ruby_slime 0.0.4 → 0.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d97fde901999a9c590e81817687191021260b13e1ef6fc825886ded4b4e211e0
-  data.tar.gz: 735dfa78ce4ccf683982ba8950b318c00a4515f06be6a2a1b2d7e2698c58700d
+  metadata.gz: c387c47639713c2dbb2d38397219dd596509fddb83bd2fa57f994a402d66b1ed
+  data.tar.gz: a1cacebbd7bba6821dd3f3ec963ce285182c6adf4f9085811f37cc1e8c50cee8
 SHA512:
-  metadata.gz: 96760cd3e0762f269684738f7dae2fce7d47d416716f806e4138e6135188a50fcad05a4f646f77edbb0c077eaaaad605822ef33f818dd86be1d9faa258dc989b
-  data.tar.gz: f4f0a5f06d4808eefaa4f1c04b1b182a6180740cb85ec480cd40c15f758e8483b7176441dd21688daf2bf585d1de9f425b187ee06e65ddd8f099bd77adf1f7c1
+  metadata.gz: 65a5347e85d356d49fc23df497e9d9c9cef4396da91ea2794fef473a3a3daab14e03605a9f96d9d9f42ec1602cc1a9b2ef3997dd8abc6fe3510cd103df94eaf8
+  data.tar.gz: 1d98558ae355d928b129867e40d73bcc932dd07ff9eb9533031f9d8d43d4e12dfe536eb9e8403025d5af2340d408473a2d6de138130a4676c0e1e03cb22c099e

data/lib/ruby_slime/command.rb

@@ -17,9 +17,9 @@ module RubySlime
       end
     end
 
-    def attributes
-      @attributes__immutable_cache ||= begin
-        normalized = super.compact
+    def validated_attributes
+      @validated_attributes__immutable_cache ||= begin
+        normalized = attributes.compact
         schema = self.class._applied_schema
         return normalized unless schema
         result = schema.call(normalized)
@@ -28,6 +28,6 @@ module RubySlime
       end
     end
 
-    def_delegators :attributes, :[], :values_at
+    def_delegators :validated_attributes, :[], :values_at
   end
 end

data/lib/ruby_slime/dry/stripped_string.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+module RubySlime
+  module Dry
+    StrippedString = ::Dry::Types['string'].constructor(&:strip)
+  end
+end

data/lib/ruby_slime/dry.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+require 'dry-types'
+
+module RubySlime
+  module Dry
+  end
+end

data/lib/ruby_slime/jwt_kit/api_verifier.rb

@@ -2,63 +2,44 @@
 
 module RubySlime
   module JWTKit
-    class APIVerifier
-      include ObjectSharing
-
+    class APIVerifier < GenericVerifier
       def initialize(
         fetch_secret:,
         handle_result:
       )
-        @fetch_secret = fetch_secret
-        @handle_result = handle_result
+        super(
+          fetch_secret: fetch_secret,
+          handle_result: handle_result,
+          **P_APIVariation.instance.then do |holder|
+            {
+              required_claims: holder.required_claims,
+              payload_schema: holder.payload_schema,
+            }
+          end,
+        )
       end
 
-      def call(token)
-        token_result = shared_objects[:token_schema].call({
-          token: token,
-        })
-        raise TokenError.new(token_result.errors) unless token_result.success?
-        validated_cache = {}
-        ::JWT.decode(token_result[:token], nil, true, {
-          algorithm: 'HS256',
-          required_claims: %w[aud iat sub],
-        }) do |header_section|
-          validated_cache[:header] ||= check_jwt_section(header_section, :header_schema)
-          @fetch_secret.call(validated_cache[:header])
-        end.then do |sections|
-          payload_section, header_section = sections
-          validated_cache[:header] ||= check_jwt_section(header_section, :header_schema)
-          validated_cache[:payload] ||= check_jwt_section(payload_section, :payload_schema)
-          validated_cache.values_at(:payload, :header)
-        end.then do |sections|
-          @handle_result.call(*sections)
-        end
-      end
+      class P_APIVariation
+        include ::Singleton
+        attr_reader(*%i[
+          required_claims
+          payload_schema
+        ])
 
-      private
-
-      def check_jwt_section(section, schema_name)
-        section_result = shared_objects[schema_name].call(section)
-        raise TokenError.new(section_result.errors) unless section_result.success?
-        section_result.to_h
+        def initialize
+          @required_claims = %w[aud iat sub]
+          @payload_schema = ::Dry::Schema.Params do
+            required(:aud).filled(:string)
+            required(:iat).value(:integer, gt?: 0)
+            required(:sub).filled(:string)
+            optional(:data).hash
+          end
+          super
+          freeze
+        end
       end
 
-      share_objects({
-        token_schema: ::Dry::Schema.Params do
-          required(:token).filled(:string)
-        end,
-        header_schema: ::Dry::Schema.Params do
-          optional(:typ).filled(:string).value(eql?: 'JWT')
-          required(:alg).filled(:string).value(eql?: 'HS256')
-          required(:kid).filled(:string)
-        end,
-        payload_schema: ::Dry::Schema.Params do
-          required(:aud).filled(:string)
-          required(:iat).value(:integer, gt?: 0)
-          required(:sub).filled(:string)
-          optional(:data).hash
-        end,
-      })
+      private_constant :P_APIVariation
     end
   end
 end

data/lib/ruby_slime/jwt_kit/encrypted_verifier.rb

@@ -0,0 +1,79 @@
+# frozen_string_literal: true
+
+module RubySlime
+  module JWTKit
+    class EncryptedVerifier
+      def initialize(
+        fetch_secret:,
+        handle_result:,
+        payload_schema:
+      )
+        @fetch_secret = fetch_secret
+        @handle_result = handle_result
+        @payload_schema = payload_schema
+      end
+
+      def call(token)
+        raise ::JWT::DecodeError, 'Invalid token format!' unless token.is_a?(::String)
+        header = P_GenericCache.instance.header_extract.match(token)
+        raise ::JWT::DecodeError, 'Invalid token format!' unless header
+        header = header[1].then do |encoded|
+          ::Base64.urlsafe_decode64(encoded)
+        rescue ::ArgumentError
+          raise ::JWT::DecodeError, 'Invalid token format!'
+        end.then do |json_string|
+          ::JSON.parse(json_string, symbolize_names: true)
+        rescue ::TypeError, ::JSON::JSONError
+          raise ::JWT::DecodeError, 'Invalid token format!'
+        end
+        checked_header = check_jwt_section(header, P_GenericCache.instance.header_schema)
+        secret = @fetch_secret.call(checked_header)
+        begin
+          ::JWE.decrypt(token, secret)
+        rescue ::ArgumentError
+          # (invalid base64: jwe (0.4.0) lib/jwe/base64.rb:14:in `jwe_decode')
+          raise ::JWT::DecodeError, 'Invalid token format!'
+        end.then do |encoded|
+          ::JSON.parse(encoded, symbolize_names: true)
+        rescue ::TypeError, ::JSON::JSONError
+          raise ::JWT::DecodeError, 'Invalid payload format!'
+        end.then do |payload|
+          check_jwt_section(payload, @payload_schema)
+        end.then do |payload|
+          @handle_result.call(payload, header)
+        end
+      end
+
+      private
+
+      def check_jwt_section(section, schema)
+        section_result = schema.call(section)
+        raise SchemaViolation.new(section_result.errors) unless section_result.success?
+        section_result.to_h
+      end
+
+      class P_GenericCache
+        include ::Singleton
+        attr_reader(*%i[
+          header_extract
+          header_schema
+        ])
+
+        def initialize
+          @header_extract = /\A([-_0-9A-Za-z]+)\./
+          @header_schema = ::Dry::Schema.Params do
+            optional(:typ).filled(:string).value(eql?: 'JWT')
+            optional(:zip).filled(:string)
+            required(:alg).filled(:string)
+            required(:enc).filled(:string)
+            required(:kid).filled(:string)
+          end
+          super
+          freeze
+        end
+      end
+
+      private_constant :P_GenericCache
+    end
+  end
+end

data/lib/ruby_slime/jwt_kit/generic_verifier.rb

@@ -0,0 +1,66 @@
+# frozen_string_literal: true
+
+module RubySlime
+  module JWTKit
+    class GenericVerifier
+      def initialize(
+        fetch_secret:,
+        handle_result:,
+        required_claims:,
+        payload_schema:
+      )
+        @fetch_secret = fetch_secret
+        @handle_result = handle_result
+        @required_claims = required_claims
+        @payload_schema = payload_schema
+      end
+
+      def call(token)
+        validated_cache = {}
+        ::JWT.decode(token, nil, true, {
+          algorithm: 'HS256',
+          required_claims: @required_claims,
+        }) do |header_section|
+          @fetch_secret.call(
+            validated_cache[:header] ||= check_jwt_section(header_section, P_GenericCache.instance.header_schema),
+          )
+        end.then do |sections|
+          payload_section, header_section = sections
+          [
+            validated_cache[:header] ||= check_jwt_section(header_section, P_GenericCache.instance.header_schema),
+            validated_cache[:payload] ||= check_jwt_section(payload_section, @payload_schema),
+          ].reverse
+        end.then do |sections|
+          @handle_result.call(*sections)
+        end
+      end
+
+      private
+
+      def check_jwt_section(section, schema)
+        section_result = schema.call(section)
+        raise SchemaViolation.new(section_result.errors) unless section_result.success?
+        section_result.to_h
+      end
+
+      class P_GenericCache
+        include ::Singleton
+        attr_reader(*%i[
+          header_schema
+        ])
+
+        def initialize
+          @header_schema = ::Dry::Schema.Params do
+            optional(:typ).filled(:string).value(eql?: 'JWT')
+            required(:alg).filled(:string).value(eql?: 'HS256')
+            required(:kid).filled(:string)
+          end
+          super
+          freeze
+        end
+      end
+
+      private_constant :P_GenericCache
+    end
+  end
+end

data/lib/ruby_slime/jwt_kit/handling_helper.rb

@@ -3,25 +3,8 @@
 module RubySlime
   module JWTKit
     module HandlingHelper
-      extend ::Forwardable
-
       private
 
-      def_delegators :@controller,
-        :params,
-        :redirect_to,
-        :render
-
-      def initialize_helper(controller, payload, header = nil)
-        @controller = controller
-        @payload = payload
-        @header = header
-      end
-
-      def jwt_params(*permit)
-        @payload.fetch(:data, {}).slice(*permit)
-      end
-
       def render_data(data_hash)
         render json: {
           data: data_hash,

data/lib/ruby_slime/jwt_kit/schema_violation.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+module RubySlime
+  module JWTKit
+    class SchemaViolation < ::RubySlime::SchemaViolation
+    end
+  end
+end

data/lib/ruby_slime/jwt_kit.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'dry-schema'
+require 'jwe'
 require 'jwt'
 
 module RubySlime

data/lib/ruby_slime/mongoid/query_sharding.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+module RubySlime
+  module Mongoid
+    module QuerySharding
+      class InvalidShard < ::ArgumentError
+      end
+
+      extend ::ActiveSupport::Concern
+
+      included do
+        lambda do |hex_string|
+          Integer(hex_string, 16) & 0x7fffffff
+        end.then do |apply_mask|
+          proc do
+            ::SecureRandom.hex(4).then(&apply_mask)
+          end
+        end.tap do |value_proc|
+          field :_qsk, as: :query_shard_key, type: :integer, default: value_proc
+        end
+
+        proc do |shard_count, shard_number|
+          raise InvalidShard unless shard_count.respond_to?(:<=)
+          raise InvalidShard unless shard_number.respond_to?(:<)
+          begin
+            raise InvalidShard unless 0 < shard_count
+            raise InvalidShard unless shard_count <= 1024
+            raise InvalidShard unless 0 <= shard_number
+            raise InvalidShard unless shard_number < shard_count
+          rescue ::ArgumentError
+            raise InvalidShard
+          end
+          where({
+            query_shard_key: {
+              '$mod': [shard_count, shard_number],
+            },
+          })
+        end.tap do |scope_proc|
+          scope :query_shard, scope_proc
+        end
+      end
+    end
+  end
+end

data/lib/ruby_slime/mongoid/state.rb

@@ -4,11 +4,23 @@ module RubySlime
   module Mongoid
     class State
       include ::Mongoid::Document
+      include QuerySharding
       store_in collection: 'process_states'
 
-      field :state, type: ::Hash, default: {}
-      field :next_position, type: ::Integer, default: 1
-      field :lock_version, type: ::Integer, default: 0
+      field :_s, as: :state, type: :hash, default: {}
+      field :_np, as: :next_position, type: :integer, default: 1
+      field :_lv, as: :lock_version, type: :integer, default: 0
+      proc do
+        ::BSON::ObjectId.new
+      end.tap do |value_proc|
+        field :_c, as: :creation_id, type: :object_id, default: value_proc
+      end
+
+      index({
+        creation_id: 1,
+      }, {
+        name: 'index_46d82576f9',
+      })
     end
   end
 end

data/lib/ruby_slime/mongoid.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'mongoid'
+require 'securerandom'
 
 module RubySlime
   module Mongoid

data/lib/ruby_slime/object_sharing.rb

@@ -5,16 +5,22 @@ module RubySlime
     extend ::ActiveSupport::Concern
 
     class_methods do
-      attr_reader :_object_sharing_cache
-
       private def share_objects(objects_hash)
-        (@_object_sharing_cache ||= {}).merge!(objects_hash)
-      end
-    end
-
-    included do
-      private def shared_objects
-        (self.class._object_sharing_cache || {})
+        _carrier = (@_object_sharing_carrier ||= {}).tap do |base|
+          base.merge!(objects_hash)
+        end
+        if !method_defined?(:shared_objects)
+          define_method(:shared_objects) do
+            _carrier
+          end
+        else
+          define_method(:shared_objects) do
+            @_shared_objects ||= {
+              **super,
+              **_carrier,
+            }
+          end
+        end
       end
     end
   end

data/lib/ruby_slime/process_helper.rb

@@ -27,11 +27,21 @@ module RubySlime
 
     private def apply(*events)
       handlers = self.class._event_handlers || {}
-      events.each do |event|
+      events.flat_map do |event|
+        # allow array expansions of events, hence the flatmap
+        # Array() is idempotent
+        Array(event)
+      end.each do |event|
         handler = handlers[event.class]
         instance_exec(event, &handler) if handler
         pending_events << event
       end
     end
+
+    private def merge_state(default, recorded)
+      default.with_indifferent_access.merge(
+        recorded.presence || {},
+      )
+    end
   end
 end

data/lib/ruby_slime/rake/development_sync.rb

@@ -10,7 +10,9 @@ module RubySlime
         path_prefix: '',
         path_namespace:,
         rclone_conf: 'sync.rclone.conf',
-        rclone_remote: 'sync'
+        rclone_remote: 'sync',
+        process_paths: lambda(&:itself),
+        chdir: nil
       )
         initialize_context(rake_context)
         @rclone_conf = rclone_conf
@@ -19,13 +21,23 @@ module RubySlime
           ::File.join(*path_sections)
         end
         @check_rclone_conf = lambda do
-          raise "\"#{@rclone_conf}\" not found!" unless ::File.file?(@rclone_conf)
+          ::File.expand_path(@rclone_conf).tap do |full_path|
+            raise "\"#{@rclone_conf}\" not found!" unless ::File.file?(full_path)
+          end
         end
+        @process_paths = process_paths
+        @chdir = chdir
       end
 
       def declare
         desc('rclone sync up')
-        task('sync-up', &method(:sync_up))
+        task('sync-up') { sync_up('copy') }
+
+        desc('rclone sync up preview')
+        task('sync-up-preview') { sync_up('copy', echo: true) }
+
+        desc('rclone sync up but also delete files on remote to match local')
+        task('sync-up-unsafe') { sync_up('sync') }
 
         desc('rclone sync down')
         task('sync-down', &method(:sync_down))
@@ -33,43 +45,53 @@ module RubySlime
 
       private
 
-      def sync_up(*_args, **_kwargs)
-        include_options = `git ls-files -io --exclude-per-directory=.gitignore`
-          .each_line
-          .map(&:strip)
-          .select(&:present?)
-          .reject do |filename|
-          filename.split(%r{[/\\]}).then do |path_sections|
-            path_sections.include?('.terraform') || \
-          path_sections.include?('.idea') || \
-          path_sections.last.then do |file_name|
-              file_name.end_with?('rclone.conf') || \
-            file_name.end_with?('tfstate.backup')
-            end
-          end
-        end.map do |file_path|
-          "--include=#{file_path}"
+      def sync_up(rclone_command, echo: false)
+        include_options = ensure_chdir do
+          `git ls-files -io --exclude-per-directory=.gitignore`
+            .each_line
+            .map(&:strip)
+            .select(&:present?)
+            .then(&@process_paths)
+            .select(&::File.method(:file?))
+            .map { |file_path| "--include=#{file_path}" }
+        end
+        raise 'nothing to sync' unless include_options.present?
+        config_path = @check_rclone_conf.call
+        ensure_chdir do
+          sh(
+            *if echo
+              %w[echo rclone]
+            else
+              %w[rclone]
+            end,
+            rclone_command,
+            "--config=#{config_path}",
+            *include_options,
+            '.',
+            "#{@rclone_remote}:#{@path_namespace}/",
+          )
         end
-        @check_rclone_conf.call
-        sh(
-          'rclone',
-          'copy',
-          "--config=#{@rclone_conf}",
-          *include_options,
-          '.',
-          "#{@rclone_remote}:#{@path_namespace}/",
-        )
       end
 
       def sync_down(*_args, **_kwargs)
-        @check_rclone_conf.call
-        sh(
-          'rclone',
-          'copy',
-          "--config=#{@rclone_conf}",
-          "#{@rclone_remote}:#{@path_namespace}/",
-          '.',
-        )
+        config_path = @check_rclone_conf.call
+        ensure_chdir do
+          sh(
+            'rclone',
+            'copy',
+            "--config=#{config_path}",
+            "#{@rclone_remote}:#{@path_namespace}/",
+            '.',
+          )
+        end
+      end
+
+      def ensure_chdir(&shell)
+        if @chdir.present?
+          ::Dir.chdir(@chdir, &shell)
+        else
+          shell.call
+        end
       end
     end
   end

data/lib/ruby_slime/transitory_event.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+module RubySlime
+  # marker module
+  module TransitoryEvent
+  end
+end

data/lib/ruby_slime/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module RubySlime
-  VERSION = '0.0.4'
+  VERSION = '0.0.6'
 end

data/lib/ruby_slime.rb

@@ -13,7 +13,7 @@ loader.inflector.inflect(
   'api_verifier' => 'APIVerifier',
   'jwt_kit' => 'JWTKit',
 )
-::File.join(__dir__, 'ruby_slime').then do |base_path|
+::File.join(*[__dir__, 'ruby_slime'].compact).then do |base_path|
   %w[jwt_kit mongoid rake].flat_map do |autoload_module|
     [
       ::File.join(base_path, "#{autoload_module}.rb"),

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ruby_slime
 version: !ruby/object:Gem::Version
-  version: 0.0.4
+  version: 0.0.6
 platform: ruby
 authors:
 - Sarun Rattanasiri
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-05-28 00:00:00.000000000 Z
+date: 2024-06-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activemodel
@@ -52,6 +52,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: jwe
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: jwt
   requirement: !ruby/object:Gem::Requirement
@@ -72,14 +86,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 7.3.2
+        version: 8.1.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 7.3.2
+        version: 8.1.2
 - !ruby/object:Gem::Dependency
   name: zeitwerk
   requirement: !ruby/object:Gem::Requirement
@@ -105,6 +119,8 @@ files:
 - lib/ruby_slime.rb
 - lib/ruby_slime/command.rb
 - lib/ruby_slime/concurrent_write_detected.rb
+- lib/ruby_slime/dry.rb
+- lib/ruby_slime/dry/stripped_string.rb
 - lib/ruby_slime/event.rb
 - lib/ruby_slime/event_dispatcher.rb
 - lib/ruby_slime/event_queue.rb
@@ -113,10 +129,13 @@ files:
 - lib/ruby_slime/internals/event_metadata_handler.rb
 - lib/ruby_slime/jwt_kit.rb
 - lib/ruby_slime/jwt_kit/api_verifier.rb
+- lib/ruby_slime/jwt_kit/encrypted_verifier.rb
+- lib/ruby_slime/jwt_kit/generic_verifier.rb
 - lib/ruby_slime/jwt_kit/handling_helper.rb
-- lib/ruby_slime/jwt_kit/token_error.rb
+- lib/ruby_slime/jwt_kit/schema_violation.rb
 - lib/ruby_slime/mongoid.rb
 - lib/ruby_slime/mongoid/interactor.rb
+- lib/ruby_slime/mongoid/query_sharding.rb
 - lib/ruby_slime/mongoid/stale_record.rb
 - lib/ruby_slime/mongoid/state.rb
 - lib/ruby_slime/object_sharing.rb
@@ -125,6 +144,7 @@ files:
 - lib/ruby_slime/rake/context.rb
 - lib/ruby_slime/rake/development_sync.rb
 - lib/ruby_slime/schema_violation.rb
+- lib/ruby_slime/transitory_event.rb
 - lib/ruby_slime/unknown_command.rb
 - lib/ruby_slime/version.rb
 homepage: https://slime.systems/
@@ -148,7 +168,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.4.22
 signing_key: 
 specification_version: 4
 summary: The ruby-type slime made by Slime Systems.

data/lib/ruby_slime/jwt_kit/token_error.rb

@@ -1,14 +0,0 @@
-# frozen_string_literal: true
-
-module RubySlime
-  module JWTKit
-    class TokenError < ::StandardError
-      attr_reader :errors
-
-      def initialize(errors)
-        @errors = errors
-        super()
-      end
-    end
-  end
-end