moderate 1.0.0.beta2 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 20519d26bf4bc96f23e6f679b3b175376700280e36f21fffa409230688526b25
-  data.tar.gz: 8abc344dcf72c577de12ba70dbf96895f008a041355a75308f815d8b267f5dd1
+  metadata.gz: 7604220d418947fa60f707ff40e41635b58f0e1dddb73b5e79d44ab4f37caf46
+  data.tar.gz: 48f55fa68865042efffe9c733f19ac031f89f8d1eaa1a91e03ef5f5dfaee6f48
 SHA512:
-  metadata.gz: 65f2ad5ae6dae9a4a1269900e67205cfedaa5f82ff3b87d218ac34dee0e05bdb417fd77289126c47c9cf372b0dfd710fc1fa5d455d1f1f256395d2ec4bc7e79c
-  data.tar.gz: 5d3a60adaef05e13b448c1563d3104423c2d94d63ae0b10c7f2432268188a745849ca29df9e99fdb4860670a4c4f3f6fe7eda8fa07a4dd4a8f47169eca97d3f8
+  metadata.gz: cc7dca23c94332145107036a6fa411034f78aa17b8006341fc50ad5937ef6163cc147a02df68fd726806ca9eb5ad4b0bc922846fe1bb8c55a151a301a552d0bd
+  data.tar.gz: 6d0405cf47e6e8256e43bbf0b17d478ecb905451d1795a0e64dacccddf406ae2865d41e2e97ca574251be961f4b19890673bef53e94d9c40b499c8a3f0e503f2

data/.rubocop.yml

@@ -1,8 +1,103 @@
+# RuboCop for the moderate gem. CI runs `bundle exec rubocop` (the `rubocop` job in
+# .github/workflows/test.yml) and expects zero offenses.
 AllCops:
-  TargetRubyVersion: 3.2
+  TargetRubyVersion: 3.3
+  NewCops: enable
+  SuggestExtensions: false
+  Exclude:
+    - "gemfiles/**/*"          # generated by `bundle exec appraisal generate`
+    - "test/dummy/db/schema.rb" # never committed; a local db task may dump one
+    - "test/dummy/tmp/**/*"     # generator test output
+    - "tmp/**/*"
+    - "vendor/**/*"
 
 Style/StringLiterals:
   EnforcedStyle: double_quotes
 
 Style/StringLiteralsInInterpolation:
   EnforcedStyle: double_quotes
+
+# --- The shape of this codebase ---------------------------------------------
+#
+# The gem explains itself in prose next to the code (the legal reasoning behind a
+# decision path, the Active Record timing a callback depends on), and its decision
+# services are deliberately one readable method per step of a decision. Size
+# metrics count those methods, not their difficulty, so they are off; the
+# complexity metrics stay on, capped at what the code is today.
+Metrics/AbcSize:
+  Enabled: false
+Metrics/BlockLength:
+  Enabled: false
+Metrics/ClassLength:
+  Enabled: false
+Metrics/MethodLength:
+  Enabled: false
+Metrics/ModuleLength:
+  Enabled: false
+Metrics/CyclomaticComplexity:
+  Max: 12
+Metrics/PerceivedComplexity:
+  Max: 13
+# Keyword arguments name themselves (Flag.flag! takes the nine columns it files).
+Metrics/ParameterLists:
+  CountKeywordArgs: false
+
+Layout/LineLength:
+  Max: 140
+  Exclude:
+    - "moderate.gemspec" # the description is one long, deliberate paragraph
+
+# `has_reporting_and_blocking` / `has_reportable_content` are the ecosystem's macro
+# names (has_credits, has_wallets, has_api_keys), not predicates.
+Naming/PredicatePrefix:
+  AllowedMethods:
+    - has_reporting_and_blocking
+    - has_reportable_content
+
+Naming/RescuedExceptionsVariableName:
+  PreferredName: error
+
+# Rails' own idiom in tests: `class ActiveSupport::TestCase`, `class Moderate::XTest`.
+Style/ClassAndModuleChildren:
+  Exclude:
+    - "test/**/*"
+
+# Bang methods and `save` answer true/false by Active Record convention; the test
+# recorder's `audit` / `notify` return "delivered" the way a host's hooks do.
+Naming/PredicateMethod:
+  AllowBangMethods: true
+  AllowedMethods:
+    - call
+    - save
+    - audit
+    - notify
+
+# The house style: continuation lines are indented one step, not aligned to the
+# first argument or the receiver.
+Layout/ArgumentAlignment:
+  EnforcedStyle: with_fixed_indentation
+Layout/MultilineMethodCallIndentation:
+  EnforcedStyle: indented
+
+# `adapter = case ref … end`: `when` and `end` line up with the assignment.
+Layout/CaseIndentation:
+  EnforcedStyle: end
+Layout/EndAlignment:
+  EnforcedStyleAlignWith: variable
+
+# Configuration groups its accessors by section (filtering, hooks, the legal
+# forms), each with its own comment; one grouped list would lose that.
+Style/AccessorGrouping:
+  Enabled: false
+
+# ActiveSupport::Concern's `class_methods do … end` opens its own scope, so a
+# `private` inside it says nothing about the module's instance methods.
+Lint/UselessAccessModifier:
+  ContextCreatingMethods:
+    - class_methods
+    - included
+
+# Strings continued with `\` are laid out to read well where they are (aligned
+# under a `raise`, or indented under a keyword); the code uses both.
+Layout/LineEndStringConcatenationIndentation:
+  Enabled: false

data/.simplecov

@@ -18,16 +18,8 @@ SimpleCov.start do
   #     migration template IS exercised indirectly — the dummy migrates a copy of it —
   #     but the .erb itself is never loaded as Ruby here.)
   #   - version.rb: a single constant; nothing to cover.
-  #   - The 0.x compatibility shims (text / text_validator / word_list): legacy
-  #     profanity-validator code kept only so `validates :field, moderate: true` from
-  #     0.x still loads (see README "Upgrading from 0.x"). They are NOT part of the
-  #     1.0 Trust & Safety surface this suite tests, so they shouldn't pull the 1.0
-  #     coverage number down.
   add_filter "/lib/generators/"
   add_filter "/lib/moderate/version.rb"
-  add_filter "/lib/moderate/text.rb"
-  add_filter "/lib/moderate/text_validator.rb"
-  add_filter "/lib/moderate/word_list.rb"
 
   # Track Ruby files in the lib directory (gem source code)
   track_files "lib/**/*.rb"
@@ -46,13 +38,13 @@ SimpleCov.start do
   minimum_coverage line: 80, branch: 60
 
   # Disambiguate parallel test runs
-  command_name "Job #{ENV['TEST_ENV_NUMBER']}" if ENV["TEST_ENV_NUMBER"]
+  command_name "Job #{ENV["TEST_ENV_NUMBER"]}" if ENV["TEST_ENV_NUMBER"]
 end
 
 # Print coverage summary to terminal after tests complete
 SimpleCov.at_exit do
   SimpleCov.result.format!
-  puts "\n" + "=" * 60
+  puts "\n#{"=" * 60}"
   puts "COVERAGE SUMMARY"
   puts "=" * 60
   puts "Line Coverage:   #{SimpleCov.result.covered_percent.round(2)}%"

data/AGENTS.md

@@ -2,6 +2,6 @@
 
 This file provides guidance to AI Agents (like OpenAI's Codex, Cursor Agent, Claude Code, etc) when working with code in this repository.
 
-Please read the `README.md` for a full overview of the gem's API and philosophy, and the `docs/` directory (`docs/configuration.md`, `docs/notifications.md`, `docs/compliance.md`, `docs/madmin.md`, `docs/dsa-notice-form.md`) for the detailed integration guides.
+Please read the `README.md` for a full overview of the gem's API and philosophy, and the `docs/` directory (`docs/configuration.md`, `docs/notifications.md`, `docs/compliance.md`, `docs/madmin.md`, `docs/dsa-notice-form.md`, `docs/chats.md`) for the detailed integration guides.
 
 This gem is part of a coherent ecosystem (`railsfast`, `goodmail`, `telegrama`, `usage_credits`, `pricing_plans`, `wallets`, `api_keys`). Match the ecosystem conventions exactly: a single `Moderate.configure do |config| … end` block, `has_*`/verb-style class macros, adapter objects + no-op-default hook procs, string class names constantized lazily, adaptive install migrations, Minitest with a `test/dummy` app, SimpleCov, and the README/docs voice.

data/Appraisals

@@ -1,13 +1,15 @@
 # frozen_string_literal: true
 
-# Test the minimum supported Rails version (matches the gemspec floor and the
-# README's "Rails 7.1+ schema" claim — the adaptive migration must work here).
-appraise "rails-7.1" do
-  gem "rails", "~> 7.1.0"
-end
-
-appraise "rails-7.2" do
-  gem "rails", "~> 7.2.0"
+# Test the oldest supported Rails line (the gemspec floor is 8.0.5.1; this resolves to
+# the newest 8.0 patch, which is what a maintained 8.0 host runs — the adaptive
+# migration must work here).
+appraise "rails-8.0" do
+  gem "rails", "~> 8.0.5", ">= 8.0.5.1"
+  # Rails 8.0's ActiveSupport::JSON still passes `quirks_mode:` to JSON.generate /
+  # JSON.parse, which json 3 rejects (ArgumentError on the first JSON column write);
+  # 8.1 no longer passes it. A host on 8.0 needs the same pin. Stay on the
+  # maintained 2.x line; 2.19.9+ carries the GHSA-x2f5-4prf-w687 fix.
+  gem "json", ">= 2.19.9", "< 3"
 end
 
 # Test the latest Rails version — this is the default/main Gemfile anyway.