mcp_authorization 0.6.1 → 0.6.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d09c532c9c775775e5b5dbea5d44df18cb9a693212641fff9b86621101806e4a
-  data.tar.gz: 18c5e6cc485efd2e73265e22d4ab037f3b21d32f72c377285794a644c8d4a225
+  metadata.gz: 7998105e5a6828b9673a8b97918503842f5eea467ee3ced5c8fd8298c1000f15
+  data.tar.gz: 4a130479e78bdd4ec696ee78623ff233331afebbd968c715eb9b87296163c94b
 SHA512:
-  metadata.gz: 27959d3f62484456e2e6978f51cef90d8879584a978c4f4937e52fa599451c01ad41cfea2cb79607726ab2dcba166f50917c46b0bc0057639d1fba5aa4b4a249
-  data.tar.gz: cbdc8f8187594e942afc039248a8f8db638325b33f257972d85e5d8cbb62ec8d64f6e9f57b8e1ca022f9e1cbae1f7a0d590fa3cb5ea5784ad9cb87e20072e20a
+  metadata.gz: 02ae2178372da419ccbaffe5e7df67bc030e158cfd2b055cfa6682e5cf89d1daa428983c1687479e40de9fc466da01e9f5c2313fa561d5b815a48e884a95b4c0
+  data.tar.gz: 14ac5790e1e7f12d36c05331a8193744b2355fd30610416265f7d8f8e0aa730654ff2bdf4bf514d3c3b4d3f677e66916014719fdcda9dfc62b90a7dc4891402a

data/CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to this gem are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this project
 adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.6.2] - 2026-07-01
+
+### Fixed
+- **A record field whose type is an inline string-literal union with a single field-level tag was misclassified as a per-member-tagged union.** `compile_tagged_record` routes a field into `compile_tagged_union` (which gates each `|`-separated member individually, e.g. `stage: a @feature(x) | b @feature(y)`) whenever `tagged_union_field?` sees an `@` anywhere in the type string plus more than one `|`-separated part. A plain literal union with one *field-level* tag trailing the whole thing — `logic: "AND" | "OR" @desc(...)` — matches that same heuristic even though the tag applies to the field, not an individual member. Misrouting sends each bare literal (`"AND"`, `"OR"`) through `resolve_type`, which only resolves *named alias references*; each literal fell back to `{type: "object"}`, producing `{type: "object", oneOf: [{type: "object"}, {type: "object"}]}` instead of `{type: "string", enum: ["AND", "OR"]}`. `tagged_union_field?` and `tagged_array_union_inner` now require at least one *non-final* `|`-separated member to carry a tag before treating a field as per-member-gated — every genuine per-member-tagged union in this codebase tags each gated member individually, so a tag trailing only the last member is never sufficient on its own. Field-level tags on inline literal unions now fall through to the normal RBS-library path (`visit_rbs_union`), which already resolved them correctly.
+
 ## [0.6.1] - 2026-07-01
 
 ### Fixed

data/lib/mcp_authorization/rbs_schema_compiler.rb

@@ -1094,10 +1094,19 @@ module McpAuthorization
       # True when a record field's type is a multi-member union that carries a
       # predicate tag — i.e. per-member gating is intended. A `|` at bracket
       # depth 0 marks a real union (not one inside a nested generic/record).
+      #
+      # A tag trailing only the *final* member (e.g. a plain literal union
+      # with one field-level `@desc(...)`, as in `"AND" | "OR" @desc(...)`)
+      # is NOT per-member gating — every genuine per-member-tagged union in
+      # this codebase tags each gated member individually
+      # (`a @feature(x) | b @feature(y)`), so at least one *non-final*
+      # member must carry a tag before we route into compile_tagged_union.
+      # Otherwise the field falls through to the normal RBS-library path,
+      # which resolves inline literal unions correctly via visit_rbs_union.
       #: (String) -> bool
       def tagged_union_field?(type_str)
         return false unless type_str.include?("@")
-        split_at_depth_zero(type_str, "|").size > 1
+        per_member_tagged_union?(type_str, "|")
       end
 
       # If a field type is +Array[<multi-member tagged union>]+, return the inner
@@ -1111,7 +1120,18 @@ module McpAuthorization
         return nil unless m
 
         inner = m[1].to_s
-        split_at_depth_zero(inner, "|").size > 1 ? inner : nil
+        per_member_tagged_union?(inner, "|") ? inner : nil
+      end
+
+      # True when a `|`-separated type expression has more than one member
+      # AND at least one *non-final* member carries a predicate tag. See
+      # tagged_union_field? for why the final member alone doesn't count.
+      #: (String, String) -> bool
+      def per_member_tagged_union?(type_str, delimiter)
+        parts = split_at_depth_zero(type_str, delimiter)
+        return false unless parts.size > 1
+
+        parts[0..-2].any? { |part| part.include?("@") }
       end
 
       # Compile a union-style output type (+# @rbs type output = success | admin_detail @requires(:admin)+)

data/lib/mcp_authorization/version.rb

@@ -1,3 +1,3 @@
 module McpAuthorization
-  VERSION = "0.6.1"
+  VERSION = "0.6.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mcp_authorization
 version: !ruby/object:Gem::Version
-  version: 0.6.1
+  version: 0.6.2
 platform: ruby
 authors:
 - AndyGauge