sequel-privacy 0.7.0 → 0.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c7ef079bb3498aa1006aa327a138bcb1735b78ae02a65b11d2ee4976d9871978
-  data.tar.gz: 95000199db0cbb08908c1a261152c641b71ceb7898875a9f732936662df9334e
+  metadata.gz: e06f6f240ee6789aee3cd1881290df4cdc503d0be754c94e9b2bdd516607bf22
+  data.tar.gz: a280c975257f069cf01db2ef9189a10e2ed2fb5af279bdb365da211485e47c71
 SHA512:
-  metadata.gz: 6ea2e6410976a3e325264faa698a2faaf323c1aafdfe9eb3444c8cc18f51c887155227a1fe68ec119408d9679b1c4a39cc70e69611db4e6ed94edf9b93857ef2
-  data.tar.gz: 0271f5b12a6d376e04b5feae0eb9ee604da1258871092578878571c877b86b9ef388a60441962b31b36588c9c3e4fc9642c9b71cd0f90a8890030903e2a1bb21
+  metadata.gz: d70745ff2e176a8d6e4ba3ad5f1c8ade864b44647392085ba86df00f5f3bdd78ca306d79776731a97c4c9aa769b5fd9009260b3f9b470c88b2ec985fde21aa46
+  data.tar.gz: d6f85561a19cc324e3ea99e0d0cfaef30ecb405dc6eecedeb349adb55c18596de0d8384624431a1857bbe8dda11866043093be22d4cbd34e7b8bf220b28ba3a9

data/CHANGELOG.md

@@ -3,6 +3,9 @@
 
 ## [Unreleased]
 
+- Added `Sequel::Privacy.with_cache_scope` for nested, exception-safe policy
+  caches isolated between concurrent threads and fibers.
+
 ## [0.7.0] – 2026-08-26
 - Removed `#for_vc` on `Sequel::Model` instances. Instead, call `#reset_viewer_context(vc, reason)`.
 - Removed `#viewer_context=` from `Sequel::Model` instances.

data/README.md

@@ -402,7 +402,9 @@ Sequel::Privacy.logger = SemanticLogger['Privacy']
 
 ## Cache Management
 
-Policy results are cached per-request to avoid redundant evaluation. Clear between requests:
+Policy results are cached per operation to avoid redundant evaluation. Wrap
+each request, job, or other independent operation in a cache scope. Scopes are
+isolated between concurrent threads and fibers:
 
 ```ruby
 # In Rack middleware
@@ -412,13 +414,14 @@ class PrivacyCacheMiddleware
   end
 
   def call(env)
-    Sequel::Privacy.clear_cache!
-    @app.call(env)
+    Sequel::Privacy.with_cache_scope { @app.call(env) }
   end
 end
 ```
 
-Or somewhere manually, like at the top of your Roda or Sinatra app:
+Scopes may be nested and are restored after exceptions. `clear_cache!` clears
+only the active scope. Applications not yet using scopes retain the legacy
+process-global cache and can clear it manually:
 
 ```ruby
 Sequel::Privacy.clear_cache!

data/lib/sequel/privacy/cache.rb

@@ -2,28 +2,82 @@
 # frozen_string_literal: true
 
 module Sequel
+  # Privacy enforcement and operation-scoped policy caching.
   module Privacy
-    # In-memory cache for policy evaluation results. Clear between
-    # requests (e.g. via Rack middleware).
+    # One policy cache scope. Kept separate from ViewerContext because a
+    # long-lived context may serve many independent operations.
+    class CacheScope
+      extend T::Sig
+
+      sig { returns(T::Hash[Integer, Symbol]) }
+      attr_reader :cache
+
+      sig { returns(T::Hash[Integer, Integer]) }
+      attr_reader :single_matches
+
+      sig { void }
+      def initialize
+        @cache = T.let({}, T::Hash[Integer, Symbol])
+        @single_matches = T.let({}, T::Hash[Integer, Integer])
+      end
+
+      sig { void }
+      def clear!
+        @cache = {}
+        @single_matches = {}
+      end
+    end
+    private_constant :CacheScope
+
+    # In-memory cache for policy evaluation results. Concurrent applications
+    # should wrap each independent operation in with_cache_scope.
     class << self
       extend T::Sig
 
+      CACHE_SCOPE_KEY = :sequel_privacy_cache_scope
+      private_constant :CACHE_SCOPE_KEY
+
+      sig do
+        type_parameters(:U)
+          .params(block: T.proc.returns(T.type_parameter(:U)))
+          .returns(T.type_parameter(:U))
+      end
+      def with_cache_scope(&block)
+        previous = Thread.current[CACHE_SCOPE_KEY]
+        Thread.current[CACHE_SCOPE_KEY] = CacheScope.new
+        block.()
+      ensure
+        Thread.current[CACHE_SCOPE_KEY] = previous
+      end
+
       sig { returns(T::Hash[Integer, Symbol]) }
       def cache
-        @cache ||= T.let({}, T.nilable(T::Hash[Integer, Symbol]))
+        active_cache_scope&.cache || (@cache ||= T.let({}, T.nilable(T::Hash[Integer, Symbol])))
       end
 
       # Tracks single-match optimization state.
       # Key: [policy, actor, viewer_context].hash → Value: subject.hash
       sig { returns(T::Hash[Integer, Integer]) }
       def single_matches
-        @single_matches ||= T.let({}, T.nilable(T::Hash[Integer, Integer]))
+        active_cache_scope&.single_matches ||
+          (@single_matches ||= T.let({}, T.nilable(T::Hash[Integer, Integer])))
       end
 
       sig { void }
       def clear_cache!
-        @cache = {}
-        @single_matches = {}
+        if (scope = active_cache_scope)
+          scope.clear!
+        else
+          @cache = {}
+          @single_matches = {}
+        end
+      end
+
+      private
+
+      sig { returns(T.nilable(CacheScope)) }
+      def active_cache_scope
+        T.cast(Thread.current[CACHE_SCOPE_KEY], T.nilable(CacheScope))
       end
     end
   end

data/lib/sequel/privacy/version.rb

@@ -3,6 +3,6 @@
 
 module Sequel
   module Privacy
-    VERSION = '0.7.0'
+    VERSION = '0.7.1'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sequel-privacy
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.7.1
 platform: ruby
 authors:
 - Austin Bales
@@ -152,7 +152,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.14
+rubygems_version: 4.0.21
 specification_version: 4
 summary: Privacy enforcement plugin for Sequel models
 test_files: []