permittable 0.1.0 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: deed1778579c6d35f58ff18111114b00566ad0d6d2a92db5d4a9bfc3a730c6a6
-  data.tar.gz: 57c83b026226096fcc96552d2df3a51577da12e704b5883fb4ba8c1110704433
+  metadata.gz: 84f1f4ca36c37a54ce5117ee6ec10bbd2e5dd5e9626e031c4dc35e8448ba1c35
+  data.tar.gz: c9ad5b56d78d44fd15de269547f431fd3441ec7233bc191cfa4c3ce391e8f19b
 SHA512:
-  metadata.gz: 1c89bc7b9ff00e4246f0ac9bcc2937b97fb5ba8cdcfda1cbb5308d7d9cff5b4a7410eb48c5a185acd2b8feb82f595f771319edc33badd64ad1155f3d5e691b51
-  data.tar.gz: a0087bd69e30d6739a9fc7af090b35cdbc268fbdad7cb57666d3fc71fc140a7b9e5304827e7d1789ff43ccc3f99789b576fbc8340d23595db38712e27abdb0db
+  metadata.gz: 0a1b6d1805eca305ba87b6ab7b78b238db6230255dcf14fc69096ff37f352c2cb4cc14199f1a68dfa19863dee745583b79f73510de8597a99dbc55c2cd1c01dc
+  data.tar.gz: 3630d2cba76050554c72cb763b2dd95f9442f2f12032b7b35932139f2ea0c887ab4f460178deff932d80d74d41b797ceac0f30cd9551984530c05d96a06c8b6a

data/CHANGELOG.md

@@ -1,6 +1,32 @@
 <!-- CHANGELOG.md -->
 
+## 0.1.2 (2026-08-16)
+<!-- title: gem metadata -->
+
+Metadata-only release. `lib/` is byte-for-byte identical to 0.1.1, so upgrading changes nothing at runtime — it exists to publish the rewritten gem description, which RubyGems only refreshes on a new version.
+
+### Changed
+- Rewrote the gem summary and description. Both now open with the comparison the README already draws — strong parameters say which keys may pass, a contract says what each field should be — rather than with implementation vocabulary. The schema-drift guard is presented as a consequence of contracts being class-level data instead of as one more bullet.
+
+### Internal
+- The publish job creates the GitHub release itself, taking the title from this file's `<!-- title: ... -->` marker and the body from the matching section.
+- Development dependencies: simplecov 0.22 → 1.1, `actions/checkout` 6 → 7.
+
+## 0.1.1 (2026-08-16)
+<!-- title: maintenance release -->
+
+Maintenance release. The public API and every documented behaviour are identical to 0.1.0; upgrading is a no-op.
+
+### Changed
+- Internal style pass to satisfy the RuboCop config added in this release (hash alignment, guard clauses, anonymous block forwarding).
+- `cast_datetime` folds `DateTime` into the `Time` branch whose body it already shared. Dispatch order is unchanged, so `DateTime` still matches ahead of `Date`, which it subclasses.
+- Dropped `require "set"` from the filter parameter registry: `Set` has been autoloaded since Ruby 3.1 and the gemspec already floors at 3.2.
+
+### Added
+- CI on Ruby 3.2 (RuboCop + RSpec) and tag-driven publishing to RubyGems via trusted publishing. Repository tooling only — not part of the packaged gem.
+
 ## 0.1.0 (2026-08-16)
+<!-- title: initial release -->
 
 Initial extraction from [concerns_on_rails](https://github.com/VSN2015/concerns_on_rails) (developed there on `feature/permittable` as `ConcernsOnRails::Controllers::Permittable`; concerns_on_rails now depends on this gem and aliases that constant to `::Permittable`).
 

data/lib/permittable/filter_parameter_registry.rb

@@ -1,5 +1,3 @@
-require "set"
-
 module Permittable
   # Registry of sensitive parameter names (populated by `sensitive: true`
   # contract fields) surfaced to Rails' log filtering. Appending plain symbols

data/lib/permittable/version.rb

@@ -1,3 +1,3 @@
 module Permittable
-  VERSION = "0.1.0".freeze
+  VERSION = "0.1.2".freeze
 end

data/lib/permittable.rb

@@ -115,11 +115,11 @@ module Permittable
   ROUTING_KEYS = %w[controller action format].freeze
 
   NORMALIZERS = {
-    squish:   ->(v) { v.squish },
-    strip:    ->(v) { v.strip },
+    squish: ->(v) { v.squish },
+    strip: ->(v) { v.strip },
     downcase: ->(v) { v.downcase },
-    upcase:   ->(v) { v.upcase },
-    email:    ->(v) { v.strip.downcase },
+    upcase: ->(v) { v.upcase },
+    email: ->(v) { v.strip.downcase }
   }.freeze
 
   @registry_mutex = Mutex.new
@@ -271,8 +271,8 @@ module Permittable
     # (deterministic); explicit offsets are honoured and normalised to UTC.
     def cast_datetime(value)
       case value
-      when ActiveSupport::TimeWithZone, Time then [:ok, value.to_time.utc]
-      when DateTime then [:ok, value.to_time.utc]
+      # DateTime is listed here, ahead of Date, because it subclasses Date.
+      when ActiveSupport::TimeWithZone, Time, DateTime then [:ok, value.to_time.utc]
       when Date then [:ok, Time.utc(value.year, value.month, value.day)]
       when String then [:ok, DateTime.parse(value).to_time.utc]
       else [:error, "invalid_type"]
@@ -315,8 +315,8 @@ module Permittable
       @finalizer = nil
     end
 
-    def build(&block)
-      instance_eval(&block)
+    def build(&)
+      instance_eval(&)
       @fields.map(&:freeze).freeze
     end
 
@@ -331,12 +331,12 @@ module Permittable
 
     # `required :name` defaults the type to :string. A block instead of a
     # type declares a nested hash of sub-fields.
-    def required(name, type = nil, **opts, &block)
-      add_field(name, type, required: true, opts: opts, &block)
+    def required(name, type = nil, **opts, &)
+      add_field(name, type, required: true, opts: opts, &)
     end
 
-    def optional(name, type = nil, **opts, &block)
-      add_field(name, type, required: false, opts: opts, &block)
+    def optional(name, type = nil, **opts, &)
+      add_field(name, type, required: false, opts: opts, &)
     end
 
     # Array of scalars (`of:`, default :string) or, with a block, an array
@@ -384,9 +384,7 @@ module Permittable
 
     def field_name!(name)
       name = name.to_sym
-      if @fields.any? { |f| f[:name] == name }
-        raise ArgumentError, "#{LABEL}: field :#{name} is declared twice in the same contract"
-      end
+      raise ArgumentError, "#{LABEL}: field :#{name} is declared twice in the same contract" if @fields.any? { |f| f[:name] == name }
 
       name
     end
@@ -408,9 +406,9 @@ module Permittable
                            "(supported: #{SCALAR_TYPES.join(', ')})"
     end
 
-    def nested_fields!(name, &block)
+    def nested_fields!(name, &)
       builder = ContractBuilder.new
-      fields = builder.build(&block)
+      fields = builder.build(&)
       raise ArgumentError, "#{LABEL}: nested field :#{name} declares no sub-fields" if fields.empty?
       if builder.finalizer
         raise ArgumentError, "#{LABEL}: finalize is only available at the top level of a contract (found inside :#{name})"
@@ -638,7 +636,7 @@ module Permittable
   def render_invalid_parameters(error)
     ErrorEnvelope.render(
       self, message: error.message, status: error.status,
-      code: "invalid_parameters", details: error.details
+            code: "invalid_parameters", details: error.details
     )
   end
 
@@ -650,12 +648,10 @@ module Permittable
     result = ActiveSupport::HashWithIndifferentAccess.new
     if source
       result = permittable_check_hash(rule[:fields], source, path: rule[:root] ? rule[:root].to_s : nil,
-                                      unknown: rule[:unknown], top_level: !rule[:root], violations: violations)
+                                                             unknown: rule[:unknown], top_level: !rule[:root], violations: violations)
     end
     # finalize only sees a hash every field vouched for — never garbage.
-    if violations.empty? && rule[:finalize]
-      result = permittable_run_finalize(rule[:finalize], result, violations)
-    end
+    result = permittable_run_finalize(rule[:finalize], result, violations) if violations.empty? && rule[:finalize]
     return result if violations.empty?
 
     raise_invalid_parameters!(violations, status: source ? :unprocessable_entity : :bad_request)
@@ -757,9 +753,7 @@ module Permittable
 
   def permittable_check_array(field, value, path:, unknown:, violations:)
     before = violations.length
-    if field[:length] && !Coercion.length_ok?(field[:length], value.length)
-      violations << { param: path, code: "length" }
-    end
+    violations << { param: path, code: "length" } if field[:length] && !Coercion.length_ok?(field[:length], value.length)
     out = value.each_with_index.map do |element, index|
       permittable_check_element(field, element, "#{path}[#{index}]", unknown: unknown, violations: violations)
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: permittable
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.2
 platform: ruby
 authors:
 - Ethan Nguyen
@@ -30,10 +30,13 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: '9'
-description: 'Declarative per-action params contracts: strict typing/coercion, validation,
-  defaults, machine-readable 422s, output reshaping (transform/finalize), and a boot-time
-  schema-drift guard that fails the deploy when a permitted field''s column was dropped.
-  Strong parameters with types, validation, and drift detection.'
+description: 'Strong parameters answer only which keys may pass. A Permittable contract
+  also says what each field should be: it casts the value to a declared type, validates
+  bounds and formats, applies defaults, and renders every failure as a 422 that names
+  the offending parameter. Because a contract is class-level data rather than code
+  inside the action, it can also be checked against the database when the controller
+  loads, so a column dropped by a migration fails the deploy instead of the request.
+  activesupport is the only runtime dependency.'
 email:
 - doctorit@gmail.com
 executables: []
@@ -72,8 +75,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.4.19
 signing_key:
 specification_version: 4
-summary: Typed, validated params contracts for Rails controllers + schema-drift guard
+summary: Strong parameters for Rails that also know types, bounds, and defaults
 test_files: []