open-loam 0.1.1 → 0.3.0

data/lib/loam.rb

@@ -1,122 +0,0 @@
-require "loam/version"
-require "loam/errors"
-require "loam/current"
-require "loam/events"
-require "loam/policy"
-require "loam/lifecycle"
-require "loam/configs"
-require "loam/features"
-require "loam/auth_throttle"
-require "loam/dictionaries"
-require "loam/custom_field_index"
-require "loam/undo"
-require "loam/permissions"
-require "loam/telemetry"
-require "loam/eval"
-require "loam/mcp"
-require "loam/mcp/server"
-require "loam/progress"
-require "loam/cron"
-require "loam/scheduler"
-require "loam/csv"
-require "loam/export"
-require "loam/import"
-require "loam/bulk"
-require "loam/widgets"
-require "loam/dashboard"
-require "loam/overrides"
-require "loam/open_api"
-require "loam/encryption"
-require "loam/base32"
-require "loam/totp"
-require "loam/pending_actions"
-require "loam/perspectives"
-require "loam/record_locks"
-require "loam/event_stream"
-require "loam/enrichers"
-require "loam/search"
-require "loam/search/driver"
-require "loam/search/like_driver"
-require "loam/search/token_driver"
-require "loam/notifications"
-require "loam/sso"
-require "loam/business_rules"
-require "loam/webhooks"
-require "loam/inbound_webhooks"
-require "loam/durable_events"
-require "loam/engine" if defined?(Rails::Engine)
-
-module Loam
-  # The current tenant, or a loud failure. This is THE guardrail: tenant-scoped
-  # code paths call this, so a missing tenant context can never silently widen
-  # a query to all tenants.
-  def self.tenant!
-    Current.tenant or raise MissingTenantError
-  end
-
-  def self.tenant
-    Current.tenant
-  end
-
-  def self.actor
-    Current.actor
-  end
-
-  # Feature-string permission check for the current actor's role (see
-  # Loam::Permissions) — deny-by-default, wildcard-aware. `role:` overrides the
-  # actor's role. Returns false with no actor/role.
-  def self.can?(permission, role: nil)
-    role ||= Current.actor && Loam::Membership.find_by(user_id: Current.actor.id)&.role
-    Loam::Permissions.allow?(role, permission)
-  end
-
-  # The approval-gate seam. When a caller runs under :confirm (an MCP tool acting
-  # for an AI agent), a write should be STAGED for human approval via
-  # Loam::PendingActions.stage instead of committed. Loam does not intercept
-  # Active Record globally — this is the documented hook a write path checks.
-  def self.mutation_mode
-    Current.mutation_mode || :direct
-  end
-
-  def self.require_confirmation?
-    mutation_mode == :confirm
-  end
-
-  # Run a block with writes gated for approval. The one blessed way to enter
-  # confirm-mode; restores the previous mode afterwards.
-  def self.with_confirmation
-    previous = Current.mutation_mode
-    Current.mutation_mode = :confirm
-    yield
-  ensure
-    Current.mutation_mode = previous
-  end
-
-  # Run a block inside a tenant (and optional actor) context, restoring the
-  # previous context afterwards. The one blessed way to switch tenants.
-  def self.as_tenant(tenant, actor: nil)
-    previous_tenant = Current.tenant
-    previous_actor = Current.actor
-    Current.tenant = tenant
-    Current.actor = actor if actor
-    yield
-  ensure
-    Current.tenant = previous_tenant
-    Current.actor = previous_actor
-  end
-end
-
-ActiveSupport.on_load(:active_record) do
-  require "loam/generated_key"
-  require "loam/tenant_record"
-  require "loam/auditable"
-  require "loam/soft_deletable"
-  require "loam/eventful"
-  require "loam/custom_fields"
-  require "loam/workflow"
-  require "loam/searchable"
-  require "loam/encryptable"
-  require "loam/translatable"
-  require "loam/commentable"
-  require "loam/attachable"
-end

data/lib/tasks/loam.rake

@@ -1,171 +0,0 @@
-namespace :loam do
-  desc "Re-run every Loam.on_tenant_created callback for every existing tenant (idempotent)"
-  task sync: :environment do
-    synced = Loam.sync_tenants!
-    puts "loam:sync — ran #{Loam.tenant_created_callbacks.size} tenant callback(s) across #{synced} tenant(s)."
-  end
-
-  namespace :openapi do
-    # Write the OpenAPI 3.1 document + a Markdown rendering to disk, for CI or
-    # publishing. Introspection only — no server, no network.
-    #
-    #   bin/rails loam:openapi:export
-    desc "Export the API's OpenAPI JSON + Markdown to doc/"
-    task export: :environment do
-      require "json"
-      dir = ENV["DIR"].presence || "doc"
-      FileUtils.mkdir_p(dir)
-      File.write(File.join(dir, "openapi.json"), JSON.pretty_generate(Loam::OpenApi.document))
-      File.write(File.join(dir, "openapi.md"), Loam::OpenApi.markdown)
-      puts "loam:openapi:export — wrote #{dir}/openapi.json and #{dir}/openapi.md."
-    end
-  end
-
-  namespace :scheduler do
-    # Fire every due recurring job once. Wire to system cron, every minute:
-    #   * * * * * cd /app && bin/rails loam:scheduler:tick
-    # The claim is atomic, so running this from several hosts never double-fires
-    # a job (Postgres SKIP LOCKED; SQLite serializes the single-process claim).
-    desc "Enqueue every due Loam::ScheduledJob (run from cron)"
-    task tick: :environment do
-      fired = Loam::Scheduler.tick
-      puts "loam:scheduler:tick — fired #{fired} scheduled job(s)."
-    end
-  end
-
-  namespace :index do
-    # Rebuild the custom-field read-model index (Loam::CustomFieldIndex) for every
-    # entity with custom fields, in every tenant. Run once after enabling it so
-    # existing rows are projected; new/updated records index themselves on save.
-    #
-    #   bin/rails loam:index:reindex
-    desc "Rebuild the custom-field read-model index for every model in every tenant"
-    task reindex: :environment do
-      Rails.application.eager_load!
-      models = Loam::TenantRecord.descendants.select do |model|
-        model.name.present? && model.respond_to?(:custom_field_definitions)
-      end
-
-      tenants = 0
-      Loam::Tenant.find_each do |tenant|
-        Loam.as_tenant(tenant) { models.each { |model| Loam::CustomFieldIndex.reindex(model) } }
-        tenants += 1
-      end
-      puts "loam:index:reindex — rebuilt #{models.size} model(s) across #{tenants} tenant(s)."
-    end
-
-    # Report custom-field index coverage (indexed vs expected) per model/field
-    # per tenant — the trust signal for whether the index is complete or drifting.
-    #
-    #   bin/rails loam:index:coverage
-    desc "Report custom-field index coverage per model/field per tenant"
-    task coverage: :environment do
-      Rails.application.eager_load!
-      models = Loam::TenantRecord.descendants.select do |model|
-        model.name.present? && model.respond_to?(:custom_field_definitions)
-      end
-
-      Loam::Tenant.find_each do |tenant|
-        Loam.as_tenant(tenant) do
-          models.each do |model|
-            model.custom_field_definitions.find_each do |definition|
-              c = Loam::CustomFieldIndex.coverage(model, definition.name)
-              flag = c[:complete] ? "ok" : "GAP"
-              puts "  [#{flag}] #{tenant.slug} #{model.name}.#{definition.name}: #{c[:indexed]}/#{c[:expected]} indexed"
-            end
-          end
-        end
-      end
-    end
-  end
-
-  namespace :search do
-    # Rebuild the active driver's search index for every searchable model in
-    # every tenant. Needed once after switching to a driver that keeps an index
-    # (Loam::Search::TokenDriver): existing rows have no tokens until reindexed,
-    # while new and updated records index themselves on save. A no-op under the
-    # default LikeDriver (its reindex does nothing), so it is always safe to run.
-    #
-    #   bin/rails loam:search:reindex
-    desc "Rebuild the search index for every searchable model in every tenant"
-    task reindex: :environment do
-      Rails.application.eager_load!
-      models = Loam::TenantRecord.descendants.select do |model|
-        model.name.present? && model.respond_to?(:loam_searchable?) && model.loam_searchable?
-      end
-
-      tenants = 0
-      Loam::Tenant.find_each do |tenant|
-        Loam.as_tenant(tenant) { models.each { |model| Loam::Search.reindex(model) } }
-        tenants += 1
-      end
-      puts "loam:search:reindex — rebuilt #{models.size} model(s) across #{tenants} tenant(s) using #{Loam::Search.driver}."
-    end
-  end
-
-  namespace :encryption do
-    # Rotate a tenant's encrypted data under the current key: read each record's
-    # encrypted fields (old key) and re-seal them (new key), one record at a
-    # time. The version tag in the stored format means old and new ciphertext
-    # coexist, so this can run incrementally without downtime. Each record is an
-    # ordinary audited "[encrypted]" update.
-    #
-    #   bin/rails loam:encryption:rotate[Customer,42]
-    desc "Re-encrypt a model's encrypted fields for one tenant (rotation step)"
-    task :rotate, %i[model tenant_id] => :environment do |_task, args|
-      model = fetch_encryptable_model(args[:model])
-      tenant = Loam::Tenant.find(args[:tenant_id])
-
-      count = 0
-      Loam.as_tenant(tenant) do
-        each_record(model) do |record|
-          record.loam_reencrypt!
-          count += 1
-        end
-      end
-      puts "loam:encryption:rotate — re-encrypted #{count} #{model.name} record(s) in tenant #{tenant.slug}."
-    end
-
-    # Decrypt and print one tenant's encrypted fields, e.g. for a GDPR data
-    # export or a migration. OPERATIONAL CAUTION: this prints plaintext PII to
-    # stdout — run it only where that output is safe (never into shared logs or
-    # a shell history that syncs), and only for a tenant you are authorized to
-    # export.
-    #
-    #   bin/rails loam:encryption:decrypt_dump[Customer,42]
-    desc "Print decrypted encrypted-field values for one tenant (GDPR export; handle with care)"
-    task :decrypt_dump, %i[model tenant_id] => :environment do |_task, args|
-      require "json"
-      model = fetch_encryptable_model(args[:model])
-      tenant = Loam::Tenant.find(args[:tenant_id])
-      fields = model.loam_encrypted_attributes
-
-      Loam.as_tenant(tenant) do
-        each_record(model) do |record|
-          row = { id: record.id }.merge(fields.index_with { |field| record.public_send(field) })
-          puts row.to_json
-        end
-      end
-    end
-  end
-end
-
-# Resolve a model name to a class that actually uses Loam::Encryptable — a typo
-# or a plain model should fail loudly, not silently dump/rotate nothing.
-def fetch_encryptable_model(name)
-  # Force the app's classes (and Loam::TenantRecord, required lazily via the
-  # active_record on_load hook) to load before we constantize a model name.
-  Rails.application.eager_load!
-  model = name.to_s.constantize
-  unless model.respond_to?(:loam_encrypted_attributes) && model.loam_encrypted_attributes.any?
-    abort "#{name} does not `include Loam::Encryptable` with any `encrypts` fields."
-  end
-  model
-end
-
-# Iterate every record, soft-deleted ones included (a GDPR export must not miss
-# data hidden in the recycle bin), staying inside the current tenant scope.
-def each_record(model, &block)
-  scope = model.respond_to?(:with_deleted) ? model.with_deleted : model.all
-  scope.find_each(&block)
-end

data/lib/tasks/loam_mcp.rake

@@ -1,20 +0,0 @@
-require "logger"
-
-namespace :loam do
-  namespace :mcp do
-    # Serve the Loam MCP server over stdio. Point an MCP client (Claude Code,
-    # Cursor, Codex) at `bin/rails loam:mcp:serve` with LOAM_MCP_TOKEN set to a
-    # Loam API token — the agent then acts as that token's user, in that tenant.
-    #
-    # stdout carries JSON-RPC only; every log is sent to stderr so it can't
-    # corrupt the stream.
-    desc "Serve the Loam MCP server over stdio (auth via LOAM_MCP_TOKEN)"
-    task serve: :environment do
-      Rails.logger = Logger.new($stderr)
-      ActiveRecord::Base.logger = Rails.logger
-      $stdout.sync = true
-
-      Loam::Mcp::Server.new.run
-    end
-  end
-end