vestauth 0.2.2 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 695290e5fb4ac1ce87fd4b86abf1ba20862bf77dbdc0803d72617937958204af
-  data.tar.gz: 70284e5aa34a6d45b3d3f7eef525a4be2c305f0f006611679e15a42949b7d79c
+  metadata.gz: 8c89e42127df034e314cc6b11c576f76165c3ba8f99b0b6540eb9aee92e77541
+  data.tar.gz: 74d41456361216beb075c498b1cb6f1f8f1cf381628d64303ab5e8af2daf76cd
 SHA512:
-  metadata.gz: 9424fb000e3f8ff37afe0f142eaa9eefa2beaa06e464b0bc21bceeb832d7eb0efe36f15cdc2b2368e3e80e83818cb8d38c785154b1c40edad1fae10cb6790eec
-  data.tar.gz: 91a584e689fc281fea7b82af2ab17e01b173de4e2e0f3aff8b0bf37f57cebe0cc9a9637f7f4d3b60a8acee3f5f4ccc3d32f6a2d6b6f88a313fb7421a3f94bb6b
+  metadata.gz: '098e54f2851e34efa9b82d5a5d0afc0f5d531c27f23cb41384764f1a10f6238e232ca14971e98df38dea2ba48f41db2f5946b5c3b8900ab0e8c36ecf322851f2'
+  data.tar.gz: 44a27df536ced66a434eaf705caa617cb545f0883f979fdf8574b7b23544a109870873848ee3c6e802931a6b744d6af325cacaa4bbbf87ea243f0896e37a8dd9

data/README.md

@@ -17,7 +17,7 @@ class ApplicationController < ActionController::Base
   private
 
   def verify_agent!
-    @current_agent ||= Vestauth.provider.verify(http_method: request.method, uri: request.original_url, headers: request.headers)
+    @current_agent ||= Vestauth.tool.verify(http_method: request.method, uri: request.original_url, headers: request.headers)
   rescue => e
     render json: { error: { status: 401, code: 401, message: e.message } }, status: 401
   end

data/lib/vestauth/agent.rb

@@ -2,5 +2,20 @@
 
 module Vestauth
   module Agent
+    module_function
+
+    def headers(http_method:, uri:, private_key:, id:)
+      vestauth_binary.agent_headers(
+        http_method: http_method,
+        uri: uri,
+        private_key: private_key,
+        id: id
+      )
+    end
+
+    def vestauth_binary
+      Vestauth::Binary.new
+    end
+    private_class_method :vestauth_binary
   end
 end

data/lib/vestauth/binary.rb

@@ -2,7 +2,6 @@
 
 require "json"
 require "open3"
-require "shellwords"
 
 module Vestauth
   class Binary
@@ -10,10 +9,10 @@ module Vestauth
       @executable = executable
     end
 
-    def provider_verify(http_method:, uri:, signature:, signature_input:, signature_agent:)
+    def tool_verify(http_method:, uri:, signature:, signature_input:, signature_agent:)
       command = [
         @executable,
-        "provider",
+        "tool",
         "verify",
         http_method,
         uri,
@@ -28,15 +27,62 @@ module Vestauth
       run_json_command(command)
     end
 
+    def agent_headers(http_method:, uri:, private_key:, id:)
+      private_jwk = serialize_json_arg(private_key, name: "private_key")
+
+      command = [
+        @executable,
+        "agent",
+        "headers",
+        http_method,
+        uri,
+        "--private-jwk",
+        private_jwk,
+        "--uid",
+        id
+      ]
+
+      run_json_command(command)
+    end
+
+    def primitives_verify(http_method:, uri:, signature_header:, signature_input_header:, public_key:)
+      public_jwk = serialize_json_arg(public_key, name: "public_key")
+
+      command = [
+        @executable,
+        "primitives",
+        "verify",
+        http_method,
+        uri,
+        "--signature",
+        signature_header,
+        "--signature-input",
+        signature_input_header,
+        "--public-jwk",
+        public_jwk
+      ]
+
+      run_json_command(command)
+    end
+
     private
 
     def run_json_command(command_args)
-      command = command_args.map { |arg| Shellwords.escape(arg.to_s) }.join(" ")
-      stdout, stderr, status = Open3.capture3(command)
+      argv = command_args.map { |arg| arg.nil? ? "" : arg.to_s }
+      stdout, stderr, status = Open3.capture3(*argv)
 
       raise Vestauth::Error, (stderr.to_s.strip.empty? ? stdout : stderr) unless status.success?
 
       JSON.parse(stdout)
     end
+
+    def serialize_json_arg(value, name:)
+      return value if value.is_a?(String)
+      return JSON.generate(value) if value.is_a?(Hash) || value.is_a?(Array)
+      return JSON.generate(value.to_h) if value.respond_to?(:to_h)
+      return JSON.generate(value.as_json) if value.respond_to?(:as_json)
+
+      raise ArgumentError, "#{name} must be a JSON string, Hash/Array, or object responding to #to_h"
+    end
   end
 end

data/lib/vestauth/primitives.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Vestauth
+  module Primitives
+    module_function
+
+    def verify(http_method:, uri:, signature_header:, signature_input_header:, public_key:)
+      vestauth_binary.primitives_verify(
+        http_method: http_method,
+        uri: uri,
+        signature_header: signature_header,
+        signature_input_header: signature_input_header,
+        public_key: public_key
+      )
+    end
+
+    def vestauth_binary
+      Vestauth::Binary.new
+    end
+    private_class_method :vestauth_binary
+  end
+end

data/lib/vestauth/provider.rb

@@ -1,42 +1,7 @@
 # frozen_string_literal: true
 
-module Vestauth
-  module Provider
-    module_function
-
-    def verify(http_method:, uri:, headers:)
-      signature = signature_header(headers)
-      signature_input = signature_input_header(headers)
-      signature_agent = signature_agent_header(headers)
-
-      attrs = {
-        http_method: http_method,
-        uri: uri,
-        signature: signature,
-        signature_input: signature_input,
-        signature_agent: signature_agent
-      }
-      vestauth_binary.provider_verify(**attrs)
-    end
-
-    def vestauth_binary
-      Vestauth::Binary.new
-    end
-    private_class_method :vestauth_binary
+require_relative "tool"
 
-    def signature_header(headers)
-      headers["Signature"] || headers["signature"]
-    end
-    private_class_method :signature_header
-
-    def signature_input_header(headers)
-      headers["Signature-Input"] || headers["signature-input"]
-    end
-    private_class_method :signature_input_header
-
-    def signature_agent_header(headers)
-      headers["Signature-Agent"] || headers["signature-agent"]
-    end
-    private_class_method :signature_agent_header
-  end
+module Vestauth
+  Provider = Tool
 end

data/lib/vestauth/tool.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+module Vestauth
+  module Tool
+    module_function
+
+    def verify(http_method:, uri:, headers:)
+      signature = signature_header(headers)
+      signature_input = signature_input_header(headers)
+      signature_agent = signature_agent_header(headers)
+
+      attrs = {
+        http_method: http_method,
+        uri: uri,
+        signature: signature,
+        signature_input: signature_input,
+        signature_agent: signature_agent
+      }
+      vestauth_binary.tool_verify(**attrs)
+    end
+
+    def vestauth_binary
+      Vestauth::Binary.new
+    end
+    private_class_method :vestauth_binary
+
+    def signature_header(headers)
+      headers["Signature"] || headers["signature"]
+    end
+    private_class_method :signature_header
+
+    def signature_input_header(headers)
+      headers["Signature-Input"] || headers["signature-input"]
+    end
+    private_class_method :signature_input_header
+
+    def signature_agent_header(headers)
+      headers["Signature-Agent"] || headers["signature-agent"]
+    end
+    private_class_method :signature_agent_header
+  end
+end

data/lib/vestauth/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Vestauth
-  VERSION = "0.2.2"
+  VERSION = "0.4.0"
 end

data/lib/vestauth.rb

@@ -3,19 +3,29 @@
 require_relative "vestauth/version"
 require_relative "vestauth/agent"
 require_relative "vestauth/binary"
+require_relative "vestauth/primitives"
+require_relative "vestauth/tool"
 require_relative "vestauth/provider"
 
 module Vestauth
   class Error < StandardError; end
 
-  def self.provider
-    Provider
-  end
-
   def self.agent
     Agent
   end
 
+  def self.tool
+    Tool
+  end
+
+  class << self
+    alias provider tool
+  end
+
+  def self.primitives
+    Primitives
+  end
+
   def self.binary
     Binary
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: vestauth
 version: !ruby/object:Gem::Version
-  version: 0.2.2
+  version: 0.4.0
 platform: ruby
 authors:
 - motdotla
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-02-25 00:00:00.000000000 Z
+date: 2026-02-26 00:00:00.000000000 Z
 dependencies: []
 description: web-bot-auth for agents–from the creator of `dotenv` and `dotenvx`
 email:
@@ -25,7 +25,9 @@ files:
 - lib/vestauth.rb
 - lib/vestauth/agent.rb
 - lib/vestauth/binary.rb
+- lib/vestauth/primitives.rb
 - lib/vestauth/provider.rb
+- lib/vestauth/tool.rb
 - lib/vestauth/version.rb
 homepage: https://vestauth.com
 licenses: