active_canvas 0.0.5 → 0.1.0

data/lib/active_canvas/configuration.rb

@@ -106,6 +106,26 @@ module ActiveCanvas
     # Allowed hosts for AI-generated image downloads
     attr_accessor :allowed_ai_image_hosts
 
+    # ==> Dynamic Content (Liquid templating)
+    # Maximum total output size in bytes
+    attr_accessor :template_render_length_limit
+    # Maximum render score (Liquid's complexity counter)
+    attr_accessor :template_render_score_limit
+    # Maximum assign score (Liquid variable-assignment counter)
+    attr_accessor :template_assign_score_limit
+    # Default on_error for data sources: :raise or :silent
+    attr_accessor :template_default_on_error
+
+    # ==> Forms
+    # Host hook called with each stored FormSubmission
+    attr_accessor :on_form_submission
+
+    # Reject submissions arriving faster than this many seconds after render
+    attr_accessor :form_min_submit_seconds
+
+    # Per-IP submissions allowed per minute
+    attr_accessor :form_rate_limit_per_minute
+
     # Dangerous content types that are always blocked
     DANGEROUS_CONTENT_TYPES = %w[
       application/x-executable
@@ -170,7 +190,7 @@ module ActiveCanvas
       @allowed_html_attributes = %w[
         class id style href src alt title target rel
         width height loading name type value placeholder
-        disabled readonly checked selected multiple
+        disabled readonly checked selected multiple required
         action method enctype
         controls autoplay loop muted poster
         frameborder allowfullscreen allow
@@ -186,6 +206,17 @@ module ActiveCanvas
         oaidalleapiprodscus.blob.core.windows.net
         dalleprodsec.blob.core.windows.net
       ]
+
+      # Dynamic Content (Liquid templating)
+      @template_render_length_limit = 1_000_000
+      @template_render_score_limit  = 100_000
+      @template_assign_score_limit  = 10_000
+      @template_default_on_error    = :raise
+
+      # Forms
+      @on_form_submission = nil
+      @form_min_submit_seconds = 3
+      @form_rate_limit_per_minute = 5
     end
 
     # Get effective allowed content types (includes SVG if enabled, excludes dangerous types)

data/lib/active_canvas/data_sources/errors.rb

@@ -0,0 +1,51 @@
+module ActiveCanvas
+  module DataSources
+    class Error < StandardError; end
+
+    class UnknownSource < Error
+      def initialize(name)
+        super("Unknown data source: #{name.inspect}")
+        @name = name
+      end
+      attr_reader :name
+    end
+
+    class InvalidParam < Error
+      def initialize(source_name, param_name, reason)
+        super("Data source #{source_name.inspect} param #{param_name.inspect}: #{reason}")
+        @source_name = source_name
+        @param_name = param_name
+      end
+      attr_reader :source_name, :param_name
+    end
+
+    class UnsafeData < Error
+      def initialize(source_name, object_class)
+        super(
+          "Data source #{source_name.inspect} returned a #{object_class} object without a Drop wrapper. " \
+          "Wrap results with auto_drop or a custom Liquid::Drop subclass."
+        )
+        @source_name = source_name
+        @object_class = object_class
+      end
+      attr_reader :source_name, :object_class
+    end
+
+    class RegistryFrozen < Error
+      def initialize(name)
+        super("Cannot register data source #{name.inspect} after boot. Move the registration into config/initializers/active_canvas.rb.")
+      end
+    end
+
+    class TemplateRenderError < StandardError
+      attr_reader :line, :column, :original
+
+      def initialize(message, line: nil, column: nil, original: nil)
+        super(message)
+        @line = line
+        @column = column
+        @original = original
+      end
+    end
+  end
+end

data/lib/active_canvas/data_sources/param_spec.rb

@@ -0,0 +1,64 @@
+module ActiveCanvas
+  module DataSources
+    class ParamSpec
+      ALLOWED_TYPES = %i[integer string boolean].freeze
+
+      attr_reader :name, :type, :default, :range, :allowed, :source_name
+
+      def initialize(name, source_name:, type:, default: nil, range: nil, allowed: nil)
+        unless ALLOWED_TYPES.include?(type)
+          raise ArgumentError, "Param #{name.inspect} type must be one of #{ALLOWED_TYPES.inspect}, got #{type.inspect}"
+        end
+        @name = name.to_sym
+        @source_name = source_name
+        @type = type
+        @default = default
+        @range = range
+        @allowed = allowed
+      end
+
+      def resolve(params_hash)
+        value = params_hash.key?(name) ? params_hash[name] : (params_hash.key?(name.to_s) ? params_hash[name.to_s] : nil)
+        coerce(value)
+      end
+
+      def coerce(value)
+        return default if value.nil?
+
+        coerced = case type
+                  when :integer then coerce_integer(value)
+                  when :string  then value.to_s
+                  when :boolean then coerce_boolean(value)
+                  end
+
+        validate!(coerced) unless coerced.nil?
+        coerced
+      end
+
+      private
+
+      def coerce_integer(value)
+        Integer(value)
+      rescue ArgumentError, TypeError
+        invalid!("not a valid integer: #{value.inspect}")
+      end
+
+      def coerce_boolean(value)
+        case value
+        when true, "true", 1, "1"   then true
+        when false, "false", 0, "0" then false
+        else invalid!("not a valid boolean: #{value.inspect}")
+        end
+      end
+
+      def validate!(value)
+        invalid!("#{value.inspect} not in range #{range}") if range && !range.include?(value)
+        invalid!("#{value.inspect} not in allowed values #{allowed.inspect}") if allowed && !allowed.include?(value)
+      end
+
+      def invalid!(reason)
+        raise InvalidParam.new(source_name, name, reason)
+      end
+    end
+  end
+end

data/lib/active_canvas/data_sources/registration.rb

@@ -0,0 +1,60 @@
+module ActiveCanvas
+  module DataSources
+    # DSL builder used inside DataSources.register blocks.
+    class Registration
+      def initialize(name)
+        @name = name
+        @params = {}
+        @fetch_block = nil
+        @drop_class = nil
+        @auto_drop_config = nil
+        @on_error = nil
+        @returns = :list
+      end
+
+      def param(name, type:, default: nil, range: nil, allowed: nil)
+        @params[name.to_sym] = ParamSpec.new(
+          name, source_name: @name, type: type, default: default, range: range, allowed: allowed
+        )
+      end
+
+      def fetch(&block)
+        @fetch_block = block
+      end
+
+      def drop(klass)
+        @drop_class = klass
+      end
+
+      def auto_drop(attributes:, associations: {}, html: [])
+        @auto_drop_config = { attributes: attributes, associations: associations, html: html }
+      end
+
+      def on_error(mode)
+        unless %i[raise silent].include?(mode)
+          raise ArgumentError, "on_error must be :raise or :silent, got #{mode.inspect}"
+        end
+        @on_error = mode
+      end
+
+      # Whether the fetch block returns a list (loopable) or a single value.
+      def returns(shape)
+        raise ArgumentError, "returns must be :one or :list, got #{shape.inspect}" unless %i[one list].include?(shape)
+        @returns = shape
+      end
+
+      def to_source
+        raise ArgumentError, "fetch block required for data source #{@name.inspect}" unless @fetch_block
+        Source.new(
+          name: @name,
+          params: @params,
+          fetch_block: @fetch_block,
+          drop_class: @drop_class,
+          auto_drop_config: @auto_drop_config,
+          on_error: @on_error || ActiveCanvas.config.template_default_on_error,
+          returns: @returns
+        )
+      end
+    end
+  end
+end

data/lib/active_canvas/data_sources/source.rb

@@ -0,0 +1,47 @@
+module ActiveCanvas
+  module DataSources
+    class Source
+      attr_reader :name, :params, :drop_class, :auto_drop_config, :on_error
+
+      def initialize(name:, params:, fetch_block:, drop_class:, auto_drop_config:, on_error:, returns: :list)
+        @name = name
+        @params = params
+        @fetch_block = fetch_block
+        @drop_class = drop_class
+        @auto_drop_config = auto_drop_config || { attributes: [], associations: {}, html: [] }
+        @on_error = on_error
+        @returns = returns
+      end
+
+      def list?
+        @returns == :list
+      end
+
+      # Resolves params (with defaults + validation) then calls the fetch block.
+      def call(raw_params)
+        resolved = {}
+        params.each do |pname, spec|
+          resolved[pname] = spec.resolve(raw_params || {})
+        end
+        # Pass as keyword args if the block expects them, else positional.
+        if @fetch_block.parameters.any? { |type, _| type == :keyreq || type == :key }
+          @fetch_block.call(**resolved)
+        else
+          @fetch_block.call
+        end
+      end
+
+      # JSON-friendly description of the params for the editor's Data panel.
+      def param_schema
+        params.transform_values do |spec|
+          {
+            type: spec.type,
+            default: spec.default,
+            range: spec.range && [ spec.range.min, spec.range.max ],
+            allowed: spec.allowed
+          }
+        end
+      end
+    end
+  end
+end

data/lib/active_canvas/data_sources.rb

@@ -0,0 +1,54 @@
+require "concurrent/map"
+
+module ActiveCanvas
+  module DataSources
+    @registry = Concurrent::Map.new
+    @frozen   = false
+
+    class << self
+      def register(name, &block)
+        name = name.to_sym
+        raise RegistryFrozen.new(name) if @frozen
+        builder = Registration.new(name)
+        builder.instance_eval(&block)
+        @registry[name] = builder.to_source
+      end
+
+      def lookup(name)
+        @registry[name.to_sym] || raise(UnknownSource.new(name))
+      end
+
+      def registered?(name)
+        @registry.key?(name.to_sym)
+      end
+
+      def registered_names
+        @registry.keys.sort
+      end
+
+      def each(&block)
+        @registry.each_pair(&block)
+      end
+
+      # Default loop variable for a binding: `articles` → `article`, and
+      # `item` when the singular is no different (`team`).
+      def item_name(name)
+        singular = name.to_s.singularize
+        singular.present? && singular != name.to_s ? singular : "item"
+      end
+
+      def freeze!
+        @frozen = true
+      end
+
+      def frozen?
+        @frozen
+      end
+
+      def reset_for_testing!
+        @registry = Concurrent::Map.new
+        @frozen = false
+      end
+    end
+  end
+end

data/lib/active_canvas/engine.rb

@@ -13,6 +13,14 @@ module ActiveCanvas
       app.config.assets.precompile += %w[
         active_canvas/editor.js
         active_canvas/editor.css
+        active_canvas/editor/ac_bindings.js
+        active_canvas/editor/ac_chips.js
+        active_canvas/editor/directive_traits.js
+        active_canvas/editor/template_validator.js
+        active_canvas/editor/live_data.js
+        active_canvas/admin/data_panel.js
+        active_canvas/admin/field_builder.js
+        active_canvas/admin/media_select_preview.js
       ]
     end
 
@@ -40,5 +48,12 @@ module ActiveCanvas
         end
       end
     end
+
+    # Freeze the data source registry after all after_initialize hooks have run
+    # (including the host app's own after_initialize blocks that register sources)
+    # so subsequent registration attempts raise loudly.
+    initializer "active_canvas.freeze_data_sources", after: :finisher_hook do
+      ActiveCanvas::DataSources.freeze!
+    end
   end
 end

data/lib/active_canvas/version.rb

@@ -1,3 +1,3 @@
 module ActiveCanvas
-  VERSION = "0.0.5"
+  VERSION = "0.1.0"
 end

data/lib/active_canvas.rb

@@ -1,5 +1,11 @@
+require "liquid"
 require "active_canvas/version"
 require "active_canvas/configuration"
+require "active_canvas/data_sources/errors"
+require "active_canvas/data_sources/param_spec"
+require "active_canvas/data_sources/source"
+require "active_canvas/data_sources/registration"
+require "active_canvas/data_sources"
 require "active_canvas/engine"
 
 # Load RubyLLM if available for AI features

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: active_canvas
 version: !ruby/object:Gem::Version
-  version: 0.0.5
+  version: 0.1.0
 platform: ruby
 authors:
 - Giovanni Panasiti
 bindir: bin
 cert_chain: []
-date: 2026-06-16 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -37,6 +37,34 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: liquid
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '5.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '5.4'
+- !ruby/object:Gem::Dependency
+  name: csv
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.0'
 description: ActiveCanvas provides a simple CMS for creating and managing static pages
   with an admin interface
 email:
@@ -48,18 +76,30 @@ files:
 - MIT-LICENSE
 - README.md
 - Rakefile
+- app/assets/javascripts/active_canvas/admin/data_panel.js
+- app/assets/javascripts/active_canvas/admin/field_builder.js
+- app/assets/javascripts/active_canvas/admin/media_select_preview.js
 - app/assets/javascripts/active_canvas/editor.js
+- app/assets/javascripts/active_canvas/editor/ac_bindings.js
+- app/assets/javascripts/active_canvas/editor/ac_chips.js
 - app/assets/javascripts/active_canvas/editor/ai_panel.js
 - app/assets/javascripts/active_canvas/editor/asset_manager.js
 - app/assets/javascripts/active_canvas/editor/blocks.js
 - app/assets/javascripts/active_canvas/editor/code_panel.js
 - app/assets/javascripts/active_canvas/editor/component_toolbar.js
+- app/assets/javascripts/active_canvas/editor/directive_traits.js
+- app/assets/javascripts/active_canvas/editor/live_data.js
 - app/assets/javascripts/active_canvas/editor/panels.js
+- app/assets/javascripts/active_canvas/editor/preview_modal.js
+- app/assets/javascripts/active_canvas/editor/template_validator.js
 - app/assets/javascripts/active_canvas/editor/utils.js
 - app/assets/stylesheets/active_canvas/application.css
 - app/assets/stylesheets/active_canvas/editor.css
 - app/controllers/active_canvas/admin/ai_controller.rb
 - app/controllers/active_canvas/admin/application_controller.rb
+- app/controllers/active_canvas/admin/collection_items_controller.rb
+- app/controllers/active_canvas/admin/collections_controller.rb
+- app/controllers/active_canvas/admin/form_submissions_controller.rb
 - app/controllers/active_canvas/admin/media_controller.rb
 - app/controllers/active_canvas/admin/page_types_controller.rb
 - app/controllers/active_canvas/admin/page_versions_controller.rb
@@ -67,19 +107,28 @@ files:
 - app/controllers/active_canvas/admin/partials_controller.rb
 - app/controllers/active_canvas/admin/settings_controller.rb
 - app/controllers/active_canvas/application_controller.rb
+- app/controllers/active_canvas/form_submissions_controller.rb
 - app/controllers/active_canvas/pages_controller.rb
+- app/controllers/active_canvas/redirects_controller.rb
 - app/controllers/concerns/active_canvas/current_user.rb
 - app/controllers/concerns/active_canvas/rate_limitable.rb
 - app/controllers/concerns/active_canvas/tailwind_compilation.rb
+- app/helpers/active_canvas/admin/collection_items_helper.rb
 - app/helpers/active_canvas/application_helper.rb
 - app/jobs/active_canvas/application_job.rb
 - app/jobs/active_canvas/compile_tailwind_job.rb
 - app/mailers/active_canvas/application_mailer.rb
 - app/models/active_canvas/ai_model.rb
 - app/models/active_canvas/application_record.rb
+- app/models/active_canvas/auto_drop.rb
+- app/models/active_canvas/collection.rb
+- app/models/active_canvas/collection_item.rb
+- app/models/active_canvas/collection_item_version.rb
 - app/models/active_canvas/current.rb
+- app/models/active_canvas/form_submission.rb
 - app/models/active_canvas/media.rb
 - app/models/active_canvas/page.rb
+- app/models/active_canvas/page_redirect.rb
 - app/models/active_canvas/page_type.rb
 - app/models/active_canvas/page_version.rb
 - app/models/active_canvas/partial.rb
@@ -87,10 +136,30 @@ files:
 - app/services/active_canvas/ai_configuration.rb
 - app/services/active_canvas/ai_models.rb
 - app/services/active_canvas/ai_service.rb
+- app/services/active_canvas/collection_schema.rb
+- app/services/active_canvas/collection_source.rb
 - app/services/active_canvas/content_renderer.rb
 - app/services/active_canvas/content_sanitizer.rb
+- app/services/active_canvas/form_schema.rb
+- app/services/active_canvas/form_stamper.rb
 - app/services/active_canvas/media_ref_backfill.rb
 - app/services/active_canvas/tailwind_compiler.rb
+- app/services/active_canvas/template_renderer.rb
+- app/services/active_canvas/template_renderer/binding_resolver.rb
+- app/services/active_canvas/template_renderer/directive_expander.rb
+- app/views/active_canvas/admin/collection_items/_field_input.html.erb
+- app/views/active_canvas/admin/collection_items/_form.html.erb
+- app/views/active_canvas/admin/collection_items/edit.html.erb
+- app/views/active_canvas/admin/collection_items/history.html.erb
+- app/views/active_canvas/admin/collection_items/index.html.erb
+- app/views/active_canvas/admin/collection_items/new.html.erb
+- app/views/active_canvas/admin/collections/_field_builder.html.erb
+- app/views/active_canvas/admin/collections/_form.html.erb
+- app/views/active_canvas/admin/collections/edit.html.erb
+- app/views/active_canvas/admin/collections/index.html.erb
+- app/views/active_canvas/admin/collections/new.html.erb
+- app/views/active_canvas/admin/form_submissions/index.html.erb
+- app/views/active_canvas/admin/form_submissions/show.html.erb
 - app/views/active_canvas/admin/media/index.html.erb
 - app/views/active_canvas/admin/media/show.html.erb
 - app/views/active_canvas/admin/page_types/_form.html.erb
@@ -99,6 +168,7 @@ files:
 - app/views/active_canvas/admin/page_types/new.html.erb
 - app/views/active_canvas/admin/page_types/show.html.erb
 - app/views/active_canvas/admin/page_versions/show.html.erb
+- app/views/active_canvas/admin/pages/_data_panel.html.erb
 - app/views/active_canvas/admin/pages/_form.html.erb
 - app/views/active_canvas/admin/pages/content.html.erb
 - app/views/active_canvas/admin/pages/edit.html.erb
@@ -119,9 +189,21 @@ files:
 - config/routes.rb
 - db/migrate/20260202000001_create_active_canvas_tables.rb
 - db/migrate/20260202000002_create_active_canvas_ai_models.rb
+- db/migrate/20260517100001_add_template_enabled_and_bindings_to_active_canvas_pages.rb
+- db/migrate/20260517100002_add_bindings_to_active_canvas_page_versions.rb
 - db/migrate/20260613000002_backfill_active_canvas_media_refs.rb
+- db/migrate/20260702000001_create_active_canvas_page_redirects.rb
+- db/migrate/20260702000002_create_active_canvas_form_submissions.rb
+- db/migrate/20260702000003_create_active_canvas_collections.rb
+- db/migrate/20260702000004_create_active_canvas_collection_items.rb
+- db/migrate/20260702000005_create_active_canvas_collection_item_versions.rb
 - lib/active_canvas.rb
 - lib/active_canvas/configuration.rb
+- lib/active_canvas/data_sources.rb
+- lib/active_canvas/data_sources/errors.rb
+- lib/active_canvas/data_sources/param_spec.rb
+- lib/active_canvas/data_sources/registration.rb
+- lib/active_canvas/data_sources/source.rb
 - lib/active_canvas/engine.rb
 - lib/active_canvas/version.rb
 - lib/generators/active_canvas/install/install_generator.rb
@@ -148,7 +230,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.2
+rubygems_version: 4.0.16
 specification_version: 4
 summary: A mountable Rails CMS engine for managing static pages
 test_files: []