admin_suite 0.6.1 → 0.6.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 964267328a54fb0d55bfb035fab32ba694b620b0f5cbdb45194e770a3138885f
-  data.tar.gz: eec49bd217460a272eb6ce1add0fd9ac487764a37e304bdcde105044f7eed80a
+  metadata.gz: dfafbff75d098582ef9df840c364f47ca801dc8df3d01b7be84f009b04f73f73
+  data.tar.gz: e91b0ffd0d579b5b07e3ff4ecdb5ad3bb829b761d86946aeface7148d6646a21
 SHA512:
-  metadata.gz: 5875a1f28a12afb57b1e43c38db7f4362f6ef896f2b0de7f0af2d949945ac1c60e17f0e24a5b3f967f753fdeac8960470f2076421ef31156f3fb64b03285fbd2
-  data.tar.gz: 76e74fce525a385fad34c84511f2affbfeca6df6ea147e81dfdaa393051c3b98915055f1b620040a140c6ce5e336823fc66928d2a0b01ca9017881914d530185
+  metadata.gz: 17b32e4625cc21f3a64fbecf03593c96a731bdec745b6e0accaf1464fbe8bbbbf0728c3efc135396ec57055f888fe04ba30463ff61c85bf8741766861a5ce327
+  data.tar.gz: 379e5d5ce01d0d22d7b3b9be52f2ebbcc409ec4f04a3ea0d6403b238540f1eb4749c9b172c115b9832d3baf90ce686b46eddeaa551a670637c72ee99d12bbc41

data/CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.2] - 2026-10-03
+
+### Fixed
+- Restored database-free dummy application boot and executable action coverage.
+- Updated the development dummy application to Ruby 3.4.10.
+
+### Changed
+- Added architecture boundary checks and baseline validation to local and hosted CI.
+
 ## [0.6.1] - 2026-09-12
 
 ### Fixed

data/Gemfile

@@ -6,6 +6,7 @@ gemspec
 group :development, :test do
   # Provides the asset pipeline used by the engine/dummy app.
   gem "propshaft"
+  gem "archspec", "1.1.0", require: false
 end
 
 group :test do

data/README.md

@@ -20,6 +20,10 @@ Canonical AdminSuite documentation lives in the TechWright vault at
 `../_vault/products/admin_suite/docs/`. This repo intentionally has no root
 `docs/` tree or docs symlink.
 
+## Architecture check
+
+`bin/archspec check` and `bin/archspec-baseline` enforce engine, namespace, and dummy-app boundaries in `Archspec.rb`. They do not boot Rails. Do not grow `archspec_todo.yml`.
+
 ## Quickstart
 
 Add the gem:

data/lib/admin_suite/version.rb

@@ -2,7 +2,7 @@
 
 module AdminSuite
   module Version
-    VERSION = "0.6.1"
+    VERSION = "0.6.2"
   end
 
   # Backward-compatible constant.

data/test/archspec/enforcement_test.rb

@@ -0,0 +1,115 @@
+# frozen_string_literal: true
+
+require "minitest/autorun" unless defined?(Rails)
+require "yaml"
+require "open3"
+require "tmpdir"
+require "fileutils"
+
+class ArchspecEnforcementTest < Minitest::Test
+  ROOT = File.expand_path("../..", __dir__)
+
+  def test_pull_request_architecture_job_is_fail_closed_and_matches_bin_ci
+    workflow = YAML.load_file(File.join(ROOT, ".github/workflows/ci.yml"))
+    job = workflow.fetch("jobs").fetch("architecture")
+    assert_equal "ubuntu-latest", job["runs-on"]
+    assert_nil job["continue-on-error"]
+    assert_nil job["if"]
+
+    commands = job.fetch("steps").filter_map { |step| step["run"] }
+    assert_includes commands, "bin/archspec check"
+    assert_includes commands, "bin/archspec-baseline"
+    assert commands.none? { |command| command.include?("continue-on-error") || command.include?("[ -f") }
+
+    ci = File.read(File.join(ROOT, "bin/ci"))
+    assert_includes ci, 'step "Architecture: ArchSpec" bin/archspec check'
+    assert_includes ci, 'step "Architecture: baseline cap" bin/archspec-baseline'
+    refute_match(/if \[ -f bin\/archspec \]/, ci)
+    refute_match(/if \[ -f Archspec\.rb \]/, ci)
+    assert_equal "read", job.dig("permissions", "contents")
+  end
+
+  def test_mcp_cannot_call_rejects_a_write
+    spec = File.read(File.join(ROOT, "Archspec.rb"))
+    rule = spec[/mcp\.cannot_call\b.*?receiver: :any/m]
+    assert rule, "mcp.cannot_call must forbid writes on any receiver"
+    refute_match(/ui\.cannot_call/, rule)
+    assert_match(/queries\.cannot_use\b[^\n]*:mcp\b/, spec)
+
+    Dir.mktmpdir do |dir|
+      FileUtils.mkdir_p(File.join(dir, "lib/admin_suite/mcp"))
+      File.write(File.join(dir, "Archspec.rb"), spec)
+      File.write(File.join(dir, "archspec_todo.yml"), File.read(File.join(ROOT, "archspec_todo.yml")))
+      File.write(File.join(dir, "lib/admin_suite/mcp/probe.rb"), <<~RUBY)
+        module AdminSuite
+          module Mcp
+            class Probe
+              def call(record)
+                record.save
+              end
+            end
+          end
+        end
+      RUBY
+
+      output, status = run_archspec(dir, "check")
+      refute status.success?, output
+      assert_match(/must not call #save/, output)
+    end
+  end
+
+  def test_missing_and_invalid_configuration_fail
+    Dir.mktmpdir do |dir|
+      _output, status = run_archspec(dir, "check", "--config", File.join(dir, "missing.rb"))
+      refute status.success?
+    end
+
+    Dir.mktmpdir do |dir|
+      File.write(File.join(dir, "Archspec.rb"), "this is not ruby (\n")
+      _output, status = run_archspec(dir, "check")
+      refute status.success?
+    end
+  end
+
+  def test_stale_baseline_id_fails_and_current_set_passes
+    Dir.mktmpdir do |dir|
+      FileUtils.mkdir_p(File.join(dir, "app/models"))
+      File.write(File.join(dir, "app/models/widget.rb"), "class Widget\nend\n")
+      File.write(File.join(dir, "Archspec.rb"), <<~CONFIG)
+        todo "archspec_todo.yml"
+        component :models, in: "app/models/**/*.rb"
+        models.cannot_reference_constants "Nope"
+      CONFIG
+      File.write(File.join(dir, "archspec_todo.yml"), <<~YAML)
+        ---
+        violations: []
+      YAML
+
+      _output, status = run_baseline(dir)
+      assert status.success?, "empty matching baseline must pass"
+
+      File.write(File.join(dir, "archspec_todo.yml"), <<~YAML)
+        ---
+        violations:
+        - id: deadbeefdeadbeefdeadbeef
+          rule: constants.forbid
+          path: app/models/widget.rb
+          line: 1
+          message: gone
+      YAML
+      output, status = run_baseline(dir)
+      refute status.success?
+      assert_match(/stale deadbeefdeadbeefdeadbeef/, output)
+    end
+  end
+
+  private
+
+  def run_archspec(dir, *args)
+    Open3.capture2e({ "BUNDLE_GEMFILE" => File.join(ROOT, "Gemfile") }, File.join(ROOT, "bin/archspec"), *args, chdir: dir)
+  end
+
+  def run_baseline(dir)
+    Open3.capture2e({ "BUNDLE_GEMFILE" => File.join(ROOT, "Gemfile") }, File.join(ROOT, "bin/archspec-baseline"), chdir: dir)
+  end
+end

data/test/dummy/config/environments/development.rb

@@ -31,14 +31,17 @@ Rails.application.configure do
   # Print deprecation notices to the Rails logger.
   config.active_support.deprecation = :log
 
-  # Raise an error on page load if there are pending migrations.
-  config.active_record.migration_error = :page_load
+  # The dummy app can run without the Active Record railtie.
+  if config.respond_to?(:active_record)
+    # Raise an error on page load if there are pending migrations.
+    config.active_record.migration_error = :page_load
 
-  # Highlight code that triggered database queries in logs.
-  config.active_record.verbose_query_logs = true
+    # Highlight code that triggered database queries in logs.
+    config.active_record.verbose_query_logs = true
 
-  # Append comments with runtime information tags to SQL queries in logs.
-  config.active_record.query_log_tags_enabled = true
+    # Append comments with runtime information tags to SQL queries in logs.
+    config.active_record.query_log_tags_enabled = true
+  end
 
   # Highlight code that triggered redirect in logs.
   config.action_dispatch.verbose_redirect_logs = true

data/test/dummy_boot_test.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+require "test_helper"
+require "open3"
+require "rbconfig"
+
+class DummyBootTest < ActiveSupport::TestCase
+  test "database-free dummy boots and eager loads in development" do
+    script = <<~RUBY
+      require_relative "test/dummy/config/environment"
+      abort "Unexpected ActiveRecord railtie" if Rails.application.config.respond_to?(:active_record)
+      Rails.application.eager_load!
+    RUBY
+    stdout, stderr, status = Open3.capture3(
+      { "RAILS_ENV" => "development" }, RbConfig.ruby, "-e", script,
+      chdir: File.expand_path("..", __dir__)
+    )
+
+    assert status.success?, "Development boot failed:\n#{stdout}#{stderr}"
+  end
+end

data/test/lib/action_executor_test.rb

@@ -2,6 +2,8 @@
 
 require "test_helper"
 require "tmpdir"
+require "open3"
+require "rbconfig"
 
 module Admin
   module Base
@@ -96,16 +98,22 @@ module Admin
       end
 
       test "load_action_handlers_for_admin_suite returns early when AdminSuite is not defined" do
-        # Temporarily undefine AdminSuite to test early return
-        admin_suite_defined = defined?(AdminSuite)
-
-        skip "Cannot test AdminSuite undefined condition when AdminSuite is required" if admin_suite_defined
-
-        resource_class = Struct.new(:resource_name).new("test")
-        executor = ActionExecutor.new(resource_class, :test, nil)
+        # Bundler evaluates the gemspec and defines AdminSuite::VERSION.
+        # Bypass its RUBYOPT preload in this dependency-free subprocess.
+        script = <<~RUBY
+          require_relative "lib/admin/base/action_executor"
+          abort "AdminSuite unexpectedly loaded" if defined?(AdminSuite)
+          executor = Admin::Base::ActionExecutor.new(nil, :test, nil)
+          result = executor.send(:load_action_handlers_for_admin_suite!)
+          abort "Expected early return" unless result.nil?
+          abort "Handlers marked loaded" if Admin::Base::ActionExecutor.handlers_loaded
+        RUBY
+        stdout, stderr, status = Open3.capture3(
+          { "RUBYOPT" => nil }, RbConfig.ruby, "--disable-gems", "-e", script,
+          chdir: File.expand_path("../..", __dir__)
+        )
 
-        # This should return early without error
-        assert_nil executor.send(:load_action_handlers_for_admin_suite!)
+        assert status.success?, "Isolated executor failed:\n#{stdout}#{stderr}"
       end
 
       test "load_action_handlers_for_admin_suite handles empty action_globs gracefully" do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: admin_suite
 version: !ruby/object:Gem::Version
-  version: 0.6.1
+  version: 0.6.2
 platform: ruby
 authors:
 - TechWright Labs
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-09-12 00:00:00.000000000 Z
+date: 2026-10-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -262,6 +262,7 @@ files:
 - lib/generators/admin_suite/scaffold/scaffold_generator.rb
 - lib/tasks/admin_suite_tailwind.rake
 - lib/tasks/admin_suite_test.rake
+- test/archspec/enforcement_test.rb
 - test/controllers/resources_controller_test.rb
 - test/dummy/Gemfile
 - test/dummy/README.md
@@ -305,6 +306,7 @@ files:
 - test/dummy/public/icon.svg
 - test/dummy/public/robots.txt
 - test/dummy/test/test_helper.rb
+- test/dummy_boot_test.rb
 - test/fixtures/docs/progress/PROGRESS_REPORT.md
 - test/integration/association_linking_test.rb
 - test/integration/authentication_test.rb