decidim-toggle 0.1.3

data/app/forms/decidim/toggle/update_name_form.rb

@@ -0,0 +1,63 @@
+# frozen_string_literal: true
+
+require "decidim/translatable_attributes"
+
+module Decidim
+  module Toggle
+    class UpdateNameForm < Decidim::Form
+      include Decidim::TranslatableAttributes
+
+      mimic :organization
+
+      translatable_attribute :name, String
+      attribute :host, String
+      attribute :secondary_hosts, String
+
+      validates :host, presence: true
+      validate :validate_name_presence
+
+      def self.from_model(organization)
+        secondary_hosts = case organization.secondary_hosts
+                          when Array
+                            (organization.secondary_hosts || []).join("\n")
+                          when String
+                            organization.secondary_hosts
+                          else
+                            ""
+                          end
+
+        from_params(
+          name: organization.name,
+          host: organization.host,
+          secondary_hosts:
+        )
+      end
+
+      def self.from_params(params, additional_params = {})
+        params = params.to_h.with_indifferent_access if params.respond_to?(:to_h)
+        attrs = params[:organization] || params
+        name_hash = I18n.available_locales.to_h { |l| [l.to_s, attrs["name_#{l}"]] }.compact_blank
+        if name_hash.present?
+          params = params.dup
+          params[:organization] = (params[:organization] || {}).merge(name: name_hash)
+        end
+        super(params, additional_params)
+      end
+
+      def clean_secondary_hosts
+        return [] if secondary_hosts.blank?
+
+        secondary_hosts.split("\n").map(&:chomp).select(&:present?)
+      end
+
+      private
+
+      def validate_name_presence
+        return if name.is_a?(Hash) && name.values.any?(&:present?)
+
+        locale = current_organization&.default_locale || Decidim.default_locale.to_s
+        errors.add(:"name_#{locale}", :blank) if name.blank? || name[locale].blank?
+      end
+    end
+  end
+end

data/app/forms/decidim/toggle/update_omniauth_form.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Toggle
+    class UpdateOmniauthForm < Decidim::System::BaseOrganizationForm
+      include InformativeCallouts
+
+      mimic :organization
+
+      info :space_page_defaults_callout,
+           if_predicate: ->(*) { Decidim::Toggle.gem_present?("decidim-space_page") }
+
+      def space_page_defaults_callout
+        "For generated organization defaults, check the decidim space page"
+      end
+
+      # This tab only updates a small JSONB slice (omniauth settings).
+      # The generic system form validates presence of `host` and `users_registration_mode`,
+      # so fall back to the current organization when those attributes aren't part of
+      # the tab payload.
+      def host
+        super.presence || current_organization&.host
+      end
+
+      def users_registration_mode
+        super.presence || current_organization&.users_registration_mode
+      end
+
+      private
+
+      # No-op: this tab doesn't touch organization identity/uniqueness.
+      def validate_organization_uniqueness
+        # intentionally blank
+      end
+    end
+  end
+end

data/app/forms/decidim/toggle/update_security_form.rb

@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Toggle
+    class UpdateSecurityForm < Decidim::Form
+      mimic :organization
+
+      attribute :force_users_to_authenticate_before_access_organization, Boolean
+      attribute :users_registration_mode, String
+      attribute :"default-src", String
+      attribute :"img-src", String
+      attribute :"media-src", String
+      attribute :"script-src", String
+      attribute :"style-src", String
+      attribute :"frame-src", String
+      attribute :"font-src", String
+      attribute :"connect-src", String
+
+      validates :users_registration_mode, presence: true,
+                                          inclusion: { in: Decidim::Organization.users_registration_modes }
+
+      def self.from_model(organization)
+        csp = organization.content_security_policy || {}
+        attrs = {
+          force_users_to_authenticate_before_access_organization: organization.force_users_to_authenticate_before_access_organization,
+          users_registration_mode: organization.users_registration_mode,
+          "default-src": csp["default-src"],
+          "img-src": csp["img-src"],
+          "media-src": csp["media-src"],
+          "script-src": csp["script-src"],
+          "style-src": csp["style-src"],
+          "frame-src": csp["frame-src"],
+          "font-src": csp["font-src"],
+          "connect-src": csp["connect-src"]
+        }
+        from_params({ organization: attrs })
+      end
+
+      def self.from_params(params, additional_params = {})
+        params = params.to_h.with_indifferent_access if params.respond_to?(:to_h)
+        params[:organization] || params
+        super(params, additional_params)
+      end
+
+      def self.collection_for_users_registration_mode
+        Decidim::Organization.users_registration_modes.map do |mode|
+          [mode.first, I18n.t("decidim.system.organizations.users_registration_mode.#{mode.first}", default: mode.first)]
+        end
+      end
+
+      def content_security_policy
+        {
+          "default-src" => send(:"default-src"),
+          "img-src" => send(:"img-src"),
+          "media-src" => send(:"media-src"),
+          "script-src" => send(:"script-src"),
+          "style-src" => send(:"style-src"),
+          "frame-src" => send(:"frame-src"),
+          "font-src" => send(:"font-src"),
+          "connect-src" => send(:"connect-src")
+        }.compact_blank
+      end
+    end
+  end
+end

data/app/helpers/decidim/toggle/javascript_config_helper.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Toggle
+    module JavascriptConfigHelper
+      def decidim_toggle_javascript_config
+        Decidim::Toggle.javascript_config_for(current_organization)
+      end
+    end
+  end
+end

data/app/helpers/decidim/toggle/system_settings_tab_helper.rb

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Toggle
+    module SystemSettingsTabHelper
+      ##
+      # Check if Decidim can use encryption
+      def encryption_configured?
+        return false if Rails.application.secret_key_base.blank?
+
+        probe = "decidim-toggle-secret-probe"
+        encrypted = Decidim::AttributeEncryptor.encrypt(probe)
+        return false if encrypted.blank?
+
+        Decidim::AttributeEncryptor.decrypt(encrypted) == probe
+      rescue ArgumentError, OpenSSL::Cipher::CipherError,
+             ActiveSupport::MessageEncryptor::InvalidMessage,
+             ActiveSupport::MessageVerifier::InvalidSignature
+        false
+      end
+
+      def decidim_toggle_update_settings_tab_organization_path(organization, tab_id:)
+        path = Decidim::Toggle::Engine.routes.url_helpers.update_settings_tab_organization_path(organization, tab_id:)
+        prefixed = path.start_with?("/decidim_toggle") ? path : "/decidim_toggle#{path}"
+        prefixed.sub(%r{\A/decidim_toggle/decidim_toggle}, "/decidim_toggle")
+      end
+
+      def decidim_toggle_settings_tab_form(organization, tab, &block)
+        tab_form = tab.form_class.from_model(organization)
+        if (stored = flash[:decidim_toggle_invalid_settings_tab]) &&
+           stored[:organization_id].to_i == organization.id &&
+           stored[:tab_id].to_s == tab.identifier.to_s
+          flash.delete(:decidim_toggle_invalid_settings_tab)
+          tab_form = tab.form_class.from_params(organization: stored[:params])
+          tab_form = tab_form.with_context(current_organization: organization) if tab_form.respond_to?(:with_context)
+          stored[:errors].each do |attribute, messages|
+            messages.each { |message| tab_form.errors.add(attribute, message) }
+          end
+        end
+        form_with(
+          url: decidim_toggle_update_settings_tab_organization_path(organization, tab_id: tab.identifier),
+          model: tab_form,
+          scope: :organization,
+          builder: Decidim::Toggle::SettingsFormBuilder,
+          method: :patch,
+          html: { id: "settings_tab_form_#{tab.identifier}" },
+          local: true
+        ) do |tf|
+          safe_join([
+                      render("decidim_toggle/system/organizations/settings_tab_active_tab_field", tab:),
+                      tf.informative_callouts,
+                      content_tag(:div, class: "form__wrapper") { capture(tf, &block) },
+                      render("decidim_toggle/system/organizations/settings_tab_submit", form: tf)
+                    ])
+        end
+      end
+    end
+  end
+end

data/app/models/decidim/toggle/organization_module_config.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+module Decidim
+  module Toggle
+    # Per-organization JSON configuration for a module (see {Decidim::Toggle.config_for}).
+    class OrganizationModuleConfig < Decidim::ApplicationRecord
+      self.table_name = "decidim_toggle_organization_module_configs"
+
+      belongs_to :organization, class_name: "Decidim::Organization", foreign_key: :decidim_organization_id
+
+      validates :module_name, presence: true
+      validates :module_name, uniqueness: { scope: :decidim_organization_id }
+    end
+  end
+end

data/app/overrides/add_toggle_javascript_admin.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+Deface::Override.new(
+  virtual_path: "layouts/decidim/admin/_header",
+  name: "toggle_add_javascript_config_admin",
+  insert_after: "erb[loud]:contains('append_stylesheet_pack_tag')",
+  original: '<%= append_stylesheet_pack_tag "decidim_admin_overrides", media: "all" %>',
+  text: <<~ERB
+    <%= render partial: "layouts/decidim/toggle/javascript_config" %>
+  ERB
+)

data/app/overrides/add_toggle_javascript_public.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+Deface::Override.new(
+  virtual_path: "layouts/decidim/_decidim_javascript",
+  name: "toggle_add_javascript_config_public",
+  insert_after: "erb[loud]:contains('layouts/decidim/js_configuration')",
+  original: '<%= render partial: "layouts/decidim/js_configuration" %>',
+  text: <<~ERB
+    <%= render partial: "layouts/decidim/toggle/javascript_config" %>
+  ERB
+)

data/app/packs/entrypoints/decidim_toggle.js

@@ -0,0 +1,3 @@
+// CSS for Decidim::System organization settings (tabbed UI)
+import "stylesheets/decidim/toggle/organization_settings.scss";
+import "src/decidim/toggle/organization_settings_tabs";

data/app/packs/src/decidim/toggle/organization_settings_tabs.js

@@ -0,0 +1,114 @@
+/**
+ * Self-contained settings tabs (no Decidim accordion).
+ * Keeps tab selection in the URL hash (#panel-toggle-<id>) so it survives save redirects.
+ */
+const CONTAINER_SELECTOR = ".js-decidim-toggle-settings-tabs";
+const PANEL_PREFIX = "panel-toggle-";
+
+function getContainers() {
+  return document.querySelectorAll(CONTAINER_SELECTOR);
+}
+
+function getTriggerForPanel(container, panelId) {
+  return container.querySelector(`[data-controls="${panelId}"]`);
+}
+
+function getDefaultTrigger(container) {
+  return (
+    container.querySelector('.tab-x[data-controls][aria-expanded="true"]') ||
+    container.querySelector(".tab-x[data-controls]")
+  );
+}
+
+function scrollActiveTabIntoView(
+  container,
+  trigger,
+  { behavior = "smooth" } = {}
+) {
+  const scroller = container.querySelector(".tab-x-container");
+  const tabItem = trigger?.closest("li");
+  if (!scroller || !tabItem) return;
+
+  scroller.scrollTo({
+    left: Math.max(tabItem.offsetLeft - 64, 0),
+    behavior
+  });
+}
+
+function activateTab(container, trigger, { scrollBehavior = "smooth" } = {}) {
+  const panelId = trigger.dataset.controls;
+  if (!panelId) return;
+
+  container.querySelectorAll(".tab-x[data-controls]").forEach((button) => {
+    const isActive = button === trigger;
+    button.setAttribute("aria-expanded", isActive ? "true" : "false");
+  });
+
+  container.querySelectorAll(`[id^="${PANEL_PREFIX}"]`).forEach((panel) => {
+    panel.setAttribute("aria-hidden", panel.id === panelId ? "false" : "true");
+  });
+
+  scrollActiveTabIntoView(container, trigger, { behavior: scrollBehavior });
+}
+
+function activateTabFromHash(container) {
+  const raw = window.location.hash.replace(/^#/, "");
+  if (!raw || !raw.startsWith(PANEL_PREFIX)) return;
+
+  const panel = document.getElementById(raw);
+  if (!panel || !container.contains(panel)) return;
+
+  const trigger = getTriggerForPanel(container, raw);
+  if (!trigger || trigger.getAttribute("aria-expanded") === "true") return;
+
+  activateTab(container, trigger);
+}
+
+function initialTrigger(container) {
+  const raw = window.location.hash.replace(/^#/, "");
+  if (raw && raw.startsWith(PANEL_PREFIX)) {
+    const panel = document.getElementById(raw);
+    const trigger = getTriggerForPanel(container, raw);
+    if (panel && container.contains(panel) && trigger) return trigger;
+  }
+
+  return getDefaultTrigger(container);
+}
+
+function syncHash(panelId) {
+  const newHash = `#${panelId}`;
+  if (window.location.hash === newHash) return;
+
+  const url = `${window.location.pathname}${window.location.search}${newHash}`;
+  window.history.replaceState(null, "", url);
+}
+
+function initContainer(container) {
+  const trigger = initialTrigger(container);
+  if (trigger) activateTab(container, trigger, { scrollBehavior: "auto" });
+
+  container.addEventListener("click", (event) => {
+    const button = event.target.closest(".tab-x[data-controls]");
+    if (!button || !container.contains(button)) return;
+
+    activateTab(container, button);
+
+    const panelId = button.dataset.controls;
+    if (panelId && panelId.startsWith(PANEL_PREFIX)) {
+      syncHash(panelId);
+    }
+  });
+}
+
+function init() {
+  getContainers().forEach(initContainer);
+  window.addEventListener("hashchange", () => {
+    getContainers().forEach(activateTabFromHash);
+  });
+}
+
+if (document.readyState === "loading") {
+  document.addEventListener("DOMContentLoaded", init);
+} else {
+  init();
+}

data/app/packs/stylesheets/decidim/toggle/organization_settings.scss

@@ -0,0 +1,160 @@
+// Organization settings form + tabs (decidim-toggle).
+// Loaded only when the tabbed settings partial is rendered (decidim system).
+#aside-system ~ main {
+  max-width: calc(100% - 16.6666%);
+}
+
+#decidim-toggle-callout {
+  @apply border-b-2 border-r-2;
+
+  .invitation_pending_title {
+    @apply text-xl font-semibold mb-2;
+  }
+
+  .invitation_pending_body {
+    @apply text-md font-normal mb-0;
+  }
+
+  .callout-actions {
+    @apply mt-4;
+  }
+}
+
+#decidim-toggle-settings-tabs {
+  @apply mt-4;
+
+  .button {
+    @apply px-4 py-1.5 ml-0 text-sm leading-[18px] !important;
+  }
+
+  .field-helptext {
+    @apply text-xs font-normal text-gray m-0 -translate-y-[7px];
+  }
+
+  .form__wrapper-block {
+    @apply border-0 border-transparent;
+  }
+
+  .tab-x-container {
+    @apply flex flex-nowrap gap-x-2 gap-y-1 list-none m-0 p-0 border-b border-gray/35;
+    max-width: 100%;
+    overflow-x: auto;
+    scroll-behavior: smooth;
+  }
+
+  .tab-x-container > li {
+    @apply m-0 p-0;
+    text-wrap: nowrap;
+  }
+
+  .tab-x {
+    @apply appearance-none bg-[rgba(243,244,247,1)] border border-transparent border-b-0 rounded-t
+      text-secondary cursor-pointer text-[0.8125rem] font-semibold leading-tight m-0 px-3 py-2
+      transition-[background-color,border-color] duration-150 ease-in-out;
+  }
+
+  .tab-x:hover,
+  .tab-x:focus-visible {
+    @apply bg-[rgba(243,244,247,1)] border-gray/35 outline-none;
+  }
+
+  .tab-x[aria-expanded="true"] {
+    @apply bg-white border-gray/35 border-b-white -mb-px relative z-[1];
+  }
+
+  > [id^="panel-toggle-"] {
+    @apply clear-both border border-[#eee] py-4 px-2;
+  }
+
+  > [id^="panel-toggle-"][aria-hidden="true"] {
+    @apply hidden;
+  }
+
+  .form__wrapper {
+    @apply mt-0 gap-0 bg-[#f6f6f6] pt-2 pr-6 pl-4 pb-6;
+  }
+
+  .form__wrapper .field {
+    @apply mb-3 !important;
+  }
+
+  .form__wrapper .field:last-child {
+    @apply mb-0;
+  }
+
+  .form__wrapper .field.is-disabled {
+    @apply cursor-not-allowed;
+    label,
+    input {
+      opacity: 0.33;
+      @apply cursor-not-allowed;
+    }
+  }
+
+  fieldset {
+    @apply border-0 rounded-none m-0 mb-2 px-2 pt-2 pb-1;
+  }
+
+  fieldset:last-of-type {
+    @apply mb-2;
+  }
+
+  .form-legend,
+  legend,
+  legend > label {
+    @apply text-md font-semibold p-0 uppercase mt-4;
+  }
+
+  label {
+    @apply text-sm font-normal p-0 normal-case;
+  }
+
+  input {
+    @apply my-1.5 py-0.5 px-2;
+  }
+
+  input[type="checkbox"],
+  input[type="radio"] {
+    @apply my-1.5 mr-2 py-0.5 px-2;
+  }
+
+  .table-fields {
+    @apply mb-4 w-full;
+  }
+
+  .button.button__sm {
+    @apply mt-4;
+  }
+
+  .decidim_toggle_informative_callout {
+    .flash__message {
+      h1 {
+        @apply font-sans font-bold text-4xl;
+      }
+
+      h2 {
+        @apply font-sans font-bold text-3xl;
+      }
+
+      h3 {
+        @apply font-sans font-semibold text-2xl;
+      }
+
+      h4 {
+        @apply font-sans font-semibold text-xl;
+      }
+
+      h5 {
+        @apply font-sans font-semibold text-lg;
+      }
+
+      h6 {
+        @apply font-sans font-semibold text-md;
+      }
+
+      p {
+        @apply prose max-w-full;
+      }
+    }
+  }
+}

data/app/views/decidim/system/organizations/edit.html.erb

@@ -0,0 +1,20 @@
+<% add_decidim_page_title(t(".title")) %>
+
+<% provide :title do %>
+  <h1 class="h1"><%= t ".title" %></h1>
+<% end %>
+<% if @organization&.users&.first&.invitation_pending? %>
+  <div id="decidim-toggle-callout" class="callout warning invitation_pending form__wrapper-block flex-col-reverse md:flex-row justify-between mt-8">
+    <div class="callout-content">
+      <h4 class="invitation_pending_title h4 font-bold pb-2"><%= t("decidim_toggle.system.organizations.invitation_pending_title") %></h4>
+      <p class="invitation_pending_body"><%= t("decidim_toggle.system.organizations.invitation_pending_body") %></p>
+    </div>
+    <div class="callout-actions">
+      <%= link_to t(".resend_invitation"),
+                  resend_invitation_organization_path(@organization),
+                  method: :post, class: "button button__sm button__transparent-secondary", data: { confirm: t(".confirm_resend_invitation") } %>
+    </div>
+  </div>
+<% end %>
+
+<%= render "decidim_toggle/system/organizations/settings_tabs", organization: @organization %>

data/app/views/decidim_toggle/system/organizations/_default_form_tab.html.erb

@@ -0,0 +1,5 @@
+<% organization = local_assigns[:organization] %>
+<% tab = local_assigns[:tab] %>
+<%= decidim_toggle_settings_tab_form(organization, tab) do |tf| %>
+  <%= tf.all_fields %>
+<% end %>

data/app/views/decidim_toggle/system/organizations/_encryption_not_configured_callout.html.erb

@@ -0,0 +1,6 @@
+<div id="decidim-toggle-callout" class="callout alert mt-8">
+  <div class="callout-content">
+    <h4 class="h4 font-bold pb-2 encryption_not_configured_title"><%= t("decidim_toggle.system.organizations.encryption_not_configured_title") %></h4>
+    <p class="encryption_not_configured_body"><%= t("decidim_toggle.system.organizations.encryption_not_configured") %></p>
+  </div>
+</div>

data/app/views/decidim_toggle/system/organizations/_settings_tab_active_tab_field.html.erb

@@ -0,0 +1 @@
+<%= hidden_field_tag :decidim_toggle_active_tab, tab.identifier %>

data/app/views/decidim_toggle/system/organizations/_settings_tab_submit.html.erb

@@ -0,0 +1,4 @@
+<div class="flex justify-end items-center gap-6 mr-6">
+  <%= link_to t("cancel", scope: "decidim_toggle.system.organizations.form_tab"), decidim_system.organizations_path, class: "button button__sm" %>
+  <%= form.submit t("save", scope: "decidim_toggle.system.organizations.form_tab"), class: "button button__sm button__primary" %>
+</div>

data/app/views/decidim_toggle/system/organizations/_settings_tabs.html.erb

@@ -0,0 +1,31 @@
+<% if encryption_configured? %>
+  <%= append_stylesheet_pack_tag "decidim_toggle", media: "all" %>
+  <%= append_javascript_pack_tag "decidim_toggle" %>
+  <% organization = local_assigns[:organization] %>
+  <% tabs = Decidim::Toggle::SettingsTabs.new(:organization_settings) %>
+  <% tabs.build_for(self) %>
+  <div class="js-decidim-toggle-settings-tabs" id="decidim-toggle-settings-tabs">
+    <ul class="tab-x-container tabs-<%= tabs.items.size %>">
+      <% tabs.items.each do |tab| %>
+        <li>
+          <button type="button" id="trigger-toggle-<%= tab.identifier %>" class="tab-x" data-controls="panel-toggle-<%= tab.identifier %>" aria-expanded="<%= tab.open? ? "true" : "false" %>">
+            <%= tab.label %>
+          </button>
+        </li>
+      <% end %>
+    </ul>
+
+    <% tabs.items.each do |tab| %>
+      <div id="panel-toggle-<%= tab.identifier %>" class="border-2 rounded border-background p-4 form__wrapper mt-8" aria-hidden="<%= tab.open? ? "false" : "true" %>">
+        <% if tab.form_layout_partial.present? %>
+          <%= render tab.form_layout_partial, tab:, organization: %>
+        <% else %>
+          <%= render "decidim_toggle/system/organizations/default_form_tab", tab:, organization: %>
+        <% end %>
+      </div>
+    <% end %>
+  </div>
+
+<% else %>
+  <%= render "decidim_toggle/system/organizations/encryption_not_configured_callout" %>
+<% end %>

data/app/views/decidim_toggle/system/organizations/tabs/_authorizations_tab.html.erb

@@ -0,0 +1,9 @@
+<% organization = local_assigns[:organization] %>
+<% tab = local_assigns[:tab] %>
+<%= decidim_toggle_settings_tab_form(organization, tab) do |tf| %>
+  <fieldset>
+    <legend class="form-legend"><%= t("decidim_toggle.system.organizations.authorizations_tab.legend") %></legend>
+    <p class="text-sm text-gray-2 mb-4"><%= t("decidim_toggle.system.organizations.authorizations_tab.hint") %></p>
+    <%= tf.all_fields %>
+  </fieldset>
+<% end %>

data/app/views/decidim_toggle/system/organizations/tabs/_emails_tab.html.erb

@@ -0,0 +1,5 @@
+<% organization = local_assigns[:organization] %>
+<% tab = local_assigns[:tab] %>
+<%= decidim_toggle_settings_tab_form(organization, tab) do |tf| %>
+  <%= render "decidim/system/organizations/smtp_settings", f: tf %>
+<% end %>

data/app/views/decidim_toggle/system/organizations/tabs/_file_upload_tab.html.erb

@@ -0,0 +1,5 @@
+<% organization = local_assigns[:organization] %>
+<% tab = local_assigns[:tab] %>
+<%= decidim_toggle_settings_tab_form(organization, tab) do |tf| %>
+  <%= render "decidim/system/organizations/file_upload_settings", f: tf %>
+<% end %>