glib-web 6.4.1 → 6.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d0c733a1c0dbc779a2bd72cbcd304074238f10a2efde2d74ee4c75f50bf861d4
-  data.tar.gz: 0ea1e58d18cea237c50fccaafb56a165abaa104caecd2011cbbeb7e5bdf7a97d
+  metadata.gz: f2d8ea05929baccf426c3ef7f44c3b0c755ae8d27e67ce5ab4c654c3711eb0eb
+  data.tar.gz: 4427906583b5ae24631feba633e286d1b702a51d9012b8a19e0c6409a2e31715
 SHA512:
-  metadata.gz: ff566900716099396b7817beca6b934ad2d18f8338c2dfa6743c9b3ed851927becc596d75d5bd71c9fc90ff3e9bbba572f665228755cc4cac60d6389b50103ff
-  data.tar.gz: 93e89c3f04019cf9517412416b4c8bb917b3171677f67a3214d8e12d705bddafb9f1744522452b93a1fa77d2278ed14499ee41d9097fc4a482db6b6ec40ac186
+  metadata.gz: 3a734238edcb561b5a49479ee7cb01dc4ad147cac8beda29f2105719c1a2158dbbc5f886538a4adc68e6a1337d8c454efcba69d8e32ed2e9fe470b227c2ae780
+  data.tar.gz: b819efbb6637bb5e622b79cc904c207e68686845f4f918cb5d840a0f465a66738d954a18661743b6dee2c5fa535047e9621bc7c82188fdbdd4d2a2765166ca3f

data/app/controllers/concerns/glib/json/libs.rb

@@ -364,7 +364,7 @@ module Glib::Json::Libs
         #   format.json do
         #     render json: {
         #       onResponse: {
-        #         action: 'windows/open-v1',
+        #         action: 'windows/open',
         #         url: url
         #       }
         #     }

data/app/controllers/concerns/glib/json/traversal.rb

@@ -83,7 +83,7 @@ module Glib::Json::Traversal
       if views.is_a? Array
         views.each do |view|
           case view['view']
-          when 'panels/form-v1'
+          when 'panels/form'
             @forms << view
             traverse_single view, block
             @forms.pop

data/app/helpers/glib/json_ui/abstract_builder.rb

@@ -28,21 +28,6 @@ module Glib
           end
         end
 
-        # TODO: Consider removing this in favour of non 'v1' suffix
-        def add_singleton_element_v1(type, name, *args)
-          name_components = name.to_s.split('_')
-          json.set! type, "#{name_components.join('/')}-v1" if type
-          args = [yield] if block_given?
-          "#{self.class.name}::#{name_components.map { |str| capitalize_first_letter_and_leave_others_alone(str) }.join('::')}".constantize.new(json, @page).props(*args)
-        end
-
-        # TODO: Consider removing this in favour of non 'v1' suffix
-        def add_element_to_array_v1(type, name, *args)
-          json.child! do
-            add_singleton_element_v1 type, name, *args
-          end
-        end
-
     end
 
     class JsonUiElement

data/app/helpers/glib/json_ui/action_builder/components.rb

@@ -37,6 +37,9 @@ class Glib::JsonUi::ActionBuilder
       end
     end
 
+    # Deprecated: use `logics_set` instead. `logics_set` is a superset of this
+    # action (same `targetId`/`data`/`onSet`/`skipOnChange`, plus
+    # `conditionalData`, `targetIds`, `variables` and `cacheData`).
     class Set < Action
       string :targetId
       hash :data

data/app/helpers/glib/json_ui/action_builder/logics.rb

@@ -1,5 +1,8 @@
 class Glib::JsonUi::ActionBuilder
   module Logics
+    # The canonical setter action. Prefer this over the deprecated
+    # `components_set`: it supports plain static `data` as well as
+    # `conditionalData` (JsonLogic), `targetIds`, `variables` and `cacheData`.
     class Set < Action
       string :targetId
       array :targetIds

data/app/helpers/glib/json_ui/action_builder.rb

@@ -36,7 +36,7 @@ module Glib
 
       def method_missing(m, *args)
         if @multiple
-          add_element_to_array_v1 'action', m, *args
+          add_element_to_array 'action', m, *args
         else
           if !Rails.env.production? && @singleton_action_set
             raise "Multiple actions called on a singleton ActionBuilder. " \
@@ -46,7 +46,7 @@ module Glib
           end
           @singleton_action_set = true
           @singleton_action_name = m
-          add_singleton_element_v1 'action', m, *args
+          add_singleton_element 'action', m, *args
         end
       end
 

data/app/helpers/glib/json_ui/menu_builder.rb

@@ -2,7 +2,7 @@ module Glib
   module JsonUi
     class MenuBuilder < AbstractBuilder
       def method_missing(m, *args)
-        add_element_to_array_v1 nil, m, *args
+        add_element_to_array nil, m, *args
       end
 
       class MenuItem < JsonUiElement

data/app/helpers/glib/json_ui/view_builder/panels.rb

@@ -496,6 +496,20 @@ class Glib::JsonUi::ViewBuilder
     class BulkEdit2 < View
       hash :import, required: [:submitUrl, :paramName]
 
+      # Override
+      def created
+        # bulkEdit2 is a form PEER, not a form child: it answers the same
+        # forms_submit action a form does (forms/directSubmit) and submits its
+        # rows itself to `import.submitUrl`. Inside a form, its repeated
+        # per-row input names would collide with the form's FormData scans
+        # (duplicate-name warnings, dirty-baseline pollution) while adding
+        # nothing to the form's submission -- so, like a nested form, reject
+        # the arrangement at render time.
+        if page.current_form
+          raise 'panels_bulkEdit2 is not allowed inside a form; place it as a sibling and target it with forms_submit targetId'
+        end
+      end
+
       # Maximum number of data rows an uploaded file may contain; files with
       # more rows are rejected with an error dialog. No limit when unset.
       int :maxRows

data/app/helpers/glib/json_ui/view_builder.rb

@@ -89,9 +89,9 @@ module Glib
 
       def add_view(name, *args)
         if @multiple
-          add_element_to_array_v1 'view', name, *args
+          add_element_to_array 'view', name, *args
         else
-          add_singleton_element_v1 'view', name, *args
+          add_singleton_element 'view', name, *args
         end
       end
 
@@ -115,7 +115,11 @@ module Glib
         include Builder::MouseEvents
 
         string :id
-        string :key
+        string :key  # Deprecated: use `reuseKey` instead.
+        # Controls whether the frontend reuses the underlying DOM/component when a
+        # view is re-rendered. Maps to Vue's `:key`: keep it stable to allow reuse,
+        # or change it to force a fresh render. Supersedes the deprecated `key`.
+        string :reuseKey
         length :width
         length :height
         color :backgroundColor

data/app/views/json_ui/garage/forms/new_rich_text.json.jbuilder

@@ -15,7 +15,7 @@ page.form url: json_ui_garage_url(path: 'forms/basic_post'), method: 'post', pad
   # form.fields_richText name: 'user[bio]', width: 'matchParent', label: 'Content', images: images, value: '<p>Test {{image1}}</p>'
 
   json.child! do
-    json.view 'fields/newRichText-v1'
+    json.view 'fields/newRichText'
     json.width 'matchParent'
     json.label 'Content'
     json.name 'user[bio]'

data/app/views/json_ui/garage/forms/rich_text.json.jbuilder

@@ -62,7 +62,7 @@ page.form url: json_ui_garage_url(path: 'forms/basic_post'), method: 'post', pad
       end
 
     # json.child! do
-    #   json.view 'fields/richText-v1'
+    #   json.view 'fields/richText'
     #   json.width 'matchParent'
     #   json.label 'Content'
     #   json.name 'user[bio]'

data/app/views/json_ui/garage/test_page/duplicate_names.json.jbuilder

@@ -0,0 +1,84 @@
+json.title 'Test Page (Duplicate Names)'
+
+page = json_ui_page json
+
+render 'json_ui/garage/test_page/header', json: json, page: page
+
+# Contract: inputs sharing a name are only a problem when an action logic
+# READS the shared name -- getFormData then yields an ambiguous (array)
+# value. Repeated names that nothing reads are a legitimate pattern (e.g. a
+# multi-file upload renders one hidden input per signed file, all sharing the
+# field name), so they must never warn -- not at mount, not on input events,
+# and not when a logic reads OTHER fields.
+page.body(
+  childViews: ->(body) do
+    body.panels_responsive(
+      padding: glib_json_padding_body,
+      childViews: ->(res) do
+        res.h2 text: 'Duplicate field names in a form'
+        res.spacer height: 8
+        res.panels_form(
+          url: json_ui_garage_url(path: 'forms/generic_post'),
+          method: 'post',
+          childViews: ->(form) do
+            # Never read by any logic -- mirrors the multi-file upload shape.
+            form.fields_text width: 'matchParent', name: 'attachment_meta', label: 'Attachment meta 1', value: 'a'
+            form.fields_text width: 'matchParent', name: 'attachment_meta', label: 'Attachment meta 2', value: 'b'
+            # Read by the button below -- the ambiguous read must warn.
+            form.fields_text width: 'matchParent', name: 'user[level]', label: 'Level 1', value: 'one'
+            form.fields_text width: 'matchParent', name: 'user[level]', label: 'Level 2', value: 'two'
+            # A multi-value select renders one hidden input per selected
+            # value, all sharing the (bare, explicit) field name -- an
+            # INTENTIONAL duplicate that stays silent even when read (setEq
+            # exists precisely to compare such array values).
+            form.fields_select(
+              width: 'matchParent',
+              name: 'tags',
+              label: 'Tags',
+              multiple: true,
+              options: [
+                { text: 'Tag A', value: 'a' },
+                { text: 'Tag B', value: 'b' }
+              ],
+              value: ['a', 'b']
+            )
+          end
+        )
+        res.spacer height: 8
+        res.button(
+          text: 'Check level',
+          onClick: ->(action) do
+            action.logics_run(
+              condition: { '==': [{ 'var': 'user[level]' }, 'one'] },
+              onTrue: ->(subaction) do
+                subaction.logics_set targetId: 'dup_status', data: { text: 'TRUE' }
+              end,
+              onFalse: ->(subaction) do
+                subaction.logics_set targetId: 'dup_status', data: { text: 'FALSE' }
+              end
+            )
+          end
+        )
+        res.spacer height: 8
+        res.label id: 'dup_status', text: 'PENDING'
+        res.spacer height: 8
+        res.button(
+          text: 'Check tags',
+          onClick: ->(action) do
+            action.logics_run(
+              condition: { 'setEq': [{ 'var': 'tags' }, %w[a b]] },
+              onTrue: ->(subaction) do
+                subaction.logics_set targetId: 'tags_status', data: { text: 'MATCH' }
+              end,
+              onFalse: ->(subaction) do
+                subaction.logics_set targetId: 'tags_status', data: { text: 'NO MATCH' }
+              end
+            )
+          end
+        )
+        res.spacer height: 8
+        res.label id: 'tags_status', text: 'PENDING'
+      end
+    )
+  end
+)

data/app/views/json_ui/garage/test_page/inputs_outside_form.json.jbuilder

@@ -0,0 +1,123 @@
+json.title 'Test Page (Inputs Outside Form)'
+
+page = json_ui_page json
+
+render 'json_ui/garage/test_page/header', json: json, page: page
+
+# Contract: inputs outside a glib form mount SILENTLY, named or not. Whether
+# an outside-form input is a mistake depends on intent -- a named select that
+# only navigates via onChange is legitimate; a field an action logic expects
+# to read is a bug -- and intent is invisible at mount. So the warning fires
+# at READ time instead: when an action logic (logics/run, logics/set
+# conditions, fields/getValues) reads a name whose only input lives outside a
+# glib form, i.e. exactly when the silent-read bug manifests.
+page.body(
+  childViews: ->(body) do
+    body.panels_responsive(
+      padding: glib_json_padding_body,
+      childViews: ->(res) do
+        res.h2 text: 'Inputs outside a glib form'
+        res.label text: 'Every input below mounts silently. Warnings fire only when one of the ' \
+                        'buttons makes an action logic read a field that no glib form can provide.'
+        res.spacer height: 12
+        res.hr width: 'matchParent'
+        res.spacer height: 12
+
+        res.h2 text: 'Named input (silent at mount, warns when read)'
+        res.spacer height: 8
+        res.fields_text name: 'orphan_named', width: 'matchParent'
+
+        res.spacer height: 16
+        res.hr width: 'matchParent'
+        res.spacer height: 16
+
+        # A navigation-style control: named, outside any form, consumed only
+        # through its own onChange -- never through form data. Must stay
+        # silent forever.
+        res.h2 text: 'Nav select (onChange only, never warns)'
+        res.spacer height: 8
+        res.fields_select(
+          id: 'nav_year',
+          name: 'nav_year',
+          label: 'Year',
+          width: 300,
+          options: [
+            { text: '2025', value: '2025' },
+            { text: '2026', value: '2026' }
+          ],
+          value: '2026',
+          onChange: ->(action) do
+            action.logics_set targetId: 'nav_status', data: { text: 'NAVIGATED' }
+          end
+        )
+        res.spacer height: 8
+        res.label id: 'nav_status', text: 'IDLE'
+
+        res.spacer height: 16
+        res.hr width: 'matchParent'
+        res.spacer height: 16
+
+        res.h2 text: 'Nameless readOnly display (silent)'
+        res.spacer height: 8
+        res.fields_text value: 'https://example.com/copy-this-link', readOnly: true, width: 'matchParent'
+
+        res.spacer height: 16
+        res.hr width: 'matchParent'
+        res.spacer height: 16
+
+        res.h2 text: 'Action logics reading the orphan (warn at read time)'
+        res.spacer height: 8
+        res.panels_flow(
+          innerPadding: { bottom: 0 },
+          width: 'matchParent',
+          childViews: ->(flow) do
+            flow.button(
+              text: 'Read orphan (condition)',
+              onClick: ->(action) do
+                action.logics_run(
+                  condition: { '==': [{ 'var': 'orphan_named' }, 'never'] },
+                  onTrue: ->(subaction) do
+                    subaction.logics_set targetId: 'orphan_condition_status', data: { text: 'TRUE' }
+                  end,
+                  onFalse: ->(subaction) do
+                    subaction.logics_set targetId: 'orphan_condition_status', data: { text: 'FALSE' }
+                  end
+                )
+              end
+            )
+            flow.spacer width: 8
+            flow.button(
+              text: 'Read orphan (set)',
+              onClick: ->(action) do
+                action.logics_set(
+                  targetId: 'orphan_set_target',
+                  conditionalData: {
+                    'text' => { '??' => [{ 'var' => 'orphan_named' }, 'SET MISSING'] }
+                  }
+                )
+              end
+            )
+            flow.spacer width: 8
+            flow.button(
+              text: 'Read orphan (getValues)',
+              onClick: ->(action) do
+                action.fields_getValues(
+                  fieldNames: { 'orphan_named' => nil },
+                  onGet: ->(subaction) do
+                    subaction.logics_set targetId: 'orphan_get_status', data: { text: 'VALUES READ' }
+                  end
+                )
+              end
+            )
+          end
+        )
+        res.spacer height: 8
+        res.label id: 'orphan_condition_status', text: 'PENDING'
+        res.spacer height: 4
+        res.label id: 'orphan_set_target', text: 'SET PENDING'
+        res.spacer height: 4
+        res.label id: 'orphan_get_status', text: 'GET PENDING'
+      end
+    )
+  end
+)

data/app/views/json_ui/garage/test_page/logics_run_multi_form.json.jbuilder

@@ -16,6 +16,8 @@ page.body childViews: ->(body) do
       method: 'post',
       childViews: ->(form) do
         form.fields_text width: 'matchParent', name: 'user[status]', label: 'First form status', value: 'first'
+        # Divergent collision that NO logic reads -- must stay silent.
+        form.fields_text width: 'matchParent', name: 'unread[shared]', label: 'First unread shared', value: 'a'
       end
     res.spacer height: 8
     res.panels_form \
@@ -23,6 +25,7 @@ page.body childViews: ->(body) do
       method: 'post',
       childViews: ->(form) do
         form.fields_text width: 'matchParent', name: 'user[status]', label: 'Second form status', value: 'second'
+        form.fields_text width: 'matchParent', name: 'unread[shared]', label: 'Second unread shared', value: 'b'
       end
 
     res.spacer height: 8

data/lib/glib/json_crawler/action_crawlers/forms_submit.rb

@@ -16,7 +16,7 @@ module Glib
         raise "Submit action needs to be inside a form: #{http.router.last_log}" unless form
 
         case form['view']
-        when 'panels/bulkEdit2-v1'
+        when 'panels/bulkEdit2'
           method = 'post'
           action = "forms/#{method}"
           url = form['import']['submitUrl']
@@ -57,7 +57,7 @@ module Glib
             fields << child
 
             include_params = case name
-                             when 'fields/check', 'fields/check-v1'
+                             when 'fields/check'
                                child['checkValue'] == child['value']
                              else
                                true

data/lib/glib/json_crawler/router.rb

@@ -67,14 +67,14 @@ module Glib
       def step(http, args)
         # TODO: Refactor
         case args['view']
-        when 'fields/submit-v1', 'fields/submit'
+        when 'fields/submit'
           @depth += 1
           # forms = @visitor.forms
           # JsonCrawler::FormsSubmit.new(http, args, forms.last)
           JsonCrawler::FormsSubmit.new(http, args)
           @depth -= 1
           return
-        when 'panels/web-v1', 'panels/web'
+        when 'panels/web'
           # A panels/web embeds content by URL in an inline viewer -- a file
           # preview (PDF/image), an inline HTML preview, etc. There's no onClick
           # action to catch here, so when the URL is one of our own (same-host)
@@ -83,7 +83,7 @@ module Glib
           # (it replays each per user and snapshots the response). We only record
           # (no fetch); external embeds are filtered out by internal_url?.
           url = args['url']
-          http_actions.add(['panels/web-v1', url]) if url.present? && internal_url?(url)
+          http_actions.add(['panels/web', url]) if url.present? && internal_url?(url)
         end
 
         if args.is_a?(Hash) && args['rel'] != 'nofollow'
@@ -112,10 +112,9 @@ module Glib
             # @read_only_actions.add([action, params['url']])
             http_actions.add([action, params['url']])
             JsonCrawler::NavInitiate.new(http, params, action)
-          when 'runMultiple-v1', 'runMultiple'
+          when 'runMultiple'
             JsonCrawler::RunMultiple.new(http, params, action)
-          when 'windows/open-v1', 'dialogs/open-v1', 'windows/reload-v1', 'windows/open',
-            'dialogs/open', 'windows/reload', 'windows/openWeb', 'windows/openWeb-v1'
+          when 'windows/open', 'dialogs/open', 'windows/reload', 'windows/openWeb'
             if allowed?(params['url'])
               # @read_only_actions.add([action, params['url']])
               http_actions.add([action, params['url']])
@@ -141,24 +140,22 @@ module Glib
               http_actions.add([action, params['url']]) if internal_url?(params['url'])
               self.log action, params['url']
             end
-          when 'dialogs/show-v1', 'dialogs/show', 'popovers/show-v1', 'popovers/show'
+          when 'dialogs/show', 'popovers/show'
             JsonCrawler::DialogsShow.new(http, params, action)
-          when 'sheets/select-v1', 'sheets/select'
+          when 'sheets/select'
             JsonCrawler::Menu.new(http, params, action)
-          when 'http/post-v1', 'http/post'
+          when 'http/post'
             JsonCrawler::ActionHttp.new(:post, http, params, action)
-          when 'forms/submit-v1', 'forms/submit'
+          when 'forms/submit'
             # forms = @visitor.forms
             # JsonCrawler::FormsSubmit.new(http, params, forms.last)
             JsonCrawler::FormsSubmit.new(http, params)
-          when 'dialogs/alert-v1', 'dialogs/alert'
+          when 'dialogs/alert'
             JsonCrawler::DialogsAlert.new(http, params, action)
-          when 'dialogs/close-v1', 'dialogs/close', 'popovers/close', 'popovers/close-v1'
+          when 'dialogs/close', 'popovers/close'
             JsonCrawler::DialogsClose.new(http, params, action)
           else
             unless [
-              'http/delete-v1',
-              'dialogs/oauth-v1',
               'http/delete',
               'dialogs/oauth'
             ].include?(
@@ -271,13 +268,13 @@ module Glib
           params ||= {}
 
           case action.to_s.downcase
-          when 'http/post-v1', 'forms/post'
+          when 'http/post', 'forms/post'
             http.post(url, action, params)
-          when 'http/patch-v1', 'forms/patch'
+          when 'http/patch', 'forms/patch'
             http.patch(url, action, params)
-          when 'http/put-v1', 'forms/put'
+          when 'http/put', 'forms/put'
             http.put(url, action, params)
-          when 'http/delete-v1'
+          when 'http/delete'
             http.delete(url, action, params)
           else
             http.get(url, action, params)

data/lib/glib/test_helpers.rb

@@ -232,7 +232,7 @@ module Glib
         view.is_a?(Hash) && (
           view['view']&.start_with?('panels/form') ||
           view['view']&.start_with?('panels/fullPageForm') ||
-          view['view'] == 'panels/bulkEdit2-v1' ||
+          view['view'] == 'panels/bulkEdit2' ||
           view['view'] == 'panels/splitForm'
         )
       end
@@ -247,7 +247,7 @@ module Glib
         data_prefixes = data.keys.map { |k| "#{k}[" }
 
         __extract_form_fields(form).each do |field|
-          next unless field[:view] == 'fields/hidden' || field[:view] == 'fields/hidden-v1'
+          next unless field[:view] == 'fields/hidden'
           next if data_prefixes.any? { |prefix| field[:name]&.start_with?(prefix) }
 
           params[field[:name]] = field[:value]

metadata

@@ -1,11 +1,10 @@
 --- !ruby/object:Gem::Specification
 name: glib-web
 version: !ruby/object:Gem::Version
-  version: 6.4.1
+  version: 6.5.0
 platform: ruby
 authors:
 - ''
-autorequire:
 bindir: bin
 cert_chain: []
 date: 2026-08-12 00:00:00.000000000 Z
@@ -178,7 +177,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description:
 email: ''
 executables: []
 extensions: []
@@ -432,6 +430,7 @@ files:
 - app/views/json_ui/garage/test_page/dialog.json.jbuilder
 - app/views/json_ui/garage/test_page/dialog_open.json.jbuilder
 - app/views/json_ui/garage/test_page/dirty_state.json.jbuilder
+- app/views/json_ui/garage/test_page/duplicate_names.json.jbuilder
 - app/views/json_ui/garage/test_page/fields.json.jbuilder
 - app/views/json_ui/garage/test_page/fields_captcha.json.jbuilder
 - app/views/json_ui/garage/test_page/fields_creditCard.json.jbuilder
@@ -465,6 +464,7 @@ files:
 - app/views/json_ui/garage/test_page/horizontal.json.jbuilder
 - app/views/json_ui/garage/test_page/http.json.jbuilder
 - app/views/json_ui/garage/test_page/image.json.jbuilder
+- app/views/json_ui/garage/test_page/inputs_outside_form.json.jbuilder
 - app/views/json_ui/garage/test_page/lifecycle.json.jbuilder
 - app/views/json_ui/garage/test_page/list.json.jbuilder
 - app/views/json_ui/garage/test_page/list_editable.json.jbuilder
@@ -574,10 +574,8 @@ files:
 - lib/glib/time_returning_mailer.rb
 - lib/glib/value.rb
 - lib/tasks/db.rake
-homepage:
 licenses: []
 metadata: {}
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -592,8 +590,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.6
-signing_key:
+rubygems_version: 4.0.6
 specification_version: 4
 summary: ''
 test_files: []