avo 4.2.5 → 4.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5bba089d3b0fe4f9d84ca2284da37ced9876bb8380a883a29c7a542c4c7bd79c
-  data.tar.gz: 46fe47577923cc7f1de8e6df76fefcfb4ab999360eb59a08d39d48d111687fa2
+  metadata.gz: 06a99742dcd8d96855fb10577085da6acf2fb2eabebc8ba66d02b653e404f962
+  data.tar.gz: 7d63ef33110cdf91bb3188ecf82abac3ecf9f56fd3c1edc53605737da96b2557
 SHA512:
-  metadata.gz: 8501ec94f95a72ab5ed6eb2d4750791686440b3f74ee17630f553ea169ab26d9ca475163562aa0ab4a5735d6e3ada3082f2421c0c52e7a1db3d2d35d41590d4a
-  data.tar.gz: de04871e9e0a0f6d058197970d3424b7ce10b7cb810edfa0aab06ea598fc132ef16c041bd28816b218ac5d3b61dbb095982ae14bf56c9d4661540b12524ce522
+  metadata.gz: 4dec169c3e7a227e2fd6baffd9a8766c91fe0fba55a04fb3bcf9cd1691c12479a5579450e98cf27a90c1cfab99970d9b5498a9b26e3a745c443878b4f1504006
+  data.tar.gz: 8903fb5e47c672f02254cf44e90fb3df88775e0d5b382131b7ca70c3567d5d6b35815b09e6a129b827111ef447d6cc6dc1dba99655b4bf628d59b9eb114dd69d

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    avo (4.2.5)
+    avo (4.2.7)
       actionview (>= 6.1)
       active_link_to
       activerecord (>= 6.1)
@@ -120,7 +120,7 @@ GEM
       prism
     addressable (2.9.0)
       public_suffix (>= 2.0.2, < 8.0)
-    amazing_print (2.0.0)
+    amazing_print (3.0.0)
     annotate (2.6.5)
       activerecord (>= 2.3.0)
       rake (>= 0.8.7)
@@ -139,8 +139,8 @@ GEM
     avo-record_link_field (0.0.2)
     avo-rhino_field (4.1.0)
     aws-eventstream (1.4.0)
-    aws-partitions (1.1283.0)
-    aws-sdk-core (3.254.1)
+    aws-partitions (1.1289.0)
+    aws-sdk-core (3.257.0)
       aws-eventstream (~> 1, >= 1.3.0)
       aws-partitions (~> 1, >= 1.992.0)
       aws-sigv4 (~> 1.9)
@@ -148,11 +148,12 @@ GEM
       bigdecimal
       jmespath (~> 1, >= 1.6.1)
       logger
-    aws-sdk-kms (1.130.0)
-      aws-sdk-core (~> 3, >= 3.254.0)
+      rexml (~> 3.4, >= 3.4.2)
+    aws-sdk-kms (1.132.0)
+      aws-sdk-core (~> 3, >= 3.256.0)
       aws-sigv4 (~> 1.5)
-    aws-sdk-s3 (1.229.0)
-      aws-sdk-core (~> 3, >= 3.254.1)
+    aws-sdk-s3 (1.232.1)
+      aws-sdk-core (~> 3, >= 3.256.0)
       aws-sdk-kms (~> 1)
       aws-sigv4 (~> 1.5)
     aws-sigv4 (1.12.1)
@@ -179,9 +180,9 @@ GEM
       erubi (~> 1.4)
       parser (>= 2.4)
       smart_properties
-    bigdecimal (4.1.2)
+    bigdecimal (4.1.3)
     bindex (0.8.1)
-    bootsnap (1.25.0)
+    bootsnap (1.26.0)
       msgpack (~> 1.5)
     builder (3.3.0)
     bump (0.10.0)
@@ -218,15 +219,16 @@ GEM
       bigdecimal
       rexml
     crass (1.0.7)
-    css_parser (3.0.0)
+    css_parser (3.2.0)
       addressable
+      base64
       ssrf_filter (~> 1.5)
     cssbundling-rails (1.4.3)
       railties (>= 6.0.0)
     csv (3.3.6)
-    cuprite (0.17)
+    cuprite (0.18)
       capybara (~> 3.0)
-      ferrum (~> 0.17.0)
+      ferrum (~> 0.18.0)
     danger (9.6.1)
       base64 (~> 0.2)
       claide (~> 1.0)
@@ -326,21 +328,20 @@ GEM
       railties (>= 6.1.0)
     faker (3.8.0)
       i18n (>= 1.8.11, < 2)
-    faraday (2.14.3)
+    faraday (2.14.4)
       faraday-net_http (>= 2.0, < 3.5)
       json
       logger
-    faraday-http-cache (2.7.0)
+    faraday-http-cache (2.8.0)
       faraday (>= 0.8)
     faraday-multipart (1.2.0)
       multipart-post (~> 2.0)
     faraday-net_http (3.4.4)
       net-http (~> 0.5)
-    ferrum (0.17.2)
+    ferrum (0.18.0)
       addressable (~> 2.5)
       base64 (~> 0.2)
       concurrent-ruby (~> 1.1)
-      webrick (~> 1.7)
       websocket-driver (~> 0.7)
     ffi (1.17.4)
     ffi (1.17.4-arm64-darwin)
@@ -362,7 +363,7 @@ GEM
     gem-release (2.2.4)
     get_process_mem (0.2.7)
       ffi (~> 1.0)
-    git (5.2.0)
+    git (5.6.0)
       activesupport (>= 5.0)
       addressable (~> 2.8)
       process_executer (~> 4.1)
@@ -409,7 +410,7 @@ GEM
     inline_svg (1.10.0)
       activesupport (>= 3.0)
       nokogiri (>= 1.6)
-    io-console (0.9.2)
+    io-console (0.9.4)
     irb (1.18.0)
       pp (>= 0.6.0)
       prism (>= 1.3.0)
@@ -431,8 +432,8 @@ GEM
       addressable (~> 2.8)
       childprocess (~> 5.0)
       logger (~> 1.6)
-    lexxy (0.9.31)
-      rails (>= 8.0.2)
+    lexxy (0.9.33)
+      railties (>= 8.0.2)
     lint_roller (1.1.0)
     listen (3.10.0)
       logger
@@ -485,17 +486,17 @@ GEM
       monetize (~> 1.9)
       money (~> 6.13)
       railties (>= 3.0)
-    msgpack (1.8.4)
+    msgpack (1.8.5)
     multipart-post (2.4.1)
     nap (1.1.0)
     net-http (0.9.1)
       uri (>= 0.11.1)
-    net-imap (0.6.6)
+    net-imap (0.6.7)
       date
       net-protocol
     net-pop (0.1.2)
       net-protocol
-    net-protocol (0.3.0)
+    net-protocol (0.4.0)
       timeout
     net-smtp (0.5.1)
       net-protocol
@@ -513,12 +514,12 @@ GEM
     openssl (4.0.2)
     orm_adapter (0.5.0)
     ostruct (0.6.3)
-    pagy (43.6.2)
+    pagy (43.6.3)
       json
       uri
       yaml
-    parallel (2.1.0)
-    parallel_tests (5.7.0)
+    parallel (2.2.0)
+    parallel_tests (5.8.0)
       parallel
     parser (3.3.12.0)
       ast (~> 2.4.1)
@@ -595,7 +596,7 @@ GEM
       zeitwerk (~> 2.6)
     rainbow (3.1.1)
     rake (13.4.2)
-    ransack (4.4.1)
+    ransack (5.0.2)
       activerecord (>= 7.2)
       activesupport (>= 7.2)
       i18n
@@ -623,7 +624,7 @@ GEM
       parser (~> 3.3.0)
       rainbow (>= 2.0, < 4.0)
       rexml (~> 3.1)
-    regexp_parser (2.12.0)
+    regexp_parser (2.13.0)
     reline (0.7.0)
       io-console (~> 0.5)
     responders (3.2.1)
@@ -707,19 +708,19 @@ GEM
       simplecov (>= 0.22.0)
       tty-which (~> 0.5.0)
       virtus (~> 2.0)
-    rubyzip (3.6.0)
+    rubyzip (3.7.0)
     sawyer (0.9.3)
       addressable (>= 2.3.5)
       faraday (>= 0.17.3, < 3)
     securerandom (0.4.1)
-    selenium-webdriver (4.48.0)
+    selenium-webdriver (4.49.0)
       base64 (~> 0.2)
       logger (~> 1.4)
       rexml (~> 3.2, >= 3.2.5)
       rubyzip (>= 1.2.2, < 4.0)
       websocket (~> 1.0)
-    sexp_processor (4.17.5)
-    simplecov (1.1.1)
+    sexp_processor (4.17.6)
+    simplecov (1.3.0)
     simplecov-cobertura (4.0.0)
       rexml
       simplecov (~> 1.0)
@@ -754,7 +755,7 @@ GEM
     spring (4.7.0)
     spring-commands-rspec (1.0.4)
       spring (>= 0.9.1)
-    ssrf_filter (1.5.0)
+    ssrf_filter (1.6.0)
     standard (1.56.0)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.0)
@@ -789,9 +790,9 @@ GEM
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
     unaccent (0.4.0)
-    unicode-display_width (3.2.0)
-      unicode-emoji (~> 4.1)
-    unicode-emoji (4.2.0)
+    unicode-display_width (3.3.0)
+      unicode-emoji (~> 4.3)
+    unicode-emoji (4.3.0)
     uri (1.1.1)
     useragent (0.16.11)
     view_component (4.15.0)
@@ -812,7 +813,6 @@ GEM
       addressable (>= 2.8.0)
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
-    webrick (1.9.2)
     websocket (1.2.11)
     websocket-driver (0.8.2)
       base64

data/app/assets/builds/avo/application.css

@@ -4019,6 +4019,25 @@
 .tippy-box[data-theme~='preview'] .tippy-arrow {
   display: none;
 }
+.tooltip-anchor {
+  max-width: 100%;
+  min-width: 0px;
+}
+.tooltip-anchor--inline {
+  display: inline-block;
+}
+.tooltip-anchor--block {
+  display: block;
+  width: 100%;
+}
+.label-tooltip__icon {
+  margin-inline-start: var(--spacing);
+  display: inline-block;
+  width: 1em;
+  height: 1em;
+  vertical-align: -0.125em;
+  color: var(--color-content-secondary);
+}
 tags.tagify {
   --tags-border-color: var(--color-tertiary);
   --tags-hover-border-color: var(--color-tertiary);

data/app/assets/stylesheets/css/components/tooltip.css

@@ -36,3 +36,24 @@
   @apply hidden;
 }
 
+/* Anchors for the field `tooltip:` option. Inline hugs the value so the bubble
+   sits over a badge or a date rather than over the row; block keeps the width
+   of values that fill the row (editors, maps, progress bars). */
+.tooltip-anchor {
+  @apply min-w-0 max-w-full;
+}
+
+.tooltip-anchor--inline {
+  @apply inline-block;
+}
+
+.tooltip-anchor--block {
+  @apply block w-full;
+}
+
+/* The cue that marks a label as hoverable, for the `label_tooltip:` option.
+   Sized off the label's own text so it fits the Show label and the smaller
+   Index header alike. */
+.label-tooltip__icon {
+  @apply inline-block size-[1em] ms-1 align-[-0.125em] text-content-secondary;
+}

data/app/components/avo/field_wrapper_component.html.erb

@@ -7,17 +7,20 @@
     class: label_classes,
     style: label_style,
     data: label_data do %>
-    <span class="self-center">
+    <%= content_tag :span, class: label_text_classes, **tooltip_attributes(label_tooltip) do %>
     <% if @form.present? %>
       <%= @form.label label_for, label %>
     <% else %>
       <%= @field.name %>
     <% end %>
     <% if on_edit? && @field.is_required? %> <span class="text-danger-content ms-1">*</span> <% end %>
+    <% if label_tooltip.present? %>
+      <%= helpers.svg "tabler/outline/info-circle", class: "label-tooltip__icon" %>
+    <% end %>
     <% if label_help.present? %>
       <div class="field-wrapper__label-help"><%== label_help %></div>
     <% end %>
-    </span>
+    <% end %>
   <% end %>
   <%= content_tag :div,
     class: content_classes,
@@ -26,23 +29,25 @@
     <%= tag.div class: "field-wrapper__content-wrapper" do %>
       <% if on_show? %>
         <div class="flex flex-row items-center group gap-x-1 group/clipboard w-full">
-          <% if render_dash? %>
-            —
-          <% elsif collapsable? %>
-            <%= render Avo::Fields::Common::CollapsableContentComponent.new do %>
+          <%= value_tooltip_anchor(block: block_tooltip_anchor?) do %>
+            <% if render_dash? %>
+              —
+            <% elsif collapsable? %>
+              <%= render Avo::Fields::Common::CollapsableContentComponent.new do %>
+                <%= content %>
+              <% end %>
+            <% else %>
               <%= content %>
             <% end %>
-          <% else %>
-            <%= content %>
           <% end %>
           <% if @field.copyable %>
             <%= render Avo::ClipboardComponent.new(value: @field.value) %>
           <% end %>
         </div>
       <% elsif on_edit? %>
-        <div class="field-wrapper__input">
+        <%= content_tag :div, class: "field-wrapper__input", **tooltip_attributes(tooltip) do %>
           <%= content %>
-        </div>
+        <% end %>
         <% if @field.record_errors.include?(@field.id) %>
           <div class="field-wrapper__error"><%= @field.record_errors.full_messages_for(@field.id).to_sentence %></div>
         <% end %>

data/app/components/avo/field_wrapper_component.rb

@@ -2,6 +2,7 @@
 
 class Avo::FieldWrapperComponent < Avo::BaseComponent
   include Avo::Concerns::HasResourceStimulusControllers
+  include Avo::Concerns::HasFieldTooltips
 
   prop :collapsable, default: false
   prop :dash_if_blank, default: true
@@ -90,6 +91,16 @@ class Avo::FieldWrapperComponent < Avo::BaseComponent
     Avo::ExecutionContext.new(target: @label_help || @field.label_help, record: record, resource: @resource, view: @view).handle
   end
 
+  def label_text_classes
+    class_names("self-center", "label-tooltip": label_tooltip.present?)
+  end
+
+  # Collapsable content fills the row like a block-shaped field does, so its
+  # anchor keeps that width too.
+  def block_tooltip_anchor?
+    collapsable? || @field.tooltip_anchor == :block
+  end
+
   def record
     @resource.present? ? @resource.record : nil
   end

data/app/components/avo/index/field_wrapper_component.html.erb

@@ -14,14 +14,14 @@
   },
   style: @field.get_html(:style, view: @view, element: :wrapper) do %>
   <% if render_dash? %>
-    —
+    <%= value_tooltip_anchor { "—" } %>
   <% else %>
     <% if @center_content %>
       <div class="flex items-center justify-center">
-        <%= content %>
+        <%= value_tooltip_anchor(block: @field.tooltip_anchor == :block) { content } %>
       </div>
     <% else %>
-      <%= content %>
+      <%= value_tooltip_anchor(block: @field.tooltip_anchor == :block) { content } %>
     <% end %>
     <% if @field.copyable %>
       <%= render Avo::ClipboardComponent.new(value: @field.value) %>

data/app/components/avo/index/field_wrapper_component.rb

@@ -1,6 +1,8 @@
 # frozen_string_literal: true
 
 class Avo::Index::FieldWrapperComponent < Avo::BaseComponent
+  include Avo::Concerns::HasFieldTooltips
+
   # Vertical padding for each density step. `nil` density falls back to
   # `Avo.configuration.density`.
   DENSITY_PADDING = {

data/app/components/avo/modal_component.html.erb

@@ -17,7 +17,7 @@
     aria-modal="true"
     class="modal__card-container"
   >
-    <div class="modal__card" data-<%= ctrl %>-target="card">
+    <div class="modal__card" <%= tag.attributes(data: {"#{ctrl}-target": "card"}) %>>
       <div class="card">
         <div class="card__wrapper">
           <% if has_header? %>

data/app/components/avo/u_i/panel_component.html.erb

@@ -36,7 +36,7 @@
   <% end %>
 
   <div class="panel__content">
-    <div class="panel__body" <%= "data-content-focus tabindex=-1".html_safe if content_focusable? %>>
+    <div class="panel__body" <%= tag.attributes(content_focusable? ? {data: {"content-focus": ""}, tabindex: -1} : {}) %>>
       <% if card? %>
         <div class="panel__card"><%= card %></div>
       <% else %>

data/app/controllers/avo/associations_controller.rb

@@ -412,6 +412,9 @@ module Avo
     def checkbox_list_option(record)
       resource = @attachment_resource.new(record:, view: Avo::ViewInquirer.new(:new), params:)
       search_item = (@attachment_resource.fetch_search(:item, record:) || {}).with_indifferent_access
+      # Same split as the global search controller: `record_title` is the fallback, and a
+      # declared `self.search[:item]` supplies title, description and image itself. Those
+      # values are app-authored and outside what a title-attribute rule governs.
       title = search_item[:title] || resource.record_title
 
       {
@@ -446,9 +449,9 @@ module Avo
       page_key = "#{pagination_key}.page"
 
       @index_params[:page] = if Avo.configuration.session_persistence_enabled?
-        session[page_key] = params[:page] || session[page_key] || 1
+        session[page_key] = positive_integer_or(params[:page] || session[page_key], 1)
       else
-        params[:page] || 1
+        positive_integer_or(params[:page], 1)
       end
     end
 
@@ -457,9 +460,9 @@ module Avo
       per_page_key = "#{pagination_key}.per_page"
 
       @index_params[:per_page] = if Avo.configuration.session_persistence_enabled?
-        session[per_page_key] = params[:per_page] || session[per_page_key] || Avo.configuration.via_per_page
+        session[per_page_key] = positive_integer_or(params[:per_page] || session[per_page_key], Avo.configuration.via_per_page)
       else
-        params[:per_page] || Avo.configuration.via_per_page
+        positive_integer_or(params[:per_page], Avo.configuration.via_per_page)
       end
     end
   end

data/app/controllers/avo/base_controller.rb

@@ -706,12 +706,17 @@ module Avo
     end
 
     def set_pagination_params
-      @index_params[:page] = params[:page] || 1
+      @index_params[:page] = positive_integer_or(params[:page], 1)
+      @index_params[:per_page] = positive_integer_or(params[:per_page].presence || cookies[:per_page], Avo.configuration.per_page)
 
       # If the request includes the 'per_page' parameter, save its value to the cookies
-      cookies[:per_page] = params[:per_page] if params[:per_page].present?
+      cookies[:per_page] = @index_params[:per_page] if params[:per_page].present?
+    end
 
-      @index_params[:per_page] = cookies[:per_page] || Avo.configuration.per_page
+    # Pagy raises on anything that is not a positive integer, so fall back when the value is not one.
+    def positive_integer_or(value, fallback)
+      value = value.to_s.to_i
+      value.positive? ? value : fallback
     end
 
     # If we don't get a query object predefined from a child controller like associations, just spin one up.

data/app/controllers/avo/search_controller.rb

@@ -160,6 +160,10 @@ module Avo
     end
 
     def fetch_result_information(record, resource, item)
+      # `record_title` is the fallback here, not the source: a resource declaring
+      # `self.search[:item]` supplies the title itself, and that block is app-authored.
+      # Anything that governs which attributes a title may expose therefore reaches this
+      # surface through `record_title` only — the item half is the app's own.
       title = item&.dig(:title) || resource.record_title
       highlighted_title = highlight(title&.to_s, CGI.escapeHTML(params[:q] || ""))
 

data/app/views/avo/partials/_confirm_dialog.html.erb

@@ -2,14 +2,14 @@
   <form method="dialog">
     <div class="card relative">
       <button value="cancel" class="absolute top-3 inset-e-2.5 text-content-secondary bg-transparent hover:bg-tertiary hover:text-content rounded-lg text-sm size-8 ms-auto inline-flex justify-center items-center" data-modal-hide="popup-modal" tabindex="3">
-        <%= svg "x-mark", class: "size-6" %>
+        <%= svg "x", class: "size-6" %>
         <span class="sr-only"><%= t "avo.close_modal" %></span>
       </button>
       <div class="card__wrapper">
         <div class="card__body text-center items-center justify-between min-h-56">
           <div class="flex flex-col items-center justify-center p-4 md:p-5">
             <svg class="mt-4 mx-auto mb-4 text-content-secondary size-12" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 20 20">
-              <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 11V6m0 8h.01M19 10a9 9 0 1 1-18 0 9 9 0 0 1 18 0Z"/>
+              <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 11V6m0 8h.01M19 10a9 9 0 1 1-18 0 9 9 0 0 1 18 0Z" />
             </svg>
             <p class="text-md font-normal text-content">
               <%= t "avo.are_you_sure" %>

data/app/views/avo/partials/_table_header.html.erb

@@ -53,6 +53,7 @@
         sort_direction = first_option
       end
       text_classes = "text-content-secondary tracking-tight leading-tight text-xs font-semibold"
+      label_tooltip = field.label_tooltip
       table_header_class = field.table_header_class
       end_aligned = table_header_class.to_s.split.include?("text-end") %>
 
@@ -86,7 +87,7 @@
               "flex-row-reverse": end_aligned
             ),
             'data-turbo-frame': params[:turbo_frame] do %>
-            <%= field.table_header_label %>
+            <%= render partial: "avo/partials/table_header_label", locals: {field: field, label_tooltip: label_tooltip} %>
 
             <%= render partial: 'avo/partials/sortable_component', locals: {
               field: field,
@@ -95,7 +96,7 @@
           <% end %>
         <% else %>
           <%= content_tag :div, class: text_classes, data: {sortable: false} do %>
-            <%= field.table_header_label %>
+            <%= render partial: "avo/partials/table_header_label", locals: {field: field, label_tooltip: label_tooltip} %>
           <% end %>
         <% end %>
 

data/app/views/avo/partials/_table_header_label.html.erb

@@ -0,0 +1,10 @@
+<%# The label alone unless the field declares `label_tooltip:`; then the text and
+    its cue share one anchor, so hovering either shows the bubble. %>
+<% if label_tooltip.present? %>
+  <%= content_tag :span, class: "label-tooltip", title: label_tooltip, data: {tippy: :tooltip} do %>
+    <%= field.table_header_label %>
+    <%= svg "tabler/outline/info-circle", class: "label-tooltip__icon" %>
+  <% end %>
+<% else %>
+  <%= field.table_header_label %>
+<% end %>

data/lib/avo/base_action.rb

@@ -186,8 +186,11 @@ module Avo
 
         # For some fields, like belongs_to, the id and database_id differ (user vs user_id).
         # That's why we need to fetch the database_id for when we process the action.
-        action_fields_by_database_id = action_fields.map do |id, value|
-          [value.database_id.to_sym, value]
+        action_fields_by_database_id = action_fields.values.flat_map do |field|
+          # A polymorphic belongs_to submits both `<name>_type` and `<name>_id`, but its database_id only covers the type.
+          database_ids = field.try(:is_polymorphic?) ? field.to_permitted_param : [field.database_id]
+
+          database_ids.map { |database_id| [database_id.to_sym, field] }
         end.to_h
 
         args[:fields].to_unsafe_h.map do |name, value|

data/lib/avo/concerns/has_field_tooltips.rb

@@ -0,0 +1,38 @@
+module Avo
+  module Concerns
+    # Hover tooltips on a field's label and value, declared with the field's
+    # `tooltip:` and `label_tooltip:` options. tippy takes the text from
+    # `title` and selects on `data-tippy`, so both attributes travel together.
+    module HasFieldTooltips
+      extend ActiveSupport::Concern
+
+      def tooltip
+        @resolved_tooltip ||= @field.tooltip
+      end
+
+      def label_tooltip
+        @resolved_label_tooltip ||= @field.label_tooltip
+      end
+
+      def tooltip_attributes(text)
+        return {} if text.blank?
+
+        {title: text, data: {tippy: :tooltip}}
+      end
+
+      # Wraps the rendered value in the tooltip anchor. Inline hugs the value so
+      # the bubble sits over a badge or a date rather than mid-row; block keeps
+      # the width of values that fill the row (editors, maps, bars). Rendered
+      # only when there is a tooltip: an empty wrapper would still change how
+      # the value sizes.
+      def value_tooltip_anchor(block: false, &content_block)
+        return capture(&content_block) if tooltip.blank?
+
+        content_tag :div,
+          class: class_names("tooltip-anchor", block ? "tooltip-anchor--block" : "tooltip-anchor--inline"),
+          **tooltip_attributes(tooltip),
+          &content_block
+      end
+    end
+  end
+end

data/lib/avo/current.rb

@@ -27,13 +27,31 @@ class Avo::Current < ActiveSupport::CurrentAttributes
 
   attribute :appearance_settings
 
+  # Which Avo surface this request arrived through: `:ui` for the admin screens, `:api`,
+  # `:ai`, `:mcp`. It names the client, not the screen — `view` already means index/show/
+  # edit/new, which is a screen within one surface. Consumers that resolve an answer per
+  # user can differ per surface without a second declaration.
+  attribute :interface
+
+  # Set by the callers that map over every resource with no user in scope — this gem's
+  # telemetry, and avo-licensing's debug service. Consumers that restrict what a user may
+  # reach read this to opt out explicitly, so the exemption can never be inferred from a
+  # nil user (which is a legitimate state on the API surface).
+  attribute :enumerating_all_resources
+
   # Rails 7.1 CurrentAttributes#attribute is only `def attribute(*names)` — no `default:` keyword.
   # `attribute :x, default: {}` is passed as a second positional `{ default: {} }`, so `names.map(&:to_sym)` raises.
-  resets { self.appearance_settings = {} }
+  resets do
+    self.appearance_settings = {}
+    self.interface = :ui
+    self.enumerating_all_resources = false
+  end
 
   def initialize
     super
     self.appearance_settings = {}
+    self.interface = :ui
+    self.enumerating_all_resources = false
   end
 
   # Protect from error #<RuntimeError: Missing rack.input> when request is ActionDispatch::Request.empty

data/lib/avo/fields/area_field.rb

@@ -41,6 +41,10 @@ module Avo
       def geometry
         @geometry.to_s.classify
       end
+
+      def tooltip_anchor
+        :block
+      end
     end
   end
 end

data/lib/avo/fields/base_field.rb

@@ -20,6 +20,9 @@ module Avo
       include Avo::Fields::Concerns::DomId
 
       include ActionView::Helpers::UrlHelper
+      # Rails 8.2 extracted link_to, button_to and current_page? into NavigationHelper
+      # (rails/rails#58735). Without it, link_to on a resource is a NoMethodError there.
+      include ActionView::Helpers::NavigationHelper if defined?(ActionView::Helpers::NavigationHelper)
 
       delegate :app, to: ::Avo::Current
       delegate :view_context, to: :app
@@ -92,6 +95,8 @@ module Avo
         @autocomplete = args[:autocomplete]
         @help = args[:help]
         @label_help = args[:label_help]
+        @tooltip = args[:tooltip]
+        @label_tooltip = args[:label_tooltip]
         @default = args[:default]
         @visible = args[:visible]
         @html = args[:html]
@@ -227,6 +232,26 @@ module Avo
         translated_option(:help)
       end
 
+      # Hover text for the value: anchored to the value itself on Index and
+      # Show, to the input on forms. Resolved here rather than in the wrapper
+      # because the Index header renders the label outside any wrapper.
+      def tooltip
+        execute_context(@tooltip.nil? ? translated_option(:tooltip) : @tooltip)
+      end
+
+      # Hover text for the label, on every view and on the Index header.
+      def label_tooltip
+        execute_context(@label_tooltip.nil? ? translated_option(:label_tooltip) : @label_tooltip)
+      end
+
+      # How the value tooltip anchors to the rendered value. `:inline` hugs the
+      # value so the bubble sits over a badge or a date rather than mid-row;
+      # fields whose value fills the row (editors, maps, progress bars) answer
+      # `:block` so the anchor keeps their width instead of collapsing it.
+      def tooltip_anchor
+        :inline
+      end
+
       def placeholder
         target = if !@placeholder.nil?
           @placeholder

data/lib/avo/fields/code_field.rb

@@ -29,6 +29,10 @@ module Avo
         @line_wrapping = args[:line_wrapping].present? ? args[:line_wrapping] : true
         @always_show = args[:always_show] || false
       end
+
+      def tooltip_anchor
+        :block
+      end
     end
   end
 end

data/lib/avo/fields/easy_mde_field.rb

@@ -20,6 +20,10 @@ module Avo
           height: @height
         }
       end
+
+      def tooltip_anchor
+        :block
+      end
     end
   end
 end

data/lib/avo/fields/files_field.rb

@@ -33,6 +33,10 @@ module Avo
 
         record
       end
+
+      def tooltip_anchor
+        :block
+      end
     end
   end
 end

data/lib/avo/fields/location_field.rb

@@ -3,6 +3,12 @@
 module Avo
   module Fields
     class LocationField < BaseField
+      # The two columns a location is stored across, when it is stored across two. Read
+      # by anything that has to know which columns back a field — `to_permitted_param`
+      # cannot answer that here, since it yields the field id and a hash rather than the
+      # column names.
+      attr_reader :stored_as
+
       def initialize(id, **args, &block)
         hide_on :index
         super
@@ -113,6 +119,10 @@ module Avo
           record.send(:"#{database_id}=", value[index])
         end
       end
+
+      def tooltip_anchor
+        :block
+      end
     end
   end
 end

data/lib/avo/fields/progress_bar_field.rb

@@ -14,6 +14,10 @@ module Avo
         @display_value = args[:display_value] || false
         @value_suffix = args[:value_suffix] || nil
       end
+
+      def tooltip_anchor
+        :block
+      end
     end
   end
 end

data/lib/avo/resources/array_resource.rb

@@ -14,17 +14,23 @@ module Avo
       }
 
       class << self
+        # Each array resource keeps its own model class. It starts as a placeholder class and
+        # fetch_records replaces it with the class of the records it builds or finds.
         def model_class
-          @@model_class ||= Avo.const_set(
+          return @model_class if @model_class
+
+          resource_class = self
+
+          Avo.send(:remove_const, class_name) if Avo.const_defined?(class_name, false)
+
+          @model_class = Avo.const_set(
             class_name,
             Class.new do
               include ActiveModel::Model
 
-              class << self
-                def primary_key = nil
-
-                def all = "Avo::Resources::#{class_name}".constantize.new.fetch_records
-              end
+              define_singleton_method(:primary_key) { nil }
+              define_singleton_method(:class_name) { resource_class.class_name }
+              define_singleton_method(:all) { resource_class.new.fetch_records }
             end
           )
         end
@@ -68,21 +74,22 @@ module Avo
         @fetched_records ||= if array_of_records.empty?
           array_of_records
         elsif is_array_of_active_records?(array_of_records)
-          @@model_class = array_of_records.first.class
-          @@model_class.where(id: array_of_records.map(&:id))
+          self.class.model_class = array_of_records.first.class
+          model_class.where(id: array_of_records.map(&:id))
         elsif is_active_record_relation?(array_of_records)
-          @@model_class = array_of_records.try(:model)
+          self.class.model_class = array_of_records.try(:model)
           array_of_records
         elsif is_array_of_store_model?(array_of_records)
-          @@model_class = array_of_records.first.class
+          self.class.model_class = array_of_records.first.class
           return(array_of_records)
         else
           # Dynamically create a class with accessors for all unique keys from the records
           keys = array_of_records.flat_map(&:keys).uniq
+          resource_class = self.class
 
           Avo.send(:remove_const, class_name) if Avo.const_defined?(class_name, false)
 
-          Avo.const_set(
+          custom_class = Avo.const_set(
             class_name,
             Class.new do
               include ActiveModel::Model
@@ -94,13 +101,14 @@ module Avo
                 id
               end
 
-              class << self
-                def class_name = class_name
-              end
+              define_singleton_method(:primary_key) { nil }
+              define_singleton_method(:class_name) { resource_class.class_name }
+              define_singleton_method(:all) { resource_class.new.fetch_records }
             end
           )
 
-          custom_class = "Avo::#{class_name}".constantize
+          # Keep model_class in sync so the records are instances of it
+          resource_class.model_class = custom_class
 
           # Map the records to instances of the dynamically created class
           array_of_records.map do |item|

data/lib/avo/resources/base.rb

@@ -4,6 +4,9 @@ module Avo
       extend ActiveSupport::DescendantsTracker
 
       include ActionView::Helpers::UrlHelper
+      # Rails 8.2 extracted link_to, button_to and current_page? into NavigationHelper
+      # (rails/rails#58735). Without it, link_to on a resource is a NoMethodError there.
+      include ActionView::Helpers::NavigationHelper if defined?(ActionView::Helpers::NavigationHelper)
       include Avo::Concerns::HasFieldDiscovery
       include Avo::Concerns::HasItems
       include Avo::Concerns::CanReplaceItems
@@ -513,21 +516,52 @@ module Avo
         fetch_record_title.to_s
       end
 
+      # Whether this resource may expose `attribute` inside a record title. Core always
+      # answers true; a plugin that restricts what a user may reach overrides this and
+      # answers from its own rules. That is what keeps a restricted attribute out of
+      # global search results, breadcrumbs, record links and the association picker
+      # without teaching each of those surfaces separately — they all render a title.
+      #
+      # Deliberately a question about one attribute rather than a field lookup: a bare
+      # `Resource.new(record:)` is built once per option in a belongs_to lookup list, and
+      # its items holder is empty until `detect_fields` runs, so resolving a title through
+      # the field pipeline would both cost a detection per option and answer nothing on
+      # the resources that never detect.
+      def title_attribute_reachable?(attribute)
+        true
+      end
+
       def fetch_record_title
         return name if @record.nil?
 
         # Get the title from the record if title is not set, try to get the name, title or label, or fallback to the to_param
-        return @record.try(:name) || @record.try(:title) || @record.try(:label) || @record.to_param if title.nil?
+        return reachable_title_fallback || @record.to_param if title.nil?
 
         # If the title is a symbol, get the value from the record else execute the block/string
         case title
         when Symbol
-          @record.send title
+          title_attribute_reachable?(title) ? @record.send(title) : @record.to_param
         when Proc
+          # App-authored code. The app's own code is outside this boundary, so the
+          # reachability question is not asked of it.
           Avo::ExecutionContext.new(target: title, resource: self, record: @record).handle
         end
       end
 
+      # Preserves the original `||` chain exactly — an unreachable candidate is skipped
+      # the same way a blank one is.
+      def reachable_title_fallback
+        reachable_title_attribute(:name) ||
+          reachable_title_attribute(:title) ||
+          reachable_title_attribute(:label)
+      end
+
+      def reachable_title_attribute(attribute)
+        return unless title_attribute_reachable?(attribute)
+
+        @record.try(attribute)
+      end
+
       def record_icon
         fetch_record_icon.to_s
       end

data/lib/avo/services/telemetry_service.rb

@@ -24,7 +24,10 @@ class Avo::Services::TelemetryService
     def avo_metadata
       resources = Avo.resource_manager.all
       dashboards = Avo::Current.app.dashboard_manager.all
-      field_definitions = resources.map(&:get_field_definitions)
+      # Counting fields across every resource with no user in scope. Declared explicitly so a
+      # consumer that restricts fields per user opts out here rather than inferring it from a
+      # nil user — nil is a legitimate user on the API surface, where restriction must still apply.
+      field_definitions = enumerating_all_resources { resources.map(&:get_field_definitions) }
       fields_count = field_definitions.map(&:count).sum
       fields_per_resource = sprintf("%0.01f", fields_count / (resources.count + 0.0))
 
@@ -69,6 +72,17 @@ class Avo::Services::TelemetryService
       "error: #{error.message}"
     end
 
+    # Marks a block as enumerating every resource without a user, restoring whatever the
+    # surrounding request had set rather than assuming it was unset.
+    def enumerating_all_resources
+      previous = Avo::Current.enumerating_all_resources
+      Avo::Current.enumerating_all_resources = true
+
+      yield
+    ensure
+      Avo::Current.enumerating_all_resources = previous
+    end
+
     def other_metadata(type = :actions)
       resources = Avo.resource_manager.all
 

data/lib/avo/skills/avo-associations/SKILL.md

@@ -160,7 +160,7 @@ Turning a long `belongs_to` / `has_many` picker into a type-to-search field is t
 ## Gotchas
 
 - **Set `inverse_of` on the model association.** Avo relies on it to resolve the reciprocal; missing it causes wrong/empty attach lists and save bugs. Set it on both sides.
-- **The Rails association must exist first.** Adding `field :x, as: :has_many` does nothing if the model has no `has_many :x` — the association frame raises `Avo::MissingAssociationError`, naming the model, the field, and the declaration to add (`has_many :orders`).
+- **The Rails association must exist first.** Adding `field :x, as: :has_many` does nothing if the model has no `has_many :x` — the association panel raises `Avo::MissingAssociationError`, naming the model, the field, and the declaration to add (`has_many :orders`). The cause is either side: the model genuinely lacks the association, or the field name doesn't match the one the model declares (`field :comments` against a `has_many :post_comments`). The **`array`** field is the one exception — it renders a panel deliberately not backed by an association, so it never raises this.
 - **`has_*` fields are hidden on Edit by default.** Add `show_on: :edit` to surface them on the form. For editing the related record *in* the form (not just displaying it), use `nested` — which needs the `avo-nested` gem.
 - **Attach/detach/create/destroy buttons come from the *target* resource's Pundit policy**, and the method names are **plural, matching the association name**: `attach_users?`, `detach_users?`, `create_users?`, `destroy_users?`, `view_users?`, `show_users?` — *not* the singular `detach_user?`. This is the #1 "why isn't my button showing" cause. Cross-link `avo-authorization`.
 - **`can_create: true` is still vetoed by the policy.** If the target resource's `create?` returns `false`, no create link appears regardless of `can_create`.

data/lib/avo/skills/avo-fields/SKILL.md

@@ -146,6 +146,7 @@ Every field accepts these common options (full list + types at the field-options
 - **`disabled:`** vs **`readonly:`** — both render the input disabled on forms. `disabled:` **also ignores the value on save** (safe against DOM tampering). `readonly:` is UI-only — a user can re-enable it and submit; don't rely on it for protection.
 - **`default:`** — pre-fills the New form (and action modals): `default: -> { Time.current }`.
 - **`help:`** / **`label_help:`** — help text (HTML allowed) below the input (forms only) or below the label (every view).
+- **`tooltip:`** / **`label_tooltip:`** — hover bubble (HTML allowed) on the value (badge/text on Index and Show, the input on forms) or on the label (every view, plus the Index header, with an info icon as the cue). String or block; the block gets `record`, `resource`, `view`, `field`, and returning `nil` renders no tooltip. `record` is `nil` for `label_tooltip` on the Index header. Prefer over `help:`/`label_help:` when the context matters only on demand: `tooltip: -> { "Revoked at #{record.revoked_at}" if record.revoked_at? }`.
 - **`placeholder:`** — placeholder for empty text-like inputs.
 - **`sortable:`** — makes the Index column sortable. `true` for real columns; a `-> { query.order(...) }` lambda (receives `query` and `direction`) for computed fields.
 - **Number `format:`** — formats `:number` fields on Index and Show with `:delimited`, `:percentage`, or `:human`; forms keep the raw number. A formatted number is end-aligned in tables, while a bare number stays start-aligned for identifier/year-shaped values. Rails i18n controls delimiters and separators. For money use the `:money` field, and for anything else `format_display_using:`.

data/lib/avo/skills/docs-index.json

@@ -1,7 +1,7 @@
 {
   "repo": "avo-hq/docs.avohq.io",
   "docs_path": "docs/4.0",
-  "commit": "aba11fb247009e10d25a705d4e437449f4a80c5c",
-  "date": "2026-09-17",
+  "commit": "7f2d52546ecf8bd84044cd011d58f5ffcdeae016",
+  "date": "2026-09-22",
   "note": "The docs commit these skills were last indexed from. Run ruby lib/avo/skills/bin/docs_drift.rb to see what changed since, and --update after a refresh."
 }

data/lib/avo/version.rb

@@ -1,3 +1,3 @@
 module Avo
-  VERSION = "4.2.5" unless const_defined?(:VERSION)
+  VERSION = "4.2.7" unless const_defined?(:VERSION)
 end

data/lib/avo/view_types/view_type_manager.rb

@@ -40,24 +40,26 @@ module Avo
 
       private
 
+      # Names, not constants: plugins register view types from Avo.boot, and loading a component there loads
+      # Action View while the app initializes, which Rails 8.2 flags (rails/rails#57224).
       def register_defaults
         register :table,
-          component: Avo::ViewTypes::TableComponent,
+          component: "Avo::ViewTypes::TableComponent",
           icon: "tabler/outline/layout-list",
           active_icon: "tabler/filled/layout-list"
 
         register :grid,
-          component: Avo::ViewTypes::GridComponent,
+          component: "Avo::ViewTypes::GridComponent",
           icon: "tabler/outline/layout-grid",
           active_icon: "tabler/filled/layout-grid"
 
         register :map,
-          component: Avo::ViewTypes::MapComponent,
+          component: "Avo::ViewTypes::MapComponent",
           icon: "tabler/outline/compass",
           active_icon: "tabler/filled/compass"
 
         register :list,
-          component: Avo::ViewTypes::TableComponent,
+          component: "Avo::ViewTypes::TableComponent",
           icon: "tabler/outline/layout-list",
           active_icon: "tabler/filled/layout-list"
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: avo
 version: !ruby/object:Gem::Version
-  version: 4.2.5
+  version: 4.2.7
 platform: ruby
 authors:
 - Adrian Marin
@@ -915,6 +915,7 @@ files:
 - app/views/avo/partials/_switcher_dropdown.html.erb
 - app/views/avo/partials/_switcher_inline.html.erb
 - app/views/avo/partials/_table_header.html.erb
+- app/views/avo/partials/_table_header_label.html.erb
 - app/views/avo/partials/_view_toggle_button.html.erb
 - app/views/avo/partials/distribution_chart.html.erb
 - app/views/avo/partials/distribution_chart_full.html.erb
@@ -969,6 +970,7 @@ files:
 - lib/avo/concerns/has_description.rb
 - lib/avo/concerns/has_discreet_information.rb
 - lib/avo/concerns/has_field_discovery.rb
+- lib/avo/concerns/has_field_tooltips.rb
 - lib/avo/concerns/has_helpers.rb
 - lib/avo/concerns/has_item_type.rb
 - lib/avo/concerns/has_items.rb