ruby_git_crypt 0.1.0.pre.1 → 0.1.0.pre.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 58708bdc311759486fd4d818881b53f5cda5f6d535f8e5c00eb53c54e3a1ac55
-  data.tar.gz: e00ce54737466951c462d0753cbbe3afac084d1241516c3ace18c324e4bccc22
+  metadata.gz: d37ab0ade0b9831210c8d11eebb0917d110016fba406c2e3dcad612baacd53ad
+  data.tar.gz: 35d6eea48374b5055841ccca1315afa9243f3b9e1e2c66917ccc86197b9891a6
 SHA512:
-  metadata.gz: 803e63d5587c07eb79f138fb17332291f0074616b1b734bd3026446bc19ffa47c6081beb7565f9fffae2d0cf28ea7c8bc61338be1cbf78f124e2890c5a8c43da
-  data.tar.gz: e65a13db1734ae9f3e862227e60d8c5fda052a50e42ff0e68956e628cad9b877954d20e7aad3956a4b75a1d8d729ea4a18f6b84ba4aa50650edb82b114026374
+  metadata.gz: 043b073e21160b9dbc21675b6ea150ca68f28cb8de3c614050aac1ab23b7c364bd074e7485ab7d51788deadd3f26289982a792ca7c7e306434e6a440cac3dd22
+  data.tar.gz: f549733d0e005631e737166a6d25585d0861bcf94c9f8fc03dbb51d0905988241d3e1c0013b81209b6fc4c0731e8d833812443197cd4fe6b36acd3885b1f1c0c

data/Gemfile.lock

@@ -1,37 +1,51 @@
 PATH
   remote: .
   specs:
-    ruby_git_crypt (0.1.0.pre.1)
+    ruby_git_crypt (0.1.0.pre.3)
       immutable-struct (~> 2.4)
       lino (~> 3.0)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (7.0.4)
+    activesupport (7.1.1)
+      base64
+      bigdecimal
       concurrent-ruby (~> 1.0, >= 1.0.2)
+      connection_pool (>= 2.2.5)
+      drb
       i18n (>= 1.6, < 2)
       minitest (>= 5.1)
+      mutex_m
       tzinfo (~> 2.0)
-    addressable (2.8.1)
+    addressable (2.8.5)
       public_suffix (>= 2.0.2, < 6.0)
     ast (2.4.2)
+    base64 (0.1.1)
+    bigdecimal (3.1.4)
     coderay (1.1.3)
     colored2 (3.1.2)
-    concurrent-ruby (1.1.10)
+    concurrent-ruby (1.2.2)
+    connection_pool (2.4.1)
     diff-lcs (1.5.0)
     docile (1.4.0)
-    excon (0.95.0)
-    faker (3.1.0)
+    drb (2.1.1)
+      ruby2_keywords
+    excon (0.104.0)
+    faker (3.2.1)
       i18n (>= 1.8.11, < 2)
-    faraday (2.7.2)
+    faraday (2.7.11)
+      base64
       faraday-net_http (>= 2.0, < 3.1)
       ruby2_keywords (>= 0.0.4)
     faraday-net_http (3.0.2)
-    ffi (1.15.5)
+    ffi (1.16.3)
     formatador (1.1.0)
     gem-release (2.2.2)
-    guard (2.18.0)
+    git (1.18.0)
+      addressable (~> 2.8)
+      rchardet (~> 1.8)
+    guard (2.18.1)
       formatador (>= 0.2.4)
       listen (>= 2.7, < 4.0)
       lumberjack (>= 1.0.12, < 2.0)
@@ -47,44 +61,57 @@ GEM
       rspec (>= 2.99.0, < 4.0)
     hamster (3.0.0)
       concurrent-ruby (~> 1.0)
-    i18n (1.12.0)
+    i18n (1.14.1)
       concurrent-ruby (~> 1.0)
     immutable-struct (2.4.1)
     json (2.6.3)
+    language_server-protocol (3.17.0.3)
     lino (3.1.0)
       hamster (~> 3.0)
       open4 (~> 1.3)
-    listen (3.7.1)
+    listen (3.8.0)
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
-    lumberjack (1.2.8)
+    lumberjack (1.2.9)
     method_source (1.0.0)
-    minitest (5.17.0)
+    minitest (5.20.0)
+    mutex_m (0.1.2)
     nenv (0.3.0)
     notiffany (0.1.3)
       nenv (~> 0.1)
       shellany (~> 0.0)
-    octokit (6.0.1)
+    octokit (6.1.1)
       faraday (>= 1, < 3)
       sawyer (~> 0.9)
     open4 (1.3.4)
-    parallel (1.22.1)
-    parser (3.1.3.0)
+    parallel (1.23.0)
+    parser (3.2.2.4)
       ast (~> 2.4.1)
-    pry (0.14.1)
+      racc
+    pry (0.14.2)
       coderay (~> 1.1)
       method_source (~> 1.0)
-    public_suffix (5.0.1)
+    public_suffix (5.0.3)
+    racc (1.7.1)
     rainbow (3.1.1)
-    rake (13.0.6)
+    rake (13.1.0)
     rake_circle_ci (0.11.0)
       colored2 (~> 3.1)
       excon (~> 0.72)
       rake_factory (~> 0.23)
       sshkey (~> 2.0)
-    rake_factory (0.31.0)
+    rake_factory (0.32.0.pre.2)
       activesupport (>= 4)
       rake (~> 13.0)
+    rake_git (0.1.0.pre.8)
+      colored2 (~> 3.1)
+      git (~> 1.13, >= 1.13.2)
+      rake_factory (= 0.32.0.pre.2)
+    rake_git_crypt (0.1.0.pre.27)
+      colored2 (~> 3.1)
+      rake_factory (= 0.32.0.pre.2)
+      ruby_git_crypt (= 0.1.0.pre.2)
+      ruby_gpg2 (~> 0.6)
     rake_github (0.11.0)
       colored2 (~> 3.1)
       octokit (>= 4.16, < 7.0)
@@ -93,45 +120,53 @@ GEM
     rake_gpg (0.18.0)
       rake_factory (~> 0.23)
       ruby_gpg2 (~> 0.6)
-    rake_ssh (0.8.0)
+    rake_ssh (0.10.0)
       colored2 (~> 3.1)
       rake_factory (~> 0.23)
       sshkey (~> 2.0)
     rb-fsevent (0.11.2)
     rb-inotify (0.10.1)
       ffi (~> 1.0)
-    regexp_parser (2.6.1)
-    rexml (3.2.5)
+    rchardet (1.8.0)
+    regexp_parser (2.8.2)
+    rexml (3.2.6)
     rspec (3.12.0)
       rspec-core (~> 3.12.0)
       rspec-expectations (~> 3.12.0)
       rspec-mocks (~> 3.12.0)
-    rspec-core (3.12.0)
+    rspec-core (3.12.2)
       rspec-support (~> 3.12.0)
-    rspec-expectations (3.12.1)
+    rspec-expectations (3.12.3)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.12.0)
-    rspec-mocks (3.12.1)
+    rspec-mocks (3.12.6)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.12.0)
-    rspec-support (3.12.0)
-    rubocop (1.42.0)
+    rspec-support (3.12.1)
+    rubocop (1.57.2)
       json (~> 2.3)
+      language_server-protocol (>= 3.17.0)
       parallel (~> 1.10)
-      parser (>= 3.1.2.1)
+      parser (>= 3.2.2.4)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 1.8, < 3.0)
       rexml (>= 3.2.5, < 4.0)
-      rubocop-ast (>= 1.24.1, < 2.0)
+      rubocop-ast (>= 1.28.1, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 1.4.0, < 3.0)
-    rubocop-ast (1.24.1)
-      parser (>= 3.1.1.0)
+      unicode-display_width (>= 2.4.0, < 3.0)
+    rubocop-ast (1.30.0)
+      parser (>= 3.2.1.0)
+    rubocop-capybara (2.19.0)
+      rubocop (~> 1.41)
+    rubocop-factory_bot (2.24.0)
+      rubocop (~> 1.33)
     rubocop-rake (0.6.0)
       rubocop (~> 1.0)
-    rubocop-rspec (2.16.0)
-      rubocop (~> 1.33)
-    ruby-progressbar (1.11.0)
+    rubocop-rspec (2.25.0)
+      rubocop (~> 1.40)
+      rubocop-capybara (~> 2.17)
+      rubocop-factory_bot (~> 2.22)
+    ruby-progressbar (1.13.0)
     ruby2_keywords (0.0.5)
     ruby_gpg2 (0.10.0)
       lino (~> 3.0)
@@ -147,18 +182,19 @@ GEM
     simplecov_json_formatter (0.1.4)
     sshkey (2.0.0)
     terminal-notifier-guard (1.7.0)
-    thor (1.2.1)
-    tzinfo (2.0.5)
+    thor (1.3.0)
+    tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    unicode-display_width (2.3.0)
-    webrick (1.7.0)
-    yard (0.9.28)
-      webrick (~> 1.7.0)
+    unicode-display_width (2.5.0)
+    yard (0.9.34)
 
 PLATFORMS
   arm64-darwin-21
+  arm64-darwin-22
   ruby
   x86_64-darwin-19
+  x86_64-darwin-20
+  x86_64-darwin-21
   x86_64-linux
 
 DEPENDENCIES
@@ -169,6 +205,8 @@ DEPENDENCIES
   guard-rspec
   rake
   rake_circle_ci
+  rake_git
+  rake_git_crypt
   rake_github
   rake_gpg
   rake_ssh
@@ -182,4 +220,4 @@ DEPENDENCIES
   yard
 
 BUNDLED WITH
-   2.4.3
+   2.4.17

data/Rakefile

@@ -1,20 +1,45 @@
 # frozen_string_literal: true
 
-require 'yaml'
-require 'yard'
 require 'rake_circle_ci'
+require 'rake_git'
+require 'rake_git_crypt'
 require 'rake_github'
-require 'rake_ssh'
 require 'rake_gpg'
-require 'securerandom'
+require 'rake_ssh'
 require 'rspec/core/rake_task'
 require 'rubocop/rake_task'
+require 'securerandom'
+require 'yaml'
+require 'yard'
 
 task default: %i[
   library:fix
   test:unit
 ]
 
+RakeGitCrypt.define_standard_tasks(
+  namespace: :git_crypt,
+
+  provision_secrets_task_name: :'secrets:provision',
+  destroy_secrets_task_name: :'secrets:destroy',
+
+  install_commit_task_name: :'git:commit',
+  uninstall_commit_task_name: :'git:commit',
+
+  gpg_user_key_paths: %w[
+    config/gpg
+    config/secrets/ci/gpg.public
+  ]
+)
+
+namespace :git do
+  RakeGit.define_commit_task(
+    argument_names: [:message]
+  ) do |t, args|
+    t.message = args.message
+  end
+end
+
 namespace :encryption do
   namespace :directory do
     desc 'Ensure CI secrets directory exists.'
@@ -24,10 +49,12 @@ namespace :encryption do
   end
 
   namespace :passphrase do
-    desc 'Generate encryption passphrase used by CI.'
+    desc 'Generate encryption passphrase for CI GPG key'
     task generate: ['directory:ensure'] do
-      File.write('config/secrets/ci/encryption.passphrase',
-                 SecureRandom.base64(36))
+      File.write(
+        'config/secrets/ci/encryption.passphrase',
+        SecureRandom.base64(36)
+      )
     end
   end
 end
@@ -52,12 +79,33 @@ namespace :keys do
 end
 
 namespace :secrets do
-  desc 'Regenerate all generatable secrets.'
-  task regenerate: %w[
+  namespace :directory do
+    desc 'Ensure secrets directory exists and is set up correctly'
+    task :ensure do
+      FileUtils.mkdir_p('config/secrets')
+      unless File.exist?('config/secrets/.unlocked')
+        File.write('config/secrets/.unlocked', 'true')
+      end
+    end
+  end
+
+  desc 'Generate all generatable secrets.'
+  task generate: %w[
     encryption:passphrase:generate
     keys:deploy:generate
     keys:gpg:generate
   ]
+
+  desc 'Provision all secrets.'
+  task provision: [:generate]
+
+  desc 'Delete all secrets.'
+  task :destroy do
+    rm_rf 'config/secrets'
+  end
+
+  desc 'Rotate all secrets.'
+  task rotate: [:'git_crypt:reinstall']
 end
 
 RuboCop::RakeTask.new

data/lib/ruby_git_crypt/commands/add_gpg_user.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module RubyGitCrypt
+  module Commands
+    class AddGPGUser < Base
+      # @!visibility private
+      def subcommands
+        %w[add-gpg-user]
+      end
+
+      # @!visibility private
+      def options
+        super +
+          %w[
+            --key-name
+            --no-commit
+            --trusted
+          ]
+      end
+
+      # @!visibility private
+      def arguments(parameters)
+        [parameters[:gpg_user_id]]
+      end
+    end
+  end
+end

data/lib/ruby_git_crypt/commands/export_key.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module RubyGitCrypt
+  module Commands
+    class ExportKey < Base
+      # @!visibility private
+      def subcommands
+        %w[export-key]
+      end
+
+      # @!visibility private
+      def options
+        super +
+          %w[
+            --key-name
+          ]
+      end
+
+      # @!visibility private
+      def arguments(parameters)
+        [parameters[:filename]]
+      end
+    end
+  end
+end

data/lib/ruby_git_crypt/commands/init.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module RubyGitCrypt
+  module Commands
+    class Init < Base
+      # @!visibility private
+      def subcommands
+        %w[init]
+      end
+
+      # @!visibility private
+      def options
+        super +
+          %w[
+            --key-name
+          ]
+      end
+    end
+  end
+end

data/lib/ruby_git_crypt/commands/lock.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module RubyGitCrypt
+  module Commands
+    class Lock < Base
+      # @!visibility private
+      def subcommands
+        %w[lock]
+      end
+
+      # @!visibility private
+      def options
+        super +
+          %w[
+            --all
+            --force
+            --key-name
+          ]
+      end
+    end
+  end
+end

data/lib/ruby_git_crypt/commands/status.rb

@@ -9,6 +9,21 @@ module RubyGitCrypt
       def subcommands
         %w[status]
       end
+
+      # @!visibility private
+      def options
+        super +
+          %w[
+            -e
+            -u
+            --fix
+          ]
+      end
+
+      # @!visibility private
+      def arguments(parameters)
+        [parameters[:files]]
+      end
     end
   end
 end

data/lib/ruby_git_crypt/commands/unlock.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module RubyGitCrypt
+  module Commands
+    class Unlock < Base
+      # @!visibility private
+      def subcommands
+        %w[unlock]
+      end
+
+      # @!visibility private
+      def arguments(parameters)
+        [parameters[:key_files]]
+      end
+    end
+  end
+end

data/lib/ruby_git_crypt/commands.rb

@@ -1,6 +1,11 @@
 # frozen_string_literal: true
 
+require_relative 'commands/init'
 require_relative 'commands/status'
+require_relative 'commands/lock'
+require_relative 'commands/unlock'
+require_relative 'commands/export_key'
+require_relative 'commands/add_gpg_user'
 
 module RubyGitCrypt
   module Commands

data/lib/ruby_git_crypt/options/definition.rb

@@ -2,9 +2,9 @@
 
 require 'immutable-struct'
 
-require_relative './name'
-require_relative './types'
-require_relative './values'
+require_relative 'name'
+require_relative 'types'
+require_relative 'values'
 
 module RubyGitCrypt
   module Options

data/lib/ruby_git_crypt/options/definitions.rb

@@ -2,6 +2,28 @@
 
 module RubyGitCrypt
   module Options
-    DEFINITIONS = [].freeze
+    DEFINITIONS = [
+      # flag options
+      definition(name: '-e', option_type: :flag, value_type: :boolean,
+                 override_keys: { singular: :encrypted_only }),
+      definition(name: '-u', option_type: :flag, value_type: :boolean,
+                 override_keys: { singular: :unencrypted_only }),
+      %w[
+        --all
+        --fix
+        --force
+        --no-commit
+        --trusted
+      ].map do |o|
+        definition(name: o, option_type: :flag, value_type: :boolean)
+      end,
+
+      # string options
+      %w[
+        --key-name
+      ].map do |o|
+        definition(name: o, option_type: :standard, value_type: :string)
+      end
+    ].flatten.freeze
   end
 end

data/lib/ruby_git_crypt/options/name.rb

@@ -4,15 +4,13 @@ require 'immutable-struct'
 
 module RubyGitCrypt
   module Options
-    class Name < ImmutableStruct.new(:name)
+    class Name < ImmutableStruct.new(:name, :prefix)
+      attr_reader :name
+
       def initialize(name)
         super(name: name.to_s)
       end
 
-      def name
-        "--#{without_prefix}"
-      end
-
       alias to_s name
 
       def as_singular_key

data/lib/ruby_git_crypt/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module RubyGitCrypt
-  VERSION = '0.1.0.pre.1'
+  VERSION = '0.1.0.pre.3'
 end

data/lib/ruby_git_crypt.rb

@@ -21,11 +21,36 @@ module RubyGitCrypt
   end
 
   module ClassMethods
+    def add_gpg_user(parameters = {}, invocation_options = {})
+      exec(RubyGitCrypt::Commands::AddGPGUser,
+           parameters, invocation_options)
+    end
+
+    def export_key(parameters = {}, invocation_options = {})
+      exec(RubyGitCrypt::Commands::ExportKey,
+           parameters, invocation_options)
+    end
+
+    def init(parameters = {}, invocation_options = {})
+      exec(RubyGitCrypt::Commands::Init,
+           parameters, invocation_options)
+    end
+
+    def lock(parameters = {}, invocation_options = {})
+      exec(RubyGitCrypt::Commands::Lock,
+           parameters, invocation_options)
+    end
+
     def status(parameters = {}, invocation_options = {})
       exec(RubyGitCrypt::Commands::Status,
            parameters, invocation_options)
     end
 
+    def unlock(parameters = {}, invocation_options = {})
+      exec(RubyGitCrypt::Commands::Unlock,
+           parameters, invocation_options)
+    end
+
     private
 
     def exec(command_class, parameters, invocation_options)

data/ruby_git_crypt.gemspec

@@ -48,6 +48,8 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency 'guard-rspec'
   spec.add_development_dependency 'rake'
   spec.add_development_dependency 'rake_circle_ci'
+  spec.add_development_dependency 'rake_git'
+  spec.add_development_dependency 'rake_git_crypt'
   spec.add_development_dependency 'rake_github'
   spec.add_development_dependency 'rake_gpg'
   spec.add_development_dependency 'rake_ssh'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ruby_git_crypt
 version: !ruby/object:Gem::Version
-  version: 0.1.0.pre.1
+  version: 0.1.0.pre.3
 platform: ruby
 authors:
 - InfraBlocks Maintainers
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2023-01-07 00:00:00.000000000 Z
+date: 2023-10-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: immutable-struct
@@ -136,6 +136,34 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake_git
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake_git_crypt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rake_github
   requirement: !ruby/object:Gem::Requirement
@@ -294,8 +322,13 @@ files:
 - bin/setup
 - lib/ruby_git_crypt.rb
 - lib/ruby_git_crypt/commands.rb
+- lib/ruby_git_crypt/commands/add_gpg_user.rb
 - lib/ruby_git_crypt/commands/base.rb
+- lib/ruby_git_crypt/commands/export_key.rb
+- lib/ruby_git_crypt/commands/init.rb
+- lib/ruby_git_crypt/commands/lock.rb
 - lib/ruby_git_crypt/commands/status.rb
+- lib/ruby_git_crypt/commands/unlock.rb
 - lib/ruby_git_crypt/errors.rb
 - lib/ruby_git_crypt/errors/execution_error.rb
 - lib/ruby_git_crypt/options.rb