oo7-rb 1.0.0-arm64-darwin

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 2bd69af125c51c853140fefbb45cf9bdd206a6dcc8919995604d570268a64655
+  data.tar.gz: a2e1204e02736e28b90d7f284bf54e253ef51d1cd62adbca2bbe8d90589831dc
+SHA512:
+  metadata.gz: bd6f6016cdd828b348194c8c8feb15c47abeac3606c8b7ebb2e874f95924992f0c59d79b58d6ee253e140e6f46f3f25863994b72dc16462fc534c87256b16656
+  data.tar.gz: 12ef5ed1333e2cb293b08091af9f5fd7cd57208a5f51b352c88622c64f57e732cabc75fbf3b101f80dd982063620a6de83582c9a20c680305735db8c86e5dac3

data/CHANGELOG.md

@@ -0,0 +1,46 @@
+# Changelog
+
+All notable changes to this project are documented in this file.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/).
+
+## [Unreleased]
+
+## [1.0.0] - 2026-11-02
+
+### Added
+
+- `Oo7::Keyring`, the collection: `new`, `unlock`, `lock`, `locked?`, `items`,
+  `search(attributes)`, `create(label, attributes, secret, replace)` and
+  `delete(attributes)`.
+- `Oo7::Item`, one stored secret: `label`, `label=`, `attributes`,
+  `attributes=`, `secret`, `secret=`, `locked?`, `lock`, `unlock`, `delete`,
+  `created` and `modified`.
+- A magnus native extension over the `oo7` crate (0.6), built with
+  `native_crypto` and `tokio` and no default features, so the object links
+  `libc`, `libgcc_s` and `libm` and nothing else. Neither libsecret, libgcr nor
+  libgcrypt is in the address space -- which is the reason this gem exists,
+  since a fault in those is not a caller's to fix.
+- Precompiled platform gems for Linux (gnu and musl, x86_64/aarch64/arm) and
+  Darwin (x86_64/arm64), cross-compiled in CI.
+
+### Changed
+
+- The gem is published as `oo7-rb` rather than `oo7`. RubyGems holds `oo7` for
+  an unrelated `OO7` with indexed versions, and it refuses a name that differs
+  from an existing one only in case. The library, the module and the require
+  path are all still `oo7`; `require "oo7-rb"` is a shim onto it so that
+  `Bundler.require` resolves.
+- Every method is synchronous. The crate's API is async throughout; each
+  binding drives it to completion on a Tokio runtime owned by the extension.
+  The runtime is multi-threaded with one worker rather than current-thread,
+  because zbus spawns its own socket reader task and the runtime has to keep
+  driving it while a call waits.
+
+### Removed
+
+- Windows is not a supported platform and is excluded from the cross-compile
+  matrix. The Secret Service is a freedesktop D-Bus API, and `ashpd` -- which
+  oo7 uses to ask whether the process is sandboxed -- is Unix-only, so the
+  dependency does not compile there.

data/LICENSE

@@ -0,0 +1,200 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by the Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding any notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. Please also get an
+      individualized contributor license agreement from each contributor.
+
+   Copyright 2026 General Intelligence Systems
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

data/NOTICE

@@ -0,0 +1,43 @@
+Oo7 for Ruby
+Copyright 2026 General Intelligence Systems
+
+--------------------------------------------------------------------------------
+oo7
+--------------------------------------------------------------------------------
+
+The native extension under ext/oo7 links oo7, the Rust implementation of the
+freedesktop Secret Service API. This gem is bindings for it and nothing else:
+every class it defines wraps a type of that crate.
+
+  https://github.com/bilelmoussaoui/oo7
+  Copyright 2022-2026 Bilal Elmoussaoui and the oo7 contributors
+  Licensed under the MIT License
+
+The MIT License permits this use and asks that its notice travel with the
+software, which this file carries on its behalf. oo7 ships no NOTICE file of
+its own.
+
+--------------------------------------------------------------------------------
+Secret Service
+--------------------------------------------------------------------------------
+
+The protocol these bindings speak is the freedesktop Secret Service
+specification. It is a specification rather than code, and nothing of it is
+included here.
+
+  https://specifications.freedesktop.org/secret-service-spec/
+
+--------------------------------------------------------------------------------
+On Fractal
+--------------------------------------------------------------------------------
+
+Fractal is a GTK Matrix client, and the reason this binding exists: it drives
+oo7 rather than libsecret, and reading it shows which operations a session
+store needs -- unlock the collection, search by attribute, unlock each item.
+
+It appears in no part of this product. It is licensed GPL-3.0-or-later, which
+is incompatible with the Apache License this work is distributed under, so no
+code or comment may be copied from it. Reading it to learn which operations a
+flow needs is fine; carrying its expression across is not.
+
+  https://gitlab.gnome.org/World/fractal

data/README.md

@@ -0,0 +1,92 @@
+# oo7-rb
+
+Ruby bindings for [oo7](https://github.com/bilelmoussaoui/oo7), the Rust
+implementation of the freedesktop [Secret
+Service](https://specifications.freedesktop.org/secret-service-spec/) — the
+API behind GNOME Keyring and KWallet.
+
+## Why not libsecret
+
+libsecret reaches the keyring through gnome-keyring's client library and
+libgcr, whose `gcr_secret_exchange` carries a secret back from an unlock
+prompt. oo7 speaks the D-Bus protocol itself and does its own cryptography, so
+a caller here loads neither.
+
+That matters when a bug in those libraries is not yours to fix. A plain
+`OpenSession` should not be able to abort the process that made it, or the
+shell that prompted for it, but when it can, the way out is to stop going
+through them.
+
+## Installation
+
+```ruby
+gem "oo7-rb"
+```
+
+The gem is `oo7-rb`; the library is `oo7`. RubyGems holds the name `oo7` for an
+unrelated `OO7`, and a name differing only in case cannot be taken once the
+other has indexed versions -- so the gem took the repository's name instead.
+`require "oo7"` is the one to write, and `require "oo7-rb"` also works so that
+`Bundler.require` needs no `require:` of its own.
+
+## Usage
+
+```ruby
+require "oo7"
+
+keyring = Oo7::Keyring.new
+keyring.unlock
+
+keyring.create("My app: nathan on example.com", {
+  "xdg:schema" => "com.example.App",
+  "server" => "example.com",
+  "user" => "nathan",
+}, "the-secret", true)
+
+item = keyring.search({"xdg:schema" => "com.example.App", "user" => "nathan"}).first
+item.secret        # => "the-secret"
+item.label         # => "My app: nathan on example.com"
+item.attributes    # => {"xdg:schema" => "com.example.App", ...}
+```
+
+`create`'s last argument replaces any item with the same attributes, which is
+what keeps a rotated secret one item rather than a pile of them.
+
+### Keyring
+
+`new`, `unlock`, `lock`, `locked?`, `items`, `search(attributes)`,
+`create(label, attributes, secret, replace)`, `delete(attributes)`.
+
+`Keyring.new` picks the backend the way the crate does: the file backend when
+the process is sandboxed, the D-Bus Secret Service otherwise.
+
+### Item
+
+`label`, `label=`, `attributes`, `attributes=`, `secret`, `secret=`, `locked?`,
+`lock`, `unlock`, `delete`, `created`, `modified`.
+
+## Blocking
+
+Every method on the crate is async. Each binding drives it to completion on a
+Tokio runtime owned by the extension and returns the result, so the Ruby API is
+ordinary and synchronous.
+
+The calling thread blocks and the GVL is held while it waits. A call that may
+raise a prompt therefore belongs on a Ruby thread rather than on a GTK main
+loop — otherwise the loop that owes the prompt a reply is the one being
+blocked.
+
+## Development
+
+```
+bin/test                      # compile the extension, run the suite
+bin/test --skip-compile       # suite only
+```
+
+The suite runs against the session's real Secret Service and skips itself when
+there isn't one. Items are written under an `xdg:schema` of `oo7-rb-test` with
+a per-run marker, and removed afterwards.
+
+## Licence
+
+Apache-2.0. The oo7 crate itself is MIT.

data/lib/oo7/version.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+# Released under the Apache License, Version 2.0.
+# Copyright, 2026, by General Intelligence Systems.
+
+module Oo7
+  VERSION = "1.0.0"
+end

data/lib/oo7/version.rb.erb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+# Released under the Apache License, Version 2.0.
+# Copyright, 2026, by General Intelligence Systems.
+
+module Oo7
+  VERSION = "<%= version %>"
+end

data/lib/oo7-rb.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# Released under the Apache License, Version 2.0.
+# Copyright, 2026, by General Intelligence Systems.
+
+# The gem is `oo7-rb` because RubyGems holds `oo7` for an unrelated `OO7`, and
+# a name differing only in case cannot be taken once the other has indexed
+# versions. The library is still `oo7`: `require "oo7"` is the one to write.
+#
+# This file exists so that `gem "oo7-rb"` in a Gemfile needs no `require:` of
+# its own -- Bundler.require derives the path from the gem name, and would
+# otherwise look for a file that is not here.
+require_relative "oo7"

data/lib/oo7.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+# Released under the Apache License, Version 2.0.
+# Copyright, 2026, by General Intelligence Systems.
+
+require_relative "oo7/version"
+
+# The native extension, which is where every class in this module is defined.
+#
+# A precompiled platform gem carries one object per Ruby ABI, which rake-compiler puts under lib/oo7/3.3, 3.4 and so on. The source gem compiles one object and installs it beside the library, which is also where `rake compile` puts it.
+begin
+  require_relative "oo7/#{RUBY_VERSION[/\d+\.\d+/]}/oo7"
+rescue LoadError
+  require_relative "oo7/oo7"
+end
+
+# Ruby bindings for oo7, the Rust Secret Service and keyring implementation.
+#
+# The crate speaks the freedesktop Secret Service D-Bus protocol itself and does its own crypto, so a caller here never loads libsecret, gnome-keyring's client library or libgcr.
+#
+# Every method is synchronous. The crate's API is async throughout; the extension drives it on a Tokio runtime of its own and blocks the calling thread, which is what a Ruby caller expects. The GVL is held while it waits, so a call that may prompt belongs on a Ruby thread rather than on a GTK main loop.
+module Oo7
+end

metadata

@@ -0,0 +1,103 @@
+--- !ruby/object:Gem::Specification
+name: oo7-rb
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: arm64-darwin
+authors:
+- Nathan Kidd
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2026-11-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: gem_kit
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+- !ruby/object:Gem::Dependency
+  name: rake-compiler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: lefthook
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+description: The freedesktop Secret Service for Ruby, over the oo7 crate. Keyrings,
+  items, attribute search, lock and unlock -- speaking the D-Bus protocol directly,
+  with its own crypto, so neither libsecret nor libgcr is in the picture.
+email:
+- nathankidd@hey.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- LICENSE
+- NOTICE
+- README.md
+- lib/oo7-rb.rb
+- lib/oo7.rb
+- lib/oo7/3.3/oo7.bundle
+- lib/oo7/3.4/oo7.bundle
+- lib/oo7/4.0/oo7.bundle
+- lib/oo7/version.rb
+- lib/oo7/version.rb.erb
+homepage: https://github.com/n-at-han-k/oo7-rb
+licenses:
+- Apache-2.0
+metadata:
+  source_code_uri: https://github.com/n-at-han-k/oo7-rb
+  documentation_uri: https://n-at-han-k.github.io/oo7-rb/
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.3'
+  - - "<"
+    - !ruby/object:Gem::Version
+      version: 4.1.dev
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.5.23
+signing_key: 
+specification_version: 4
+summary: Ruby bindings for oo7, the Rust Secret Service and keyring implementation.
+test_files: []