forest_liana 9.20.9 → 9.20.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8081936e6d6a125213c778a94576d1eaaf5560eb838a89563a6e113ab79a2e46
-  data.tar.gz: b5cb7df552d00872c40981ee37009b534bb5a254ee637d7dd39dd71b840f6124
+  metadata.gz: 5449af5d3c0aa87c4c56f8417d3527e279690d22a34f02cb081cee74d2de06b1
+  data.tar.gz: '044797af4de1b516a177d859566fdbdea4e5458eb938c107077d01a19314a763'
 SHA512:
-  metadata.gz: a1e231f576b02caed5a80f12fff4d6baabd4355ef9f5aae79afb3f4a6663e29cda2cdd078088e4949d42435c1bcf8f28b82bc7c90c619f971e17da7fa81bd45a
-  data.tar.gz: 0a93106150c9ead61198c464baaab09c0eb0974abc5c78570e980baa48bd3a05bdb4677720fa8b35704375665c06b297cad763325249601d08962222a9c444d4
+  metadata.gz: cce3c3edaacf3cea3dfc9ea29f3a7391cf2e1a09b399784c1be06c767d6013e600d70c7ca2fa70673451c0e18431df0d521e3cff2285408c003ef4911ca18336
+  data.tar.gz: b56dc37e18b8f8e78e730c1d8eb844731134d22be8478a27e4ea576ff75df9523f6c6ba7b7da8b07a585b97419d9b2d3058656527acad2dcb94146533e9afabd

data/app/models/forest_liana/model/action.rb

@@ -81,4 +81,29 @@ class ForestLiana::Model::Action
   def persisted?
     false
   end
+
+  # Normalized at the boundary so every consumer sees one canonical value: the schema sent to
+  # Forest (the UI appends /hooks/load to it), the permission lookup comparing request paths,
+  # and the routes drawn from it. Leading slash kept as declared — consumers tolerate both.
+  def endpoint=(value)
+    @endpoint = value && value.to_s.gsub(%r{/+}, '/').delete_suffix('/')
+  end
+
+  def endpoint_under_forest_mount?
+    normalized_endpoint.start_with?('forest/')
+  end
+
+  def engine_relative_endpoint
+    normalized_endpoint.delete_prefix('forest')
+  end
+
+  def absolute_endpoint
+    "/#{normalized_endpoint}"
+  end
+
+  private
+
+  def normalized_endpoint
+    endpoint.to_s.delete_prefix('/')
+  end
 end

data/config/routes/actions.rb

@@ -1,10 +1,13 @@
 ForestLiana.apimap.each do |collection|
   if !collection.actions.empty?
     collection.actions.each do |action|
+      # Endpoints outside the mount are routed on the host app instead — see ForestLiana::Engine.
+      next unless action.endpoint_under_forest_mount?
+
       # Unconditional: clients probe /hooks/load even when no load hook is declared.
-      post action.endpoint.sub('forest', '') + '/hooks/load' => 'actions#load', action_name: ActiveSupport::Inflector.parameterize(action.name)
+      post action.engine_relative_endpoint + '/hooks/load' => 'actions#load', action_name: ActiveSupport::Inflector.parameterize(action.name)
       if action.hooks && action.hooks[:change].present?
-        post action.endpoint.sub('forest', '') + '/hooks/change' => 'actions#change', action_name: ActiveSupport::Inflector.parameterize(action.name)
+        post action.engine_relative_endpoint + '/hooks/change' => 'actions#change', action_name: ActiveSupport::Inflector.parameterize(action.name)
       end
     end
   end

data/lib/forest_liana/engine.rb

@@ -127,6 +127,32 @@ module ForestLiana
           end
         end
       end
+
+      ForestLiana::Engine.register_out_of_mount_hook_routes
+    end
+
+    # An endpoint outside the engine mount can only be served by the host router: a route drawn in
+    # the engine gets prefixed with the mount, where no client ever calls. Prepended so a host
+    # catch-all (SPA fallback) cannot shadow the hooks, and registered from after_initialize rather
+    # than from config/routes/actions.rb, which is re-evaluated on every reload and would stack a
+    # duplicate block per pass — prepended blocks persist across reloads on their own. Defined here
+    # so the block's closure captures this empty scope, not after_initialize's locals: the block is
+    # retained by the router for the process lifetime and would otherwise pin the bootstrapper.
+    def self.register_out_of_mount_hook_routes
+      Rails.application.routes.prepend do
+        ForestLiana.apimap.each do |collection|
+          collection.actions.each do |action|
+            next if action.endpoint_under_forest_mount?
+
+            post "#{action.absolute_endpoint}/hooks/load" => 'forest_liana/actions#load',
+              action_name: ActiveSupport::Inflector.parameterize(action.name)
+            if action.hooks && action.hooks[:change].present?
+              post "#{action.absolute_endpoint}/hooks/change" => 'forest_liana/actions#change',
+                action_name: ActiveSupport::Inflector.parameterize(action.name)
+            end
+          end
+        end
+      end
     end
   end
 end

data/lib/forest_liana/version.rb

@@ -1,3 +1,3 @@
 module ForestLiana
-  VERSION = "9.20.9"
+  VERSION = "9.20.10"
 end

data/spec/dummy/app/controllers/host_catch_all_controller.rb

@@ -0,0 +1,5 @@
+class HostCatchAllController < ActionController::Base
+  def index
+    render json: { caught_by: 'host catch-all' }
+  end
+end

data/spec/dummy/config/routes.rb

@@ -7,4 +7,7 @@ Rails.application.routes.draw do
   end
 
   mount ForestLiana::Engine => "/forest"
+
+  # Stands in for a host SPA fallback: hooks routes on out-of-mount endpoints must still win.
+  match '/api/*path', to: 'host_catch_all#index', via: :all
 end

data/spec/dummy/lib/forest_liana/collections/island.rb

@@ -180,6 +180,20 @@ class Forest::Island
       }
     }
 
+  action 'out_of_mount_action',
+    endpoint: '/api/custom/islands/out_of_mount_action',
+    fields: [foo],
+    hooks: {
+      :load => -> (context) {
+        context[:fields]
+      },
+      :change => {
+        'on_foo_changed' => -> (context) {
+          context[:fields]
+        }
+      }
+    }
+
   action 'multiple_enums_action',
     fields: [foo, multiple_enum],
     hooks: {

data/spec/models/forest_liana/model/action_spec.rb

@@ -0,0 +1,48 @@
+module ForestLiana
+  describe Model::Action do
+    def action_with(endpoint)
+      Model::Action.new(name: 'an action', endpoint: endpoint)
+    end
+
+    describe 'endpoint routing' do
+      it 'defaults to an endpoint under the mount, with or without a leading slash' do
+        action = Model::Action.new(name: 'an action')
+
+        expect(action.endpoint).to eq('forest/actions/an-action')
+        expect(action.endpoint_under_forest_mount?).to be true
+        expect(action.engine_relative_endpoint).to eq('/actions/an-action')
+
+        expect(action_with('/forest/actions/foo').endpoint_under_forest_mount?).to be true
+        expect(action_with('/forest/actions/foo').engine_relative_endpoint).to eq('/actions/foo')
+      end
+
+      it 'routes an endpoint outside the mount on the host, verbatim' do
+        action = action_with('/domains/organizations/suspensions/suspend')
+
+        expect(action.endpoint_under_forest_mount?).to be false
+        expect(action.absolute_endpoint).to eq('/domains/organizations/suspensions/suspend')
+      end
+
+      # A trailing or doubled slash would otherwise desynchronize the three consumers of the
+      # declared endpoint: the drawn route, the schema the UI appends /hooks/load to, and the
+      # permission lookup comparing request paths.
+      it 'normalizes redundant slashes at assignment, so every consumer sees one value' do
+        expect(action_with('/domains/x/suspend/').endpoint).to eq('/domains/x/suspend')
+        expect(action_with('//domains/x/suspend').endpoint).to eq('/domains/x/suspend')
+        expect(action_with('/domains/x/suspend/').absolute_endpoint).to eq('/domains/x/suspend')
+        expect(action_with('domains/x/suspend').endpoint).to eq('domains/x/suspend')
+        expect(action_with('/forest/actions/foo/').engine_relative_endpoint).to eq('/actions/foo')
+        expect(action_with('//forest/actions/foo').endpoint_under_forest_mount?).to be true
+      end
+
+      # `sub('forest', '')` used to match anywhere, mangling these into '/ry/actions/x' and '/my//x'.
+      it 'does not treat a path merely containing "forest" as being under the mount' do
+        expect(action_with('forestry/actions/x').endpoint_under_forest_mount?).to be false
+        expect(action_with('forestry/actions/x').absolute_endpoint).to eq('/forestry/actions/x')
+
+        expect(action_with('my/forest/x').endpoint_under_forest_mount?).to be false
+        expect(action_with('my/forest/x').absolute_endpoint).to eq('/my/forest/x')
+      end
+    end
+  end
+end

data/spec/requests/actions_controller_spec.rb

@@ -170,6 +170,53 @@ describe 'Requesting Actions routes', :type => :request  do
       end
     end
 
+    describe 'on an endpoint declared outside the engine mount' do
+      params = {
+        data: {
+          attributes: { ids: [1], collection_name: 'Island' }
+        }
+      }
+
+      # The dummy app declares a `/api/*path` catch-all standing in for a host SPA fallback: these
+      # routes have to outrank it, or the 404 this fix removes comes straight back.
+      it 'should serve /load at the endpoint the client calls' do
+        post '/api/custom/islands/out_of_mount_action/hooks/load', params: JSON.dump(params), headers: headers
+        expect(response.status).to eq(200)
+        expect(JSON.parse(response.body)['fields'].map { |field| field['field'] }).to eq(['foo'])
+      end
+
+      it 'should let the host catch-all keep every other path under it' do
+        post '/api/custom/islands/something_else', params: JSON.dump(params), headers: headers
+        expect(JSON.parse(response.body)).to eq({'caught_by' => 'host catch-all'})
+      end
+
+      it 'should serve /change at the endpoint the client calls' do
+        action = island.actions.select { |action| action.name == 'out_of_mount_action' }.first
+        foo = action.fields.select { |field| field[:field] == 'foo' }.first
+        updated_foo = foo.clone.merge({:previousValue => nil, :value => 'bar'})
+        p = {
+          data: {
+            attributes: {
+              ids: [1],
+              fields: [updated_foo],
+              collection_name: 'Island',
+              changed_field: 'foo'
+            }
+          }
+        }
+
+        post '/api/custom/islands/out_of_mount_action/hooks/change', params: JSON.dump(p), headers: headers
+        expect(response.status).to eq(200)
+        expect(JSON.parse(response.body)['fields'].map { |field| field['field'] }).to eq(['foo'])
+      end
+
+      it 'should not expose the hooks under the engine mount' do
+        expect {
+          post '/forest/api/custom/islands/out_of_mount_action/hooks/load', params: JSON.dump(params), headers: headers
+        }.to raise_error(ActionController::RoutingError)
+      end
+    end
+
     describe 'call /change' do
       it 'should respond 200' do
         action = island.actions.select { |action| action.name == 'my_action' }.first

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: forest_liana
 version: !ruby/object:Gem::Version
-  version: 9.20.9
+  version: 9.20.10
 platform: ruby
 authors:
 - Sandro Munda
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-05 00:00:00.000000000 Z
+date: 2026-08-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -371,6 +371,7 @@ files:
 - spec/dummy/app/config/routes.rb
 - spec/dummy/app/controllers/application_controller.rb
 - spec/dummy/app/controllers/forest/islands_controller.rb
+- spec/dummy/app/controllers/host_catch_all_controller.rb
 - spec/dummy/app/helpers/application_helper.rb
 - spec/dummy/app/models/address.rb
 - spec/dummy/app/models/application_record.rb
@@ -441,6 +442,7 @@ files:
 - spec/lib/forest_liana/collection_spec.rb
 - spec/lib/forest_liana/engine_spec.rb
 - spec/lib/forest_liana/schema_file_updater_spec.rb
+- spec/models/forest_liana/model/action_spec.rb
 - spec/rails_helper.rb
 - spec/requests/actions_controller_spec.rb
 - spec/requests/authentications_spec.rb
@@ -684,6 +686,7 @@ test_files:
 - spec/dummy/app/config/routes.rb
 - spec/dummy/app/controllers/application_controller.rb
 - spec/dummy/app/controllers/forest/islands_controller.rb
+- spec/dummy/app/controllers/host_catch_all_controller.rb
 - spec/dummy/app/helpers/application_helper.rb
 - spec/dummy/app/models/address.rb
 - spec/dummy/app/models/application_record.rb
@@ -754,6 +757,7 @@ test_files:
 - spec/lib/forest_liana/collection_spec.rb
 - spec/lib/forest_liana/engine_spec.rb
 - spec/lib/forest_liana/schema_file_updater_spec.rb
+- spec/models/forest_liana/model/action_spec.rb
 - spec/rails_helper.rb
 - spec/requests/actions_controller_spec.rb
 - spec/requests/authentications_spec.rb