optify-config 1.23.2-arm64-darwin → 1.24.0-arm64-darwin

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 58d9ab336e1263aa32b83610d055390e150c07a3a88f01ce928012ae3cc10642
-  data.tar.gz: f0bd18ceffbf5441253d402bd1e9ac68c609e24cf83eff05145649a5becf2c67
+  metadata.gz: 26482def652f70e00a0c650fc607494e927192316d12685c2e9ca64c9c1c58e0
+  data.tar.gz: d52d8ed89ac3acd80d81236b041b1dca082b9c8507c30380d8f4534244ed7099
 SHA512:
-  metadata.gz: a693df8380dab84802eee282bcdab0ad8093a849e994c3f202f54095ab1884d5105bf15b2b24c157cae35418e65b635e6ee049b53285838032b009d75a01c201
-  data.tar.gz: 6725640b4fb61ff51feeb0c9398ef8e5be0bf729e2ea9248544e3a70381ce9e79430b61d9758ff35d2d0f86bed7c3a2c5f643fcb703d9edb6a55a0aed96039e4
+  metadata.gz: 6c248ddba8ad6eae39cbebd607f0b7d42bc2617dcc33b1d49f8c1510580966ad36f38a82435399ef03b48601fa69b8573295da98f5239a259d206316b169fa40
+  data.tar.gz: 28245dbb77170c4c3c4a2d682676c4dd5706a81b7c0070567c86a285cb86c464eade396e4e94e47f46579b67f20ccd41a6181dc33d95a100c071ca21a7021540

data/lib/optify_ruby/policies.rb

@@ -0,0 +1,33 @@
+# typed: true
+# frozen_string_literal: true
+
+require 'sorbet-runtime'
+
+require 'optify-from_hash'
+
+module Optify
+  # The policy for the requester identifier passed via preferences.
+  #
+  # Either `allow` or `block` will be set, not both.
+  # - `allow`: only the listed requesters may use the feature; can be empty.
+  # - `block`: the listed requesters may not use the feature; all others are allowed.
+  class RequesterPolicy < FromHashable
+    extend T::Sig
+
+    sig { returns(T.nilable(T::Set[String])) }
+    attr_reader :allow
+
+    sig { returns(T.nilable(T::Set[String])) }
+    attr_reader :block
+  end
+
+  # Policies that restrict access to a feature based on values in the request's preferences.
+  #
+  # See https://github.com/juharris/optify#policies for details.
+  class Policies < FromHashable
+    extend T::Sig
+
+    sig { returns(T.nilable(RequesterPolicy)) }
+    attr_reader :requester
+  end
+end

data/lib/optify_ruby/provider_module.rb

@@ -5,9 +5,27 @@ require 'json'
 require 'lru_redux'
 require 'sorbet-runtime'
 
+require_relative './policies'
+
 module Optify
   # @!visibility private
-  module ProviderModule
+  module ProviderModule # rubocop:disable Metrics/ModuleLength
+    #: (String, Array[String], ?CacheOptions?) -> void
+    def check_policies(requester, feature_names, cache_options = nil)
+      if cache_options
+        init unless @cache
+        ProviderModule._cache_getset(
+          @cache, #: as !nil
+          [:check_policies, feature_names, requester],
+          cache_options.on_cache_event,
+        ) do
+          _check_policies(requester, feature_names)
+        end
+      else
+        _check_policies(requester, feature_names)
+      end
+    end
+
     #: [T] (LruRedux::Cache | Hash[Array[untyped], T], Array[untyped], (^(Array[untyped] key, T value, bool is_cache_hit) -> void)?) { -> T } -> T
     def self._cache_getset(cache, cache_key, on_cache_event, &block)
       is_cache_hit = true #: bool
@@ -69,6 +87,14 @@ module Optify
       OptionsMetadata.from_hash(JSON.parse(metadata_json))
     end
 
+    #: (String canonical_feature_name) -> Optify::Policies?
+    def get_policies(canonical_feature_name)
+      policies_json = get_policies_json(canonical_feature_name)
+      return nil if policies_json.nil?
+
+      Policies.from_hash(JSON.parse(policies_json))
+    end
+
     private
 
     #: -> Hash[String, OptionsMetadata]

data/rbi/optify.rbi

@@ -7,6 +7,31 @@ module Optify
   class UnknownFeatureError < StandardError
   end
 
+  # The policy for the requester identifier passed via preferences.
+  #
+  # Either `allow` or `block` will be set, not both.
+  # - `allow`: only the listed requesters may use the feature; can be empty.
+  # - `block`: the listed requesters may not use the feature; all others are allowed.
+  class RequesterPolicy < FromHashable
+    sig { returns(T.nilable(T::Set[String])) }
+    attr_reader :allow
+
+    sig { returns(T.nilable(T::Set[String])) }
+    attr_reader :block
+  end
+
+  # Policies that restrict access to a feature based on values in the request's preferences.
+  #
+  # See https://github.com/juharris/optify#policies for details.
+  class Policies < FromHashable
+    sig { returns(T.nilable(RequesterPolicy)) }
+    attr_reader :requester
+  end
+
+  # Raised when a requester is not permitted to use a feature due to its policies.
+  class PolicyDeniedError < StandardError
+  end
+
   # DEPRECATED: Use `Optify::FromHashable` instead.
   # A base class for classes from configuration files.
   # Classes that derive from this can easily be used with `Optify::OptionsProvider.get_options`
@@ -162,6 +187,22 @@ module Optify
 
     sig { returns(T::Boolean) }
     def skip_feature_name_conversion; end
+
+    # The requester identifier to use for policy enforcement.
+    # If not set, policy checks are bypassed.
+    sig { params(value: T.nilable(String)).void }
+    def requester=(value); end
+
+    sig { returns(T.nilable(String)) }
+    def requester; end
+
+    # When `true`, raises `PolicyDeniedError` if a feature is not permitted for the requester.
+    # When `false` (default), denied features are silently filtered out.
+    sig { params(value: T::Boolean).void }
+    def raise_if_policy_denied=(value); end
+
+    sig { returns(T::Boolean) }
+    def raise_if_policy_denied; end
   end
 
   # A registry of features that provides configurations.
@@ -233,6 +274,19 @@ module Optify
   # Some of the methods shown within this module are implemented in Rust
   # and are declared in this common module to avoid duplicate declarations in different classes.
   module ProviderModule
+    # Checks policies for a list of features for the given requester.
+    # Returns `nil` if there are no policy issues (or no policies defined).
+    # Raises `Optify::PolicyDeniedError` if any of the features are not allowed for the requester.
+    sig do
+      params(
+        requester: String,
+        feature_names: T::Array[String],
+        cache_options: T.nilable(CacheOptions),
+      )
+        .returns(T.nilable(String))
+    end
+    def check_policies(requester, feature_names, cache_options = nil); end
+
     # @param canonical_feature_name [String] A canonical feature name
     # @return Whether the feature has conditions.
     sig { params(canonical_feature_name: String).returns(T::Boolean) }
@@ -358,8 +412,22 @@ module Optify
     end
     def map_feature_names(feature_names, preferences); end
 
+    # @return The policies for the feature, or `nil` if the feature has no policies.
+    sig { params(canonical_feature_name: String).returns(T.nilable(Optify::Policies)) }
+    def get_policies(canonical_feature_name); end
+
     private
 
+    # Rust implementation.
+    sig do
+      params(
+        requester: String,
+        feature_names: T::Array[String],
+      )
+        .returns(T.nilable(String))
+    end
+    def _check_policies(requester, feature_names); end
+
     # Map aliases or canonical feature names (perhaps derived from a file names) to the canonical feature names.
     # Canonical feature names map to themselves.
     # This implementation calls the Rust implementation directly.
@@ -372,6 +440,10 @@ module Optify
     # @return The metadata for the feature.
     sig { params(canonical_feature_name: String).returns(T.nilable(String)) }
     def get_feature_metadata_json(canonical_feature_name); end
+
+    # @return The policies for the feature as JSON, or `nil` if the feature has no policies.
+    sig { params(canonical_feature_name: String).returns(T.nilable(String)) }
+    def get_policies_json(canonical_feature_name); end
   end
 
   # Provides configurations based on keys and enabled feature names.

data/sig/optify.rbs

@@ -6,6 +6,24 @@ end
 class Optify::UnknownFeatureError < StandardError
 end
 
+# The policy for the requester identifier passed via preferences.
+#
+# Either `allow` or `block` will be set, not both.
+# - `allow`: only the listed requesters may use the feature; can be empty.
+# - `block`: the listed requesters may not use the feature; all others are allowed.
+class Optify::RequesterPolicy < FromHashable
+end
+
+# Policies that restrict access to a feature based on values in the request's preferences.
+#
+# See https://github.com/juharris/optify#policies for details.
+class Optify::Policies < FromHashable
+end
+
+# Raised when a requester is not permitted to use a feature due to its policies.
+class Optify::PolicyDeniedError < StandardError
+end
+
 # DEPRECATED: Use `Optify::FromHashable` instead.
 # A base class for classes from configuration files.
 # Classes that derive from this can easily be used with `Optify::OptionsProvider.get_options`
@@ -18,7 +36,10 @@ end
 
 # Options for caching.
 class Optify::CacheOptions
-  def initialize: () -> (^(::Array[untyped] key, untyped value, bool is_cache_hit) -> void)?
+  def initialize: () -> ::Set[String]?
+                | () -> ::Set[String]?
+                | () -> RequesterPolicy?
+                | () -> (^(::Array[untyped] key, untyped value, bool is_cache_hit) -> void)?
                 | (?on_cache_event: (^(::Array[untyped] key, untyped value, bool is_cache_hit) -> void)? on_cache_event) -> void
 end
 
@@ -100,6 +121,18 @@ class Optify::GetOptionsPreferences
   def skip_feature_name_conversion=: (bool value) -> void
 
   def skip_feature_name_conversion: () -> bool
+
+  # The requester identifier to use for policy enforcement.
+  # If not set, policy checks are bypassed.
+  def requester=: (String? value) -> void
+
+  def requester: () -> String?
+
+  # When `true`, raises `PolicyDeniedError` if a feature is not permitted for the requester.
+  # When `false` (default), denied features are silently filtered out.
+  def raise_if_policy_denied=: (bool value) -> void
+
+  def raise_if_policy_denied: () -> bool
 end
 
 # A registry of features that provides configurations.
@@ -149,6 +182,8 @@ end
 # Some of the methods shown within this module are implemented in Rust
 # and are declared in this common module to avoid duplicate declarations in different classes.
 module Optify::ProviderModule
+  def check_policies: (String requester, ::Array[String] feature_names, ?CacheOptions? cache_options) -> String?
+
   # @param canonical_feature_name [String] A canonical feature name
   # @return Whether the feature has conditions.
   def conditions?: (String canonical_feature_name) -> bool
@@ -200,6 +235,11 @@ module Optify::ProviderModule
 
   def map_feature_names: (::Array[String] feature_names, GetOptionsPreferences preferences) -> ::Array[String?]
 
+  # @return The policies for the feature, or `nil` if the feature has no policies.
+  def get_policies: (String canonical_feature_name) -> Optify::Policies?
+
+  def _check_policies: (String requester, ::Array[String] feature_names) -> String?
+
   # Map aliases or canonical feature names (perhaps derived from a file names) to the canonical feature names.
   # Canonical feature names map to themselves.
   # This implementation calls the Rust implementation directly.
@@ -210,6 +250,9 @@ module Optify::ProviderModule
 
   # @return The metadata for the feature.
   def get_feature_metadata_json: (String canonical_feature_name) -> String?
+
+  # @return The policies for the feature as JSON, or `nil` if the feature has no policies.
+  def get_policies_json: (String canonical_feature_name) -> String?
 end
 
 # Provides configurations based on keys and enabled feature names.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: optify-config
 version: !ruby/object:Gem::Version
-  version: 1.23.2
+  version: 1.24.0
 platform: arm64-darwin
 authors:
 - Justin D. Harris
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2026-08-05 00:00:00.000000000 Z
+date: 2026-09-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: optify-from_hash
@@ -179,6 +179,7 @@ files:
 - lib/optify_ruby/get_options_preferences.rb
 - lib/optify_ruby/implementation.rb
 - lib/optify_ruby/options_metadata.rb
+- lib/optify_ruby/policies.rb
 - lib/optify_ruby/provider_module.rb
 - lib/optify_ruby/watcher_implementation.rb
 - rbi/optify.rbi