684d3d8d186c25e528a0e7596d96821a07a00297b5510408926cc
+  metadata.gz: aa24335e33f022de606cf96fabef390f5a2722eea3983220873cb2c9f6d80f2884321ee302c19b4b9c477fe7f67c169a6587032cc53ed326cfe99e7d905c2ac2
+  data.tar.gz: 79857d8546d26c7b215faf8f09eaf80f149a0c1c88745ee51259806345dd8025839c98900f6d264f3ac86dadb2546eff5376c45936dd2f850adfd4af49e2fd01

data/lib/lucerna/gates/client.rb

@@ -113,7 +113,9 @@ module Lucerna
           next false unless config
 
           user_id, traits = resolve_identity(identity)
-          Evaluate.flag(config, user_id: user_id, traits: traits)[:on]
+          Evaluate.flag(
+            config, user_id: user_id, traits: traits, audiences: runtime["audiences"],
+          )[:on]
         end
       end
 
@@ -154,7 +156,10 @@ module Lucerna
 
           if (config = runtime["flags"][key])
             trace = []
-            decision = Evaluate.flag(config, user_id: user_id, traits: traits, trace: trace)
+            decision = Evaluate.flag(
+              config,
+              user_id: user_id, traits: traits, trace: trace, audiences: runtime["audiences"],
+            )
             result[:flag] = { decision: decision, trace: trace }
           end
 

data/lib/lucerna/gates/evaluate.rb

@@ -20,8 +20,18 @@ module Lucerna
     # fully understand.
     module Evaluate
       OPERATORS = %w[is is_not contains gt lt is_set].freeze
+      # Flag conditions may additionally reference a saved audience: the
+      # compiled condition carries the audience id in "value" ("trait" is
+      # the "audience" sentinel) and matches when the identity's traits
+      # satisfy the audience's rule set.
+      AUDIENCE_OPERATORS = %w[in_audience not_in_audience].freeze
       OVERRIDE_BY = %w[user_id domain].freeze
       OVERRIDE_SERVE = %w[on off].freeze
+      # Overrides can also pin by any trait the workspace enabled as an
+      # override dimension: "by" carries "trait:<key>" and matches when
+      # the identity trait equals "who" exactly (same value-based compare
+      # as the "is" operator; "domain" keeps its lowercase compare).
+      OVERRIDE_TRAIT_PREFIX = "trait:"
 
       module_function
 
@@ -32,7 +42,11 @@ module Lucerna
       #   4. percentage rollout, sticky by user id via the stored salt
       # A rollout between 0 and 100 with no user id serves off — there is
       # nothing to be sticky by.
-      def flag(flag, user_id: nil, traits: nil, trace: nil)
+      #
+      # `audiences` resolves the flag's audience conditions (in_audience /
+      # not_in_audience); a referenced id that is absent evaluates the
+      # condition to no-match — never to a wider serve.
+      def flag(flag, user_id: nil, traits: nil, trace: nil, audiences: {})
         unless flag["enabled"]
           note(trace, "enabled", "flag is off in this environment")
           return { on: false, reason: "flag_off" }
@@ -40,9 +54,9 @@ module Lucerna
         note(trace, "enabled", "flag is on in this environment")
 
         bad_override = flag["overrides"].find do |override|
-          !OVERRIDE_BY.include?(override["by"]) || !OVERRIDE_SERVE.include?(override["serve"])
+          !supported_override_by?(override["by"]) || !OVERRIDE_SERVE.include?(override["serve"])
         end
-        bad_operator = unsupported_operator(flag["conditions"])
+        bad_operator = unsupported_flag_operator(flag["conditions"])
         if bad_override || bad_operator
           note(
             trace,
@@ -60,10 +74,14 @@ module Lucerna
         domain = identity_domain(traits)&.downcase
         flag["overrides"].each do |override|
           matched =
-            if override["by"] == "user_id"
+            case override["by"]
+            when "user_id"
               !user_id.nil? && override["who"] == user_id
-            else
+            when "domain"
               !domain.nil? && override["who"].downcase == domain
+            else
+              raw = traits[override["by"].delete_prefix(OVERRIDE_TRAIT_PREFIX)]
+              !raw.nil? && raw == override["who"]
             end
           note(
             trace,
@@ -76,12 +94,42 @@ module Lucerna
         unless flag["conditions"].empty?
           all = true
           flag["conditions"].each do |condition|
-            matched = matches_condition?(traits, condition)
-            note(
-              trace,
-              "condition",
-              %(#{condition["trait"]} #{condition["operator"]} "#{condition["value"]}": #{matched ? "matched" : "no match"}),
-            )
+            if AUDIENCE_OPERATORS.include?(condition["operator"])
+              audience = audiences[condition["value"]]
+              if audience
+                bad_audience_operator = unsupported_operator(audience["conditions"])
+                if bad_audience_operator
+                  note(
+                    trace,
+                    "unsupported",
+                    %(audience condition operator "#{bad_audience_operator}" is not supported by this engine),
+                  )
+                  return { on: false, reason: "unsupported_rule" }
+                end
+              end
+              # A dangling audience id never matches — for both operators the
+              # condition fails closed rather than widening the serve.
+              in_audience = !audience.nil? && matches_audience?(traits, audience)
+              matched =
+                !audience.nil? &&
+                (condition["operator"] == "in_audience" ? in_audience : !in_audience)
+              note(
+                trace,
+                "condition",
+                if audience
+                  %(audience "#{condition["value"]}" #{condition["operator"] == "in_audience" ? "includes" : "excludes"} user: #{matched ? "matched" : "no match"})
+                else
+                  %(audience "#{condition["value"]}" is not in the runtime: no match)
+                end,
+              )
+            else
+              matched = matches_condition?(traits, condition)
+              note(
+                trace,
+                "condition",
+                %(#{condition["trait"]} #{condition["operator"]} "#{condition["value"]}": #{matched ? "matched" : "no match"}),
+              )
+            end
             unless matched
               all = false
               break
@@ -205,7 +253,7 @@ module Lucerna
         {
           kills: runtime["kills"].dup,
           flags: runtime["flags"].to_h do |key, value|
-            [key, flag(value, user_id: user_id, traits: traits)]
+            [key, flag(value, user_id: user_id, traits: traits, audiences: runtime["audiences"])]
           end,
           experiments: runtime["experiments"].to_h do |key, value|
             [key, experiment(value, runtime["audiences"], user_id: user_id, traits: traits)]
@@ -276,6 +324,20 @@ module Lucerna
         conditions.find { |condition| !OPERATORS.include?(condition["operator"]) }&.fetch("operator")
       end
 
+      def supported_override_by?(by)
+        return true if OVERRIDE_BY.include?(by)
+
+        by.start_with?(OVERRIDE_TRAIT_PREFIX) && by.length > OVERRIDE_TRAIT_PREFIX.length
+      end
+
+      # Same check for flag conditions, which may also reference audiences.
+      def unsupported_flag_operator(conditions)
+        conditions.find do |condition|
+          !OPERATORS.include?(condition["operator"]) &&
+            !AUDIENCE_OPERATORS.include?(condition["operator"])
+        end&.fetch("operator")
+      end
+
       # The domain an override's by: "domain" matches: an explicit `domain`
       # trait, falling back to the part of the `email` trait after the
       # last "@".

data/lib/lucerna/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module Lucerna
-  VERSION = "0.1.0"
+  VERSION = "0.2.0"
 
   # Value of the x-lucerna-sdk header on every request.
   SDK_IDENTITY = "ruby/#{VERSION}"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lucerna
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Lucerna