pii_cipher 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f85ce2e6239e57922dc4d45337df8018d34ee1b292b1a069221e93398288b4b2
-  data.tar.gz: 435efc9780eca17230aa06a348e2549759cb2b3aec65e4d598ef27488c2b6128
+  metadata.gz: 1dafee7ef8da28184899c8b2e5eb95ac0c593aade05297baff8a141c43440129
+  data.tar.gz: 15a4ab8b1d896f0dc4745bd338d3eb7a17dc213568af729158fa629d054a75ad
 SHA512:
-  metadata.gz: a048a2bec3fa13cbb463b261790f92af92898d4e793200e12e0c257324f1a9d334b4f090b01e1a0c075a1ba25c4e8d159e71448a8db781b55899f3525942209a
-  data.tar.gz: 285308387aee2a23193a0d0489f797752fc8b9e65f5db0e59d61bcecbf3106fc9b5b843b4ea1835ddf3923975ad397edc75366f1504b49ef1fb2347ae8938c76
+  metadata.gz: cb50341e3c09e83a3a1560770ca9f495ff0ea95658fbe5498b90e4c735060fa52b055488746e443ae6dc5f7fee27d0204f93d1f8f5fab994e4271901d0042da5
+  data.tar.gz: a3375e855c2e15bb708228be8f01504403944e4797aaed2fa3f755b8a57d478ee11d75a7dfcf3ad98eb698379623414f8b0711d3359e951a900e2b8ba75369f9

data/CHANGELOG.md

@@ -1,5 +1,17 @@
 ## [Unreleased]
 
+## [0.1.1] - 2026-06-29
+
+- Fix precompiled-gem loading: `lib/pii_cipher.rb` now resolves the native binary
+  from its per-Ruby-ABI subdirectory (`lib/pii_cipher/<ver>/`), falling back to the
+  flat path for source builds. v0.1.0 precompiled gems failed to load with a
+  `LoadError` because no version-aware require existed.
+- Widen precompiled coverage to every platform and stable Ruby version the rb-sys
+  toolchain supports (now including Ruby 3.4 and 4.0 and the linux-musl/Alpine
+  targets), so installing on the latest Ruby no longer falls back to a source build.
+
+## Pre-0.1.1 unreleased changes
+
 - Case-insensitive search by default (values are downcased before hashing); opt out with `case_sensitive: true`.
 - Configurable partial-search window via `gram_size:` (default 3).
 - Query rewriting now works on chained relations and scopes, not just direct `Model.where` calls.

data/Rakefile

@@ -1,14 +1,6 @@
 # frozen_string_literal: true
 
 require "bundler/gem_tasks"
-require "rspec/core/rake_task"
-
-RSpec::Core::RakeTask.new(:spec)
-
-require "rubocop/rake_task"
-
-RuboCop::RakeTask.new
-
 require "rb_sys/extensiontask"
 
 task build: :compile
@@ -17,18 +9,23 @@ GEMSPEC = Gem::Specification.load("pii_cipher.gemspec")
 
 RbSys::ExtensionTask.new("pii_cipher", GEMSPEC) do |ext|
   ext.lib_dir = "lib/pii_cipher"
-  ext.cross_compile = true
-  ext.cross_platform = %w[
-    x86_64-linux
-    aarch64-linux
-    x86_64-darwin
-    arm64-darwin
-    x64-mingw-ucrt
-  ]
   ext.cross_compiling do |spec|
-    # rb_sys is only needed to compile from source; pre-built gems don't need it
+    # rb_sys is only needed to compile from source; pre-built gems don't need it.
     spec.dependencies.reject! { |dep| dep.name == "rb_sys" }
   end
 end
 
-task default: %i[compile spec rubocop]
+# The dev/test tasks below need gems that are absent inside the cross-compile
+# build container (rb-sys-dock installs only the runtime deps). Guard them so
+# the Rakefile still loads there and `rake native` / `rake compile` work.
+begin
+  require "rspec/core/rake_task"
+  RSpec::Core::RakeTask.new(:spec)
+
+  require "rubocop/rake_task"
+  RuboCop::RakeTask.new
+
+  task default: %i[compile spec rubocop]
+rescue LoadError
+  task default: :compile
+end

data/ext/pii_cipher/src/lib.rs

@@ -1,4 +1,4 @@
-use magnus::{define_module, function, prelude::*, Error};
+use magnus::{function, prelude::*, Error, Ruby};
 use hmac::{Hmac, Mac};
 use sha2::Sha256;
 
@@ -54,8 +54,8 @@ fn generate_blind_index(text: String, secret_key: String) -> String {
 
 // The Ruby initialization point
 #[magnus::init]
-fn init() -> Result<(), Error> {
-    let module = define_module("PiiCipher")?;
+fn init(ruby: &Ruby) -> Result<(), Error> {
+    let module = ruby.define_module("PiiCipher")?;
     module.define_singleton_method("generate_ngram_hashes", function!(generate_ngram_hashes, 3))?;
     module.define_singleton_method("generate_blind_index", function!(generate_blind_index, 2))?;
     Ok(())

data/lib/pii_cipher/active_record_ext.rb

@@ -49,11 +49,11 @@ module PiiCipher
         self.pii_cipher_configs = pii_cipher_configs.merge(new_configs)
 
         # Install callbacks and the query patch once per model.
-        unless defined?(@_pii_cipher_configured) && @_pii_cipher_configured
-          before_save :generate_pii_ciphers!
-          PiiCipher.install_query_patch!
-          @_pii_cipher_configured = true
-        end
+        return if defined?(@_pii_cipher_configured) && @_pii_cipher_configured
+
+        before_save :generate_pii_ciphers!
+        PiiCipher.install_query_patch!
+        @_pii_cipher_configured = true
       end
     end
 

data/lib/pii_cipher/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PiiCipher
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

data/lib/pii_cipher.rb

@@ -6,7 +6,16 @@ require_relative "pii_cipher/version"
 # 1. Load the compiled Rust extension. It defines:
 #      PiiCipher.generate_ngram_hashes(text, secret, n) -> [hash, ...]
 #      PiiCipher.generate_blind_index(text, secret)     -> hash
-require_relative "pii_cipher/pii_cipher"
+#
+# Precompiled (native) gems ship the binary in a per-Ruby-ABI subdirectory
+# (lib/pii_cipher/3.3/pii_cipher.bundle) so one gem can serve several Ruby
+# versions. Source builds compile straight into lib/pii_cipher/pii_cipher.*.
+# Try the version-specific path first, then fall back to the flat one.
+begin
+  require_relative "pii_cipher/#{RUBY_VERSION[/\d+\.\d+/]}/pii_cipher"
+rescue LoadError
+  require_relative "pii_cipher/pii_cipher"
+end
 
 # 2. Load our Ruby logic
 require_relative "pii_cipher/active_record_ext"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pii_cipher
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Selva Chezhian
@@ -11,21 +11,21 @@ cert_chain: []
 date: 2026-06-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: rb_sys
+  name: activerecord
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 0.9.128
+        version: '7.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 0.9.128
+        version: '7.1'
 - !ruby/object:Gem::Dependency
-  name: activerecord
+  name: railties
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -39,19 +39,19 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '7.1'
 - !ruby/object:Gem::Dependency
-  name: railties
+  name: rb_sys
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '7.1'
+        version: 0.9.128
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '7.1'
+        version: 0.9.128
 description: |
   PiiCipher lets you search encrypted PII columns in ActiveRecord without ever
   storing or querying plaintext. It generates HMAC-SHA256 blind indexes alongside