legion-settings 1.4.4 → 1.4.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5b4ca4881211bedb39799998f075d8539d5ebfdf79178f2d6c61e9ee1ebd28db
-  data.tar.gz: fcf3c214190e2263cb67e4d17c5f8ddaceb478e5fed16a9a8021ed2722e4d160
+  metadata.gz: bb5f0ea206885bc8fa9a712afd9a73795958698bd9cb4495d2ed96d041120f5a
+  data.tar.gz: b2473c65ec3dab1b7e2b0d9aeb71f6cb4c38ccebb16c68eec70320eabc8e14a1
 SHA512:
-  metadata.gz: f3f2a51d7a7633bf404b5f965c374357abc4a70d5c9e8d69ebd1bee22dfd4b3c878a4ee3af9870d1a4d42fe471a973db3b9c765dca9fc835f105b8c6ecd8ce42
-  data.tar.gz: 34a30b2ec19e8c310c89a5c59b1d2b87ad01fddd09d5948738c3092cd6c5d77d86384a25aa1884bbe44fc27db288e929c1db863d2ef46b126b7b4d045e5c124b
+  metadata.gz: 798a3499c214b6427873b30a3259bfa453c38a9cd144d45f99aa64bb98857ab6b9d41c5ced8e461929623116a467d5bf6a459d4f423adf7786ea0800709a6af0
+  data.tar.gz: 19545fafd3710ca2c08253557d2c70b519b74d7efc604566b092ed339f56b72d626a7f3b18d5ce4c9afe494d62ddd8cf4a343bf2d0a1a3b6eb87e129c8f19138

data/.github/workflows/ci.yml

@@ -8,17 +8,17 @@ on:
 
 jobs:
   ci:
-    uses: LegionIO/.github/.github/workflows/ci.yml@main
+    uses: LegionIO/.github/.github/workflows/ci.yml@e0fc7364b73f446d4cb9bdc162a66ed34bf0daa7
     with:
-      companion-gems: ${{ github.event_name == 'pull_request' && '{"legion-crypt":{"repository":"LegionIO/legion-crypt","ref":"f22702285d9ad9d80ddab115cf93568583bd7211"}}' || '{}' }}
+      companion-gems: ${{ github.event_name == 'pull_request' && '{"legion-crypt":{"repository":"LegionIO/legion-crypt","ref":"9317bd69cbbcc0feeaaff8368bed3569ed98b101"}}' || '{}' }}
 
   lint:
     uses: LegionIO/.github/.github/workflows/lint-patterns.yml@main
 
   security:
-    uses: LegionIO/.github/.github/workflows/security-scan.yml@main
+    uses: LegionIO/.github/.github/workflows/security-scan.yml@e0fc7364b73f446d4cb9bdc162a66ed34bf0daa7
     with:
-      companion-gems: ${{ github.event_name == 'pull_request' && '{"legion-crypt":{"repository":"LegionIO/legion-crypt","ref":"f22702285d9ad9d80ddab115cf93568583bd7211"}}' || '{}' }}
+      companion-gems: ${{ github.event_name == 'pull_request' && '{"legion-crypt":{"repository":"LegionIO/legion-crypt","ref":"9317bd69cbbcc0feeaaff8368bed3569ed98b101"}}' || '{}' }}
 
   version-changelog:
     uses: LegionIO/.github/.github/workflows/version-changelog.yml@main

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Legion::Settings Changelog
 
+## [1.4.5] - 2026-11-01
+
+### Fixed
+- Preserve explicitly configured arrays, including empty allowlists, when registering module or library defaults; never restore disabled entries from defaults.
+- Retain registered module defaults across `load(force: true)` while allowing freshly loaded user configuration to remain authoritative.
+
 ## [1.4.4] - 2026-10-31
 
 ### Fixed

data/README.md

@@ -2,7 +2,7 @@
 
 The process-local, in-memory settings store for the [LegionIO](https://github.com/LegionIO/LegionIO) framework. Loads settings from JSON files, directories, and environment variables into a shared settings tree, exposed through `Legion::Settings[:key]`.
 
-**Version**: 1.4.4
+**Version**: 1.4.5
 
 ## Process-Local Settings Model
 
@@ -126,7 +126,7 @@ Array values act as fallback chains — the first non-nil result wins:
 
 Call `Legion::Settings.resolve_secrets!` to resolve all URIs in-place. In the LegionIO boot sequence this is called automatically after `Legion::Crypt.start`. The `env://` scheme works even when Vault is not connected.
 
-Lease integration requires **legion-crypt 1.5.38 or newer** with **legion-settings 1.4.4 or newer**. Release Crypt first. Neither gem gains a runtime dependency on the other; environment and literal-only resolution work without Crypt.
+Lease integration requires **legion-crypt 1.5.38 or newer** with **legion-settings 1.4.4 or newer**. Settings keeps Crypt optional, so environment and literal-only resolution work without Crypt. Crypt 1.5.39 and newer require Settings as a runtime dependency.
 
 Only the winning lease in a fallback chain can rotate its destination. A winning environment, Vault, or literal value—including `false`—does not subscribe unused leases. Nested hashes and arrays use typed paths, so array indexes and keys containing dots are preserved.
 
@@ -155,11 +155,17 @@ Legion::Settings.validate!  # raises ValidationError if any settings are invalid
 
 ### Library Defaults
 
-Libraries own their defaults and register them with
+Libraries own their defaults and register them once at startup with
 `Legion::Settings.register_library(:my_library, defaults)`. Existing configuration
-values take precedence. Registration is idempotent for the active loader; after
-replacing the loader or calling `load(force: true)`, a library can register its
-defaults again without losing configuration overrides.
+values take precedence, including `false`, `nil`, and empty or restricted arrays.
+Registration fills missing keys; it does not union default arrays into user policy.
+`load(force: true)` retains registered defaults and applies them after loading user
+configuration. A manually replaced loader must be bootstrapped explicitly.
+
+Consumers read live `Legion::Settings[:component][:key]` values instead of caching
+loader pointers or registering defaults during reads. LegionIO automatically injects
+`Legion::Settings::Helper` into framework runners and actors; those consumers use
+their native `settings[:key]` helper.
 
 Settings and overlays are local to the process. Registration does not synchronize
 configuration across processes or provide durable shared state.

data/lib/legion/settings/deep_merge.rb

@@ -48,6 +48,29 @@ module Legion
         end
         base
       end
+
+      # Defaults fill missing keys; configured scalars and arrays remain authoritative.
+      def merge_defaults(defaults:, settings:)
+        defaults.each_with_object(settings.dup) do |(key, value), merged|
+          if !settings.key?(key)
+            merged[key] = duplicate_default(value: value)
+          elsif value.is_a?(Hash) && settings[key].is_a?(Hash)
+            merged[key] = merge_defaults(defaults: value, settings: settings[key])
+          end
+        end
+      end
+
+      def duplicate_default(value:)
+        case value
+        when Hash
+          value.transform_values { |child| duplicate_default(value: child) }
+        when Array
+          value.map { |child| duplicate_default(value: child) }
+        else
+          value.dup
+        end
+      end
+      private_class_method :duplicate_default
     end
   end
 end

data/lib/legion/settings/loader.rb

@@ -215,14 +215,14 @@ module Legion
         mod_name = config.keys.first
         log.debug("Loading module settings: #{mod_name}")
         @merged_modules = deep_merge(@merged_modules, config)
-        @settings = deep_merge(config, @settings)
+        @settings = DeepMerge.merge_defaults(defaults: config, settings: @settings)
         mark_dirty!
       end
 
       def load_module_default(config)
         mod_name = config.keys.first
         log.debug("Loading module defaults: #{mod_name}")
-        @settings = deep_merge(config, @settings)
+        @settings = DeepMerge.merge_defaults(defaults: config, settings: @settings)
         mark_dirty!
       end
 

data/lib/legion/settings/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Settings
-    VERSION = '1.4.4'
+    VERSION = '1.4.5'
   end
 end

data/lib/legion/settings.rb

@@ -30,6 +30,7 @@ module Legion
 
         # Create Loader once; reuse for subsequent calls (preserves module merges)
         if @loader.nil? || options[:force]
+          module_defaults = @loader&.merged_modules
           @loader = Legion::Settings::Loader.new
           @loader.load_env
           @loader.load_dns_bootstrap
@@ -40,6 +41,7 @@ module Legion
         options[:config_dirs]&.each do |directory|
           @loader.load_directory(directory)
         end
+        @loader.load_module_settings(module_defaults) if module_defaults
 
         @loaded = true if has_config
         load_project_env

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-settings
 version: !ruby/object:Gem::Version
-  version: 1.4.4
+  version: 1.4.5
 platform: ruby
 authors:
 - Esity