optify-config 1.23.2-aarch64-linux → 1.25.0-aarch64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6a297e0faa6c16b2d897b94816b6af78febfce816a7c8e7238831fb2f05afa36
-  data.tar.gz: f78f2d5986e40ede43ab6584b55cabe8cee58217d0f332cd3753d5fd20a0aa8d
+  metadata.gz: 12c8a44e681d15af03f05c898aa7dd2352c5ff951782bf48230714c77c7ade38
+  data.tar.gz: d714a38e4b8eb5f6d051dab0663bd34c5e7d2c0ae83c673b5409de31a4432f31
 SHA512:
-  metadata.gz: 4b6e86fd23aa076149a364416deffe55edd362d8a45c927299c8a5be1b22830540c945031b2e5d5009efa2d32b5677ae90f78f61e263c2f7d8f0a6941e60feb8
-  data.tar.gz: 3bc2b1bdb3924501f2ec316787dc3cc1a7f96596f5abc949910968fce0880a406e05b3d5f51f723657707a424d198c56ec8e1a5c5b3eab076d088b5176ce70fe
+  metadata.gz: f4316956a4532e071eaeb48f5181a84c2008ab2174bbb86163d9ffd07a7025d1892a5f500f062f28607f67c60bc20d3f8fddcaf305a7e1c49907cf634cd0dc52
+  data.tar.gz: 7a977869f72fa3ace54e56125a5cd58ce82ffde091032bcd40f22b795d7582af3a2f5158a13b8cd97fb1a39eda25682519ce82ad02fe585ce1bf793ccede3980

data/lib/optify_ruby/policies.rb

@@ -0,0 +1,33 @@
+# typed: true
+# frozen_string_literal: true
+
+require 'sorbet-runtime'
+
+require 'optify-from_hash'
+
+module Optify
+  # The policy for the requester identifier passed via preferences.
+  #
+  # Either `allow` or `block` will be set, not both.
+  # - `allow`: only the listed requesters may use the feature; can be empty.
+  # - `block`: the listed requesters may not use the feature; all others are allowed.
+  class RequesterPolicy < FromHashable
+    extend T::Sig
+
+    sig { returns(T.nilable(T::Set[String])) }
+    attr_reader :allow
+
+    sig { returns(T.nilable(T::Set[String])) }
+    attr_reader :block
+  end
+
+  # Policies that restrict access to a feature based on values in the request's preferences.
+  #
+  # See https://github.com/juharris/optify#policies for details.
+  class Policies < FromHashable
+    extend T::Sig
+
+    sig { returns(T.nilable(RequesterPolicy)) }
+    attr_reader :requester
+  end
+end

data/lib/optify_ruby/provider_module.rb

@@ -5,9 +5,27 @@ require 'json'
 require 'lru_redux'
 require 'sorbet-runtime'
 
+require_relative './policies'
+
 module Optify
   # @!visibility private
-  module ProviderModule
+  module ProviderModule # rubocop:disable Metrics/ModuleLength
+    #: (String, Array[String], ?CacheOptions?) -> void
+    def check_policies(requester, feature_names, cache_options = nil)
+      if cache_options
+        init unless @cache
+        ProviderModule._cache_getset(
+          @cache, #: as !nil
+          [:check_policies, feature_names, requester],
+          cache_options.on_cache_event,
+        ) do
+          _check_policies(requester, feature_names)
+        end
+      else
+        _check_policies(requester, feature_names)
+      end
+    end
+
     #: [T] (LruRedux::Cache | Hash[Array[untyped], T], Array[untyped], (^(Array[untyped] key, T value, bool is_cache_hit) -> void)?) { -> T } -> T
     def self._cache_getset(cache, cache_key, on_cache_event, &block)
       is_cache_hit = true #: bool
@@ -69,6 +87,14 @@ module Optify
       OptionsMetadata.from_hash(JSON.parse(metadata_json))
     end
 
+    #: (String canonical_feature_name) -> Optify::Policies?
+    def get_policies(canonical_feature_name)
+      policies_json = get_policies_json(canonical_feature_name)
+      return nil if policies_json.nil?
+
+      Policies.from_hash(JSON.parse(policies_json))
+    end
+
     private
 
     #: -> Hash[String, OptionsMetadata]

data/rbi/optify.rbi

@@ -7,6 +7,31 @@ module Optify
   class UnknownFeatureError < StandardError
   end
 
+  # The policy for the requester identifier passed via preferences.
+  #
+  # Either `allow` or `block` will be set, not both.
+  # - `allow`: only the listed requesters may use the feature; can be empty.
+  # - `block`: the listed requesters may not use the feature; all others are allowed.
+  class RequesterPolicy < FromHashable
+    sig { returns(T.nilable(T::Set[String])) }
+    attr_reader :allow
+
+    sig { returns(T.nilable(T::Set[String])) }
+    attr_reader :block
+  end
+
+  # Policies that restrict access to a feature based on values in the request's preferences.
+  #
+  # See https://github.com/juharris/optify#policies for details.
+  class Policies < FromHashable
+    sig { returns(T.nilable(RequesterPolicy)) }
+    attr_reader :requester
+  end
+
+  # Raised when a requester is not permitted to use a feature due to its policies.
+  class PolicyDeniedError < StandardError
+  end
+
   # DEPRECATED: Use `Optify::FromHashable` instead.
   # A base class for classes from configuration files.
   # Classes that derive from this can easily be used with `Optify::OptionsProvider.get_options`
@@ -162,6 +187,22 @@ module Optify
 
     sig { returns(T::Boolean) }
     def skip_feature_name_conversion; end
+
+    # The requester identifier to use for policy enforcement.
+    # If not set, policy checks are bypassed.
+    sig { params(value: T.nilable(String)).void }
+    def requester=(value); end
+
+    sig { returns(T.nilable(String)) }
+    def requester; end
+
+    # When `true`, raises `PolicyDeniedError` if a feature is not permitted for the requester.
+    # When `false` (default), denied features are silently filtered out.
+    sig { params(value: T::Boolean).void }
+    def raise_if_policy_denied=(value); end
+
+    sig { returns(T::Boolean) }
+    def raise_if_policy_denied; end
   end
 
   # A registry of features that provides configurations.
@@ -233,6 +274,19 @@ module Optify
   # Some of the methods shown within this module are implemented in Rust
   # and are declared in this common module to avoid duplicate declarations in different classes.
   module ProviderModule
+    # Checks policies for a list of features for the given requester.
+    # Returns `nil` if there are no policy issues (or no policies defined).
+    # Raises `Optify::PolicyDeniedError` if any of the features are not allowed for the requester.
+    sig do
+      params(
+        requester: String,
+        feature_names: T::Array[String],
+        cache_options: T.nilable(CacheOptions),
+      )
+        .returns(T.nilable(String))
+    end
+    def check_policies(requester, feature_names, cache_options = nil); end
+
     # @param canonical_feature_name [String] A canonical feature name
     # @return Whether the feature has conditions.
     sig { params(canonical_feature_name: String).returns(T::Boolean) }
@@ -358,8 +412,23 @@ module Optify
     end
     def map_feature_names(feature_names, preferences); end
 
+    # @return The policies directly declared for the feature, or `nil` if the feature has no policies.
+    # This may not consider all policies defined per requester outside of the feature configuration.
+    sig { params(canonical_feature_name: String).returns(T.nilable(Optify::Policies)) }
+    def get_policies(canonical_feature_name); end
+
     private
 
+    # Rust implementation.
+    sig do
+      params(
+        requester: String,
+        feature_names: T::Array[String],
+      )
+        .returns(T.nilable(String))
+    end
+    def _check_policies(requester, feature_names); end
+
     # Map aliases or canonical feature names (perhaps derived from a file names) to the canonical feature names.
     # Canonical feature names map to themselves.
     # This implementation calls the Rust implementation directly.
@@ -372,6 +441,10 @@ module Optify
     # @return The metadata for the feature.
     sig { params(canonical_feature_name: String).returns(T.nilable(String)) }
     def get_feature_metadata_json(canonical_feature_name); end
+
+    # @return The policies for the feature as JSON, or `nil` if the feature has no policies.
+    sig { params(canonical_feature_name: String).returns(T.nilable(String)) }
+    def get_policies_json(canonical_feature_name); end
   end
 
   # Provides configurations based on keys and enabled feature names.

data/sig/optify.rbs

@@ -6,6 +6,24 @@ end
 class Optify::UnknownFeatureError < StandardError
 end
 
+# The policy for the requester identifier passed via preferences.
+#
+# Either `allow` or `block` will be set, not both.
+# - `allow`: only the listed requesters may use the feature; can be empty.
+# - `block`: the listed requesters may not use the feature; all others are allowed.
+class Optify::RequesterPolicy < FromHashable
+end
+
+# Policies that restrict access to a feature based on values in the request's preferences.
+#
+# See https://github.com/juharris/optify#policies for details.
+class Optify::Policies < FromHashable
+end
+
+# Raised when a requester is not permitted to use a feature due to its policies.
+class Optify::PolicyDeniedError < StandardError
+end
+
 # DEPRECATED: Use `Optify::FromHashable` instead.
 # A base class for classes from configuration files.
 # Classes that derive from this can easily be used with `Optify::OptionsProvider.get_options`
@@ -18,7 +36,10 @@ end
 
 # Options for caching.
 class Optify::CacheOptions
-  def initialize: () -> (^(::Array[untyped] key, untyped value, bool is_cache_hit) -> void)?
+  def initialize: () -> ::Set[String]?
+                | () -> ::Set[String]?
+                | () -> RequesterPolicy?
+                | () -> (^(::Array[untyped] key, untyped value, bool is_cache_hit) -> void)?
                 | (?on_cache_event: (^(::Array[untyped] key, untyped value, bool is_cache_hit) -> void)? on_cache_event) -> void
 end
 
@@ -100,6 +121,18 @@ class Optify::GetOptionsPreferences
   def skip_feature_name_conversion=: (bool value) -> void
 
   def skip_feature_name_conversion: () -> bool
+
+  # The requester identifier to use for policy enforcement.
+  # If not set, policy checks are bypassed.
+  def requester=: (String? value) -> void
+
+  def requester: () -> String?
+
+  # When `true`, raises `PolicyDeniedError` if a feature is not permitted for the requester.
+  # When `false` (default), denied features are silently filtered out.
+  def raise_if_policy_denied=: (bool value) -> void
+
+  def raise_if_policy_denied: () -> bool
 end
 
 # A registry of features that provides configurations.
@@ -149,6 +182,8 @@ end
 # Some of the methods shown within this module are implemented in Rust
 # and are declared in this common module to avoid duplicate declarations in different classes.
 module Optify::ProviderModule
+  def check_policies: (String requester, ::Array[String] feature_names, ?CacheOptions? cache_options) -> String?
+
   # @param canonical_feature_name [String] A canonical feature name
   # @return Whether the feature has conditions.
   def conditions?: (String canonical_feature_name) -> bool
@@ -200,6 +235,12 @@ module Optify::ProviderModule
 
   def map_feature_names: (::Array[String] feature_names, GetOptionsPreferences preferences) -> ::Array[String?]
 
+  # @return The policies directly declared for the feature, or `nil` if the feature has no policies.
+  # This may not consider all policies defined per requester outside of the feature configuration.
+  def get_policies: (String canonical_feature_name) -> Optify::Policies?
+
+  def _check_policies: (String requester, ::Array[String] feature_names) -> String?
+
   # Map aliases or canonical feature names (perhaps derived from a file names) to the canonical feature names.
   # Canonical feature names map to themselves.
   # This implementation calls the Rust implementation directly.
@@ -210,6 +251,9 @@ module Optify::ProviderModule
 
   # @return The metadata for the feature.
   def get_feature_metadata_json: (String canonical_feature_name) -> String?
+
+  # @return The policies for the feature as JSON, or `nil` if the feature has no policies.
+  def get_policies_json: (String canonical_feature_name) -> String?
 end
 
 # Provides configurations based on keys and enabled feature names.

metadata

@@ -1,43 +1,49 @@
 --- !ruby/object:Gem::Specification
 name: optify-config
 version: !ruby/object:Gem::Version
-  version: 1.23.2
+  version: 1.25.0
 platform: aarch64-linux
 authors:
 - Justin D. Harris
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2026-08-05 00:00:00.000000000 Z
+date: 2026-09-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: optify-from_hash
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 0.3.2
+        version: 0.4.0
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 0.3.2
+        version: 0.4.0
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '1'
 - !ruby/object:Gem::Dependency
   name: sin_lru_redux
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.5.2
+        version: 2.5.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.5.2
+        version: 2.5.3
 - !ruby/object:Gem::Dependency
   name: sorbet-runtime
   requirement: !ruby/object:Gem::Requirement
@@ -179,6 +185,7 @@ files:
 - lib/optify_ruby/get_options_preferences.rb
 - lib/optify_ruby/implementation.rb
 - lib/optify_ruby/options_metadata.rb
+- lib/optify_ruby/policies.rb
 - lib/optify_ruby/provider_module.rb
 - lib/optify_ruby/watcher_implementation.rb
 - rbi/optify.rbi