admin_suite 0.6.1 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 964267328a54fb0d55bfb035fab32ba694b620b0f5cbdb45194e770a3138885f
-  data.tar.gz: eec49bd217460a272eb6ce1add0fd9ac487764a37e304bdcde105044f7eed80a
+  metadata.gz: 7ea45471224303ab612d3d27887cd3245fcd1f942c06c4a3108e98e5ee91ca4e
+  data.tar.gz: ad3e08e25c5e977ace59521565309f5702fbbfb6ff6d2a20d09630161d659c51
 SHA512:
-  metadata.gz: 5875a1f28a12afb57b1e43c38db7f4362f6ef896f2b0de7f0af2d949945ac1c60e17f0e24a5b3f967f753fdeac8960470f2076421ef31156f3fb64b03285fbd2
-  data.tar.gz: 76e74fce525a385fad34c84511f2affbfeca6df6ea147e81dfdaa393051c3b98915055f1b620040a140c6ce5e336823fc66928d2a0b01ca9017881914d530185
+  metadata.gz: b971fe2fbd3d44d7b3fc0addefd909c0cde1716442cd80c0e3627ba6bdcbcd3c4a9d42eac9e4dab767fef10c1793279639ec63c32c934682520afd8ea931998e
+  data.tar.gz: 7f6f6a1bdbdf194cf5eed18cbe5336c021ab4df544af1c62f0dbc4ad96e6a5c24f503126f50c1702af2bf1c8ab7c2a5ac70ba8fbf5ea6890903292b0190b622d

data/.gitignore

@@ -10,6 +10,11 @@
 /test/dummy/storage/
 admin_suite-*.gem
 /.bundle/
+/site/_site/
+/site/.jekyll-cache/
+/site/.sass-cache/
+/site/.bundle/
+/site/vendor/
 
 # Agent scratch: git worktrees created per-phase, and subagent-driven-development
 # ledgers/briefs/review diffs. Never part of the gem — `spec.files` is an

data/CHANGELOG.md

@@ -5,6 +5,25 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.0] - 2026-10-04
+
+### Added
+- Public Jekyll documentation with a dark Just the Docs theme, responsive
+  navigation, full-text search, and versioned gem metadata.
+- GitHub Pages build and deployment workflow with rendered link, asset, anchor,
+  and search checks. Pull requests validate without deploying.
+- Deterministic, allowlisted publication export from canonical vault docs with
+  source revision tracking, content hashes, and export drift checks.
+
+## [0.6.2] - 2026-10-03
+
+### Fixed
+- Restored database-free dummy application boot and executable action coverage.
+- Updated the development dummy application to Ruby 3.4.10.
+
+### Changed
+- Added architecture boundary checks and baseline validation to local and hosted CI.
+
 ## [0.6.1] - 2026-09-12
 
 ### Fixed

data/CONTRIBUTING.md

@@ -19,6 +19,11 @@ See `../_vault/products/admin_suite/docs/development.md` for detailed informatio
 
 ## Pull Requests
 
+For the public Jekyll site, edit the canonical vault sources and regenerate the
+publication snapshot; do not hand-edit `site/generated/`. See
+`../_vault/products/admin_suite/docs/docs-publication.md` or the
+[published workflow](https://techwright-lab.github.io/admin_suite/docs-publication/).
+
 1. Create a feature branch from `main`
 2. Make your changes
 3. Add or update tests as needed

data/Gemfile

@@ -6,6 +6,7 @@ gemspec
 group :development, :test do
   # Provides the asset pipeline used by the engine/dummy app.
   gem "propshaft"
+  gem "archspec", "1.1.0", require: false
 end
 
 group :test do

data/README.md

@@ -16,9 +16,21 @@ across other products.
 
 ## Documentation
 
+[Read the documentation](https://techwright-lab.github.io/admin_suite/) —
+[Installation](https://techwright-lab.github.io/admin_suite/installation/),
+[Resources](https://techwright-lab.github.io/admin_suite/resources/), and
+[Admin MCP](https://techwright-lab.github.io/admin_suite/mcp/).
+
 Canonical AdminSuite documentation lives in the TechWright vault at
 `../_vault/products/admin_suite/docs/`. This repo intentionally has no root
-`docs/` tree or docs symlink.
+`docs/` tree or docs symlink. The Jekyll site in `site/` publishes a generated,
+allowlisted snapshot. See the [publication guide](https://techwright-lab.github.io/admin_suite/docs-publication/)
+or its canonical source, `../_vault/products/admin_suite/docs/docs-publication.md`,
+for export, drift checks, local preview, and GitHub Pages setup.
+
+## Architecture check
+
+`bin/archspec check` and `bin/archspec-baseline` enforce engine, namespace, and dummy-app boundaries in `Archspec.rb`. They do not boot Rails. Do not grow `archspec_todo.yml`.
 
 ## Quickstart
 
@@ -55,7 +67,7 @@ AdminSuite.configure do |config|
 end
 ```
 
-Read more: `../_vault/products/admin_suite/docs/configuration.md`
+Read more: [Configuration](https://techwright-lab.github.io/admin_suite/configuration/).
 
 Set `config.authorize` to decide *what* an authenticated actor may do:
 
@@ -71,7 +83,7 @@ keeps authentication as the only web gate; MCP serves no tools or data. Resource
 CRUD, `toggle`, and named execute/bulk actions regardless of this hook.
 
 The MCP endpoint is `<mount>/mcp`. See
-`../_vault/products/admin_suite/docs/mcp.md` for setup, tool contracts and migration.
+[Admin MCP](https://techwright-lab.github.io/admin_suite/mcp/) for setup, tool contracts and migration.
 
 ### Add portals (navigation metadata)
 
@@ -84,7 +96,7 @@ AdminSuite.configure do |config|
 end
 ```
 
-Read more: `../_vault/products/admin_suite/docs/portals.md`
+Read more: [Portals & dashboards](https://techwright-lab.github.io/admin_suite/portals/).
 
 ### Add a resource
 
@@ -123,7 +135,7 @@ module Admin
 end
 ```
 
-Read more: `../_vault/products/admin_suite/docs/resources.md` and `../_vault/products/admin_suite/docs/fields.md`
+Read more: [Resources](https://techwright-lab.github.io/admin_suite/resources/) and [Fields](https://techwright-lab.github.io/admin_suite/fields/).
 
 ### Add docs (optional)
 
@@ -133,7 +145,7 @@ Then visit:
 
 - `/internal/admin/docs`
 
-Read more: `../_vault/products/admin_suite/docs/docs_viewer.md`
+Read more: [Docs viewer](https://techwright-lab.github.io/admin_suite/docs-viewer/).
 
 ## Contributing
 
@@ -142,4 +154,3 @@ See:
 - `CONTRIBUTING.md`
 - `../_vault/products/admin_suite/docs/development.md`
 - `../_vault/products/admin_suite/docs/releasing.md`
-

data/lib/admin_suite/version.rb

@@ -2,7 +2,7 @@
 
 module AdminSuite
   module Version
-    VERSION = "0.6.1"
+    VERSION = "0.7.0"
   end
 
   # Backward-compatible constant.

data/test/archspec/enforcement_test.rb

@@ -0,0 +1,115 @@
+# frozen_string_literal: true
+
+require "minitest/autorun" unless defined?(Rails)
+require "yaml"
+require "open3"
+require "tmpdir"
+require "fileutils"
+
+class ArchspecEnforcementTest < Minitest::Test
+  ROOT = File.expand_path("../..", __dir__)
+
+  def test_pull_request_architecture_job_is_fail_closed_and_matches_bin_ci
+    workflow = YAML.load_file(File.join(ROOT, ".github/workflows/ci.yml"))
+    job = workflow.fetch("jobs").fetch("architecture")
+    assert_equal "ubuntu-latest", job["runs-on"]
+    assert_nil job["continue-on-error"]
+    assert_nil job["if"]
+
+    commands = job.fetch("steps").filter_map { |step| step["run"] }
+    assert_includes commands, "bin/archspec check"
+    assert_includes commands, "bin/archspec-baseline"
+    assert commands.none? { |command| command.include?("continue-on-error") || command.include?("[ -f") }
+
+    ci = File.read(File.join(ROOT, "bin/ci"))
+    assert_includes ci, 'step "Architecture: ArchSpec" bin/archspec check'
+    assert_includes ci, 'step "Architecture: baseline cap" bin/archspec-baseline'
+    refute_match(/if \[ -f bin\/archspec \]/, ci)
+    refute_match(/if \[ -f Archspec\.rb \]/, ci)
+    assert_equal "read", job.dig("permissions", "contents")
+  end
+
+  def test_mcp_cannot_call_rejects_a_write
+    spec = File.read(File.join(ROOT, "Archspec.rb"))
+    rule = spec[/mcp\.cannot_call\b.*?receiver: :any/m]
+    assert rule, "mcp.cannot_call must forbid writes on any receiver"
+    refute_match(/ui\.cannot_call/, rule)
+    assert_match(/queries\.cannot_use\b[^\n]*:mcp\b/, spec)
+
+    Dir.mktmpdir do |dir|
+      FileUtils.mkdir_p(File.join(dir, "lib/admin_suite/mcp"))
+      File.write(File.join(dir, "Archspec.rb"), spec)
+      File.write(File.join(dir, "archspec_todo.yml"), File.read(File.join(ROOT, "archspec_todo.yml")))
+      File.write(File.join(dir, "lib/admin_suite/mcp/probe.rb"), <<~RUBY)
+        module AdminSuite
+          module Mcp
+            class Probe
+              def call(record)
+                record.save
+              end
+            end
+          end
+        end
+      RUBY
+
+      output, status = run_archspec(dir, "check")
+      refute status.success?, output
+      assert_match(/must not call #save/, output)
+    end
+  end
+
+  def test_missing_and_invalid_configuration_fail
+    Dir.mktmpdir do |dir|
+      _output, status = run_archspec(dir, "check", "--config", File.join(dir, "missing.rb"))
+      refute status.success?
+    end
+
+    Dir.mktmpdir do |dir|
+      File.write(File.join(dir, "Archspec.rb"), "this is not ruby (\n")
+      _output, status = run_archspec(dir, "check")
+      refute status.success?
+    end
+  end
+
+  def test_stale_baseline_id_fails_and_current_set_passes
+    Dir.mktmpdir do |dir|
+      FileUtils.mkdir_p(File.join(dir, "app/models"))
+      File.write(File.join(dir, "app/models/widget.rb"), "class Widget\nend\n")
+      File.write(File.join(dir, "Archspec.rb"), <<~CONFIG)
+        todo "archspec_todo.yml"
+        component :models, in: "app/models/**/*.rb"
+        models.cannot_reference_constants "Nope"
+      CONFIG
+      File.write(File.join(dir, "archspec_todo.yml"), <<~YAML)
+        ---
+        violations: []
+      YAML
+
+      _output, status = run_baseline(dir)
+      assert status.success?, "empty matching baseline must pass"
+
+      File.write(File.join(dir, "archspec_todo.yml"), <<~YAML)
+        ---
+        violations:
+        - id: deadbeefdeadbeefdeadbeef
+          rule: constants.forbid
+          path: app/models/widget.rb
+          line: 1
+          message: gone
+      YAML
+      output, status = run_baseline(dir)
+      refute status.success?
+      assert_match(/stale deadbeefdeadbeefdeadbeef/, output)
+    end
+  end
+
+  private
+
+  def run_archspec(dir, *args)
+    Open3.capture2e({ "BUNDLE_GEMFILE" => File.join(ROOT, "Gemfile") }, File.join(ROOT, "bin/archspec"), *args, chdir: dir)
+  end
+
+  def run_baseline(dir)
+    Open3.capture2e({ "BUNDLE_GEMFILE" => File.join(ROOT, "Gemfile") }, File.join(ROOT, "bin/archspec-baseline"), chdir: dir)
+  end
+end

data/test/dummy/config/environments/development.rb

@@ -31,14 +31,17 @@ Rails.application.configure do
   # Print deprecation notices to the Rails logger.
   config.active_support.deprecation = :log
 
-  # Raise an error on page load if there are pending migrations.
-  config.active_record.migration_error = :page_load
+  # The dummy app can run without the Active Record railtie.
+  if config.respond_to?(:active_record)
+    # Raise an error on page load if there are pending migrations.
+    config.active_record.migration_error = :page_load
 
-  # Highlight code that triggered database queries in logs.
-  config.active_record.verbose_query_logs = true
+    # Highlight code that triggered database queries in logs.
+    config.active_record.verbose_query_logs = true
 
-  # Append comments with runtime information tags to SQL queries in logs.
-  config.active_record.query_log_tags_enabled = true
+    # Append comments with runtime information tags to SQL queries in logs.
+    config.active_record.query_log_tags_enabled = true
+  end
 
   # Highlight code that triggered redirect in logs.
   config.action_dispatch.verbose_redirect_logs = true

data/test/dummy_boot_test.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+require "test_helper"
+require "open3"
+require "rbconfig"
+
+class DummyBootTest < ActiveSupport::TestCase
+  test "database-free dummy boots and eager loads in development" do
+    script = <<~RUBY
+      require_relative "test/dummy/config/environment"
+      abort "Unexpected ActiveRecord railtie" if Rails.application.config.respond_to?(:active_record)
+      Rails.application.eager_load!
+    RUBY
+    stdout, stderr, status = Open3.capture3(
+      { "RAILS_ENV" => "development" }, RbConfig.ruby, "-e", script,
+      chdir: File.expand_path("..", __dir__)
+    )
+
+    assert status.success?, "Development boot failed:\n#{stdout}#{stderr}"
+  end
+end

data/test/lib/action_executor_test.rb

@@ -2,6 +2,8 @@
 
 require "test_helper"
 require "tmpdir"
+require "open3"
+require "rbconfig"
 
 module Admin
   module Base
@@ -96,16 +98,22 @@ module Admin
       end
 
       test "load_action_handlers_for_admin_suite returns early when AdminSuite is not defined" do
-        # Temporarily undefine AdminSuite to test early return
-        admin_suite_defined = defined?(AdminSuite)
-
-        skip "Cannot test AdminSuite undefined condition when AdminSuite is required" if admin_suite_defined
-
-        resource_class = Struct.new(:resource_name).new("test")
-        executor = ActionExecutor.new(resource_class, :test, nil)
+        # Bundler evaluates the gemspec and defines AdminSuite::VERSION.
+        # Bypass its RUBYOPT preload in this dependency-free subprocess.
+        script = <<~RUBY
+          require_relative "lib/admin/base/action_executor"
+          abort "AdminSuite unexpectedly loaded" if defined?(AdminSuite)
+          executor = Admin::Base::ActionExecutor.new(nil, :test, nil)
+          result = executor.send(:load_action_handlers_for_admin_suite!)
+          abort "Expected early return" unless result.nil?
+          abort "Handlers marked loaded" if Admin::Base::ActionExecutor.handlers_loaded
+        RUBY
+        stdout, stderr, status = Open3.capture3(
+          { "RUBYOPT" => nil }, RbConfig.ruby, "--disable-gems", "-e", script,
+          chdir: File.expand_path("../..", __dir__)
+        )
 
-        # This should return early without error
-        assert_nil executor.send(:load_action_handlers_for_admin_suite!)
+        assert status.success?, "Isolated executor failed:\n#{stdout}#{stderr}"
       end
 
       test "load_action_handlers_for_admin_suite handles empty action_globs gracefully" do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: admin_suite
 version: !ruby/object:Gem::Version
-  version: 0.6.1
+  version: 0.7.0
 platform: ruby
 authors:
 - TechWright Labs
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-09-12 00:00:00.000000000 Z
+date: 2026-10-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -262,6 +262,7 @@ files:
 - lib/generators/admin_suite/scaffold/scaffold_generator.rb
 - lib/tasks/admin_suite_tailwind.rake
 - lib/tasks/admin_suite_test.rake
+- test/archspec/enforcement_test.rb
 - test/controllers/resources_controller_test.rb
 - test/dummy/Gemfile
 - test/dummy/README.md
@@ -305,6 +306,7 @@ files:
 - test/dummy/public/icon.svg
 - test/dummy/public/robots.txt
 - test/dummy/test/test_helper.rb
+- test/dummy_boot_test.rb
 - test/fixtures/docs/progress/PROGRESS_REPORT.md
 - test/integration/association_linking_test.rb
 - test/integration/authentication_test.rb
@@ -359,6 +361,7 @@ licenses:
 - MIT
 metadata:
   rubygems_mfa_required: 'true'
+  documentation_uri: https://techwright-lab.github.io/admin_suite/
   source_code_uri: https://github.com/techwright-lab/admin_suite
   changelog_uri: https://github.com/techwright-lab/admin_suite/blob/main/CHANGELOG.md
 post_install_message: