reputable 0.1.9 → 0.1.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e8d9854d3f0dfbf85029fa9411273ffdebad9288eaa11b91649a3aec538b6b2b
-  data.tar.gz: 8d7fbfaf636c06c80a1ea291a773d35c1e478f5dd1261efd6e213a473f1d0362
+  metadata.gz: 10ace4d8c54f4fe4bcf4a1a2bbba66015dbff719b353ee9331e9f3ad56400c69
+  data.tar.gz: d3044684df204b097e1a739f29425947306ed9c5533d4a20c66b1064dafc8892
 SHA512:
-  metadata.gz: a13fdb389753a6aed4bde2d9e6bc2304e184db0ded7a579adc6d7fef16d4e1e72a6032f11eec7e6e03e0e706aa2a135c07c17e3e607e227f7670864e84c91aea
-  data.tar.gz: fb215dbd673959e3414eaa31c0a77a3c78366db796f34b1afbef12d066041b1308b0c6312a90dc7ee953a8b578083192509a535fb3bf9b53f265f9f3b9a22f80
+  metadata.gz: d3e578a48821efe6610ee60d0560c366fa2136e4fcbc93274822abda5cfb776e0aa924fe7877ff3c2164b177328fe630734fbf5d972103d741d5fc5f8db3f65b
+  data.tar.gz: 077b28a5af24557650e4e82759f63656532da2586f200b68a1dee2ebb6315c238efa44bf8dbb5a58634eb3cecb1819649772abeb65f78efcd064339453d842e3

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    reputable (0.1.9)
+    reputable (0.1.10)
       connection_pool (~> 2.2)
       redis (>= 4.0, < 6.0)
 

data/README.md

@@ -129,7 +129,7 @@ Reputable.configure do |config|
   # Customize TTLs (in seconds, 0 = forever)
   config.default_ttls = {
     trusted_verified: 0,              # Forever
-    trusted_behavior: 30 * 24 * 3600, # 30 days
+    trusted_behavior: 365 * 24 * 3600, # 1 year
     untrusted_challenge: 7 * 24 * 3600,
     untrusted_block: 7 * 24 * 3600,
     untrusted_ignore: 7 * 24 * 3600
@@ -416,8 +416,17 @@ Reputable.track_request_async(
 ### Reputation Management
 
 ```ruby
-# Trust IP forever (after payment, verification, etc.)
-Reputable.trust_ip(request.ip, reason: 'payment_completed', order_id: order.id)
+# Trust IP (behavioral by default, uses default TTL)
+Reputable.trust_ip(request.ip, reason: 'behavior_trust', order_id: order.id)
+
+# Trust IP as verified (forever, explicitly)
+Reputable.trust_ip(
+  request.ip,
+  reason: 'payment_completed',
+  status: :trusted_verified,
+  ttl: 0,
+  order_id: order.id
+)
 
 # Challenge (require CAPTCHA, etc.)
 Reputable.challenge_ip(request.ip, reason: 'unusual_activity')

data/RELEASING.md

@@ -0,0 +1,26 @@
+# Releasing the Ruby Gem
+
+## Update version + changelog
+
+1. Bump the version in `clients/ruby/lib/reputable/version.rb`.
+2. Add a matching entry in `CHANGELOG.md` (repo root).
+
+## Build the gem (optional local check)
+
+```bash
+cd clients/ruby
+bundle exec rake build
+```
+
+## Build + push from repo root (npm script)
+
+```bash
+npm run release:gem
+```
+
+## Publish (if applicable)
+
+```bash
+cd clients/ruby
+gem push pkg/reputable-<version>.gem
+```

data/lib/reputable/blocked_page.rb

@@ -0,0 +1,171 @@
+# frozen_string_literal: true
+
+module Reputable
+  # Simple HTML blocked page renderer for Rack/Rails usage.
+  module BlockedPage
+    class << self
+      def response(
+        site_name: nil,
+        support_email: nil,
+        support_url: nil,
+        client_ip: nil,
+        heading: "Access blocked",
+        message: nil,
+        status: 403,
+        show_ip: true
+      )
+        html = build_html(
+          site_name: site_name,
+          support_email: support_email,
+          support_url: support_url,
+          client_ip: client_ip,
+          heading: heading,
+          message: message,
+          show_ip: show_ip
+        )
+
+        headers = {
+          "Content-Type" => "text/html; charset=utf-8",
+          "Cache-Control" => "no-store"
+        }
+
+        [status, headers, [html]]
+      end
+
+      def html(**options)
+        build_html(**options)
+      end
+
+      private
+
+      def build_html(site_name:, support_email:, support_url:, client_ip:, heading:, message:, show_ip:)
+        display_name = escape_html(site_name || "this site")
+        safe_support_email = support_email ? escape_html(support_email) : nil
+        safe_support_url = support_url ? escape_html(support_url) : nil
+        safe_heading = escape_html(heading || "Access blocked")
+        safe_message = escape_html(
+          message || "We cannot allow this request for #{display_name}. Your connection was blocked by a security policy."
+        )
+
+        contact_line = if safe_support_email || safe_support_url
+                         parts = []
+                         parts << if safe_support_email
+                                    %(at <a href="mailto:#{safe_support_email}">#{safe_support_email}</a>)
+                                  else
+                                    nil
+                                  end
+                         parts << if safe_support_url
+                                    %(via <a href="#{safe_support_url}">support</a>)
+                                  else
+                                    nil
+                                  end
+                         parts.compact.join(" or ")
+                       else
+                         "by contacting the site owner"
+                       end
+
+        ip_line = if show_ip && client_ip && !client_ip.to_s.empty?
+                    %(<div class="ip-text">Your IP: #{escape_html(client_ip.to_s)}</div>)
+                  else
+                    ""
+                  end
+
+        <<~HTML
+          <!DOCTYPE html>
+          <html lang="en">
+          <head>
+              <meta charset="UTF-8">
+              <meta name="viewport" content="width=device-width, initial-scale=1.0">
+              <title>Access blocked</title>
+              <style>
+                  :root {
+                      --bg-color: #fafafa;
+                      --card-bg: #ffffff;
+                      --text-color: #333333;
+                      --text-muted: #6b7280;
+                      --border-color: #e5e7eb;
+                      --link-color: #2563eb;
+                  }
+                  @media (prefers-color-scheme: dark) {
+                      :root {
+                          --bg-color: #0f0f0f;
+                          --card-bg: #1a1a1a;
+                          --text-color: #f3f4f6;
+                          --text-muted: #9ca3af;
+                          --border-color: #374151;
+                          --link-color: #60a5fa;
+                      }
+                  }
+                  * { box-sizing: border-box; }
+                  body {
+                      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Arial, sans-serif;
+                      background: var(--bg-color);
+                      color: var(--text-color);
+                      display: flex;
+                      align-items: center;
+                      justify-content: center;
+                      min-height: 100vh;
+                      margin: 0;
+                      padding: 20px;
+                  }
+                  .card {
+                      max-width: 520px;
+                      width: 100%;
+                      padding: 40px;
+                      background: var(--card-bg);
+                      border: 1px solid var(--border-color);
+                      border-radius: 12px;
+                      text-align: center;
+                      box-shadow: 0 4px 6px -1px rgba(0, 0, 0, 0.1), 0 2px 4px -2px rgba(0, 0, 0, 0.1);
+                  }
+                  h1 { margin: 0 0 12px; font-size: 22px; font-weight: 600; }
+                  p { margin: 0 0 20px; line-height: 1.5; color: var(--text-muted); }
+                  a { color: var(--link-color); text-decoration: none; }
+                  a:hover { text-decoration: underline; }
+                  .muted { font-size: 13px; color: var(--text-muted); }
+                  .branding {
+                      display: flex;
+                      align-items: center;
+                      justify-content: center;
+                      gap: 8px;
+                      margin-top: 24px;
+                      padding-top: 20px;
+                      border-top: 1px solid var(--border-color);
+                  }
+                  .branding-text {
+                      font-size: 12px;
+                      color: var(--text-muted);
+                  }
+                  .ip-text {
+                      margin-top: 12px;
+                      font-size: 11px;
+                      color: var(--text-muted);
+                  }
+              </style>
+          </head>
+          <body>
+              <div class="card">
+                  <h1>#{safe_heading}</h1>
+                  <p>#{safe_message}</p>
+                  <p class="muted">If you believe this is a mistake, you can reach #{display_name} #{contact_line}.</p>
+                  <div class="branding">
+                      <span class="branding-text">Protected by Reputable</span>
+                  </div>
+                  #{ip_line}
+              </div>
+          </body>
+          </html>
+        HTML
+      end
+
+      def escape_html(text)
+        text.to_s
+            .gsub("&", "&amp;")
+            .gsub("<", "&lt;")
+            .gsub(">", "&gt;")
+            .gsub('"', "&quot;")
+            .gsub("'", "&#39;")
+      end
+    end
+  end
+end

data/lib/reputable/configuration.rb

@@ -24,7 +24,7 @@ module Reputable
     # Default TTLs in seconds (0 = forever)
     DEFAULT_TTLS = {
       trusted_verified: 0,          # Forever
-      trusted_behavior: 30 * 24 * 3600, # 30 days
+      trusted_behavior: 365 * 24 * 3600, # 1 year
       untrusted_challenge: 7 * 24 * 3600, # 7 days
       untrusted_block: 7 * 24 * 3600,     # 7 days
       untrusted_ignore: 7 * 24 * 3600     # 7 days

data/lib/reputable/rails.rb

@@ -25,11 +25,13 @@ module Reputable
         )
       end
 
-      # Trust the current user's IP (e.g., after payment)
-      def trust_current_ip(reason:, **metadata)
+      # Trust the current user's IP (behavioral by default, verified optional)
+      def trust_current_ip(reason:, status: :trusted_behavior, ttl: nil, **metadata)
         Reputable::Reputation.trust_ip(
           request.remote_ip,
           reason: reason,
+          status: status,
+          ttl: ttl,
           **metadata
         )
       end

data/lib/reputable/reputation.rb

@@ -62,14 +62,16 @@ module Reputable
         false
       end
 
-      # Convenience method: Trust an IP (verified status, forever TTL)
-      def trust_ip(ip, reason: "manual_trust", **metadata)
+      # Convenience method: Trust an IP (behavioral by default)
+      # @param status [Symbol] :trusted_behavior or :trusted_verified
+      # @param ttl [Integer, nil] TTL in seconds (0 = forever, nil = use default)
+      def trust_ip(ip, reason: "manual_trust", status: :trusted_behavior, ttl: nil, **metadata)
         apply(
           entity_type: :ip,
           entity_id: ip,
-          status: :trusted_verified,
+          status: status,
           reason: reason,
-          ttl: 0,
+          ttl: ttl,
           metadata: metadata
         )
       end

data/lib/reputable/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Reputable
-  VERSION = "0.1.9"
+  VERSION = "0.1.10"
 end

data/lib/reputable.rb

@@ -34,8 +34,8 @@ end
 #     path: "/products/123"
 #   )
 #
-# @example Apply reputation after payment
-#   Reputable.trust_ip("203.0.113.45", reason: "payment_completed")
+# @example Apply verified reputation after payment
+#   Reputable.trust_ip("203.0.113.45", reason: "payment_completed", status: :trusted_verified, ttl: 0)
 #
 # @example Disable completely via ENV
 #   # In your environment: REPUTABLE_ENABLED=false
@@ -89,8 +89,8 @@ module Reputable
       Reputation.apply(entity_type: entity_type, entity_id: entity_id, status: status, **options)
     end
 
-    def trust_ip(ip, reason: "manual_trust", **metadata)
-      Reputation.trust_ip(ip, reason: reason, **metadata)
+    def trust_ip(ip, reason: "manual_trust", status: :trusted_behavior, ttl: nil, **metadata)
+      Reputation.trust_ip(ip, reason: reason, status: status, ttl: ttl, **metadata)
     end
 
     def block_ip(ip, reason: "manual_block", **metadata)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: reputable
 version: !ruby/object:Gem::Version
-  version: 0.1.9
+  version: 0.1.10
 platform: ruby
 authors:
 - Reputable
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-12-29 00:00:00.000000000 Z
+date: 2025-12-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: redis
@@ -126,8 +126,10 @@ files:
 - Gemfile
 - Gemfile.lock
 - README.md
+- RELEASING.md
 - Rakefile
 - lib/reputable.rb
+- lib/reputable/blocked_page.rb
 - lib/reputable/configuration.rb
 - lib/reputable/connection.rb
 - lib/reputable/middleware.rb