omen 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: d5c61b5e791393a47ef018d36fba4ab6455147fd7789e9ad9da2dfa3f4a3c233
+  data.tar.gz: 0ad45e83dfa5a5271acdd9c1a99741dcd360eb3d520f5b6ffe3b81d383e39152
+SHA512:
+  metadata.gz: dbe0dcd9d8dbe1e272b5a9f4d600631c4fa3efca709d80ea71aab1c1212317b462ce516c96d0b18292e2364792bb2167de86a9fb9b9de5cd64f97d4861e55821
+  data.tar.gz: 2fad605e52e97a599c01b842f2e00df7dc77827f1f7c7cfc22eb340101c038857e081766c90739da17c1ee3f3b469627442406c2b6c4d80984008cb0aef0847f

data/README.md

@@ -0,0 +1,46 @@
+# Omen
+
+Staff ask Claude a question about the data an app holds; Claude writes the SQL, Rails runs it.
+
+Omen ships the models and the logic to talk to Claude, parse what it says back, and run the
+statement it wrote against a read-only connection. It ships **no controllers, routes or views** —
+the pages belong to the app that installs it.
+
+> **0.1.0 does nothing yet.** This release loads as a Rails engine. The models
+> and the Claude logic land in a later version. The requirements below are what it will need, and
+> are stated now so nobody installs it into an app it cannot work in.
+
+## How to install
+
+```sh
+gem install omen
+```
+
+Or, in a `Gemfile`, pinned to the current major:
+
+```ruby
+gem 'omen', '~> 0.1'
+```
+
+Omen follows [Semantic Versioning](https://semver.org), so `~> major.minor` means `bundle update`
+never crosses a breaking change.
+
+## Requirements
+
+**PostgreSQL only.** This is not a gap waiting to be filled. Two of the guarantees Omen makes are
+Postgres features with no equivalent elsewhere: it identifies an encrypted column by the table OID
+and column number Postgres reports for each result column, which is what stops an alias or an
+expression from laundering one; and it narrows privileges for the statement it runs with
+`SET LOCAL ROLE`, which reverts when the transaction ends. MySQL has `SET ROLE` but nothing
+transaction-scoped, so a raised exception would leave a pooled connection holding the role. Omen
+raises on any other adapter rather than running with a weaker promise.
+
+**`db/schema.rb`, in Rails' `:ruby` schema format.** The schema is what Claude is shown, so an app
+on `db/structure.sql` cannot use Omen. This is checked at boot rather than left to fail later.
+
+**A read-only connection.** Omen runs every statement through a Rails connection role that cannot
+write, and raises rather than falling back to a writable one.
+
+## License
+
+MIT, see [MIT-LICENSE](MIT-LICENSE).

data/Rakefile

@@ -0,0 +1 @@
+require 'bundler/gem_tasks'

data/lib/omen/engine.rb

@@ -0,0 +1,6 @@
+module Omen
+  # Teaches Rails where this gem's models live, and prefixes their tables with `omen_`.
+  class Engine < ::Rails::Engine
+    isolate_namespace Omen
+  end
+end

data/lib/omen/version.rb

@@ -0,0 +1,4 @@
+module Omen
+  # The version of this gem, as RubyGems knows it.
+  VERSION = '0.1.0'
+end

data/lib/omen.rb

@@ -0,0 +1,6 @@
+require 'omen/version'
+require 'omen/engine'
+
+# Staff ask Claude a question about the data an app holds; Claude writes the SQL, Rails runs it.
+module Omen
+end

metadata

@@ -0,0 +1,62 @@
+--- !ruby/object:Gem::Specification
+name: omen
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Claudio Baccigalupo
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Turns a question into the SQL that answers it, and runs it read-only
+email:
+- claudiob@users.noreply.github.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- README.md
+- Rakefile
+- lib/omen.rb
+- lib/omen/engine.rb
+- lib/omen/version.rb
+homepage: https://github.com/claudiob/omen
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://github.com/claudiob/omen
+  source_code_uri: https://github.com/claudiob/omen/
+  changelog_uri: https://github.com/claudiob/omen/blob/main/CHANGELOG.md
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.3
+specification_version: 4
+summary: Ask Claude about your own data
+test_files: []