completion-kit 0.5.25 → 0.5.27

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 23d8d27292c7265cc9994f64cab9832952e3a2ce5617b621f1301bf13de2f40a
-  data.tar.gz: 5955a65e338fec0c7d8492e53ead7c2b22eeb60cafff25343ac8addbee282cb3
+  metadata.gz: 7036ea465a5b70d324e3eec554e3adf62a63fc1ebfa93b91bc28cc675ddfc0c5
+  data.tar.gz: 7bb7393d08c9631609fbcd845e01db0152a926f36f7bfd82f463455a53350dbd
 SHA512:
-  metadata.gz: 7f67e4055ecad48ac6ff18363fa1c2783af959b861c42086207c0dfef037625112989af4ba61da700e930fac74f7cb62d964945ad2fad8ea2b295d622c7d122a
-  data.tar.gz: d1c6be8d93c2f784d7f6493dc1fc46cb751d7d77860515772d4c11ebf7578ea5405236d879cbaa160bfa2eb9873475a6ddf2c56aae9b93381f20d225935f5214
+  metadata.gz: 38e72b62b2426caf8197619088b5223fffeee27cfb784f2c16c5d9c58295ddea67b6375459d44a748d655a987658a95d244329f64add5a493cb745e8f04393dd
+  data.tar.gz: ae792a3bf6315da654ea760dd9f6c9d73abf90902e8eb3f72354ec9bf65aa2406bbd9a3160b07a4b6038371b6021652a3208fb7d2cb4abfea6633f0cb03cf9a5

data/app/assets/stylesheets/completion_kit/application.css

@@ -3629,6 +3629,44 @@ table.ck-runs-table {
   white-space: nowrap;
 }
 
+/* List tables on a phone. A 4–6 column table can't fit a phone width, so each
+   row becomes a stacked block — every cell on its own line, all content
+   visible, nothing scrolling sideways and getting clipped. Placed after the
+   base table rules so it wins on source order; the runs table overrides this
+   with a tailored layout in the block below. */
+@media (max-width: 640px) {
+  .ck-results-table,
+  .ck-results-table tbody,
+  .ck-results-table tr,
+  .ck-results-table td {
+    display: block;
+  }
+  .ck-results-table { overflow: hidden; }
+  .ck-results-table thead { display: none; }
+  .ck-results-table tr { padding: 0.85rem 0.3rem; }
+  .ck-results-table td {
+    width: auto !important;
+    max-width: 100%;
+    white-space: normal !important;
+    padding: 0.3rem 0.3rem 0;
+  }
+  .ck-results-table td:first-child { padding-top: 0; }
+  .ck-results-table td:empty { display: none; }
+  .ck-results-table td.ck-results-table__arrow { display: none; }
+  /* Each stacked cell carries the column name as a small label so a bare
+     value ("10", "May 14") still reads clearly. */
+  .ck-results-table td[data-label]::before {
+    content: attr(data-label);
+    display: block;
+    margin-bottom: 0.12rem;
+    font-family: var(--ck-mono);
+    font-size: 0.62rem;
+    letter-spacing: 0.07em;
+    text-transform: uppercase;
+    color: var(--ck-dim);
+  }
+}
+
 /* Runs table on a phone. Placed after the base .ck-runs-table rules so these
    win on source order. A 6-column table can't fit a phone, so each run row
    becomes a stacked block: the run name + sub-line take the full width on
@@ -4909,3 +4947,17 @@ a.tag-mark {
   color: var(--ck-dim);
   font-size: 0.7rem;
 }
+
+/* On a phone the popover is anchored to a small mid-footer toggle, so a
+   near-full-width panel spills off the left edge and clips the metric
+   names. Pin it to the bottom of the viewport instead — a bottom sheet
+   that spans the screen and can never clip. */
+@media (max-width: 640px) {
+  .ck-flyout__panel {
+    position: fixed;
+    inset: auto 0.75rem 0.75rem 0.75rem;
+    width: auto;
+    max-width: none;
+    max-height: 60vh;
+  }
+}

data/app/models/completion_kit/provider_credential.rb

@@ -1,3 +1,6 @@
+require "ipaddr"
+require "resolv"
+
 module CompletionKit
   class ProviderCredential < ApplicationRecord
     include Turbo::Broadcastable
@@ -24,6 +27,7 @@ module CompletionKit
 
     validates :provider, presence: true, inclusion: { in: PROVIDERS }
     validates :provider, tenant_scoped_uniqueness: true
+    validate :api_endpoint_not_internal
 
     after_save :enqueue_discovery
 
@@ -131,5 +135,33 @@ module CompletionKit
       CompletionKit::Engine.warm_routes!
       CompletionKit::ApplicationController.render(partial: partial, locals: locals)
     end
+
+    def api_endpoint_not_internal
+      return if api_endpoint.blank?
+
+      uri = safe_http_uri(api_endpoint)
+      unless uri
+        errors.add(:api_endpoint, "must be a valid http or https URL")
+        return
+      end
+
+      if endpoint_addresses(uri.host).any? { |ip| ip.private? || ip.link_local? }
+        errors.add(:api_endpoint, "must not point at a private or internal address")
+      end
+    end
+
+    def safe_http_uri(value)
+      uri = URI.parse(value.to_s.strip)
+      uri if uri.is_a?(URI::HTTP) && uri.host.present?
+    rescue URI::InvalidURIError
+      nil
+    end
+
+    def endpoint_addresses(host)
+      bare = host.delete_prefix("[").delete_suffix("]")
+      [IPAddr.new(bare)]
+    rescue IPAddr::InvalidAddressError
+      Resolv.getaddresses(host).map { |addr| IPAddr.new(addr) }
+    end
   end
 end

data/app/views/completion_kit/datasets/index.html.erb

@@ -35,9 +35,9 @@
               </div>
             <% end %>
           </td>
-          <td><%= dataset.row_count %></td>
-          <td><%= dataset.runs.count %></td>
-          <td class="ck-meta-copy"><time datetime="<%= dataset.created_at.iso8601 %>"><%= dataset.created_at.strftime("%b %-d, %Y") %></time></td>
+          <td data-label="Rows"><%= dataset.row_count %></td>
+          <td data-label="Used in"><%= dataset.runs.count %></td>
+          <td data-label="Created" class="ck-meta-copy"><time datetime="<%= dataset.created_at.iso8601 %>"><%= dataset.created_at.strftime("%b %-d, %Y") %></time></td>
           <td class="ck-results-table__arrow">&rarr;</td>
         </tr>
       <% end %>

data/app/views/completion_kit/metric_groups/index.html.erb

@@ -39,8 +39,8 @@
               </div>
             <% end %>
           </td>
-          <td class="ck-meta-copy"><div class="ck-clamp-2"><%= metric_group.description.presence || "—" %></div></td>
-          <td>
+          <td data-label="Description" class="ck-meta-copy"><div class="ck-clamp-2"><%= metric_group.description.presence || "—" %></div></td>
+          <td data-label="Members">
             <% if metric_group.metrics.any? %>
               <div class="ck-mg-members">
                 <% metric_group.metrics.each do |m| %>

data/app/views/completion_kit/metrics/index.html.erb

@@ -34,8 +34,8 @@
               </div>
             <% end %>
           </td>
-          <td class="ck-meta-copy"><div class="ck-clamp-2"><%= metric.instruction.presence || "—" %></div></td>
-          <td>
+          <td data-label="Instruction" class="ck-meta-copy"><div class="ck-clamp-2"><%= metric.instruction.presence || "—" %></div></td>
+          <td data-label="In groups">
             <% groups = metric.metric_groups %>
             <% if groups.any? %>
               <div class="ck-metrics-table__groups">

data/app/views/completion_kit/runs/_response_row.html.erb

@@ -9,7 +9,7 @@
       <%= truncate(response.response_text.to_s, length: 160) %>
     <% end %>
   </td>
-  <td>
+  <td data-label="Metrics">
     <% scored_reviews = response.reviews.select { |r| r.ai_score.present? }.sort_by { |r| r.metric_name.to_s.downcase } %>
     <% if scored_reviews.any? %>
       <span class="ck-metric-bar ck-metric-bar--compact">
@@ -24,14 +24,14 @@
       <span class="ck-response-cell__dim">—</span>
     <% end %>
   </td>
-  <td>
+  <td data-label="Avg score">
     <% if response.reviewed? %>
       <span class="<%= ck_badge_classes(ck_score_kind(response.score.to_f)) %>"><%= response.score %></span>
     <% else %>
       <span class="ck-response-cell__dim">—</span>
     <% end %>
   </td>
-  <td>
+  <td data-label="Status">
     <% case response.status
        when "pending" %>
       <span class="ck-chip">Queued</span>

data/app/views/completion_kit/tags/index.html.erb

@@ -26,7 +26,7 @@
         <% breakdown = by_type.map { |(_, type), n| pluralize(n, type.demodulize.titleize.downcase) }.join(" · ") %>
         <tr onclick="window.location='<%= edit_tag_path(tag) %>'" style="cursor: pointer;">
           <td><span class="tag-mark tag-mark--lg" style="--mark-color: var(--tag-<%= tag.color %>);"><%= tag.name %></span></td>
-          <td class="ck-meta-copy">
+          <td data-label="Applied to" class="ck-meta-copy">
             <% if count.zero? %>
               <span class="ck-tags-table__unused">Not used yet</span>
             <% else %>

data/lib/completion_kit/version.rb

@@ -1,3 +1,3 @@
 module CompletionKit
-  VERSION = "0.5.25"
+  VERSION = "0.5.27"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: completion-kit
 version: !ruby/object:Gem::Version
-  version: 0.5.25
+  version: 0.5.27
 platform: ruby
 authors:
 - Damien Bastin