kettle-family 1.2.14 → 1.2.15

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 417f2f02e871abec85184783775b1449c32b0caac52e7b18b4744840af2ac17d
-  data.tar.gz: c5013fc308ed12715d2184edf21ad6dea41dea2a5ae5df0bc521d6aba53b6c4a
+  metadata.gz: 9ccc9063ef81ee8d6b8bee27424903371b47863d9fb2903b4461c2e132b757d9
+  data.tar.gz: ec46a0708e899590fb95d67d1f8e9dbe002195b21cf9a635c2c8b4a726a693c9
 SHA512:
-  metadata.gz: '091796994cdd4db8bb7e50d5cd8104e42a4680eaba541aa0897675ab835a3a51eed13ba63adbdd4fd1b8d099d426424d39f5b0a3b09e83235fba18f8dac63a65'
-  data.tar.gz: e744049cdd349d806bf4f14db21781e94a57b1e8a0b4fcb71e132637d6dedbc80e389b82031e9871f8ae82473836f9e0e1dce8e75aa1a3bf9c2bb1e79a61e68f
+  metadata.gz: 883955e631cd8b19ee2219a98267465307dec049d35c7f209f61ce23465eeb05665a88954b0dcac39e70f980aa39a02bdc6f2539c4897ef6418412a7d5ad1054
+  data.tar.gz: 8c584b648f8fe2914ac5077b8b181f398b2fe1507eb30278927c13408f5b3b7e6c4a7b1beba417f1dcc1a0ae80a0e7a460d433bb1336615a6ccb3759e2abee34

data/CHANGELOG.md

@@ -30,6 +30,19 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [1.2.15] - 2026-07-31
+
+- TAG: [v1.2.15][1.2.15t]
+- COVERAGE: 94.03% -- 4192/4458 lines in 28 files
+- BRANCH COVERAGE: 76.46% -- 1634/2137 branches in 28 files
+- 28.88% documented
+
+### Fixed
+
+- Family-owned release OTP lookups now render as structured secret-provider
+  progress events, including a visible `👀 🔒` authorization prompt cue, instead
+  of printing loose MFA status lines through the release tape.
+
 ## [1.2.14] - 2026-07-31
 
 - TAG: [v1.2.14][1.2.14t]
@@ -1499,7 +1512,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.14...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.15...HEAD
+[1.2.15]: https://github.com/kettle-dev/kettle-family/compare/v1.2.14...v1.2.15
+[1.2.15t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.15
 [1.2.14]: https://github.com/kettle-dev/kettle-family/compare/v1.2.13...v1.2.14
 [1.2.14t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.14
 [1.2.13]: https://github.com/kettle-dev/kettle-family/compare/v1.2.12...v1.2.13

data/README.md

@@ -819,7 +819,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.431-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-4.458-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/command_runner.rb

@@ -12,10 +12,11 @@ module Kettle
       ].freeze
 
       class OtpCoordinator
-        def initialize(input: $stdin, output: $stdout, queue_total: nil, secrets_provider: nil)
+        def initialize(input: $stdin, output: $stdout, queue_total: nil, secrets_provider: nil, event_handler: nil)
           @input = input
           @output = output
           @secrets_provider = secrets_provider
+          @event_handler = event_handler
           @mutex = Mutex.new
           @condition = ConditionVariable.new
           @prompting = false
@@ -41,7 +42,7 @@ module Kettle
             if @prompting
               generation = @generation
               @queued_count += 1
-              render_queue_status_locked
+              render_queue_status_locked(member_name: member_name)
               return wait_for_response(generation)
             end
 
@@ -53,7 +54,7 @@ module Kettle
             start_prompt_locked(member_name: member_name)
           end
 
-          response = read_response(chunk: chunk)
+          response = read_response(chunk: chunk, member_name: member_name)
           close_queue
           @mutex.synchronize do
             @response = response
@@ -67,7 +68,7 @@ module Kettle
 
         private
 
-        attr_reader :secrets_provider
+        attr_reader :secrets_provider, :event_handler
 
         def wait_for_response(generation)
           @condition.wait(@mutex) while @prompting
@@ -83,22 +84,49 @@ module Kettle
         end
 
         def start_prompt_locked(member_name:)
-          @output.puts
-          @output.puts("[#{member_name}] RubyGems MFA requested.")
-          render_queue_status_locked
+          unless emit_event(
+            member_name: member_name,
+            action: "mfa_requested",
+            label: "RubyGems MFA",
+            status: "requested",
+            mark: ">"
+          )
+            @output.puts
+            @output.puts("[#{member_name}] RubyGems MFA requested.")
+          end
+          render_queue_status_locked(member_name: member_name)
+          return if event_handler
+
           @output.puts("Queued prompts at entry will share this code; later prompts will ask again.")
         end
 
-        def render_queue_status_locked
+        def render_queue_status_locked(member_name:)
           suffix = @queue_total ? " / #{@queue_total}" : ""
+          return if emit_event(
+            member_name: member_name,
+            action: "otp_queue",
+            label: "RubyGems MFA prompts",
+            status: "queued",
+            mark: ">",
+            queued: @queued_count,
+            total: @queue_total
+          )
+
           @output.puts("RubyGems MFA prompts queued: #{@queued_count}#{suffix}")
           @output.flush if @output.respond_to?(:flush)
         end
 
-        def read_response(chunk:)
-          provided = read_provider_response
+        def read_response(chunk:, member_name:)
+          provided = read_provider_response(member_name: member_name)
           unless provided.empty?
-            @output.puts("RubyGems MFA code loaded from configured secrets provider.")
+            emit_event(
+              member_name: member_name,
+              action: "prompt_response",
+              label: "RubyGems MFA code",
+              source: secret_provider_source,
+              status: "ok",
+              mark: "."
+            ) || @output.puts("RubyGems MFA code loaded from configured secrets provider.")
             return provided
           end
 
@@ -117,17 +145,57 @@ module Kettle
           chunk.to_s.lines.last&.strip.to_s.empty? ? "Code:" : chunk.to_s.lines.last.strip
         end
 
-        def read_provider_response
+        def read_provider_response(member_name:)
           return "" unless secrets_provider
 
           @output.print("\a") if @output.respond_to?(:print)
+          emit_event(
+            member_name: member_name,
+            action: "prompt_request",
+            label: "👀 🔒 watch for authorization prompt",
+            source: secret_provider_source,
+            status: "started",
+            mark: ">"
+          )
           secrets_provider.rubygems_otp.to_s
         rescue Error => error
           raise unless @input.respond_to?(:tty?) && @input.tty?
 
+          emit_event(
+            member_name: member_name,
+            action: "prompt_response",
+            label: "RubyGems MFA code",
+            source: secret_provider_source,
+            status: "failed",
+            mark: "F"
+          )
           @output.puts("#{error.message}; falling back to manual OTP entry.")
           ""
         end
+
+        def emit_event(member_name:, action:, label:, status:, mark:, **payload)
+          return false unless event_handler
+
+          event_handler.call(
+            member_name,
+            {
+              "event_version" => 1,
+              "type" => "secret_provider",
+              "action" => action,
+              "label" => label,
+              "status" => status,
+              "mark" => mark
+            }.merge(payload.transform_keys(&:to_s))
+          )
+          true
+        end
+
+        def secret_provider_source
+          return "" unless secrets_provider
+          return "1Password" if secrets_provider.is_a?(Secrets::OnePassword)
+
+          secrets_provider.class.name.to_s.split("::").last.to_s
+        end
       end
 
       FailureStatus = Struct.new(:exitstatus) do

data/lib/kettle/family/secrets.rb

@@ -31,7 +31,7 @@ module Kettle
           end
 
           def rubygems_otp
-            super
+            with_release_secret_alert_suppressed { super }
           rescue => error
             raise Error, error.message
           end

data/lib/kettle/family/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "1.2.14"
+      VERSION = "1.2.15"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/family/workflow.rb

@@ -806,7 +806,29 @@ module Kettle
       def release_otp_coordinator
         return nil unless execute && release_command_interactive?
 
-        @release_otp_coordinator ||= CommandRunner::OtpCoordinator.new(secrets_provider: @secrets_provider)
+        @release_otp_coordinator ||= CommandRunner::OtpCoordinator.new(
+          secrets_provider: @secrets_provider,
+          event_handler: method(:handle_release_otp_event)
+        )
+      end
+
+      def handle_release_otp_event(member_name, event)
+        progress = @release_progress
+        return unless progress
+
+        member = release_progress_member_for(member_name)
+        if progress_io
+          if verbose || debug
+            emit_release_event_progress(member, event)
+          elsif progress.tty?
+            emit_release_event_status(member, event, progress: progress)
+          end
+        end
+      end
+
+      def release_progress_member_for(member_name)
+        @release_progress_members_by_name ||= members.to_h { |member| [member.name, member] }
+        @release_progress_members_by_name.fetch(member_name.to_s) { PreflightProgressMember.new(member_name.to_s) }
       end
 
       def parallel_release_members?(release_members)
@@ -2214,6 +2236,7 @@ module Kettle
         parts << purpose unless purpose.empty?
         parts << label unless label.empty?
         parts << source if purpose.empty? && label.empty? && !source.empty?
+        parts << "#{event["queued"]}/#{event["total"]}" if event["queued"] && event["total"]
         parts.join(":")
       end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 1.2.14
+  version: 1.2.15
 platform: ruby
 authors:
 - Peter H. Boling
@@ -342,10 +342,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.14
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.14/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.15
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.15/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.14
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.15
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family