reputable 0.1.9 → 0.1.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e8d9854d3f0dfbf85029fa9411273ffdebad9288eaa11b91649a3aec538b6b2b
-  data.tar.gz: 8d7fbfaf636c06c80a1ea291a773d35c1e478f5dd1261efd6e213a473f1d0362
+  metadata.gz: 342aa90209deb951c9e527396dfc48b1609603ac305bac088c6d20846c1a6dee
+  data.tar.gz: 65a4a67057b29ee2c787788393e7803302e958397974b53685a792cdc668718a
 SHA512:
-  metadata.gz: a13fdb389753a6aed4bde2d9e6bc2304e184db0ded7a579adc6d7fef16d4e1e72a6032f11eec7e6e03e0e706aa2a135c07c17e3e607e227f7670864e84c91aea
-  data.tar.gz: fb215dbd673959e3414eaa31c0a77a3c78366db796f34b1afbef12d066041b1308b0c6312a90dc7ee953a8b578083192509a535fb3bf9b53f265f9f3b9a22f80
+  metadata.gz: f410554eaf31c3386094003f72665d9b7b6020b68c91d67ef4626589708ea1fe47bb01f975971a282f0e7e08dadc9384ae8babf816dec1ee1a8febbc0668ecc9
+  data.tar.gz: 244d984492e5a91987e17ceadfe5e67e88beba0280c5a56057cf112768f9c981738ae72b63c91da93dce80c92c56c86a7ad9af220f914a791c6dc86844915af6

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    reputable (0.1.9)
+    reputable (0.1.11)
       connection_pool (~> 2.2)
       redis (>= 4.0, < 6.0)
 

data/README.md

@@ -129,7 +129,7 @@ Reputable.configure do |config|
   # Customize TTLs (in seconds, 0 = forever)
   config.default_ttls = {
     trusted_verified: 0,              # Forever
-    trusted_behavior: 30 * 24 * 3600, # 30 days
+    trusted_behavior: 365 * 24 * 3600, # 1 year
     untrusted_challenge: 7 * 24 * 3600,
     untrusted_block: 7 * 24 * 3600,
     untrusted_ignore: 7 * 24 * 3600
@@ -269,7 +269,11 @@ config.middleware.use Reputable::Middleware,
   },
   
   # Async mode (default: true) - tracking runs in background thread
-  async: true
+  async: true,
+
+  # Expose reputation flags in request env for views/controllers (default: true)
+  # Sets request.env['reputable.ignore_analytics'] when status is untrusted_ignore
+  expose_reputation: true
 ```
 
 ### Optional Reputation Gate
@@ -328,6 +332,11 @@ if current_ip_trusted?
   # Skip CAPTCHA, higher rate limits
 end
 
+# View/helper flag for untrusted_ignore
+if reputable_ignore_analytics?
+  # Skip analytics / tracking in views
+end
+
 if current_ip_blocked?
   render status: 403
   return
@@ -416,8 +425,17 @@ Reputable.track_request_async(
 ### Reputation Management
 
 ```ruby
-# Trust IP forever (after payment, verification, etc.)
-Reputable.trust_ip(request.ip, reason: 'payment_completed', order_id: order.id)
+# Trust IP (behavioral by default, uses default TTL)
+Reputable.trust_ip(request.ip, reason: 'behavior_trust', order_id: order.id)
+
+# Trust IP as verified (forever, explicitly)
+Reputable.trust_ip(
+  request.ip,
+  reason: 'payment_completed',
+  status: :trusted_verified,
+  ttl: 0,
+  order_id: order.id
+)
 
 # Challenge (require CAPTCHA, etc.)
 Reputable.challenge_ip(request.ip, reason: 'unusual_activity')

data/RELEASING.md

@@ -0,0 +1,26 @@
+# Releasing the Ruby Gem
+
+## Update version + changelog
+
+1. Bump the version in `clients/ruby/lib/reputable/version.rb`.
+2. Add a matching entry in `CHANGELOG.md` (repo root).
+
+## Build the gem (optional local check)
+
+```bash
+cd clients/ruby
+bundle exec rake build
+```
+
+## Build + push from repo root (npm script)
+
+```bash
+npm run release:gem
+```
+
+## Publish (if applicable)
+
+```bash
+cd clients/ruby
+gem push pkg/reputable-<version>.gem
+```

data/lib/reputable/blocked_page.rb

@@ -0,0 +1,171 @@
+# frozen_string_literal: true
+
+module Reputable
+  # Simple HTML blocked page renderer for Rack/Rails usage.
+  module BlockedPage
+    class << self
+      def response(
+        site_name: nil,
+        support_email: nil,
+        support_url: nil,
+        client_ip: nil,
+        heading: "Access blocked",
+        message: nil,
+        status: 403,
+        show_ip: true
+      )
+        html = build_html(
+          site_name: site_name,
+          support_email: support_email,
+          support_url: support_url,
+          client_ip: client_ip,
+          heading: heading,
+          message: message,
+          show_ip: show_ip
+        )
+
+        headers = {
+          "Content-Type" => "text/html; charset=utf-8",
+          "Cache-Control" => "no-store"
+        }
+
+        [status, headers, [html]]
+      end
+
+      def html(**options)
+        build_html(**options)
+      end
+
+      private
+
+      def build_html(site_name:, support_email:, support_url:, client_ip:, heading:, message:, show_ip:)
+        display_name = escape_html(site_name || "this site")
+        safe_support_email = support_email ? escape_html(support_email) : nil
+        safe_support_url = support_url ? escape_html(support_url) : nil
+        safe_heading = escape_html(heading || "Access blocked")
+        safe_message = escape_html(
+          message || "We cannot allow this request for #{display_name}. Your connection was blocked by a security policy."
+        )
+
+        contact_line = if safe_support_email || safe_support_url
+                         parts = []
+                         parts << if safe_support_email
+                                    %(at <a href="mailto:#{safe_support_email}">#{safe_support_email}</a>)
+                                  else
+                                    nil
+                                  end
+                         parts << if safe_support_url
+                                    %(via <a href="#{safe_support_url}">support</a>)
+                                  else
+                                    nil
+                                  end
+                         parts.compact.join(" or ")
+                       else
+                         "by contacting the site owner"
+                       end
+
+        ip_line = if show_ip && client_ip && !client_ip.to_s.empty?
+                    %(<div class="ip-text">Your IP: #{escape_html(client_ip.to_s)}</div>)
+                  else
+                    ""
+                  end
+
+        <<~HTML
+          <!DOCTYPE html>
+          <html lang="en">
+          <head>
+              <meta charset="UTF-8">
+              <meta name="viewport" content="width=device-width, initial-scale=1.0">
+              <title>Access blocked</title>
+              <style>
+                  :root {
+                      --bg-color: #fafafa;
+                      --card-bg: #ffffff;
+                      --text-color: #333333;
+                      --text-muted: #6b7280;
+                      --border-color: #e5e7eb;
+                      --link-color: #2563eb;
+                  }
+                  @media (prefers-color-scheme: dark) {
+                      :root {
+                          --bg-color: #0f0f0f;
+                          --card-bg: #1a1a1a;
+                          --text-color: #f3f4f6;
+                          --text-muted: #9ca3af;
+                          --border-color: #374151;
+                          --link-color: #60a5fa;
+                      }
+                  }
+                  * { box-sizing: border-box; }
+                  body {
+                      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Arial, sans-serif;
+                      background: var(--bg-color);
+                      color: var(--text-color);
+                      display: flex;
+                      align-items: center;
+                      justify-content: center;
+                      min-height: 100vh;
+                      margin: 0;
+                      padding: 20px;
+                  }
+                  .card {
+                      max-width: 520px;
+                      width: 100%;
+                      padding: 40px;
+                      background: var(--card-bg);
+                      border: 1px solid var(--border-color);
+                      border-radius: 12px;
+                      text-align: center;
+                      box-shadow: 0 4px 6px -1px rgba(0, 0, 0, 0.1), 0 2px 4px -2px rgba(0, 0, 0, 0.1);
+                  }
+                  h1 { margin: 0 0 12px; font-size: 22px; font-weight: 600; }
+                  p { margin: 0 0 20px; line-height: 1.5; color: var(--text-muted); }
+                  a { color: var(--link-color); text-decoration: none; }
+                  a:hover { text-decoration: underline; }
+                  .muted { font-size: 13px; color: var(--text-muted); }
+                  .branding {
+                      display: flex;
+                      align-items: center;
+                      justify-content: center;
+                      gap: 8px;
+                      margin-top: 24px;
+                      padding-top: 20px;
+                      border-top: 1px solid var(--border-color);
+                  }
+                  .branding-text {
+                      font-size: 12px;
+                      color: var(--text-muted);
+                  }
+                  .ip-text {
+                      margin-top: 12px;
+                      font-size: 11px;
+                      color: var(--text-muted);
+                  }
+              </style>
+          </head>
+          <body>
+              <div class="card">
+                  <h1>#{safe_heading}</h1>
+                  <p>#{safe_message}</p>
+                  <p class="muted">If you believe this is a mistake, you can reach #{display_name} #{contact_line}.</p>
+                  <div class="branding">
+                      <span class="branding-text">Protected by Reputable</span>
+                  </div>
+                  #{ip_line}
+              </div>
+          </body>
+          </html>
+        HTML
+      end
+
+      def escape_html(text)
+        text.to_s
+            .gsub("&", "&amp;")
+            .gsub("<", "&lt;")
+            .gsub(">", "&gt;")
+            .gsub('"', "&quot;")
+            .gsub("'", "&#39;")
+      end
+    end
+  end
+end

data/lib/reputable/configuration.rb

@@ -24,7 +24,7 @@ module Reputable
     # Default TTLs in seconds (0 = forever)
     DEFAULT_TTLS = {
       trusted_verified: 0,          # Forever
-      trusted_behavior: 30 * 24 * 3600, # 30 days
+      trusted_behavior: 365 * 24 * 3600, # 1 year
       untrusted_challenge: 7 * 24 * 3600, # 7 days
       untrusted_block: 7 * 24 * 3600,     # 7 days
       untrusted_ignore: 7 * 24 * 3600     # 7 days

data/lib/reputable/middleware.rb

@@ -45,6 +45,7 @@ module Reputable
       @tag_builder = options[:tag_builder]
       @async = options.fetch(:async, true)
       @reputation_gate = options.fetch(:reputation_gate, false)
+      @expose_reputation = options.fetch(:expose_reputation, true)
       @challenge_action = options.fetch(:challenge_action, :verify)
       @block_action = options.fetch(:block_action, :blocked_page_remote)
       @challenge_redirect_status = options.fetch(:challenge_redirect_status, 302)
@@ -72,6 +73,9 @@ module Reputable
         return gate_response
       end
 
+      # Optional: expose reputation context for views/controllers
+      safe_apply_reputation_context(env) if @expose_reputation
+
       # ALWAYS process the request first - tracking must never block
       status, headers, response = @app.call(env)
 
@@ -96,9 +100,9 @@ module Reputable
     end
 
     def enforce_reputation_gate(env)
-      ip = extract_ip(env)
-      status = Reputable::Reputation.lookup_ip(ip)
+      status = reputation_status(env)
       return nil if status.nil?
+      ip = env["reputable.ip"] || extract_ip(env)
 
       case status
       when "untrusted_block"
@@ -133,6 +137,10 @@ module Reputable
 
       if Reputable.verify_redirect_return(request.params)
         env["reputable.verified"] = true
+        ignore_analytics = request.params["reputable_ignore_analytics"]
+        unless ignore_analytics.nil?
+          env["reputable.ignore_analytics"] = ignore_analytics.to_s == "true"
+        end
         
         # Store in session if available
         if env["rack.session"]
@@ -255,6 +263,30 @@ module Reputable
       Reputable::BlockedPage.response(**options)
     end
 
+    def safe_apply_reputation_context(env)
+      return unless Reputable.enabled?
+      return if skip_request?(env)
+
+      reputation_status(env)
+    rescue StandardError => e
+      Reputable.logger&.debug("Reputable reputation context: #{e.class} - #{e.message}")
+    end
+
+    def reputation_status(env)
+      return env["reputable.reputation_status"] if env.key?("reputable.reputation_status")
+
+      ip = extract_ip(env)
+      env["reputable.ip"] = ip
+      status = Reputable::Reputation.lookup_ip(ip)
+      env["reputable.reputation_status"] = status
+      env["reputable.ignore_analytics"] = (status == "untrusted_ignore")
+      status
+    rescue StandardError
+      env["reputable.reputation_status"] = nil
+      env["reputable.ignore_analytics"] = false
+      nil
+    end
+
     def blocked_page_options
       config = Reputable.configuration
       defaults = {

data/lib/reputable/rails.rb

@@ -8,7 +8,7 @@ module Reputable
       extend ActiveSupport::Concern
 
       included do
-        helper_method :reputable_verified? if respond_to?(:helper_method)
+        helper_method :reputable_verified?, :reputable_ignore_analytics? if respond_to?(:helper_method)
       end
 
       # Track the current request with optional extra tags
@@ -25,11 +25,13 @@ module Reputable
         )
       end
 
-      # Trust the current user's IP (e.g., after payment)
-      def trust_current_ip(reason:, **metadata)
+      # Trust the current user's IP (behavioral by default, verified optional)
+      def trust_current_ip(reason:, status: :trusted_behavior, ttl: nil, **metadata)
         Reputable::Reputation.trust_ip(
           request.remote_ip,
           reason: reason,
+          status: status,
+          ttl: ttl,
           **metadata
         )
       end
@@ -86,6 +88,17 @@ module Reputable
         Reputable::Reputation.lookup_ip(request.remote_ip)
       end
 
+      # Check if analytics should be ignored for this request
+      # Uses middleware-populated flag when available, falls back to lookup.
+      def reputable_ignore_analytics?
+        value = request.env["reputable.ignore_analytics"]
+        return value unless value.nil?
+
+        current_ip_status == "untrusted_ignore"
+      rescue StandardError
+        false
+      end
+
       # ========================================
       # Verification redirect helpers
       # ========================================

data/lib/reputable/reputation.rb

@@ -62,14 +62,16 @@ module Reputable
         false
       end
 
-      # Convenience method: Trust an IP (verified status, forever TTL)
-      def trust_ip(ip, reason: "manual_trust", **metadata)
+      # Convenience method: Trust an IP (behavioral by default)
+      # @param status [Symbol] :trusted_behavior or :trusted_verified
+      # @param ttl [Integer, nil] TTL in seconds (0 = forever, nil = use default)
+      def trust_ip(ip, reason: "manual_trust", status: :trusted_behavior, ttl: nil, **metadata)
         apply(
           entity_type: :ip,
           entity_id: ip,
-          status: :trusted_verified,
+          status: status,
           reason: reason,
-          ttl: 0,
+          ttl: ttl,
           metadata: metadata
         )
       end

data/lib/reputable/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Reputable
-  VERSION = "0.1.9"
+  VERSION = "0.1.11"
 end

data/lib/reputable.rb

@@ -34,8 +34,8 @@ end
 #     path: "/products/123"
 #   )
 #
-# @example Apply reputation after payment
-#   Reputable.trust_ip("203.0.113.45", reason: "payment_completed")
+# @example Apply verified reputation after payment
+#   Reputable.trust_ip("203.0.113.45", reason: "payment_completed", status: :trusted_verified, ttl: 0)
 #
 # @example Disable completely via ENV
 #   # In your environment: REPUTABLE_ENABLED=false
@@ -89,8 +89,8 @@ module Reputable
       Reputation.apply(entity_type: entity_type, entity_id: entity_id, status: status, **options)
     end
 
-    def trust_ip(ip, reason: "manual_trust", **metadata)
-      Reputation.trust_ip(ip, reason: reason, **metadata)
+    def trust_ip(ip, reason: "manual_trust", status: :trusted_behavior, ttl: nil, **metadata)
+      Reputation.trust_ip(ip, reason: reason, status: status, ttl: ttl, **metadata)
     end
 
     def block_ip(ip, reason: "manual_block", **metadata)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: reputable
 version: !ruby/object:Gem::Version
-  version: 0.1.9
+  version: 0.1.11
 platform: ruby
 authors:
 - Reputable
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-12-29 00:00:00.000000000 Z
+date: 2025-12-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: redis
@@ -126,8 +126,10 @@ files:
 - Gemfile
 - Gemfile.lock
 - README.md
+- RELEASING.md
 - Rakefile
 - lib/reputable.rb
+- lib/reputable/blocked_page.rb
 - lib/reputable/configuration.rb
 - lib/reputable/connection.rb
 - lib/reputable/middleware.rb