twix 0.0.2 → 0.0.3

data/README.md

@@ -10,4 +10,61 @@ The first implementation will allow you to run something like this:
 $ twix 12345
 ```
 
-Where 12345 is the id of the tweet.
+Where 12345 is the id of the tweet. It will execute the body of the
+tweet as Ruby code. So, if Tweet #12345 has body "puts 'Hello World'"
+it'll print "Hello World" to the screen.
+
+You can also run:
+
+```bash
+$ twix @cmaxw
+```
+
+If you know that someone has recently tweeted some Ruby code you want to run, this will show the last 20 tweets that person has shared and you can choose the tweet you want to run. Something like this.
+
+```
+Tweets for @cmaxw:
+	0 - Hey, don’t forget to vote for @rubyrogues today in the podcast awards. http://t.co/6BHkRXuS
+	1 - p "Hi, welcome to twix, the Twitter Executor for Ruby"
+	2 - RT @JSJabber: RT @JSJabber 034 JSJ Ember.js http://t.co/rZuOHT0R cc/ @trek
+	3 - @chrishunt @jstorimer @saturnflyer @pat_shaughnessy If it’s within walking distance. Shall we meet up by the registration table?
+	4 - OH: “Mathematicians don’t like intention revealing names” via @jimweirich at #rubyconf
+	5 - @kfarris glad it helped. What’s your background? coding? sales? marketing? management?
+	6 - @jstorimer @saturnflyer @pat_shaughnessy I was looking forward to a boxed lunch, but if you insist… Where should we meet?
+	7 - @jwo I looked at rubycop. How it works is not immediately obvious (due partly to the lack of README.) Don’t think I want to require jruby .
+	8 - @natehop Thanks, appreciate it. I love recording the shows. I also love that people enjoy listening.
+	9 - So, if I wanted to write a script that downloaded a random string of code and executed it, what is the best way to do so safely?
+	10 - Or, in @r00k’s case. Find an audience to heckle you.
+	11 - Sitting in @r00k’s talk, it occurs to me that when they say ‘grow a pair’, they mean ‘find someone to sit with you and check your code.’
+	12 - @codeodor LOL, mine’s an android phone. I’m going to upgrade it to an iPhone5. Wish me luck!
+	13 - My phone won’t turn off the screen. So, it died after half a day.
+	14 - Anyone up for dinner after the minitest #bof at #Rubyconf?
+	15 - @martco Nice meeting you too. I hope I keep them going for a long time as well.
+	16 - Had a terrific discussion with @jstorimer about ebooks, podcasts, marketing, and videos.
+	17 - So, it turns out my phone is not rubyfriends friendly. Rear facing camera only with an onscreen button to take pics.
+	18 - RT @blowmage: RubyConf attendees: join us tonight for a BoF session on minitest and rails4. Please RT. #rubyconf
+	19 - RT @dbrady: If you are weapons-grade at ExtJS, have a passing knowledge of ruby, and have a couple weeks free (or more) please contact m ...
+
+
+Which Tweet do you want to execute?
+```
+
+If you choose '1', it'll execute the tweet and print "Hi, welcome to
+twix, the Twitter Executor for Ruby"
+
+#Safety
+
+We want you to be able to execute a tweet without concerns about whether
+it's going to do something crazy like `rm -Rf /` (delete your entire
+hard drive. We're using [RubyCop](https://github.com/envylabs/RubyCop)
+to make sure that the tweet is restricted from taking control of your
+system through the Ruby interpreter or doing anything harmful.
+
+To turn off the safety feature, run twix with the --naked command. 
+
+---
+
+#ToDo
+* Set up a service that archives twixable tweets
+* Add ability to require other tweets
+

data/lib/twix.rb

@@ -1,7 +1,12 @@
+#encoding: UTF-8
+
+require 'oauth'
 require 'twitter'
 require 'yaml'
+require 'ruby_cop'
+require 'pry'
 
-module Twix
+class Twix
   def self.init
     config_file = File.expand_path("~") + "/.twixrc"
     twix_config = YAML.load_file(config_file)
@@ -14,14 +19,37 @@ module Twix
   end
 
   def self.run(args)
+    @args = args
     handle_switches
-    usernames = args.select {|arg| arg.match(/\A@/)}
-    user = usernames.first
-    show_user_tweets(user) if user
+    if args.last.match(/\A@/)
+      show_user_tweets(args.last)
+    elsif args.last =~ /\A[0-9]+\Z/
+      tweet = Twitter.status(args.last)
+      execute_tweet(tweet)
+    end
   end
 
+  private
+
   def self.handle_switches
-    true
+    set_use_ruby_cop(!has_switch?("naked"))
+  end
+
+  def self.set_use_ruby_cop(on = true)
+    @ruby_cop = on
+  end
+
+  def self.ruby_cop?
+    @ruby_cop
+  end
+
+  def self.has_switch?(switch)
+    !!get_switch(switch)
+  end
+
+  def self.get_switch(switch)
+    dashes = switch.length == 1 ? "-" : "--"
+    @args.detect{|a| a.match(/\A#{dashes}#{switch}/) }
   end
 
   def self.show_user_tweets(user)
@@ -35,11 +63,36 @@ module Twix
     if tweet_index.match(/\A(1|)[0-9]\Z/).nil?
       puts "\n\nYour input must be between 0 and 19"
       show_user_tweets(user)
+    else
+      execute_tweet timeline[tweet_index.to_i]
     end
-    eval timeline[tweet_index.to_i].text
   end
 
   def self.display_tweet(tweet, index)
-    puts "\t#{index} - #{tweet.text}"
+    $stdout.puts "\t#{index} - #{tweet.text}"
+  end
+
+  def self.safe?(tweet)
+    !ruby_cop? || check_ruby_cop(tweet)
+  end
+
+  def self.check_ruby_cop(tweet)
+    policy = RubyCop::Policy.new
+    ast = RubyCop::NodeBuilder.build(tweet)
+    ast.accept(policy)
+  end
+
+  def self.execute_tweet(tweet)
+    text = sanitize_tweet(tweet.text)
+    if safe?(text)
+      eval(text)
+    else
+      puts "WARNING: That tweet is trying to do something dangerous! Here's the tweet:\n\t #{tweet.text}\n\t To remove the safety net, run `twix --naked #{tweet.id}`"
+    end
+  end
+
+  def self.sanitize_tweet(tweet)
+    tweet.gsub(/[”“]/, '"')
+      .gsub(/’/, "'")
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: twix
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-11-01 00:00:00.000000000 Z
+date: 2012-11-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: twitter
@@ -32,17 +32,33 @@ dependencies:
   requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
-    - - ! '>='
+    - - ~>
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.4.7
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     none: false
     requirements:
-    - - ! '>='
+    - - ~>
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.4.7
+- !ruby/object:Gem::Dependency
+  name: rubycop
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.0.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.0.1
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -98,7 +114,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
       segments:
       - 0
-      hash: 4532826585065384912
+      hash: 4092312738592471102
 required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
   requirements:
@@ -107,7 +123,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 1.8.24
+rubygems_version: 1.8.19
 signing_key: 
 specification_version: 3
 summary: Executes a Tweet as Ruby Code