bro_hub 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 5e8da50149016fb9bbf5775f4257a85855b058372b1077ee0e1f8e24d6ac4811
+  data.tar.gz: c609ff0fca64a15b7a3682cdcc74c5a61ff8b944e18c075d0583b6515e0fa1e2
+SHA512:
+  metadata.gz: 2ee002d30eff44fa14bbff1261b76c0ac101ea6adf6c756e328abb6d059e9e7971f75912e03db7f1a05e490205250a0396109d9db6742a22ba87a70c9d6fae9a
+  data.tar.gz: 8f963753dd73fa6a0ac48e4c59e130ddd5f5d5bbb47e5e73228580c1bef3f48e2067b21ce004498f8dcd494913ae2e82937e6336ad08c276f3d4b7cdf92d059c

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2026 Ruby Dev SRL (https://www.rubydev.ro)
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,137 @@
+# BroHub
+
+One dashboard shell for the Bro gems ([EnvBro](https://github.com/rubydevro/env_bro), [SafeBro](https://github.com/rubydevro/safe_bro), and whatever comes next).
+
+- **One mount point.** `/bro_hub/safe_bro`, `/bro_hub/env_bro`, ... BroHub mounts the gems' engines itself.
+- **One look.** Top bar, sidebar, breadcrumb bar and page styles are shared, so every gem feels the same.
+- **One sidebar.** Each gem registers its pages and shows up as a section. A section only appears for people allowed to use it.
+- **One place for "who is signed in".** Set it once for all gems.
+
+It is a shell, not a security boundary: hiding a section is navigation. Every Bro gem still authorizes its own pages.
+
+Rails 7.1+, Ruby 3.2+. No database, no JavaScript, no asset pipeline.
+
+## Install
+
+```ruby
+gem "bro_hub"
+```
+
+```sh
+bin/rails generate bro_hub:install
+```
+
+This sets up the whole dashboard in one go:
+
+1. adds `config/initializers/bro_hub.rb`,
+2. mounts BroHub (it asks where, default `/bro_hub`; or `--mount-path=/ops/bro`):
+   ```ruby
+   mount BroHub::Engine => "/bro_hub"
+   ```
+3. offers to comment out old direct mounts such as `mount SafeBro::Engine`, since BroHub now mounts those gems itself
+   (`--remove-direct-mounts` says yes without asking; without a terminal the lines are left alone with a warning),
+4. runs the installer of every Bro gem in your Gemfile (SafeBro's initializer and migrations, EnvBro's, ...).
+
+You can also run a gem's own installer on its own: `bin/rails generate safe_bro:install` sets up BroHub first, then SafeBro.
+Running both, in any order, mounts BroHub once.
+
+```ruby
+# config/initializers/bro_hub.rb
+BroHub.configure do |config|
+  config.current_user = ->(controller) { controller.current_user }   # default: calls current_user if present
+  config.user_label   = ->(user) { user.email }
+  config.parent_controller = "::ApplicationController"
+end
+```
+
+Opening `/bro_hub` sends people to the first section they may use.
+
+## For gem authors: plugging in
+
+**1. Register your section** (in your engine file, so it runs before routes are drawn):
+
+```ruby
+BroHub.register :safe_bro,
+  label: "SafeBro · audit",              # sidebar heading
+  name: "SafeBro",                       # breadcrumb (default: label up to the "·")
+  accent: :red,                          # :red :green :violet :amber :blue, or "#hex"
+  engine: "SafeBro::Engine",             # BroHub mounts it at /<key>
+  order: 10,                             # lower comes first
+  visible_to: ->(user) { SafeBro.config.can_audit.call(user) },
+  items: [
+    { label: "Sessions", path: "/", badge: -> { SafeBro::Session.pending.count } },
+    { label: "Flagged commands", path: "/flagged" },
+    { label: "Rules", path: "/rules", match: %r{\A/rules} },
+    { label: "Raw export", path: "/export", visible_to: ->(user) { user.admin? } }   # per-item visibility
+  ]
+```
+
+- `path` is relative to your engine. Badges are hidden when `nil` or `0`, and a badge that raises is skipped.
+- Active item: exact match for `"/"`, prefix match otherwise, or your own `match:` regexp.
+- A section only shows up in the shared sidebar when you pass `engine:` (BroHub then knows where it lives). A gem the host mounts elsewhere still gets the shell, with just its own section.
+- Never put anything that came from a user in `accent` or `label`. `accent` is validated; `label` is escaped.
+
+**2. Render inside the shell:**
+
+```ruby
+class SafeBro::ApplicationController < ::ApplicationController
+  include BroHub::Layout
+  bro_hub_section :safe_bro
+end
+```
+
+`BroHub::Layout` sets the layout and adds `bro_hub_user`. Override it if your gem has its own idea of who is signed in.
+
+**3. Give your gem an installer** that sets up BroHub first, then itself. Name it `<section key>:install` so
+`bro_hub:install` finds it:
+
+```ruby
+# lib/generators/safe_bro/install/install_generator.rb
+require "generators/bro_hub/installable"
+
+class SafeBro::Generators::InstallGenerator < Rails::Generators::Base
+  include BroHub::Generators::Installable   # keep this first: it adds the BroHub step and --mount-path
+
+  def copy_initializer ... end
+  def next_steps
+    say "Visit #{bro_hub_path}/safe_bro"    # bro_hub_path: where BroHub ended up
+  end
+end
+```
+
+**4. Fill in the page:**
+
+```erb
+<% bro_hub_crumb "Console sessions", "#5" %>                         <%# "SafeBro / Console sessions / #5" %>
+<% content_for :bro_hub_crumb_actions do %>
+  <%= bro_hub_crumb_link "← All sessions", sessions_path %>         <%# right side of the bar %>
+<% end %>
+
+<%= bro_hub_hero eyebrow: "console · web-1 (pid 4417)", title: "Session #5", subtitle: "Pending",
+      subtitle_tone: :green,                                        # :red :green :amber :violet :muted
+      lead: "jane was on a production console for 1m.",
+      stats: [ [ 4, "unlocks", :amber ], [ 6, "flagged commands", :red ] ] %>
+```
+
+Page styles are plain CSS classes prefixed `bh-` (see `lib/bro_hub/styles.css`): `bh-block`, `bh-split`, `bh-table`/`bh-row`, `bh-tag`, `bh-filters`, `bh-input`, `bh-btn`, `bh-seg`, `bh-log`/`bh-cmd`, `bh-dl`, `bh-pager`, and so on. `bh-tag` is uppercase; add `is-code` for case-sensitive text such as method names. Tables take their columns from `style="--cols: 150px 1fr 80px"`.
+
+## Notes
+
+- The layout loads IBM Plex Mono and Archivo from Google Fonts, and embeds the skull as a `data:` image. Under a strict Content Security Policy allow `fonts.googleapis.com`, `fonts.gstatic.com` and `img-src data:`. Without the fonts it falls back to system fonts. The inline `<style>` uses your CSP nonce when you have one.
+- The shell's own pages send `Cache-Control: no-store` and refuse plain HTTP in production (`config.require_ssl`).
+- The look is dark only.
+
+## Development
+
+```sh
+bin/rails test                                                    # Rails 8.x
+BUNDLE_GEMFILE=gemfiles/rails_7_1.gemfile bundle exec rails test  # Rails 7.1
+bin/rubocop
+cd test/dummy && bin/rails server                                 # try it: /hub (Alpha, Beta), /solo (Gamma)
+```
+
+The dummy app has three fake Bro gems (`test/support/fake_bros`). Alpha and Beta live in the hub, Gamma is mounted on its own.
+
+## License
+
+MIT.

data/Rakefile

@@ -0,0 +1,3 @@
+require "bundler/setup"
+
+require "bundler/gem_tasks"

data/app/controllers/bro_hub/application_controller.rb

@@ -0,0 +1,20 @@
+module BroHub
+  class ApplicationController < BroHub.config.parent_controller.constantize
+    include BroHub::Layout
+
+    protect_from_forgery with: :exception
+
+    before_action :bro_hub_require_ssl
+    before_action :bro_hub_no_store
+
+    private
+      def bro_hub_require_ssl
+        head :forbidden if BroHub.config.require_ssl && !request.ssl?
+      end
+
+      def bro_hub_no_store
+        response.headers["Cache-Control"] = "no-store"
+        response.headers["Pragma"] = "no-cache"
+      end
+  end
+end

data/app/controllers/bro_hub/home_controller.rb

@@ -0,0 +1,12 @@
+module BroHub
+  class HomeController < ApplicationController
+    # The hub itself has no page: send people to the first section they may use.
+    def index
+      section = BroHub.registry.visible_to(bro_hub_user).first
+      return render("bro_hub/shared/forbidden", status: :forbidden) unless section
+
+      path = section.first_path(bro_hub_user).to_s
+      redirect_to "#{request.script_name.delete_suffix("/")}/#{section.key}#{path == "/" ? "" : "/" + path.delete_prefix("/")}"
+    end
+  end
+end

data/app/helpers/bro_hub/application_helper.rb

@@ -0,0 +1,82 @@
+module BroHub
+  module ApplicationHelper
+    # The mount point of the hub, without a trailing slash ("" when mounted at "/"), or nil when this page is
+    # not served through the hub (a Bro gem the host mounted on its own). The hub records its mount point in the
+    # request as it hands over to an engine, so a gem mounted at a path that merely looks like "<hub>/<key>"
+    # is not mistaken for one.
+    def bro_hub_root
+      return @bro_hub_root if defined?(@bro_hub_root)
+
+      @bro_hub_root =
+        if request.env["bro_hub.root"] then request.env["bro_hub.root"]
+        elsif controller.try(:bro_hub_section_key).nil? then request.script_name.to_s.delete_suffix("/")
+        end
+    end
+
+    # The sidebar: [ [section, base_path, current?], ... ] for what this person may see.
+    def bro_hub_sections
+      @bro_hub_sections ||= begin
+        user = bro_hub_user
+        current_key = controller.try(:bro_hub_section_key)
+        sections = BroHub.registry.visible_to(user)
+        # We can only link to what lives under the hub (it mounts the engines) or to the page we are on.
+        # A section whose engine the host mounted elsewhere shows up inside its own pages only.
+        sections = sections.select { |section| section.key == current_key || (bro_hub_root && section.engine) }
+        sections.map do |section|
+          base = bro_hub_root ? "#{bro_hub_root}/#{section.key}" : request.script_name.to_s.delete_suffix("/")
+          [ section, base, section.key == current_key ]
+        end
+      end
+    end
+
+    def bro_hub_current_section
+      BroHub.registry[controller.try(:bro_hub_section_key)]
+    end
+
+    def bro_hub_link_path(base, item)
+      path = "#{base}#{item.path.to_s == "/" ? "" : "/" + item.path.to_s.delete_prefix("/")}"
+      path.presence || "/"
+    end
+
+    def bro_hub_item_active?(section_current, base, item)
+      return false unless section_current
+
+      item.active?(request.path.delete_prefix(base))
+    end
+
+    def bro_hub_user_label
+      user = bro_hub_user
+      BroHub.config.user_label.call(user) if user
+    end
+
+    def bro_hub_page_title
+      parts = [ content_for(:bro_hub_title).presence, bro_hub_current_section&.name, "Bro Hub" ].compact
+      parts.uniq.join(" · ")
+    end
+
+    # Breadcrumb after the section name: bro_hub_crumb "Console sessions", "#5"
+    def bro_hub_crumb(*parts)
+      content_for(:bro_hub_crumb, parts.join(" / "), flush: true)
+      content_for(:bro_hub_title, parts.last.to_s, flush: true)
+      nil
+    end
+
+    # Links on the right of the breadcrumb bar (filters, "back", environment tabs).
+    def bro_hub_crumb_link(label, href, active: false)
+      link_to label, href, class: [ "bh-tab", ("is-active" if active) ]
+    end
+
+    # The big page heading.
+    #   bro_hub_hero eyebrow: "Console sessions · production", title: "3", subtitle: "awaiting a verdict",
+    #                tone: :red, subtitle_tone: :green, lead: "Who used a production console...", stats: [ [ 4, "unlocks", :amber ] ]
+    def bro_hub_hero(eyebrow: nil, title:, subtitle: nil, tone: nil, subtitle_tone: nil, lead: nil, stats: [], &block)
+      render "bro_hub/shared/hero", eyebrow: eyebrow, title: title, subtitle: subtitle, tone: tone, subtitle_tone: subtitle_tone, lead: lead,
+        stats: stats, extra: (capture(&block) if block)
+    end
+
+    # Inline <style> that works under a nonce-based Content Security Policy.
+    def bro_hub_style_tag
+      tag.style(BroHub.styles.html_safe, nonce: (content_security_policy_nonce if respond_to?(:content_security_policy_nonce)))
+    end
+  end
+end

data/app/views/bro_hub/shared/_hero.html.erb

@@ -0,0 +1,21 @@
+<header class="bh-hero">
+  <div class="bh-hero-main">
+    <% if eyebrow %><div class="bh-eyebrow"><%= eyebrow %></div><% end %>
+    <h1 class="bh-title">
+      <span<%= %( class="bh-tone-#{tone}").html_safe if tone %>><%= title %></span>
+      <% if subtitle %><span class="bh-title-sub<%= " bh-tone-#{subtitle_tone}" if subtitle_tone %>"><%= subtitle %></span><% end %>
+    </h1>
+    <% if lead %><p class="bh-lead"><%= lead %></p><% end %>
+    <%= extra %>
+  </div>
+  <% if stats.any? %>
+    <div class="bh-stats">
+      <% stats.each do |value, label, stat_tone| %>
+        <div class="bh-stat">
+          <div class="bh-stat-value<%= " bh-tone-#{stat_tone}" if stat_tone %>"><%= value %></div>
+          <div class="bh-stat-label"><%= label %></div>
+        </div>
+      <% end %>
+    </div>
+  <% end %>
+</header>

data/app/views/bro_hub/shared/forbidden.html.erb

@@ -0,0 +1,3 @@
+<% bro_hub_crumb "Not allowed" %>
+<%= bro_hub_hero eyebrow: "Access", title: "Nothing here", subtitle: "for you", tone: :red,
+      lead: "You can't see any Bro section. Ask whoever runs this app to give you access." %>

data/app/views/layouts/bro_hub/application.html.erb

@@ -0,0 +1,58 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <meta name="robots" content="noindex, nofollow">
+  <title><%= bro_hub_page_title %></title>
+  <%= csrf_meta_tags %>
+  <%= csp_meta_tag %>
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link href="https://fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@400;500;600&amp;family=Archivo:wdth,wght@75..125,400..800&amp;display=swap" rel="stylesheet">
+  <%= bro_hub_style_tag %>
+  <%= yield :head %>
+</head>
+<body class="bh">
+  <div class="bh-shell">
+    <div class="bh-top">
+      <span class="bh-brand">
+        <img src="<%= BroHub.skull_data_uri %>" alt="" width="26" height="26">
+        <span>powered by <%= link_to BroHub.config.brand_name, BroHub.config.brand_url, target: "_blank", rel: "noopener" %></span>
+      </span>
+      <% if bro_hub_user_label.present? %><span class="bh-user"><%= bro_hub_user_label %></span><% end %>
+    </div>
+
+    <div class="bh-body">
+      <% sections = bro_hub_sections %>
+      <% if sections.any? %>
+        <nav class="bh-side" aria-label="Bro sections">
+          <% sections.each do |section, base, current| %>
+            <div class="bh-group" style="--accent: <%= section.accent %>">
+              <span class="bh-group-label"><%= section.label %></span>
+              <% section.visible_items(bro_hub_user).each do |item| %>
+                <% badge = item.badge_value %>
+                <%= link_to bro_hub_link_path(base, item), class: [ "bh-nav", ("is-active" if bro_hub_item_active?(current, base, item)) ] do %>
+                  <span><%= item.label %></span>
+                  <% if badge %><span class="bh-badge"><%= badge %></span><% end %>
+                <% end %>
+              <% end %>
+            </div>
+          <% end %>
+        </nav>
+      <% end %>
+
+      <main class="bh-main">
+        <div class="bh-crumb">
+          <span>
+            <%= bro_hub_current_section&.name || "Bro Hub" %><% if content_for?(:bro_hub_crumb) %> / <%= yield :bro_hub_crumb %><% end %>
+          </span>
+          <% if content_for?(:bro_hub_crumb_actions) %><span class="bh-crumb-actions"><%= yield :bro_hub_crumb_actions %></span><% end %>
+        </div>
+        <% if notice %><div class="bh-alert bh-alert-ok"><%= notice %></div><% end %>
+        <% if alert %><div class="bh-alert bh-alert-error"><%= alert %></div><% end %>
+        <%= yield %>
+      </main>
+    </div>
+  </div>
+</body>
+</html>

data/config/routes.rb

@@ -0,0 +1,8 @@
+BroHub::Engine.routes.draw do
+  root "home#index"
+
+  # Every registered engine lives under the hub: /<mount>/<section key>/...
+  BroHub.registry.each do |section|
+    mount section.engine => "/#{section.key}", as: section.key if section.engine
+  end
+end

data/lib/bro_hub/configuration.rb

@@ -0,0 +1,26 @@
+module BroHub
+  class Configuration
+    # Controller the shell's own pages inherit from, so the host's authentication runs.
+    attr_accessor :parent_controller
+
+    # ->(controller) { the signed-in user, or nil }. The default calls `current_user` when the controller has it.
+    attr_accessor :current_user
+
+    # ->(user) { text shown at the top right }
+    attr_accessor :user_label
+
+    # Refuse the shell's own pages over plain HTTP. Each Bro gem decides this for its own pages.
+    attr_accessor :require_ssl
+
+    attr_accessor :brand_name, :brand_url
+
+    def initialize
+      @parent_controller = "::ApplicationController"
+      @current_user = ->(controller) { controller.send(:current_user) if controller.respond_to?(:current_user, true) }
+      @user_label = ->(user) { user.try(:email) || user.try(:name) || user.to_s }
+      @require_ssl = defined?(Rails) && Rails.respond_to?(:env) ? Rails.env.production? : false
+      @brand_name = "DeadBro"
+      @brand_url = "https://www.deadbro.com"
+    end
+  end
+end

data/lib/bro_hub/engine.rb

@@ -0,0 +1,7 @@
+module BroHub
+  class Engine < ::Rails::Engine
+    isolate_namespace BroHub
+
+    middleware.use BroHub::RootMiddleware
+  end
+end

data/lib/bro_hub/layout.rb

@@ -0,0 +1,31 @@
+module BroHub
+  # Include in a Bro gem's controller to render inside the shared shell:
+  #
+  #   class SafeBro::ApplicationController < ...
+  #     include BroHub::Layout
+  #     bro_hub_section :safe_bro
+  module Layout
+    extend ActiveSupport::Concern
+
+    included do
+      class_attribute :bro_hub_section_key, instance_writer: false
+      layout "bro_hub/application"
+      helper BroHub::ApplicationHelper
+      helper_method :bro_hub_user, :bro_hub_section_key
+    end
+
+    class_methods do
+      def bro_hub_section(key)
+        self.bro_hub_section_key = key.to_sym
+      end
+    end
+
+    private
+      # Override when the gem has its own idea of who is signed in.
+      def bro_hub_user
+        return @bro_hub_user if defined?(@bro_hub_user)
+
+        @bro_hub_user = BroHub.config.current_user.call(self)
+      end
+  end
+end

data/lib/bro_hub/registry.rb

@@ -0,0 +1,34 @@
+module BroHub
+  class Registry
+    include Enumerable
+
+    def initialize
+      @sections = {}
+    end
+
+    def register(section)
+      @sections[section.key] = section
+    end
+
+    def [](key)
+      @sections[key&.to_sym]
+    end
+
+    def each(&block)
+      sorted.each(&block)
+    end
+
+    def visible_to(user)
+      select { |section| section.visible_to?(user) }
+    end
+
+    def clear
+      @sections.clear
+    end
+
+    private
+      def sorted
+        @sections.values.each_with_index.sort_by { |section, index| [ section.order, index ] }.map(&:first)
+      end
+  end
+end

data/lib/bro_hub/root_middleware.rb

@@ -0,0 +1,17 @@
+module BroHub
+  # Runs as the hub's engine is called, when SCRIPT_NAME is still the hub's own mount point.
+  # Engines mounted under the hub (and the shell's layout) read it from here.
+  class RootMiddleware
+    def initialize(app)
+      @app = app
+    end
+
+    def call(env)
+      env["bro_hub.root"] ||= env["SCRIPT_NAME"].to_s.delete_suffix("/")
+      response = @app.call(env)
+      # Nothing here matched and the host router will try its next route: this was not a hub request after all.
+      env.delete("bro_hub.root") if response[1]["X-Cascade"] == "pass"
+      response
+    end
+  end
+end

data/lib/bro_hub/section.rb

@@ -0,0 +1,92 @@
+module BroHub
+  # One block of the sidebar, owned by one gem.
+  class Section
+    ACCENTS = {
+      red: "#f04f54", green: "#2ecc7a", violet: "#7c6dfa", amber: "#f5b84a", blue: "#4aa8f5"
+    }.freeze
+
+    Item = Struct.new(:label, :path, :badge, :match, :visible_to, keyword_init: true) do
+      def visible_to?(user)
+        visible_to ? !!visible_to.call(user) : true
+      end
+
+      # The badge is computed on every page: a broken one must never take the shell down.
+      def badge_value
+        value = badge.respond_to?(:call) ? badge.call : badge
+        value.presence if value.to_s != "0"
+      rescue StandardError => error
+        Rails.logger.warn("BroHub: badge for #{label.inspect} failed: #{error.class}: #{error.message}") if defined?(Rails)
+        nil
+      end
+
+      # path is relative to the section, so "/flagged" and "" are both fine.
+      def active?(relative_path)
+        relative_path = normalize(relative_path)
+        if match
+          match.match?(relative_path)
+        elsif normalize(path) == "/"
+          relative_path == "/"
+        else
+          relative_path == normalize(path) || relative_path.start_with?("#{normalize(path)}/")
+        end
+      end
+
+      private
+        def normalize(value)
+          "/" + value.to_s.delete_prefix("/").delete_suffix("/")
+        end
+    end
+
+    attr_reader :key, :name, :label, :accent, :items, :order
+
+    # key:        :safe_bro. Also the URL segment the engine is mounted under.
+    # name:       short name for the breadcrumb ("SafeBro"). Defaults to the label up to the first "·".
+    # label:      sidebar heading ("SafeBro · audit").
+    # accent:     :red, :green, :violet, :amber, :blue, or a hex colour.
+    # engine:     the Rails engine (class or class name) BroHub mounts under /<key>. Leave out if the host mounts it.
+    # items:      [ { label:, path:, badge: (callable), match: (Regexp on the section-relative path),
+    #               visible_to: ->(user) { true } } ]
+    # visible_to: ->(user) { true } decides whether this person sees the section. Navigation only, not security:
+    #             every engine still authorizes its own pages.
+    # order:      lower comes first.
+    def initialize(key, label:, items:, name: nil, accent: :violet, engine: nil, visible_to: nil, order: 100)
+      @key = key.to_sym
+      @label = label.to_s
+      @name = (name || @label.split("·").first).to_s.strip
+      @accent = resolve_accent(accent)
+      @engine = engine
+      @visible_to = visible_to
+      @order = order
+      @items = Array(items).map { |item| Item.new(**item.symbolize_keys.slice(:label, :path, :badge, :match, :visible_to)) }
+      raise ArgumentError, "BroHub section #{key} needs at least one item" if @items.empty?
+    end
+
+    def engine
+      @engine.is_a?(String) ? @engine.constantize : @engine
+    end
+
+    def visible_to?(user)
+      return false unless user
+
+      @visible_to ? !!@visible_to.call(user) : true
+    end
+
+    def visible_items(user)
+      items.select { |item| item.visible_to?(user) }
+    end
+
+    # Where to send someone who opens the section: its first item they may see.
+    def first_path(user = nil)
+      (user ? visible_items(user).first : items.first)&.path || items.first.path
+    end
+
+    private
+      def resolve_accent(accent)
+        return ACCENTS.fetch(accent) { raise ArgumentError, "unknown accent #{accent.inspect}, use one of #{ACCENTS.keys.inspect}" } if accent.is_a?(Symbol)
+        # The colour ends up in a style attribute, so only a plain hex colour is accepted.
+        return accent if accent.to_s.match?(/\A#\h{3,8}\z/)
+
+        raise ArgumentError, "accent must be one of #{ACCENTS.keys.inspect} or a hex colour like #7c6dfa"
+      end
+  end
+end

data/lib/bro_hub/styles.css

@@ -0,0 +1,139 @@
+:root {
+  --bh-bg: #0c1020; --bh-panel: #0a0e1c; --bh-line: #1c2238; --bh-line-2: #2a3150; --bh-hover: #111630;
+  --bh-text: #dde4f5; --bh-muted: #8a90a8; --bh-soft: #b0bcd4;
+  --bh-violet: #7c6dfa; --bh-violet-l: #a78bfa; --bh-red: #f04f54; --bh-green: #2ecc7a; --bh-amber: #f5b84a; --bh-blue: #4aa8f5;
+  --bh-mono: "IBM Plex Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
+  --bh-sans: "Archivo", system-ui, -apple-system, "Segoe UI", sans-serif;
+  --bh-pad: clamp(20px, 3vw, 40px);
+}
+* { box-sizing: border-box; }
+html, body.bh { margin: 0; background: var(--bh-bg); }
+body.bh { color: var(--bh-text); font: 400 14px/1.4 var(--bh-sans); }
+.bh a { color: var(--bh-violet-l); }
+.bh a:hover { color: #c4b5fd; }
+.bh input::placeholder, .bh textarea::placeholder { color: var(--bh-muted); }
+
+/* Shell */
+.bh-shell { display: flex; flex-direction: column; min-height: 100vh; }
+.bh-top { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 8px 24px; padding: 10px 22px; background: var(--bh-panel); border-bottom: 1px solid var(--bh-line); font: 500 13px var(--bh-mono); }
+.bh-brand { display: flex; align-items: center; gap: 10px; color: var(--bh-muted); }
+.bh-brand a { color: var(--bh-violet-l); text-decoration: none; font-weight: 600; }
+.bh-user { color: var(--bh-text); }
+.bh-body { display: flex; flex: 1; min-height: 0; }
+.bh-side { flex: none; width: 216px; background: var(--bh-panel); border-right: 1px solid var(--bh-line); padding: 22px 0; display: flex; flex-direction: column; gap: 24px; }
+.bh-group { display: flex; flex-direction: column; }
+.bh-group-label { padding: 0 22px 8px; font: 600 10px var(--bh-mono); letter-spacing: .14em; text-transform: uppercase; color: var(--accent, var(--bh-violet)); }
+.bh-nav { display: flex; justify-content: space-between; align-items: center; padding: 7px 22px 7px 18px; border-left: 4px solid transparent; color: var(--bh-soft); text-decoration: none; font-weight: 500; }
+.bh .bh-nav { color: var(--bh-soft); }
+.bh .bh-nav:hover { color: var(--bh-text); }
+.bh .bh-nav.is-active { border-left-color: var(--bh-violet); color: var(--bh-text); font-weight: 700; }
+.bh-badge { font: 600 11px var(--bh-mono); background: var(--accent, var(--bh-red)); color: var(--bh-bg); padding: 1px 6px; }
+.bh-main { flex: 1; min-width: 0; display: flex; flex-direction: column; }
+.bh-crumb { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 8px 24px; padding: 12px var(--bh-pad); background: var(--bh-violet); color: var(--bh-bg); font: 600 13px var(--bh-mono); }
+.bh-crumb-actions { display: flex; flex-wrap: wrap; gap: 16px; }
+.bh .bh-tab { color: var(--bh-bg); text-decoration: none; border-bottom: 2px solid transparent; }
+.bh .bh-tab:hover, .bh .bh-tab.is-active { color: var(--bh-bg); border-bottom-color: var(--bh-bg); }
+.bh-alert { margin: 16px var(--bh-pad) 0; padding: 10px 14px; font: 500 13px var(--bh-mono); border: 1px solid; }
+.bh-alert-ok { color: var(--bh-green); border-color: var(--bh-green); }
+.bh-alert-error { color: var(--bh-red); border-color: var(--bh-red); }
+
+/* Page heading */
+.bh-hero { padding: clamp(28px, 3.5vw, 44px) var(--bh-pad) clamp(22px, 3vw, 36px); border-bottom: 2px solid var(--bh-text); display: flex; flex-wrap: wrap; gap: 24px 56px; align-items: flex-end; justify-content: space-between; }
+.bh-hero-main { min-width: 0; }
+.bh-eyebrow { font: 500 13px var(--bh-mono); color: var(--bh-muted); }
+.bh-title { margin: 10px 0 0; font: 800 clamp(60px, 9.5vw, 132px)/.9 var(--bh-sans); font-stretch: 80%; letter-spacing: -.03em; text-transform: uppercase; display: flex; flex-wrap: wrap; align-items: baseline; gap: 0 20px; }
+.bh-title-sub { font-size: .5em; letter-spacing: -.01em; }
+.bh-lead { margin: 16px 0 0; font-size: 17px; color: var(--bh-muted); max-width: 720px; text-wrap: pretty; }
+.bh-lead strong { color: var(--bh-text); }
+.bh-stats { display: flex; gap: 36px; }
+.bh-stat-value { font: 800 48px/1 var(--bh-sans); font-stretch: 80%; }
+.bh-stat-label { margin-top: 6px; font: 500 12px var(--bh-mono); color: var(--bh-muted); text-transform: uppercase; letter-spacing: .08em; }
+.bh-tone-red { color: var(--bh-red); } .bh-tone-green { color: var(--bh-green); } .bh-tone-amber { color: var(--bh-amber); }
+.bh-tone-violet { color: var(--bh-violet-l); } .bh-tone-muted { color: var(--bh-muted); }
+
+/* Blocks */
+.bh-block { padding: 32px var(--bh-pad) 36px; border-bottom: 1px solid var(--bh-line); }
+.bh-block-head { display: flex; flex-wrap: wrap; justify-content: space-between; align-items: baseline; gap: 8px 16px; margin-bottom: 18px; }
+.bh-h2 { margin: 0 0 16px; font: 800 22px var(--bh-sans); font-stretch: 85%; text-transform: uppercase; }
+.bh-block-head .bh-h2 { margin: 0; }
+.bh-meta { font: 400 12px var(--bh-mono); color: var(--bh-muted); }
+.bh-split { display: flex; flex-wrap: wrap; flex: 1; }
+.bh-split-main { flex: 1 1 520px; min-width: 0; padding: 32px var(--bh-pad) 36px; border-right: 1px solid var(--bh-line); }
+.bh-split-aside { flex: 1 1 320px; max-width: 100%; min-width: 0; display: flex; flex-direction: column; }
+.bh-split-aside .bh-block:last-child { flex: 1; border-bottom: 0; }
+.bh-dl { display: grid; grid-template-columns: auto minmax(0, 1fr); gap: 10px 20px; font: 400 13px var(--bh-mono); margin: 0; }
+.bh-dl dt { color: var(--bh-muted); } .bh-dl dd { margin: 0; overflow-wrap: anywhere; }
+.bh-empty { padding: 48px 0; font: 800 40px/1 var(--bh-sans); font-stretch: 80%; text-transform: uppercase; color: var(--bh-muted); }
+
+/* Filters and form controls */
+.bh-filters { padding: 24px var(--bh-pad); border-bottom: 1px solid var(--bh-line); display: flex; flex-wrap: wrap; gap: 14px 24px; align-items: flex-end; }
+.bh-field { display: flex; flex-direction: column; gap: 2px; font: 500 10px var(--bh-mono); letter-spacing: .14em; text-transform: uppercase; color: var(--bh-muted); }
+.bh-input, .bh-textarea, .bh-select { background: transparent; border: 0; border-bottom: 2px solid var(--bh-line-2); color: var(--bh-text); font: 500 14px var(--bh-mono); padding: 8px 0; outline: none; color-scheme: dark; min-width: 0; }
+.bh-input.is-strong { border-bottom-color: var(--bh-text); padding: 10px 0; flex: 1 1 220px; }
+.bh-input:focus, .bh-textarea:focus, .bh-select:focus { border-bottom-color: var(--bh-violet); }
+.bh-select option { background: var(--bh-bg); }
+.bh-textarea { display: block; width: 100%; margin-top: 6px; background: var(--bh-panel); border-bottom-color: var(--bh-text); font: 400 14px/1.5 var(--bh-mono); letter-spacing: 0; text-transform: none; padding: 10px; resize: vertical; }
+.bh-hint { margin-top: 8px; font: 400 12px var(--bh-mono); color: var(--bh-muted); }
+.bh-hint.is-error { color: var(--bh-red); }
+.bh .bh-chip { cursor: pointer; padding: 9px 12px; font: 600 12px var(--bh-mono); border: 1px solid var(--bh-line-2); background: transparent; color: var(--bh-text); text-decoration: none; }
+.bh .bh-chip.is-on { border-color: var(--bh-red); background: var(--bh-red); color: var(--bh-bg); }
+.bh .bh-link-quiet { font: 600 12px var(--bh-mono); color: var(--bh-muted); border-bottom: 1px solid var(--bh-muted); text-decoration: none; margin-bottom: 10px; }
+.bh .bh-link-quiet:hover { color: var(--bh-text); }
+.bh-btn { display: block; width: 100%; padding: 14px; background: var(--bh-violet); color: var(--bh-bg); border: 0; cursor: pointer; font: 800 18px var(--bh-sans); font-stretch: 85%; text-transform: uppercase; text-align: center; text-decoration: none; }
+.bh .bh-btn { color: var(--bh-bg); }
+.bh-btn:hover { background: var(--bh-violet-l); }
+.bh-btn.is-green { background: var(--bh-green); } .bh-btn.is-green:hover { background: #5fe09b; }
+.bh-btn.is-auto { display: inline-block; width: auto; padding: 14px 22px; }
+.bh-btn:disabled { background: var(--bh-line); color: var(--bh-muted); cursor: not-allowed; }
+.bh-seg { display: flex; gap: 8px; }
+.bh-seg label { flex: 1; }
+.bh-seg input { position: absolute; opacity: 0; pointer-events: none; }
+.bh-seg span { display: block; text-align: center; cursor: pointer; padding: 12px; font: 700 16px var(--bh-sans); font-stretch: 85%; text-transform: uppercase; border: 2px solid var(--bh-line-2); }
+.bh-seg input:checked + span { color: var(--bh-bg); }
+.bh-seg .is-ok input:checked + span { background: var(--bh-green); border-color: var(--bh-green); }
+.bh-seg .is-bad input:checked + span { background: var(--bh-red); border-color: var(--bh-red); }
+.bh-seg input:focus-visible + span { outline: 2px solid var(--bh-violet-l); outline-offset: 2px; }
+.bh-sticky { position: sticky; bottom: 0; display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 12px 24px; padding: 14px var(--bh-pad); background: var(--bh-panel); border-top: 2px solid var(--bh-text); }
+
+/* Tables: set --cols on .bh-table (grid-template-columns) and --min for the scroll width */
+.bh-table-wrap { padding: 0 var(--bh-pad) 36px; overflow-x: auto; flex: 1; }
+.bh-table { min-width: var(--min, 640px); }
+.bh-row { display: grid; grid-template-columns: var(--cols); gap: 16px; align-items: center; padding: 14px 0 14px 10px; border-bottom: 1px solid var(--bh-line); border-left: 4px solid transparent; font: 400 13px var(--bh-mono); color: inherit; text-decoration: none; }
+.bh-row.is-head { padding: 18px 0 10px 14px; border-bottom: 2px solid var(--bh-text); border-left: 0; font: 700 13px var(--bh-sans); font-stretch: 85%; text-transform: uppercase; letter-spacing: .04em; color: var(--bh-muted); }
+.bh a.bh-row, .bh a.bh-row:hover { color: inherit; }
+a.bh-row:hover { background: var(--bh-hover); }
+.bh-edge-red { border-left-color: var(--bh-red); } .bh-edge-amber { border-left-color: var(--bh-amber); } .bh-edge-violet { border-left-color: var(--bh-violet); }
+.bh-cell-strong { font: 700 16px var(--bh-sans); font-stretch: 85%; }
+.bh-cell-text { font: 500 16px var(--bh-sans); font-stretch: 90%; text-wrap: pretty; }
+.bh-cell-muted { color: var(--bh-muted); }
+.bh-tags { display: flex; gap: 6px; flex-wrap: wrap; }
+.bh-tag { padding: 3px 8px; border: 1px solid var(--bh-muted); color: var(--bh-muted); font: 600 12px var(--bh-mono); text-transform: uppercase; white-space: nowrap; }
+.bh-tag.is-amber { border-color: var(--bh-amber); color: var(--bh-amber); }
+.bh-tag.is-red { border-color: var(--bh-red); background: var(--bh-red); color: var(--bh-bg); }
+.bh-tag.is-green { border-color: var(--bh-green); color: var(--bh-green); }
+.bh-tag.is-code { text-transform: none; }
+.bh-status { font-weight: 600; text-transform: uppercase; }
+
+/* Paging: .bh-pager with a .bh-meta count and prev/next links */
+.bh-pager { display: flex; flex-wrap: wrap; align-items: center; gap: 8px 20px; margin-top: 14px; font: 400 12px var(--bh-mono); color: var(--bh-muted); }
+
+/* A command in a session log */
+.bh-log { border-top: 2px solid var(--bh-text); }
+.bh-cmd { padding: 14px 16px 14px 12px; border-bottom: 1px solid var(--bh-line); border-left: 4px solid transparent; }
+.bh-cmd.is-flagged { border-left-color: var(--bh-red); background: rgba(240, 79, 84, .12); }
+.bh-cmd.is-unlocked { border-left-color: var(--bh-amber); }
+.bh-cmd-meta { display: flex; flex-wrap: wrap; align-items: baseline; gap: 4px 12px; font: 400 12px var(--bh-mono); color: var(--bh-muted); }
+.bh-cmd-meta .bh-note { color: var(--bh-text); flex: 1 1 200px; text-wrap: pretty; }
+.bh-cmd-code { margin: 6px 0 0; font: 500 16px var(--bh-mono); overflow-wrap: anywhere; white-space: pre-wrap; }
+.bh-flag { padding: 1px 6px; background: var(--bh-red); color: var(--bh-bg); font-weight: 600; text-transform: uppercase; }
+.bh-unlock { padding: 10px 16px; background: var(--bh-amber); color: var(--bh-bg); font: 600 13px var(--bh-mono); text-wrap: pretty; }
+
+@media (max-width: 760px) {
+  .bh-body { flex-direction: column; }
+  .bh-side { width: auto; flex-direction: row; flex-wrap: wrap; gap: 12px 28px; padding: 14px 0; border-right: 0; border-bottom: 1px solid var(--bh-line); }
+  .bh-group { flex-direction: row; flex-wrap: wrap; align-items: center; }
+  .bh-group-label { padding: 0 18px 0 22px; }
+  .bh-nav { padding: 6px 10px; border-left: 0; border-bottom: 3px solid transparent; }
+  .bh .bh-nav.is-active { border-left-color: transparent; border-bottom-color: var(--bh-violet); }
+  .bh-split-main { border-right: 0; }
+}

data/lib/bro_hub/version.rb

@@ -0,0 +1,3 @@
+module BroHub
+  VERSION = "0.1.0"
+end

data/lib/bro_hub.rb

@@ -0,0 +1,45 @@
+require "bro_hub/version"
+require "bro_hub/configuration"
+require "bro_hub/section"
+require "bro_hub/registry"
+require "bro_hub/layout"
+require "bro_hub/root_middleware"
+require "bro_hub/engine"
+
+# The shared admin shell for the Bro gems.
+#
+#   BroHub.register :safe_bro, name: "SafeBro", label: "SafeBro · audit", accent: :red,
+#     engine: "SafeBro::Engine",
+#     items: [ { label: "Sessions", path: "/", badge: -> { SafeBro::Session.pending.count } } ],
+#     visible_to: ->(user) { SafeBro.config.can_audit.call(user) }
+module BroHub
+  SKULL_PATH = File.expand_path("bro_hub/skull.png", __dir__)
+  STYLES_PATH = File.expand_path("bro_hub/styles.css", __dir__)
+
+  class << self
+    def config
+      @config ||= Configuration.new
+    end
+
+    def configure
+      yield config
+    end
+
+    def registry
+      @registry ||= Registry.new
+    end
+
+    # Adds (or replaces) a section in the sidebar. See Section for the options.
+    def register(key, **options)
+      registry.register(Section.new(key, **options))
+    end
+
+    def skull_data_uri
+      @skull_data_uri ||= "data:image/png;base64,#{[ File.binread(SKULL_PATH) ].pack("m0")}"
+    end
+
+    def styles
+      @styles ||= File.read(STYLES_PATH)
+    end
+  end
+end

data/lib/generators/bro_hub/install/install_generator.rb

@@ -0,0 +1,107 @@
+require "rails/generators"
+
+module BroHub
+  module Generators
+    # bin/rails generate bro_hub:install
+    #
+    # Mounts the dashboard and installs every Bro gem in the bundle (the ones that registered a section).
+    class InstallGenerator < Rails::Generators::Base
+      source_root File.expand_path("templates", __dir__)
+
+      desc "Mounts the BroHub dashboard and runs the installer of each Bro gem in your bundle."
+
+      DEFAULT_MOUNT_PATH = "/bro_hub"
+
+      class_option :mount_path, type: :string,
+        desc: "Where to mount the dashboard (asked interactively when omitted, default #{DEFAULT_MOUNT_PATH})"
+      class_option :install_gems, type: :boolean, default: true, hide: true,
+        desc: "Also run the installers of the Bro gems in the bundle"
+      class_option :remove_direct_mounts, type: :boolean, default: nil,
+        desc: "Comment out old `mount SafeBro::Engine`-style lines (asked interactively when omitted)"
+
+      def copy_initializer
+        copy_file "bro_hub.rb", "config/initializers/bro_hub.rb"
+      end
+
+      def mount_engine
+        if routes_source.include?("BroHub::Engine")
+          say_status :skip, "BroHub::Engine is already mounted", :yellow
+        else
+          route %(mount BroHub::Engine => "#{mount_path}")
+        end
+      end
+
+      # A gem mounted directly *and* under the hub would be served twice.
+      def retire_direct_mounts
+        direct_mounts.each do |line|
+          if remove_direct_mount?(line)
+            gsub_file "config/routes.rb", line, "# BroHub mounts this now: #{line.strip}"
+          else
+            say_status :warning, "#{line.strip} is still mounted directly; BroHub also serves it under #{mount_path}. " \
+              "Re-run with --remove-direct-mounts or delete the line.", :yellow
+          end
+        end
+      end
+
+      def install_bro_gems
+        return unless options[:install_gems]
+
+        bro_gem_installers.each do |section, namespace|
+          say_status :install, "#{section.name} (#{namespace})", :green
+          invoke namespace, [], skip_bro_hub: true, mount_path: mount_path
+        end
+      end
+
+      def next_steps
+        say <<~TEXT
+
+          BroHub is installed. Next:
+            1. Check config/initializers/bro_hub.rb (how to find the signed-in user)
+            2. Visit #{mount_path}. Each Bro gem lives under #{mount_path}/<gem>
+        TEXT
+      end
+
+      private
+        def routes_source
+          path = File.join(destination_root, "config/routes.rb")
+          File.exist?(path) ? File.read(path) : ""
+        end
+
+        def mount_path
+          @mount_path ||= begin
+            path = options[:mount_path].presence
+            path ||= existing_mount_path
+            path ||= ask("Where should the dashboard be mounted?", default: DEFAULT_MOUNT_PATH) if $stdin.tty?
+            path = path.to_s.strip.presence || DEFAULT_MOUNT_PATH
+            "/" + path.delete_prefix("/").delete_suffix("/")
+          end
+        end
+
+        def existing_mount_path
+          routes_source[/mount BroHub::Engine => "([^"]+)"/, 1]
+        end
+
+        # Routes that mount an engine BroHub now mounts itself.
+        def direct_mounts
+          engines = BroHub.registry.filter_map { |section| section.engine&.name }
+          routes_source.lines.map(&:chomp).select do |line|
+            !line.strip.start_with?("#") && engines.any? { |name| line.match?(/\A\s*mount\s+#{Regexp.escape(name)}\b/) }
+          end
+        end
+
+        def remove_direct_mount?(line)
+          return options[:remove_direct_mounts] unless options[:remove_direct_mounts].nil?
+
+          $stdin.tty? && yes?("#{line.strip} is now mounted by BroHub. Comment it out? (y/N)")
+        end
+
+        # [ [ section, "safe_bro:install" ], ... ] for the registered gems that ship an installer.
+        def bro_gem_installers
+          BroHub.registry.filter_map do |section|
+            namespace = "#{section.key}:install"
+            [ section, namespace ] if section.engine && Rails::Generators.find_by_namespace(namespace)
+          end
+        end
+    end
+  end
+end

data/lib/generators/bro_hub/install/templates/bro_hub.rb

@@ -0,0 +1,10 @@
+BroHub.configure do |config|
+  # How to find the signed-in user. The default calls `current_user` on the controller when it has one.
+  # config.current_user = ->(controller) { controller.current_user }
+
+  # What to show at the top right.
+  # config.user_label = ->(user) { user.email }
+
+  # Which controller the dashboard's own pages inherit from (so your authentication runs).
+  # config.parent_controller = "::ApplicationController"
+end

data/lib/generators/bro_hub/installable.rb

@@ -0,0 +1,48 @@
+require "rails/generators"
+require "generators/bro_hub/install/install_generator"
+
+module BroHub
+  module Generators
+    # The rule for a Bro gem's own installer: set up BroHub first, then yourself.
+    #
+    #   class SafeBro::Generators::InstallGenerator < Rails::Generators::Base
+    #     include BroHub::Generators::Installable   # first line, so BroHub's step runs first
+    #
+    #     def copy_initializer ... end
+    #   end
+    #
+    # `rails g safe_bro:install` then mounts BroHub (once, whatever else is installed) and installs SafeBro.
+    # `rails g bro_hub:install` installs every Bro gem in the bundle by running their installers with
+    # --skip-bro-hub, since it has just done that step itself.
+    module Installable
+      extend ActiveSupport::Concern
+
+      included do
+        class_option :mount_path, type: :string,
+          desc: "Where to mount the BroHub dashboard (asked interactively when omitted, default #{BroHub::Generators::InstallGenerator::DEFAULT_MOUNT_PATH})"
+        class_option :remove_direct_mounts, type: :boolean, default: nil,
+          desc: "Comment out old `mount SafeBro::Engine`-style lines, since BroHub mounts the gems itself"
+        class_option :skip_bro_hub, type: :boolean, default: false, hide: true,
+          desc: "BroHub is already set up (used by bro_hub:install)"
+
+        # Defined here, not in the module body, so Thor registers it as the first command of the generator.
+        def install_bro_hub
+          return if options[:skip_bro_hub]
+
+          forward = { install_gems: false }
+          forward[:mount_path] = options[:mount_path] if options[:mount_path].present?
+          forward[:remove_direct_mounts] = options[:remove_direct_mounts] unless options[:remove_direct_mounts].nil?
+          invoke "bro_hub:install", [], forward
+        end
+      end
+
+      private
+        # Where BroHub ended up, read back from the routes (it may have been mounted before).
+        def bro_hub_path
+          routes = File.join(destination_root, "config/routes.rb")
+          mounted = File.read(routes)[/mount BroHub::Engine => "([^"]+)"/, 1] if File.exist?(routes)
+          mounted || BroHub::Generators::InstallGenerator::DEFAULT_MOUNT_PATH
+        end
+    end
+  end
+end

metadata

@@ -0,0 +1,84 @@
+--- !ruby/object:Gem::Specification
+name: bro_hub
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Ruby Dev SRL
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.1'
+description: 'BroHub is the shared admin shell: one mount point, one layout, one sidebar
+  and one place to configure who is signed in. Each Bro gem registers its pages and
+  shows up as a section. Sections only appear for people who may use them.'
+email:
+- office@rubydev.ro
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- MIT-LICENSE
+- README.md
+- Rakefile
+- app/controllers/bro_hub/application_controller.rb
+- app/controllers/bro_hub/home_controller.rb
+- app/helpers/bro_hub/application_helper.rb
+- app/views/bro_hub/shared/_hero.html.erb
+- app/views/bro_hub/shared/forbidden.html.erb
+- app/views/layouts/bro_hub/application.html.erb
+- config/routes.rb
+- lib/bro_hub.rb
+- lib/bro_hub/configuration.rb
+- lib/bro_hub/engine.rb
+- lib/bro_hub/layout.rb
+- lib/bro_hub/registry.rb
+- lib/bro_hub/root_middleware.rb
+- lib/bro_hub/section.rb
+- lib/bro_hub/skull.png
+- lib/bro_hub/styles.css
+- lib/bro_hub/version.rb
+- lib/generators/bro_hub/install/install_generator.rb
+- lib/generators/bro_hub/install/templates/bro_hub.rb
+- lib/generators/bro_hub/installable.rb
+homepage: https://www.rubydev.ro
+licenses:
+- MIT
+metadata:
+  allowed_push_host: https://rubygems.org
+  rubygems_mfa_required: 'true'
+  homepage_uri: https://www.rubydev.ro
+  source_code_uri: https://github.com/rubydevro/bro_hub
+  bug_tracker_uri: https://github.com/rubydevro/bro_hub/issues
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.2'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.10
+specification_version: 4
+summary: One dashboard shell for the Bro gems (EnvBro, SafeBro, ...).
+test_files: []