strongroomd 0.1.0-x86_64-linux-musl

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 71d5d049cacd0fca58013199f714faa4761bc4a68d62602efe2a757ef8812921
+  data.tar.gz: c023d44a71cb89df555cf482b5e7c4509d69f82c0d2474ab18e08a29af17ce12
+SHA512:
+  metadata.gz: 940df31d237e669e01dacbccc744623a48bfaf9df53371575283b42f4ba6a0e3a1d7435ffc34af86f1e17aab7e7854495b853650421546b33544bb23e28f4ebb
+  data.tar.gz: af43b9fc875bdef037e3dd52825d3c7898850832f36fe96f6e5ce9534b77f2a5f5da6c6784997376b1bb95e51e3045961d2cc46d177f616e0f0e6b742232dfbc

data/LICENSE

@@ -0,0 +1,28 @@
+BSD 3-Clause License
+
+Copyright (c) 2026, Seuros
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

data/README.md

@@ -0,0 +1,54 @@
+# strongroomd — prebuilt daemon binaries
+
+Prebuilt [`strongroomd`](https://github.com/seuros/strongroom), a Postgres-first
+authentication kernel that acts as your application's security coprocessor, and
+its `strongroom-admin` operator CLI. For the Rails adapter, see
+[`strongroom-rails`](https://rubygems.org/gems/strongroom-rails); it carries no
+binary and does not depend on this gem.
+
+> **Status: pre-production.** Strongroom has not been audited and is not approved
+> for production traffic or real credential imports.
+
+```ruby
+gem "strongroomd"
+```
+
+```sh
+bundle exec strongroom-admin migrate
+bundle exec strongroomd
+```
+
+## Platforms
+
+Platform gems exist for `x86_64-linux-gnu`, `aarch64-linux-gnu`,
+`x86_64-linux-musl`, `aarch64-linux-musl`, `arm64-darwin` and `x86_64-darwin`.
+Each carries `vendor/<platform>/bin/strongroomd`, `strongroom-admin` and a
+`manifest.json` with the version, platform and SHA-256 of each binary. Both
+launchers refuse a binary whose digest, version or platform does not match.
+
+If `Gemfile.lock` lists only the `ruby` platform, add the deployment's, for
+example `bundle lock --add-platform x86_64-linux-gnu`.
+
+## Your own build
+
+The platformless (`ruby`) gem carries only the launchers. Point them at a build
+of your own with `STRONGROOM_BINARY` and `STRONGROOM_ADMIN_BINARY`; each must
+report exactly this gem's version (`strongroomd --version`). There is no PATH
+lookup and no download.
+
+`Strongroomd::Binary.path("strongroomd")` returns the verified path, for process
+supervisors.
+
+## Versions
+
+This gem shares its version with the Rust crates (`cargo install strongroomd`)
+and is released from the same `v<version>` tag.
+
+## Development
+
+```sh
+bundle exec rake test
+rake gem:ruby      # pkg/strongroomd-<version>.gem, launchers only
+rake gem:native    # pkg/strongroomd-<version>-<platform>.gem for this host (needs Rust)
+rake gems:push     # pull the v<version> GitHub release, verify it, push every gem to RubyGems
+```

data/exe/strongroom-admin

@@ -0,0 +1,12 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require "strongroomd"
+
+begin
+  path = Strongroomd::Binary.path("strongroom-admin")
+  exec([path, "strongroom-admin"], *ARGV)
+rescue Strongroomd::BinaryError, SystemCallError => error
+  warn error.message
+  exit 1
+end

data/exe/strongroomd

@@ -0,0 +1,12 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require "strongroomd"
+
+begin
+  path = Strongroomd::Binary.path("strongroomd")
+  exec([path, "strongroomd"], *ARGV)
+rescue Strongroomd::BinaryError, SystemCallError => error
+  warn error.message
+  exit 1
+end

data/lib/strongroomd/binary.rb

@@ -0,0 +1,79 @@
+# frozen_string_literal: true
+
+require "digest"
+require "json"
+require "open3"
+
+require_relative "version"
+
+module Strongroomd
+  class Error < StandardError; end
+  class BinaryError < Error; end
+
+  # Locates the executables bundled in this platform gem. Never downloads a binary
+  # or selects an unrelated one from PATH.
+  module Binary
+    ROOT = File.expand_path("../..", __dir__)
+    OVERRIDES = {"strongroomd" => "STRONGROOM_BINARY", "strongroom-admin" => "STRONGROOM_ADMIN_BINARY"}.freeze
+    NAMES = OVERRIDES.keys.freeze
+
+    module_function
+
+    def platform(local = Gem::Platform.local)
+      case local.os
+      when "darwin"
+        cpu = %w[arm64 aarch64].include?(local.cpu) ? "arm64" : local.cpu
+        "#{cpu}-darwin"
+      when "linux"
+        cpu = %w[arm64 aarch64].include?(local.cpu) ? "aarch64" : local.cpu
+        "#{cpu}-linux-#{(local.version == "musl") ? "musl" : "gnu"}"
+      else
+        raise BinaryError, "unsupported Strongroom platform: #{local}"
+      end
+    end
+
+    # The executable to run: the explicit override when its variable is set,
+    # otherwise the bundled one.
+    def path(name = "strongroomd", env: ENV, root: ROOT)
+      variable = OVERRIDES.fetch(name) { raise BinaryError, "unknown Strongroom executable: #{name}" }
+      return override(name, variable, env.fetch(variable)) if env.key?(variable)
+
+      bundled(name, root: root)
+    end
+
+    # Accepts an override only when it reports exactly this gem's version.
+    def override(name, variable, value)
+      candidate = File.expand_path(value)
+      executable!(candidate, variable)
+      output, status = Open3.capture2e(candidate, "--version")
+      expected = "#{name} #{Strongroomd::VERSION}"
+      raise BinaryError, "#{variable} must be #{expected}" unless status.success? && output.strip == expected
+
+      candidate
+    rescue SystemCallError
+      raise BinaryError, "#{variable} must be #{name} #{Strongroomd::VERSION}"
+    end
+
+    # The vendored executable, after checking it against the gem's release manifest.
+    def bundled(name, root: ROOT, platform: self.platform)
+      directory = File.join(root, "vendor", platform)
+      candidate = File.join(directory, "bin", name)
+      executable!(candidate, OVERRIDES.fetch(name))
+      manifest = JSON.parse(File.read(File.join(directory, "manifest.json")))
+      digests = manifest["sha256"]
+      unless manifest["version"] == Strongroomd::VERSION && manifest["platform"] == platform &&
+          digests.is_a?(Hash) && digests[name] == Digest::SHA256.file(candidate).hexdigest
+        raise BinaryError, "bundled #{name} does not match its release manifest"
+      end
+      candidate
+    rescue SystemCallError, JSON::ParserError
+      raise BinaryError, "missing or invalid Strongroom binary manifest; reinstall the platform gem"
+    end
+
+    def executable!(candidate, variable)
+      return if File.file?(candidate) && File.executable?(candidate)
+
+      raise BinaryError, "no executable at #{candidate}; install the platform gem or set #{variable}"
+    end
+  end
+end

data/lib/strongroomd/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module Strongroomd
+  VERSION = "0.1.0" # x-release-please-version
+end

data/lib/strongroomd.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+require_relative "strongroomd/version"
+require_relative "strongroomd/binary"

data/vendor/x86_64-linux-musl/manifest.json

@@ -0,0 +1,9 @@
+{
+  "version": "0.1.0",
+  "platform": "x86_64-linux-musl",
+  "target": "x86_64-unknown-linux-musl",
+  "sha256": {
+    "strongroomd": "d4a5fdbee540484cdd5cb92131ec7ee88a6d0bc507da7d52e61afa908a966843",
+    "strongroom-admin": "aba519a1e28385612723d0d98a673b184a231484dd41764e3d59a994354aec1b"
+  }
+}

metadata

@@ -0,0 +1,89 @@
+--- !ruby/object:Gem::Specification
+name: strongroomd
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: x86_64-linux-musl
+authors:
+- Seuros
+bindir: exe
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: minitest
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '6.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '6.0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+description: Prebuilt binaries of strongroomd, a Postgres-first authentication kernel
+  that acts as the application's security coprocessor, and its strongroom-admin CLI.
+  Each platform gem bundles both executables with a SHA-256 manifest the launchers
+  check before running them; the platformless gem runs only an explicitly configured
+  binary of the same version. Pair it with strongroom-rails.
+email:
+- terminale@gmail.com
+executables:
+- strongroom-admin
+- strongroomd
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- README.md
+- exe/strongroom-admin
+- exe/strongroomd
+- lib/strongroomd.rb
+- lib/strongroomd/binary.rb
+- lib/strongroomd/version.rb
+- vendor/x86_64-linux-musl/bin/strongroom-admin
+- vendor/x86_64-linux-musl/bin/strongroomd
+- vendor/x86_64-linux-musl/manifest.json
+homepage: https://github.com/seuros/strongroom
+licenses:
+- BSD-3-Clause
+metadata:
+  homepage_uri: https://github.com/seuros/strongroom
+  source_code_uri: https://github.com/seuros/strongroom/tree/master/gems/strongroomd
+  changelog_uri: https://github.com/seuros/strongroom/blob/master/CHANGELOG.md
+  bug_tracker_uri: https://github.com/seuros/strongroom/issues
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '4.0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.20
+specification_version: 4
+summary: The strongroomd authentication daemon and strongroom-admin CLI, prebuilt
+test_files: []