otori 0.5.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7d06214bc12e9ac02bb0989a000bbf68987a12cc15d0a3c178a1fffcfd92503f
-  data.tar.gz: 474f1fb57b296c594d22fb4c00126658c9209fe0f8c10a323b0f34c014893e26
+  metadata.gz: 554c128771ba6ee67560679dc82411c949a7950188d9d89c50419d4f2135b288
+  data.tar.gz: 562127711e5aa8d21bdde1d65cea1209e26f228d50c9b16a75530dcea7248a78
 SHA512:
-  metadata.gz: f58ff908079e04df4436fcf0266e22cc1453c020a295f4e2fe6f0317664efd587ec7e2dbf45c6492035823ec212414a86939aab81d7176fb595bf65fba4d4fcc
-  data.tar.gz: 686f43334060ddc3067be606224c9b07b5a1e1fefc6519faa3e75cc1fc572f4967909d60ea08b32f35c53053408b6dfd79dd71e7c29067387e49c94fb4899e93
+  metadata.gz: 79b5ba2de508acc8324892a7ee500a2e5d1252bb82ecda1d7c9f809211f12a35d92a2b7d6c64d638a2003a58215ed252495e5b311be5794b97be0eadfd5d02aa
+  data.tar.gz: 7ec7f1393886c5064bbec6819b1e6637a5a6366b511485c2d6ae66dfe8cceebc1ec92ca15336427cae491aa496ae4f688585223663a58ec3b372433afb911700

data/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- `Otori::Signals#pragmatic_rating` and `Otori.signals_rating(params,
+  pragmatic: true)`. The raw `human_rating` is unchanged and stays honest:
+  desktop users without a touchscreen can trigger at most four of the five
+  signals, capping them at `0.8`. The pragmatic rating treats `0.8` and up
+  as fully human without influencing lower ratings: values at or below `0.4`
+  are returned untouched, and the `0.4` to `0.8` range is stretched linearly
+  to `0.4` to `1.0` (so `0.6` becomes `0.7`). Opt in per call; the default
+  `Otori.signals_rating(params)` keeps returning the raw rating.
+
 ## [0.5.0] - 2026-10-13
 
 ### Added

data/README.md

@@ -356,6 +356,22 @@ signals.focus?
 > password manager submissions, which often only trigger focus plus mouse or
 > touch.
 
+### Pragmatic rating
+
+Desktop users without a touchscreen can trigger at most four of the five
+signals, capping their raw rating at `0.8`. The raw rating always stays honest,
+but if you want such submissions to count as fully human, ask for the pragmatic
+rating:
+
+```ruby
+Otori.signals_rating(params, pragmatic: true)
+signals.pragmatic_rating
+```
+
+Ratings at or below `0.4` are returned unchanged, the `0.4` to `0.8` range is
+stretched linearly to `0.4` to `1.0`, and anything `0.8` or above counts as
+fully human.
+
 ## Security considerations
 
 This gem provides basic bot protection, but it should not be your only line

data/lib/otori/signals.rb

@@ -16,7 +16,7 @@ module Otori
       raw = JSON.parse(json.to_s)
       raise JSON::ParserError, "expected an object" unless raw.is_a?(Hash)
 
-      new(KEYS.transform_values { raw[_1] == true })
+      new(KEYS.transform_values { raw[it] == true })
     rescue JSON::ParserError
       new
     end
@@ -25,8 +25,17 @@ module Otori
       from_json(json).human_rating
     end
 
+    def self.pragmatic_rating(json)
+      from_json(json).pragmatic_rating
+    end
+
+    # Touchless devices can trigger at most four signals, capping them at 0.8,
+    # so this stretches 0.4-0.8 to 0.4-1.0 to let them rate as fully human.
+    PRAGMATIC_ANCHOR = 0.4
+    PRAGMATIC_CLEAN = 0.8
+
     def initialize(flags = {})
-      @flags = KEYS.keys.to_h { [_1, flags.fetch(_1, false) == true] }
+      @flags = KEYS.keys.to_h { [it, flags.fetch(it, false) == true] }
     end
 
     KEYS.each_key do |key|
@@ -37,6 +46,15 @@ module Otori
       @flags.values.count(true) / KEYS.size.to_f
     end
 
+    def pragmatic_rating
+      raw = human_rating
+      return raw if raw <= PRAGMATIC_ANCHOR
+      return 1.0 if raw >= PRAGMATIC_CLEAN
+
+      span = (1.0 - PRAGMATIC_ANCHOR) / (PRAGMATIC_CLEAN - PRAGMATIC_ANCHOR)
+      (PRAGMATIC_ANCHOR + (raw - PRAGMATIC_ANCHOR) * span).round(2)
+    end
+
     def to_h = @flags.dup
   end
 end

data/lib/otori/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Otori
-  VERSION = "0.5.0"
+  VERSION = "0.6.0"
 end

data/lib/otori.rb

@@ -50,11 +50,15 @@ module Otori
       caught
     end
 
-    def signals_rating(params)
+    def signals_rating(params, pragmatic: false)
       raw = param_value(params, config.signals_input_name)
       return 0.0 if raw.nil? || raw.to_s.empty?
 
-      Signals.human_rating(raw.to_s)
+      if pragmatic
+        Signals.pragmatic_rating(raw.to_s)
+      else
+        Signals.human_rating(raw.to_s)
+      end
     end
 
     private

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: otori
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.6.0
 platform: ruby
 authors:
 - Wout