collavre 0.1.0

data/db/migrate/20251215143500_create_activity_logs.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class CreateActivityLogs < ActiveRecord::Migration[7.1]
+  def change
+    create_table :activity_logs do |t|
+      t.string :activity, null: false
+      t.json :log, default: {}, null: false
+      t.references :creative, foreign_key: true, null: true
+      t.references :user, foreign_key: true, null: true
+      t.references :comment, foreign_key: true, null: true
+      t.datetime :created_at, null: false
+    end
+
+    add_index :activity_logs, :created_at
+  end
+end

data/db/migrate/20251222125727_create_webauthn_credentials.rb

@@ -0,0 +1,14 @@
+class CreateWebauthnCredentials < ActiveRecord::Migration[8.1]
+  def change
+    create_table :webauthn_credentials do |t|
+      t.references :user, null: false, foreign_key: true
+      t.string :webauthn_id, null: false
+      t.string :public_key, null: false
+      t.integer :sign_count, default: 0, null: false
+      t.string :nickname
+
+      t.timestamps
+    end
+    add_index :webauthn_credentials, :webauthn_id, unique: true
+  end
+end

data/db/migrate/20251222125839_add_webauthn_id_to_users.rb

@@ -0,0 +1,5 @@
+class AddWebauthnIdToUsers < ActiveRecord::Migration[8.1]
+  def change
+    add_column :users, :webauthn_id, :string
+  end
+end

data/db/migrate/20251223022315_create_comment_reactions.rb

@@ -0,0 +1,13 @@
+class CreateCommentReactions < ActiveRecord::Migration[7.1]
+  def change
+    create_table :comment_reactions do |t|
+      t.references :comment, null: false, foreign_key: true
+      t.references :user, null: false, foreign_key: true
+      t.string :emoji, null: false
+
+      t.timestamps
+    end
+
+    add_index :comment_reactions, [ :comment_id, :user_id, :emoji ], unique: true
+  end
+end

data/db/migrate/20251223072625_create_user_themes.rb

@@ -0,0 +1,11 @@
+class CreateUserThemes < ActiveRecord::Migration[8.1]
+  def change
+    create_table :user_themes do |t|
+      t.references :user, null: false, foreign_key: true
+      t.string :name
+      t.json :variables
+
+      t.timestamps
+    end
+  end
+end

data/db/migrate/20251230074456_add_creative_id_to_labels.rb

@@ -0,0 +1,5 @@
+class AddCreativeIdToLabels < ActiveRecord::Migration[8.1]
+  def change
+    add_reference :labels, :creative, foreign_key: true
+  end
+end

data/db/migrate/20251230113607_refactor_labels.rb

@@ -0,0 +1,38 @@
+class RefactorLabels < ActiveRecord::Migration[8.1]
+  def up
+    puts "Start refactoring labels"
+    # Data migration: Create Creatives for Labels that don't have one
+    Label.where(creative_id: nil).find_each do |label|
+      # Use label[:name] to bypass alias_method :name, :description in Label model
+      # which returns nil when creative_id is nil
+      actual_name = label[:name]
+      puts "Processing label #{actual_name}"
+      next if actual_name.blank?
+
+      # Create a new Creative using the Label's name and owner
+      creative = Creative.create!(
+        description: actual_name,
+        user_id: label.owner_id,
+        progress: 0.0 # Default value
+      )
+
+      puts "Update label #{label.id} with creative #{creative.id}"
+      label.update!(creative_id: creative.id)
+    end
+
+    # Schema changes
+    change_column_null :labels, :creative_id, false
+    remove_column :labels, :name
+  end
+
+  def down
+    add_column :labels, :name, :string
+    change_column_null :labels, :creative_id, true
+
+    # Optional: We could attempt to restore names from creatives, but
+    # since we can't be sure which creative was created specifically for the label migration vs manual,
+    # strictly speaking the down migration might just restore schema.
+    # But for completeness let's try to put creative description back to name if it matches?
+    # For now, just restoring schema is safer.
+  end
+end

data/db/migrate/20251231010012_backfill_tags_for_labels.rb

@@ -0,0 +1,15 @@
+class BackfillTagsForLabels < ActiveRecord::Migration[8.1]
+  def up
+    Label.where.not(creative_id: nil).find_each do |label|
+      next if Tag.exists?(label_id: label.id, creative_id: label.creative_id)
+
+      Tag.create!(label_id: label.id, creative_id: label.creative_id)
+    end
+  end
+
+  def down
+    # No-op or potentially delete tags created by this migration
+    # Since tags might have been created manually later, it's safer to avoid bulk deletion
+    # unless we track which ones were created here.
+  end
+end

data/db/migrate/20251231013234_drop_subscribers.rb

@@ -0,0 +1,9 @@
+class DropSubscribers < ActiveRecord::Migration[8.1]
+  def change
+    drop_table :subscribers do |t|
+      t.belongs_to :creative, null: false, foreign_key: true
+      t.string :email
+      t.timestamps
+    end
+  end
+end

data/db/migrate/20260106090544_allow_null_user_id_in_creative_shares.rb

@@ -0,0 +1,6 @@
+class AllowNullUserIdInCreativeShares < ActiveRecord::Migration[8.1]
+  def change
+    change_column_null :creative_shares, :user_id, true
+    add_index :creative_shares, :creative_id, unique: true, where: "user_id IS NULL", name: "index_creative_shares_on_creative_id_public"
+  end
+end

data/db/migrate/20260106160643_create_system_settings.rb

@@ -0,0 +1,11 @@
+class CreateSystemSettings < ActiveRecord::Migration[8.1]
+  def change
+    create_table :system_settings do |t|
+      t.string :key
+      t.text :value
+
+      t.timestamps
+    end
+    add_index :system_settings, :key, unique: true
+  end
+end

data/db/migrate/20260116000000_create_creative_shares_cache.rb

@@ -0,0 +1,15 @@
+class CreateCreativeSharesCache < ActiveRecord::Migration[8.1]
+  def change
+    create_table :creative_shares_caches do |t|
+      t.references :creative, null: false, foreign_key: true
+      t.references :user, null: true, foreign_key: true
+      t.integer :permission, null: false
+      t.references :source_share, null: false, foreign_key: { to_table: :creative_shares }
+      t.timestamps
+    end
+
+    add_index :creative_shares_caches, [ :creative_id, :user_id ], unique: true
+    add_index :creative_shares_caches, [ :user_id, :permission ]
+    # source_share_id index is already created by t.references
+  end
+end

data/db/migrate/20260116000001_populate_creative_shares_cache.rb

@@ -0,0 +1,23 @@
+class PopulateCreativeSharesCache < ActiveRecord::Migration[8.1]
+  def up
+    say_with_time "Populating creative_shares_cache" do
+      # Ensure the service is available before running
+      unless defined?(Creatives::PermissionCacheBuilder)
+        Rails.logger.warn "PermissionCacheBuilder not available, skipping cache population"
+        return 0
+      end
+
+      count = 0
+      # Include all shares including no_access (needed to override public shares)
+      CreativeShare.find_each do |share|
+        Creatives::PermissionCacheBuilder.propagate_share(share)
+        count += 1
+      end
+      count
+    end
+  end
+
+  def down
+    execute "DELETE FROM creative_shares_caches"
+  end
+end

data/db/migrate/20260119022933_make_source_share_id_nullable_in_creative_shares_caches.rb

@@ -0,0 +1,7 @@
+class MakeSourceShareIdNullableInCreativeSharesCaches < ActiveRecord::Migration[8.1]
+  def change
+    change_column_null :creative_shares_caches, :source_share_id, true
+    remove_foreign_key :creative_shares_caches, :creative_shares
+    add_foreign_key :creative_shares_caches, :creative_shares, column: :source_share_id, on_delete: :cascade, validate: false
+  end
+end

data/db/migrate/20260119023446_populate_owner_cache_entries.rb

@@ -0,0 +1,25 @@
+class PopulateOwnerCacheEntries < ActiveRecord::Migration[8.1]
+  def up
+    say_with_time "Populating owner cache entries" do
+      # Insert owner entries for all creatives (admin = 4)
+      # Use INSERT ... ON CONFLICT to avoid duplicates
+      # datetime('now') for SQLite compatibility
+      execute <<~SQL
+        INSERT INTO creative_shares_caches (creative_id, user_id, permission, source_share_id, created_at, updated_at)
+        SELECT id, user_id, 4, NULL, datetime('now'), datetime('now')
+        FROM creatives
+        WHERE user_id IS NOT NULL
+        ON CONFLICT (creative_id, user_id) DO NOTHING
+      SQL
+    end
+  end
+
+  def down
+    say_with_time "Removing owner cache entries" do
+      execute <<~SQL
+        DELETE FROM creative_shares_caches
+        WHERE source_share_id IS NULL
+      SQL
+    end
+  end
+end

data/db/migrate/20260119100000_add_account_lockout_to_users.rb

@@ -0,0 +1,6 @@
+class AddAccountLockoutToUsers < ActiveRecord::Migration[8.1]
+  def change
+    add_column :users, :failed_login_attempts, :integer, default: 0, null: false
+    add_column :users, :locked_at, :datetime
+  end
+end

data/db/migrate/20260119110000_add_last_active_at_to_sessions.rb

@@ -0,0 +1,6 @@
+class AddLastActiveAtToSessions < ActiveRecord::Migration[8.1]
+  def change
+    add_column :sessions, :last_active_at, :datetime
+    add_index :sessions, :last_active_at
+  end
+end

data/db/migrate/20260120045354_encrypt_oauth_tokens.rb

@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+class EncryptOauthTokens < ActiveRecord::Migration[8.1]
+  def up
+    say_with_time "Encrypting User Google tokens" do
+      encrypt_column(User, :google_access_token)
+      encrypt_column(User, :google_refresh_token)
+    end
+
+    say_with_time "Encrypting GithubAccount tokens" do
+      encrypt_column(GithubAccount, :token)
+    end
+
+    say_with_time "Encrypting NotionAccount tokens" do
+      encrypt_column(NotionAccount, :token)
+    end
+  end
+
+  def down
+    # No-op: Decryption happens automatically when reading encrypted values
+    # The `encrypts` declaration in the model handles transparent decryption
+  end
+
+  private
+
+  def encrypt_column(model, attribute)
+    table_name = model.table_name
+
+    # Read plaintext values directly from database using raw SQL
+    records_to_encrypt = ActiveRecord::Base.connection.select_all(
+      "SELECT id, #{attribute} FROM #{table_name} WHERE #{attribute} IS NOT NULL"
+    ).to_a
+
+    records_to_encrypt.each do |row|
+      record_id = row["id"]
+      plaintext_value = row[attribute.to_s]
+
+      # Skip if already encrypted (value looks like JSON with encryption markers)
+      next if plaintext_value.nil? || encrypted?(plaintext_value)
+
+      # Encrypt the plaintext value using the model's encryptor
+      encryptor = model.type_for_attribute(attribute)
+      encrypted_value = encryptor.serialize(plaintext_value)
+
+      # Write encrypted value directly to database
+      ActiveRecord::Base.connection.execute(
+        "UPDATE #{table_name} SET #{attribute} = #{ActiveRecord::Base.connection.quote(encrypted_value)} WHERE id = #{record_id}"
+      )
+    end
+  end
+
+  def encrypted?(value)
+    # Active Record Encryption uses JSON format starting with specific markers
+    return false unless value.is_a?(String)
+
+    value.start_with?("{") && value.include?('"p":')
+  rescue StandardError
+    false
+  end
+end

data/db/migrate/20260120162259_remove_fk_from_creative_shares_caches.rb

@@ -0,0 +1,7 @@
+class RemoveFkFromCreativeSharesCaches < ActiveRecord::Migration[8.1]
+  def change
+    remove_foreign_key :creative_shares_caches, :creatives, if_exists: true
+    remove_foreign_key :creative_shares_caches, :users, if_exists: true
+    remove_foreign_key :creative_shares_caches, column: :source_share_id, if_exists: true
+  end
+end

data/db/migrate/20260120163856_remove_timestamps_from_creative_shares_caches.rb

@@ -0,0 +1,6 @@
+class RemoveTimestampsFromCreativeSharesCaches < ActiveRecord::Migration[8.1]
+  def change
+    remove_column :creative_shares_caches, :created_at, :datetime
+    remove_column :creative_shares_caches, :updated_at, :datetime
+  end
+end

data/lib/collavre/configuration.rb

@@ -0,0 +1,14 @@
+module Collavre
+  class Configuration
+    attr_accessor :user_class_name, :current_user_method
+
+    def initialize
+      @user_class_name = "User"
+      @current_user_method = -> { Current.user }
+    end
+
+    def user_class
+      @user_class_name.constantize
+    end
+  end
+end

data/lib/collavre/engine.rb

@@ -0,0 +1,77 @@
+module Collavre
+  class Engine < ::Rails::Engine
+    isolate_namespace Collavre
+
+    config.generators do |g|
+      g.test_framework :minitest
+    end
+
+    # Path to engine's JavaScript sources for jsbundling-rails integration
+    def self.javascript_path
+      root.join("app/javascript")
+    end
+
+    # Path to engine's stylesheet sources
+    def self.stylesheet_path
+      root.join("app/assets/stylesheets")
+    end
+
+    # Add engine migrations to main app's migration path
+    # This allows migrations to live in the engine but be run from the host app
+    initializer "collavre.migrations" do |app|
+      unless app.root.to_s.match?(root.to_s)
+        config.paths["db/migrate"].expanded.each do |expanded_path|
+          app.config.paths["db/migrate"] << expanded_path
+        end
+      end
+    end
+
+    initializer "collavre.assets" do |app|
+      app.config.assets.precompile += %w[collavre.js] if app.config.respond_to?(:assets)
+
+      # Add engine stylesheets to asset paths for Propshaft
+      if app.config.respond_to?(:assets) && app.config.assets.respond_to?(:paths)
+        app.config.assets.paths << root.join("app/assets/stylesheets")
+      end
+    end
+
+    initializer "collavre.importmap", before: "importmap" do |app|
+      if app.config.respond_to?(:importmap)
+        app.config.importmap.paths << Engine.root.join("config/importmap.rb")
+      end
+    end
+
+    # Add engine locales to I18n load path
+    # Host app can override these translations by defining the same keys
+    initializer "collavre.i18n" do |app|
+      config.i18n.load_path += Dir[root.join("config/locales/**/*.yml")]
+    end
+
+    # Allow engine controllers to fall back to host app views during migration
+    # This enables gradual view migration - views can stay in host app until moved to engine
+    initializer "collavre.view_paths" do
+      ActiveSupport.on_load(:action_controller) do
+        append_view_path Rails.root.join("app/views")
+      end
+    end
+
+    # Make engine URL helpers available to controllers and views via the `collavre` method
+    # This avoids conflicts with main app routes while still providing access to engine routes
+    initializer "collavre.url_helpers" do
+      ActiveSupport.on_load(:action_controller_base) do
+        # Add to controllers
+        define_method :collavre do
+          Collavre::Engine.routes.url_helpers
+        end
+        private :collavre
+
+        # Add to views via helper
+        helper do
+          def collavre
+            Collavre::Engine.routes.url_helpers
+          end
+        end
+      end
+    end
+  end
+end

data/lib/collavre/user_extensions.rb

@@ -0,0 +1,29 @@
+module Collavre
+  module UserExtensions
+    extend ActiveSupport::Concern
+
+    included do
+      # Core Collavre associations
+      has_many :collavre_creatives, class_name: "Collavre::Creative", dependent: :destroy
+      has_many :collavre_comments, class_name: "Collavre::Comment", dependent: :destroy
+      has_many :collavre_creative_shares, class_name: "Collavre::CreativeShare", dependent: :destroy
+      has_many :collavre_shared_creative_shares, class_name: "Collavre::CreativeShare",
+               foreign_key: :shared_by_id, dependent: :nullify, inverse_of: :shared_by
+      has_many :collavre_topics, class_name: "Collavre::Topic", dependent: :destroy
+      has_many :collavre_inbox_items, class_name: "Collavre::InboxItem",
+               foreign_key: :owner_id, dependent: :destroy, inverse_of: :owner
+      has_many :collavre_invitations, class_name: "Collavre::Invitation",
+               foreign_key: :inviter_id, dependent: :destroy, inverse_of: :inviter
+      has_many :collavre_contacts, class_name: "Collavre::Contact", dependent: :destroy
+      has_many :collavre_contact_memberships, class_name: "Collavre::Contact",
+               foreign_key: :contact_user_id, dependent: :destroy, inverse_of: :contact_user
+      has_many :collavre_user_themes, class_name: "Collavre::UserTheme", dependent: :destroy
+      has_many :collavre_devices, class_name: "Collavre::Device", dependent: :destroy
+      has_many :collavre_calendar_events, class_name: "Collavre::CalendarEvent", dependent: :destroy
+      has_many :collavre_labels, class_name: "Collavre::Label", foreign_key: :owner_id, dependent: :destroy
+      has_many :collavre_activity_logs, class_name: "Collavre::ActivityLog", dependent: :destroy
+      has_many :collavre_comment_read_pointers, class_name: "Collavre::CommentReadPointer", dependent: :destroy
+      has_many :collavre_creative_expanded_states, class_name: "Collavre::CreativeExpandedState", dependent: :destroy
+    end
+  end
+end

data/lib/collavre/version.rb

@@ -0,0 +1,3 @@
+module Collavre
+  VERSION = "0.1.0"
+end

data/lib/collavre.rb

@@ -0,0 +1,26 @@
+require "collavre/version"
+require "collavre/configuration"
+require "collavre/engine"
+require "collavre/user_extensions"
+
+module Collavre
+  class << self
+    attr_writer :configuration
+
+    def configuration
+      @configuration ||= Configuration.new
+    end
+
+    def configure
+      yield(configuration)
+    end
+
+    def user_class
+      configuration.user_class
+    end
+
+    def current_user
+      configuration.current_user_method.call
+    end
+  end
+end

data/lib/generators/collavre/install/install_generator.rb

@@ -0,0 +1,105 @@
+# frozen_string_literal: true
+
+module Collavre
+  module Generators
+    class InstallGenerator < Rails::Generators::Base
+      source_root File.expand_path("templates", __dir__)
+
+      desc "Install Collavre engine assets for jsbundling-rails"
+
+      class_option :replace_build_script, type: :boolean, default: false,
+        desc: "Replace script/build.cjs entirely (recommended for new projects)"
+
+      def install_build_script
+        build_script = Rails.root.join("script/build.cjs")
+
+        if options[:replace_build_script] || !File.exist?(build_script)
+          template "build.cjs.tt", "script/build.cjs"
+          say_status :create, "script/build.cjs (with Collavre support)", :green
+        else
+          update_existing_build_script(build_script)
+        end
+      end
+
+      def show_post_install
+        say ""
+        say "Collavre assets installed!", :green
+        say ""
+        say "The build script now automatically finds Collavre gem and includes its assets."
+        say ""
+        say "Stylesheets are automatically available via Propshaft."
+        say "Add to your application.css if needed:"
+        say "  @import 'collavre/creatives';"
+        say "  @import 'collavre/comments_popup';"
+        say "  @import 'collavre/dark_mode';"
+        say ""
+        say "Run 'npm run build' to build assets."
+        say ""
+      end
+
+      private
+
+      def update_existing_build_script(build_script)
+        content = File.read(build_script)
+
+        # Check if already installed
+        if content.include?("collavre") || content.include?("COLLAVRE_GEM_PATH")
+          say_status :skip, "Collavre already configured in build script", :yellow
+          return
+        end
+
+        # Add gem path detection function after requires
+        gem_path_function = <<~JS
+
+          // Find Collavre gem path using bundler
+          const { execSync } = require('child_process');
+          function getCollavreGemPath() {
+              if (process.env.COLLAVRE_GEM_PATH) return process.env.COLLAVRE_GEM_PATH;
+              try {
+                  const gemPath = execSync('bundle show collavre 2>/dev/null', { encoding: 'utf8' }).trim();
+                  if (gemPath && !gemPath.includes('Could not find')) return gemPath;
+              } catch (e) {}
+              const localPath = path.join(process.cwd(), 'engines/collavre');
+              if (require('fs').existsSync(localPath)) return localPath;
+              return null;
+          }
+        JS
+
+        # Add gem entry point discovery
+        gem_discovery_code = <<~JS
+
+          // Add Collavre gem entry points
+          const collavreGemPath = getCollavreGemPath();
+          if (collavreGemPath) {
+              console.log(`[INFO] Including Collavre assets from: ${collavreGemPath}`);
+              const collavreEntries = glob.sync(path.join(collavreGemPath, 'app/javascript/*.*'));
+              collavreEntries.forEach(entry => {
+                  const name = path.parse(entry).name;
+                  if (!entryPoints[name]) entryPoints[name] = entry;
+              });
+          }
+        JS
+
+        # Insert function after requires
+        if content.include?("const path = require('path');")
+          content = content.sub(
+            "const path = require('path');",
+            "const path = require('path');#{gem_path_function}"
+          )
+        end
+
+        # Insert discovery before the empty check
+        if content.include?("if (Object.keys(entryPoints).length === 0)")
+          content = content.sub(
+            "if (Object.keys(entryPoints).length === 0)",
+            "#{gem_discovery_code}\nif (Object.keys(entryPoints).length === 0)"
+          )
+          File.write(build_script, content)
+          say_status :update, "script/build.cjs", :green
+        else
+          say_status :error, "Could not find insertion point in build script. Use --replace-build-script option.", :red
+        end
+      end
+    end
+  end
+end