kettle-family 1.3.30 → 1.3.32

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e1834021ad7c719f89aee9e9c7408bb2fd772797bf85087620e913f2d0b5cbc5
-  data.tar.gz: abcb663c3eaffcebd396befa0443c3d5eb331cfdbcce6de417881cbda9e15679
+  metadata.gz: '08c77450947a59e4d899708d9ea06ac1f6a3ecdbca9f1875697a111221c8a513'
+  data.tar.gz: 39bab3f859dffecd3c7c7bf218bf60a31d593d174f7bf35cc78ee00120796e77
 SHA512:
-  metadata.gz: fd431e1b40c4c7b7119461eabb4cf55625a2ebea4f37e9c553ee96f3fb7f66af690441f063a33b2118a1d60ed7fdd48be98e9a6c85016cbbc106946206a152b8
-  data.tar.gz: b91b8eeb298ec02137d844df600e1ac2fe8ffefc5ff3c94fd055c8f10f57c162499deb1118a2c4034cd7ced3e2b0154b005255f2d95cdafe74744323ae9e6fb1
+  metadata.gz: e11ec34af3513c579f0de85e0ac3967736d9296edd3181c824661d0e77c958dba7fde98870a37b8ab0e030776f24ff8f90cee743e989b174ded6745f6c589363
+  data.tar.gz: f3420d41b085ff447bc05e0f4976fa4ee12b1eba42b73047a1afb5cadf8966b82f7a17430a2e9a5c7923f66ef6498646bcb7225aa71677264ed57cbf8c10fda6

data/CHANGELOG.md

@@ -30,6 +30,28 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [1.3.32] - 2026-10-23
+
+- TAG: [v1.3.32][1.3.32t]
+- COVERAGE: 93.10% -- 7548/8107 lines in 45 files
+- BRANCH COVERAGE: 77.70% -- 3034/3905 branches in 45 files
+- 38.69% documented
+
+### Fixed
+
+- MiseTasks.materialize_managed_suite no longer silently deletes root mise.toml task definitions that duplicate the managed suite. Root redefinitions shadow the managed file under mise precedence and may be deliberate local overrides; they are now REPORTED (template workflow, kettle-jem plugin, and mise-tasks CLI all warn with the same message and remediation hint) and removal stays opt-in via kettle-family mise-tasks --clean. Previously the CLI's documented warn-by-default path was dead code: materialize cleaned before the warning check ran, so redefinitions vanished without notice on every template run.
+
+## [1.3.31] - 2026-10-23
+
+- TAG: [v1.3.31][1.3.31t]
+- COVERAGE: 93.06% -- 7540/8102 lines in 45 files
+- BRANCH COVERAGE: 77.65% -- 3029/3901 branches in 45 files
+- 38.57% documented
+
+### Added
+
+- release.preflight_commands family config: a list of {name, command} maintenance hooks run at the family root, in declaration order, as the FIRST release preflight phase — so template dependency floors, workflow pins, and similar generated-state maintenance land before version/state validation instead of failing the wave mid-publish. Commands may be strings or argv arrays; a failing command blocks the release; dry-run plans without executing. kettle-family ships only the mechanism — each family declares its own maintenance in its own .kettle-family.yml.
+
 ## [1.3.30] - 2026-10-22
 
 - TAG: [v1.3.30][1.3.30t]
@@ -3214,7 +3236,11 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.3.30...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.3.32...HEAD
+[1.3.32]: https://github.com/kettle-dev/kettle-family/compare/v1.3.31...v1.3.32
+[1.3.32t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.3.32
+[1.3.31]: https://github.com/kettle-dev/kettle-family/compare/v1.3.30...v1.3.31
+[1.3.31t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.3.31
 [1.3.30]: https://github.com/kettle-dev/kettle-family/compare/v1.3.29...v1.3.30
 [1.3.30t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.3.30
 [1.3.29]: https://github.com/kettle-dev/kettle-family/compare/v1.3.28...v1.3.29

data/README.md

@@ -1225,7 +1225,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-8.088-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-8.107-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/config.rb

@@ -272,6 +272,28 @@ module Kettle
         fetch_path("release", "publish_command") || command_for("release_publish") || "bundle exec kettle-release"
       end
 
+      # Family-declared pre-release maintenance commands (e.g. template
+      # dependency floors and workflow pins). Each entry is a map with `name`
+      # (displayed in preflight output) and `command` (run at the family root,
+      # raw — no mise exec wrapping). Commands run in declaration order before
+      # every other release preflight phase, so maintenance that edits floors
+      # or generated files lands before version/state validation. A failing
+      # command blocks the release. Tools that write are expected to
+      # self-commit; the hook does not commit on their behalf.
+      def release_preflight_commands
+        entries = fetch_path("release", "preflight_commands") || []
+        Array(entries).map do |entry|
+          map = entry.is_a?(Hash) ? stringify_keys(entry) : {}
+          name = map["name"].to_s
+          command = map["command"]
+          command = command.map(&:to_s) if command.is_a?(Array)
+          command = command.to_s unless command.is_a?(Array)
+          next nil if name.empty? || command.empty?
+
+          {"name" => name, "command" => command}
+        end.compact
+      end
+
       def release_required_remotes
         fetch_path("release", "required_remotes")
       end

data/lib/kettle/family/mise_tasks.rb

@@ -8,10 +8,12 @@ module Kettle
   module Family
     # Slice-1044 family mise tasks primitive: ensure a destination root
     # `mise.toml` references the kettle-family-managed TOML task file via
-    # `[task_config] includes`, and report (optionally clean) task
-    # redefinitions between the root file and the managed file. Family
-    # refreshes migrate managed task names out of the root so old commands
-    # cannot shadow generated fixes. Other tasks and settings remain local.
+    # `[task_config] includes`, and report (never silently remove) task
+    # redefinitions between the root file and the managed file. Removal is
+    # the caller's explicit choice (`kettle-family mise-tasks --clean`): a
+    # root redefinition shadows the managed definition under mise precedence
+    # and may be a deliberate local override. Other tasks and settings remain
+    # local.
     #
     # All edits go through ast-crispr Actors with the ast-crispr-toml adapter.
     module MiseTasks
@@ -320,14 +322,23 @@ module Kettle
 
         task_file_path = File.join(root, task_file_name)
         original = File.read(root_mise)
-        included = ensure_include(root_content: original, task_file_name: task_file_name)
-        result = clean_redefinitions(
-          root_content: included.content,
-          task_file_name: task_file_name,
-          task_file_content: content
-        )
+        result = ensure_include(root_content: original, task_file_name: task_file_name, task_file_content: content)
         File.write(task_file_path, content) unless File.exist?(task_file_path) && File.read(task_file_path) == content
         File.write(root_mise, result.content) unless result.content == original
+        result
+      end
+
+      # Warn about each redefinition to the given stream. Shared by the CLI
+      # command, the template workflow, and the kettle-jem plugin so the
+      # message and remediation hint stay identical everywhere.
+      #
+      # @param redefinitions [Array<String>]
+      # @param task_file_name [String]
+      # @param err [IO]
+      def self.warn_redefinitions(redefinitions, task_file_name: DEFAULT_TASK_FILE_NAME, err: $stderr)
+        Array(redefinitions).each do |name|
+          err.puts("kettle-family: task #{name.inspect} is defined in both mise.toml and #{task_file_name}; root mise.toml wins (redefinition allowed; run `kettle-family mise-tasks --clean` to restore the managed definition)")
+        end
       end
 
       # Comprehensive managed family mise task suite, generated from family

data/lib/kettle/family/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "1.3.30"
+      VERSION = "1.3.32"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/family/workflow.rb

@@ -259,7 +259,8 @@ module Kettle
         )
         results = checkout_preflight + sync_results + workflow_results + rollback_results + restore_results
         if results.all?(&:ok?)
-          MiseTasks.materialize_managed_suite(context: {project_root: config.root})
+          suite_result = MiseTasks.materialize_managed_suite(context: {project_root: config.root})
+          MiseTasks.warn_redefinitions(suite_result&.redefinitions)
           # `mise trust` requires the mise executable; spec environments and
           # minimal CI images may not have it installed. Trust is only an
           # enabler for subsequent nested mise runs, so skip when absent.
@@ -2021,13 +2022,31 @@ module Kettle
       end
 
       def release_preflight_phases
+        maintenance_phase = {label: "pre-release maintenance", method: :release_preflight_maintenance_results} unless config.release_preflight_commands.empty?
         bump_phase = {label: "release version bump", method: :release_preflight_version_bump_results} unless release_state_results.empty?
         dirty_phase = {label: "branch checkout readiness", method: :release_preflight_branch_checkout_dirty_results}
         signing_phase = {label: "gem signing password", method: :release_preflight_signing_password_results}
         secrets_phase = release_secrets_authorization_required? ? {label: "secrets provider authorization", method: :release_preflight_secrets_authorization_results} : nil
         gha_sha_pins_phase = release_gha_sha_pins_review_required? ? {label: "GitHub Actions SHA pins", method: :release_preflight_gha_sha_pins_results} : nil
 
-        [bump_phase, secrets_phase, gha_sha_pins_phase, dirty_phase, signing_phase].compact
+        [maintenance_phase, bump_phase, secrets_phase, gha_sha_pins_phase, dirty_phase, signing_phase].compact
+      end
+
+      # Family-declared pre-release maintenance hooks (release.preflight_commands
+      # in the family config): run at the family root in declaration order,
+      # before any other preflight phase, so maintenance that edits floors or
+      # generated files lands before version/state validation. kettle-family
+      # ships only the mechanism — each family declares its own commands.
+      def release_preflight_maintenance_results
+        config.release_preflight_commands.map do |entry|
+          command_runner.call(
+            member: family_member,
+            phase: "release_preflight_command",
+            command: entry.fetch("command"),
+            env: command_env,
+            raw: true
+          )
+        end
       end
 
       def release_preflight_version_bump_results

data/lib/kettle/family.rb

@@ -71,7 +71,8 @@ module Kettle
 
     def register_kettle_jem_plugin(registrar)
       registrar.on_phase("remaining_files", timing: :after) do |context:|
-        MiseTasks.materialize_managed_suite(context: context)
+        suite_result = MiseTasks.materialize_managed_suite(context: context)
+        MiseTasks.warn_redefinitions(suite_result&.redefinitions)
       end
     end
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 1.3.30
+  version: 1.3.32
 platform: ruby
 authors:
 - Peter H. Boling
@@ -568,10 +568,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.3.30
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.3.30/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.3.32
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.3.32/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.3.30
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.3.32
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family