oso-oso 0.7.1 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2dbfedef3bc14832b47137d1c17b247af0cf8bf3
-  data.tar.gz: 3bad36d04f6744069299b72855be913bc4bd9562
+  metadata.gz: ae952cafcf3913929a677cf97af57146e43cf818
+  data.tar.gz: 1a2d03946f1c4150c15fe190ce7a9cdf7f1cf4f5
 SHA512:
-  metadata.gz: 13d18f6a934a266e82ec7e981187f7f8523c998b55158044bc09271c255fa56e40159246a55096447296971d88e9c5c68355684d37db99cea59b911810949cd9
-  data.tar.gz: 5cdae20c3b4c08752db940bcce466d65a787e9728ec935b837eb20eb98fffda4e88f812f63c1d75822f2bd25e6e741c1ae6df8620f2b587ca4b5db0f4901029b
+  metadata.gz: f21238d2bc1cebc1706a2f09b51106faaed0a91cd3ba1e79a36d1d51c6819c7a489d0fdda8aed200f343c3a3a143f1fdf6d567b3efd4e3c1e64465098d204e53
+  data.tar.gz: 9f479f720fc1ee1b8cd09f69a7518c1e9cc6c9b0fae1f4070e657d931df804765003888a0d3026513c5024412a150798c52b6717b0e34ed6ba6bff148d996a28

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    oso-oso (0.7.1)
+    oso-oso (0.10.0)
       ffi (~> 1.0)
 
 GEM
@@ -14,7 +14,7 @@ GEM
     coderay (1.1.3)
     diff-lcs (1.4.4)
     e2mmap (0.1.0)
-    ffi (1.13.1)
+    ffi (1.14.2)
     jaro_winkler (1.5.4)
     maruku (0.7.3)
     method_source (1.0.0)

data/lib/oso.rb

@@ -1,8 +1,6 @@
 # frozen_string_literal: true
 
-require 'oso/http'
 require 'oso/oso'
-require 'oso/path_mapper'
 require 'oso/polar'
 require 'oso/version'
 

data/lib/oso/oso.rb

@@ -7,8 +7,6 @@ module Oso
   class Oso < Polar::Polar
     def initialize
       super
-      register_class(Http, name: 'Http')
-      register_class(PathMapper, name: 'PathMapper')
     end
 
     # Query the knowledge base to determine whether an actor is allowed to

data/lib/oso/polar/errors.rb

@@ -38,6 +38,7 @@ module Oso
     # TODO: I think this should probably have some arguments to say what the call is
     class InvalidCallError < PolarRuntimeError; end
     class InvalidConstructorError < PolarRuntimeError; end
+    class InvalidIteratorError < PolarRuntimeError; end
     class InvalidQueryTypeError < PolarRuntimeError; end
     class NullByteInPolarFileError < PolarRuntimeError; end
     class UnexpectedPolarTypeError < PolarRuntimeError; end

data/lib/oso/polar/host.rb

@@ -46,7 +46,7 @@ module Oso
       # @raise [DuplicateClassAliasError] if attempting to register a class
       # under a previously-registered name.
       def cache_class(cls, name:)
-        raise DuplicateClassAliasError, name: name, old: get_class(name), new: cls if classes.key? name
+        raise DuplicateClassAliasError.new name: name, old: get_class(name), new: cls if classes.key? name
 
         classes[name] = cls
         name

data/lib/oso/polar/polar.rb

@@ -38,6 +38,9 @@ module Oso
         @ffi_polar = FFI::Polar.create
         @host = Host.new(ffi_polar)
 
+        # Register global constants.
+        register_constant nil, name: 'nil'
+
         # Register built-in classes.
         register_class PolarBoolean, name: 'Boolean'
         register_class Integer

data/lib/oso/polar/query.rb

@@ -36,33 +36,6 @@ module Oso
         ffi_query.question_result(result, call_id: call_id)
       end
 
-      # Register a Ruby method call, wrapping the call result in a generator if
-      # it isn't already one.
-      #
-      # @param method [#to_sym]
-      # @param call_id [Integer]
-      # @param instance [Hash<String, Object>]
-      # @param args [Array<Hash>]
-      # @raise [InvalidCallError] if the method doesn't exist on the instance or
-      #   the args passed to the method are invalid.
-      def register_call(attribute, call_id:, instance:, args:, kwargs:) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
-        return if calls.key?(call_id)
-
-        instance = host.to_ruby(instance)
-        args = args.map { |a| host.to_ruby(a) }
-        kwargs = Hash[kwargs.map { |k, v| [k.to_sym, host.to_ruby(v)] }]
-        # The kwargs.empty? check is for Ruby < 2.7.
-        result = if kwargs.empty?
-                   instance.__send__(attribute, *args)
-                 else
-                   instance.__send__(attribute, *args, **kwargs)
-                 end
-        result = [result].to_enum unless result.is_a? Enumerator # Call must be a generator.
-        calls[call_id] = result.lazy
-      rescue ArgumentError, NoMethodError
-        raise InvalidCallError
-      end
-
       # Send next result of Ruby method call across FFI boundary.
       #
       # @param result [String]
@@ -97,13 +70,33 @@ module Oso
       # @param call_id [Integer]
       # @param instance [Hash<String, Object>]
       # @raise [Error] if the FFI call raises one.
-      def handle_call(attribute, call_id:, instance:, args:, kwargs:)
-        register_call(attribute, call_id: call_id, instance: instance, args: args, kwargs: kwargs)
-        result = JSON.dump(next_call_result(call_id))
+      def handle_call(attribute, call_id:, instance:, args:, kwargs:) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
+        instance = host.to_ruby(instance)
+        args = args.map { |a| host.to_ruby(a) }
+        kwargs = Hash[kwargs.map { |k, v| [k.to_sym, host.to_ruby(v)] }]
+        # The kwargs.empty? check is for Ruby < 2.7.
+        result = if kwargs.empty?
+                   instance.__send__(attribute, *args)
+                 else
+                   instance.__send__(attribute, *args, **kwargs)
+                 end
+        result = JSON.dump(host.to_polar(result))
         call_result(result, call_id: call_id)
-      rescue InvalidCallError => e
+      rescue ArgumentError, NoMethodError => e
         application_error(e.message)
         call_result(nil, call_id: call_id)
+      end
+
+      def handle_next_external(call_id, iterable)
+        unless calls.key? call_id
+          value = host.to_ruby iterable
+          raise InvalidIteratorError unless value.is_a? Enumerable
+
+          calls[call_id] = value.lazy
+        end
+
+        result = JSON.dump(next_call_result(call_id))
+        call_result(result, call_id: call_id)
       rescue StopIteration
         call_result(nil, call_id: call_id)
       end
@@ -173,6 +166,10 @@ module Oso
               ffi_query.debug_command(command)
             when 'ExternalOp'
               raise UnimplementedOperationError, 'comparison operators'
+            when 'NextExternal'
+              call_id = event.data['call_id']
+              iterable = event.data['iterable']
+              handle_next_external(call_id, iterable)
             else
               raise "Unhandled event: #{JSON.dump(event.inspect)}"
             end

data/lib/oso/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Oso
-  VERSION = '0.7.1'
+  VERSION = '0.10.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: oso-oso
 version: !ruby/object:Gem::Version
-  version: 0.7.1
+  version: 0.10.0
 platform: ruby
 authors:
 - Oso Security, Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-10-27 00:00:00.000000000 Z
+date: 2021-01-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ffi
@@ -130,9 +130,7 @@ files:
 - ext/oso-oso/lib/libpolar.so
 - ext/oso-oso/lib/polar.dll
 - lib/oso.rb
-- lib/oso/http.rb
 - lib/oso/oso.rb
-- lib/oso/path_mapper.rb
 - lib/oso/polar.rb
 - lib/oso/polar/errors.rb
 - lib/oso/polar/ffi.rb

data/lib/oso/http.rb

@@ -1,16 +0,0 @@
-# frozen_string_literal: true
-
-module Oso
-  # An HTTP resource.
-  class Http
-    def initialize(hostname, path, query)
-      @hostname = hostname
-      @path = path
-      @query = query
-    end
-
-    private
-
-    attr_reader :hostname, :path, :query
-  end
-end

data/lib/oso/path_mapper.rb

@@ -1,29 +0,0 @@
-# frozen_string_literal: true
-
-module Oso
-  # Map from a template string with capture groups of the form
-  # `{name}` to a dictionary of the form `{name: captured_value}`
-  class PathMapper
-    def initialize(template)
-      capture_group = /({([^}]+)})/
-
-      template = template.dup
-      template.scan(capture_group).each do |outer, inner|
-        template = if inner == '*'
-                     template.gsub! outer, '.*'
-                   else
-                     template.gsub! outer, "(?<#{inner}>[^/]+)"
-                   end
-      end
-      @pattern = /\A#{template}\Z/
-    end
-
-    def map(string)
-      string.match(pattern)&.named_captures || {}
-    end
-
-    private
-
-    attr_reader :pattern
-  end
-end