polkit 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: dc0c8cbaf48a016301ec845c59eeb601a59d814bfee1e1c8572a624bc4501453
+  data.tar.gz: 05d3db4ee6cfc5d62fa3464bdab3dc6f1d89b3611fa34918aee98122d744444f
+SHA512:
+  metadata.gz: b9ffe1f307db6af6aa60837b6bd6ddf6548125a485846f436544f4d3be488ae650d75bac5e1c8937bd59bc348ca37e77b5ce8b3f3ed5861ba9acbb327dbee4bb
+  data.tar.gz: 89021feb7254cda535ca56e3c63d37e95c20b6f4c05830d8171d3c350301109283a1db959d631f883223a3ba15f96b0a88a399b98e9c6e0cfb1aa769a10039fc

data/CHANGELOG.md

@@ -0,0 +1,48 @@
+# Changelog
+
+All notable changes to this project are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [1.0.0] - 2026-11-03
+
+### Added
+
+- `Polkit`, defined from the `Polkit-1.0` GObject Introspection typelib at
+  require time, giving asking whether an unprivileged process may do a privileged thing. `Polkit::Loader` is a
+  `GObjectIntrospection::Loader` subclass, so the binding is the whole
+  namespace rather than a hand-written subset, and it does not drift as the
+  library gains API.
+- A dev shell (`flake.nix`) that pins the library and glib from one nixpkgs and
+  puts their typelibs on `GI_TYPELIB_PATH`, and CI that runs the suite inside
+  it, because the environment is the hard part of an introspection binding.
+
+### Changed
+
+- The binding no longer goes through Rust. Earlier revisions wrapped a
+  gir-generated crate with magnus, which meant an `ext/` directory, a Cargo
+  workspace, system libraries at build time and a nine-platform cross-compile
+  matrix, to expose the handful of functions someone had written by hand. The
+  typelib loader replaces all of it with about twenty lines of Ruby.
+- The gem is pure Ruby and declares no extensions. Installing it still
+  compiles C, because `glib2` and `gobject-introspection` are native
+  extensions built against glib — but this gem adds no build step of its own,
+  and those two are what every ruby-gnome application already has via `gtk4`.
+- `bin/release-gem` releases one gem. It was built for the Rust model, where a
+  release meant a source gem plus one precompiled gem per platform downloaded
+  from the Cross Compile workflow; that workflow is gone and there are no
+  platform gems, so left alone it aborted before doing anything.
+
+### Removed
+
+- `ext/`, `Cargo.toml`, `Cargo.lock`, the cross-compile workflow, and the
+  `rb_sys` and `rake-compiler` dependencies.
+- `bin/release-gem`. It existed because releasing a Rust gem meant publishing a
+  source gem plus one precompiled gem per platform, downloaded from the Cross
+  Compile workflow's artifacts. There is nothing to compile here, so there is
+  one gem and one push, which is exactly what `gem kit release` does. The
+  script added only a check that the local version was ahead of RubyGems, and
+  `gem push` already refuses a version that has been pushed.

data/LICENSE

@@ -0,0 +1,200 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by the Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding any notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. Please also get an
+      individualized contributor license agreement from each contributor.
+
+   Copyright 2026 General Intelligence Systems
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

data/NOTICE

@@ -0,0 +1,48 @@
+Polkit for Ruby
+Copyright 2026 General Intelligence Systems
+
+--------------------------------------------------------------------------------
+polkit (the Rust crate)
+--------------------------------------------------------------------------------
+
+The native extension under ext/polkit links the polkit crate, Val Packett's
+gir-generated binding over libpolkit-gobject-1. This gem is bindings for it and
+nothing else: every module it defines speaks to a type of that crate.
+
+  https://codeberg.org/valpackett/polkit-rs
+  Copyright Val Packett
+  Licensed under 0BSD OR Unlicense, at the recipient's option
+
+Both are permissive and neither carries a NOTICE requirement, so there is
+nothing to propagate under section 4(d) of the Apache License this work is
+distributed under.
+
+--------------------------------------------------------------------------------
+polkit (the C library)
+--------------------------------------------------------------------------------
+
+The crate above links libpolkit-gobject-1, part of polkit, the freedesktop.org
+authorization framework. It is found by pkg-config at build time and is not
+vendored here.
+
+  https://github.com/polkit-org/polkit
+  Copyright Red Hat, Inc. and contributors
+  Licensed under the GNU Lesser General Public License, version 2.0 or later
+
+LGPL-2.0-or-later is a weak copyleft: it governs libpolkit-gobject-1 itself and
+reaches this work only as a dynamically linked library, which section 6 of that
+licence permits. Nothing in this gem is derived from polkit's source. A
+distributor shipping a precompiled gem that links it satisfies section 6 in the
+ordinary way, by leaving the library replaceable rather than statically
+absorbed.
+
+--------------------------------------------------------------------------------
+glib and gio (the Rust crates)
+--------------------------------------------------------------------------------
+
+The extension depends on the gtk-rs glib and gio crates directly, for GObject
+downcasting and for GIO's Cancellable.
+
+  https://github.com/gtk-rs/gtk-rs-core
+  Copyright The gtk-rs Project Developers
+  Licensed under the MIT License

data/README.md

@@ -0,0 +1,155 @@
+# polkit
+
+Ruby bindings for polkit, asking whether an unprivileged process may do a privileged thing.
+
+```ruby
+require "polkit"
+
+# Who is asking, and about what.
+user = Polkit::UnixUser.new_for_name("root")
+subject = Polkit::Subject.from_string("unix-process:#{Process.pid}:1")
+
+# And the question itself, which needs polkitd on the system bus.
+authority = Polkit::Authority.get_sync
+result = authority.check_authorization_sync(
+  subject, "org.freedesktop.policykit.exec", nil,
+  Polkit::CheckAuthorizationFlags::ALLOW_USER_INTERACTION, nil,
+)
+result.authorized?
+```
+
+## How this works, and what it costs to install
+
+polkit ships a GObject Introspection typelib — `Polkit-1.0.typelib` — describing
+every class, method, property and signal it has. `Polkit::Loader`, about twenty
+lines, hands that to ruby-gnome's `GObjectIntrospection::Loader`, which defines
+the Ruby classes from it at `require` time.
+
+So this gem is pure Ruby: no extension of its own, no Cargo workspace, no
+per-platform binary. You get the whole library rather than the subset somebody
+got round to wrapping by hand, and it does not drift when the library gains API.
+
+Be precise about install, though: `gem install polkit` still compiles C, because
+`gobject-introspection` and `glib2` are themselves native extensions built
+against glib, so a compiler and glib's development headers are needed. What
+this gem adds on top is nothing — those two are what every ruby-gnome
+application already has, since `gtk4` depends on them.
+
+## Two namespaces, one gem
+
+polkit is two libraries with two typelibs, and this gem has a loader for each:
+
+| require | namespace | what it is for |
+|---|---|---|
+| `require "polkit"` | `Polkit` | the asking side: `Authority`, `Subject`, `Identity`, `AuthorizationResult` |
+| `require "polkit/agent"` | `PolkitAgent` | the answering side: subclass `Listener` to *be* the process that shows the authentication prompt |
+
+Most callers only ever ask, so `polkit/agent` is a separate require. Both
+typelibs come from the same distribution package, so if one loads the other
+does. If you are writing the GNOME authentication dialog in Ruby GTK,
+`PolkitAgent::TextListener` is the implementation polkit ships and the one to
+read first.
+
+## The one thing you must install
+
+The typelib is a C-library artefact, so it belongs to your distribution and
+this gem cannot install it:
+
+| | |
+|---|---|
+| Debian / Ubuntu | `gir1.2-polkit-1.0` |
+| Fedora | `polkit-libs` |
+| Arch | `polkit` |
+| nix | `pkgs.polkit` |
+
+If it is not in the default search path, point `GI_TYPELIB_PATH` at the
+directory holding `Polkit-1.0.typelib`. The dev shell in `flake.nix` does this.
+
+Under nix there is one more wrinkle: `pkgs.polkit` resolves to its `bin`
+output, which has no typelibs — they are in `polkit.out`, exactly as glib's
+are. `flake.nix` builds the search path with
+`map (drv: drv.out or drv)` for that reason.
+
+**One trap worth knowing.** The typelib must come from the same glib build as
+the `gobject-introspection` gem. Mixing two registers GIO twice in one process
+and fails with `cannot register existing type 'GTlsCertificate'`. Under nix,
+take both from one nixpkgs — and note that glib's typelibs live in its `out`
+output, not the default one.
+
+## Using it from a flake
+
+The gem needs `Polkit-1.0.typelib` and everything that typelib declares, resolved
+transitively by the loader at `require` time. A missing one surfaces as
+`Typelib file for namespace 'X' not found`, one at a time, so the whole chain
+is listed here rather than discovered by repeated failure:
+
+- `pkgs.polkit` — its typelib, which is where `Polkit-1.0.typelib` lives
+- `pkgs.glib` — GLib-2.0, GObject-2.0 and Gio-2.0, which nearly every GNOME typelib declares
+
+Note the `.out`: a package's default output is often `bin`, which carries no
+typelibs. `makeSearchPath` takes the first output, so it has to be asked for
+`out` explicitly — this is the single most common way to get a search path that
+looks right and finds nothing.
+
+```nix
+{
+  inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+
+  outputs = { nixpkgs, ... }:
+    let
+      system = "x86_64-linux";
+      pkgs = nixpkgs.legacyPackages.${system};
+
+      typelibPath = pkgs.lib.makeSearchPath "lib/girepository-1.0"
+        (map (drv: drv.out or drv) [ pkgs.polkit pkgs.glib ]);
+    in
+    {
+      devShells.${system}.default = pkgs.mkShell {
+        packages = [ pkgs.ruby_3_4 pkgs.bundler ] ++ [ pkgs.polkit pkgs.glib ];
+
+        shellHook = ''
+          export GI_TYPELIB_PATH="${typelibPath}''${GI_TYPELIB_PATH:+:$GI_TYPELIB_PATH}"
+        '';
+      };
+    };
+}
+```
+
+Everything must come from **one** nixpkgs. A typelib built against a different
+glib than the `gobject-introspection` gem registers GIO twice in the process
+and fails with `cannot register existing type 'GTlsCertificate'`.
+
+If you are packaging an application rather than entering a shell, the same
+`typelibPath` goes on the wrapper:
+
+```nix
+makeWrapper ${ruby}/bin/ruby $out/bin/my-app \
+  --set GI_TYPELIB_PATH "${typelibPath}"
+```
+
+## Development
+
+```sh
+nix develop
+bin/test
+```
+
+## Releasing
+
+```sh
+gem kit release
+```
+
+That is the whole thing. It gates on the changelog having an entry for this
+version, on no deprecation deadline coming due, and on a clean working tree;
+then builds, pushes and tags.
+
+There is nothing to wait for in CI. This gem is pure Ruby, so `gem build`
+produces one `polkit-X.Y.Z.gem` that is the same artefact wherever it is built —
+no extension, no per-platform gems, nothing for a workflow to hand back.
+
+
+## Licence
+
+Apache-2.0. The library itself keeps its own licence; this gem links nothing
+and copies no code from it — it reads a description of it at runtime.

data/lib/polkit/agent/loader.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# Released under the Apache License, Version 2.0.
+# Copyright, 2026, by General Intelligence Systems.
+
+module PolkitAgent
+  # Defines everything in the PolkitAgent namespace from `PolkitAgent-1.0.typelib`.
+  #
+  # The same polkit package ships two typelibs: `Polkit-1.0` is the asking side
+  # (may this subject do this action?), and `PolkitAgent-1.0` is the answering
+  # side -- the API you implement to *be* the authentication agent that puts the
+  # password prompt on screen. They are separate GI namespaces, so they need
+  # separate loaders, but one library means one gem.
+  #
+  # Like Polkit, and unlike GtkSource, there is no init function to call: the
+  # typelib declares none, so there is no pre_load hook here.
+  class Loader < GObjectIntrospection::Loader
+    def load
+      self.version = "1.0"
+      super("PolkitAgent")
+    end
+
+    private
+
+    def post_load(repository, namespace)
+      require_libraries
+    end
+
+    def require_libraries
+      # Nothing yet. Hand-written Ruby that improves on the typelib goes in
+      # files required from here, which is the convention ruby-gnome uses.
+    end
+  end
+end

data/lib/polkit/agent.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+# Released under the Apache License, Version 2.0.
+# Copyright, 2026, by General Intelligence Systems.
+
+require_relative "../polkit"
+require_relative "agent/loader"
+
+# The authentication-agent half of polkit.
+#
+# `require "polkit"` gives you the asking side: {Polkit::Authority} and the
+# subjects and identities you ask it about. This gives you the answering side --
+# {PolkitAgent::Listener}, which you subclass to become the process that shows
+# the authentication prompt, and {PolkitAgent::Session}, which drives one
+# attempt. `PolkitAgent::TextListener` is the terminal implementation polkit
+# ships, and is the one to read first.
+#
+# It is a separate require because it is a separate GI namespace with its own
+# typelib, and most callers only ever want to ask. Both typelibs come from the
+# same polkit package, so if `require "polkit"` works this does too.
+module PolkitAgent
+  loader = Loader.new(self)
+  loader.load
+end

data/lib/polkit/loader.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+# Released under the Apache License, Version 2.0.
+# Copyright, 2026, by General Intelligence Systems.
+
+module Polkit
+  # Defines everything in the Polkit namespace from `Polkit-1.0.typelib`.
+  #
+  # Modelled on ruby-gnome's own loaders -- see
+  # gtksourceview5/lib/gtksourceview5/loader.rb for one that has to call the
+  # library's init function first, and libsecret/lib/libsecret/loader.rb for
+  # one that does not.
+  #
+  # The version string is the typelib's rather than the library's release
+  # number, and the two often differ: this one is "1.0", from
+  # `Polkit-1.0.typelib`.
+  class Loader < GObjectIntrospection::Loader
+    def load
+      self.version = "1.0"
+      super("Polkit")
+    end
+
+    private
+
+    def post_load(repository, namespace)
+      require_libraries
+    end
+
+    def require_libraries
+      # Nothing yet. Hand-written Ruby that improves on what the typelib gives
+      # -- an each that yields, a to_s, a keyword-argument constructor -- goes
+      # in files required from here, which is the convention ruby-gnome uses
+      # for exactly that purpose.
+    end
+  end
+end

data/lib/polkit/version.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+# Released under the Apache License, Version 2.0.
+# Copyright, 2026, by General Intelligence Systems.
+
+module Polkit
+  VERSION = "1.0.0"
+end

data/lib/polkit/version.rb.erb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+# Released under the Apache License, Version 2.0.
+# Copyright, 2026, by General Intelligence Systems.
+
+module Polkit
+  VERSION = "<%= version %>"
+end

data/lib/polkit.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+# Released under the Apache License, Version 2.0.
+# Copyright, 2026, by General Intelligence Systems.
+
+require "gobject-introspection"
+
+require_relative "polkit/version"
+require_relative "polkit/loader"
+
+# Ruby bindings for polkit, asking whether an unprivileged process may do a privileged thing.
+#
+# Nothing here wraps a C function by hand. The library ships a GObject
+# Introspection typelib describing every class, method, property and signal it
+# has, and ruby-gnome's GObjectIntrospection::Loader reads that at require time
+# and defines the Ruby classes from it. {Polkit::Loader} is about twenty lines;
+# what you get is the whole library, and it does not drift when the library
+# gains API.
+#
+# This is how ruby-gnome itself ships gtksourceview5, libsecret and the rest.
+#
+# This is the asking side of polkit: an {Polkit::Authority} you put questions
+# to, and the subjects and identities you ask about. The same polkit package
+# also ships `PolkitAgent-1.0.typelib`, the answering side -- the API you
+# implement to be the agent that shows the password prompt. That is a separate
+# GI namespace, so it is a separate require: `require "polkit/agent"`.
+#
+# The typelib has to be findable at require time, which means the library's
+# `girepository-1.0` directory on `GI_TYPELIB_PATH` or in the system default.
+# This gem cannot install it -- it is a C library artefact and belongs to the
+# distribution. See the README for the package name; `flake.nix` wires up a dev
+# shell that has it.
+#
+# One trap, paid for already: the typelib must come from the same glib build as
+# the `gobject-introspection` gem. Mix two and GIO is registered twice in one
+# process, which fails as `cannot register existing type 'GTlsCertificate'`.
+module Polkit
+  LOG_DOMAIN = "Polkit"
+  GLib::Log.set_log_domain(LOG_DOMAIN)
+
+  class Error < StandardError
+  end
+
+  loader = Loader.new(self)
+  loader.load
+end

metadata

@@ -0,0 +1,98 @@
+--- !ruby/object:Gem::Specification
+name: polkit
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Nathan Kidd
+bindir: bin
+cert_chain: []
+date: 1980-01-01 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: gem_kit
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+- !ruby/object:Gem::Dependency
+  name: gobject-introspection
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.3'
+- !ruby/object:Gem::Dependency
+  name: lefthook
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+description: Polkit, asking whether an unprivileged process may do a privileged thing,
+  for Ruby. Defined from its GObject Introspection typelib at require time rather
+  than wrapped by hand, so the binding is the whole library and does not drift as
+  it gains API.
+email:
+- nathankidd@hey.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- LICENSE
+- NOTICE
+- README.md
+- lib/polkit.rb
+- lib/polkit/agent.rb
+- lib/polkit/agent/loader.rb
+- lib/polkit/loader.rb
+- lib/polkit/version.rb
+- lib/polkit/version.rb.erb
+homepage: https://github.com/n-at-han-k/polkit-rb
+licenses:
+- Apache-2.0
+metadata:
+  source_code_uri: https://github.com/n-at-han-k/polkit-rb
+  documentation_uri: https://n-at-han-k.github.io/polkit-rb/
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.3'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.7.2
+specification_version: 4
+summary: Ruby bindings for polkit, asking whether an unprivileged process may do a
+  privileged thing.
+test_files: []