glib-web 7.2.0 → 7.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f04f2fbd4180b48a75af32ed8bd22321fc818224ecfb00802edc88b04992c287
-  data.tar.gz: a5340d00dee67cacb6175428130344910c8ddbeaf69e73a64e0b8bfd8f13f639
+  metadata.gz: c46931ac3a3686ca63eb928be8cc23f77f6df86bcb2d3f6ad28c25a57f564fd3
+  data.tar.gz: 2b782f018a4220a56c0512f0603d2a712e4b97d57ffa15a64be1601035fda93f
 SHA512:
-  metadata.gz: fbe295ea4776d69d9b07f9bf554be771195f1296f5a61c690274c28a72432b43d7f7093884b2fc20cf3d12502880590d86856cb965318c1b0d62383d7952801b
-  data.tar.gz: 7cbfcda693f301216d38735f7a288b6d0006f38f1bb59a1a5db6a6837d4ea1dbdea43f1663314b214bbdee046245e40c0a4126cceb4c7b35c2956b1541cd3140
+  metadata.gz: 8d089424b8a53f6913c60c3cd895434aa168799243536b77ac73c75975ba766202382c52d86701beb6562fe38be03ff869336b353d168f3e4c92a89418ff85d1
+  data.tar.gz: 1cb4c4c951bdde00b63495407ee19e2c5738e2152107cbb8898bf19ce26ed91c3c82f6de9d922c7118d1754fe31d28def156b964d33edb3bc004980e019cd524

data/app/controllers/glib/home_controller.rb

@@ -50,6 +50,24 @@ module Glib
       render path
     end
 
+    # The content pages are plain HTML a web panel embeds — serve them
+    # unwrapped, outside the JSON-UI vue shell (spec 204).
+    json_libs_skip_json_ui only: :json_ui_garage_content
+
+    # The garage's engine-served content fixtures (spec 204): plain HTML the
+    # wire's web panel embeds, carried by the engine itself so every host
+    # that mounts it serves the same bytes — no host's public/ is involved.
+    # The name is allowlisted before it reaches a template path, and
+    # anything else is a 404. The format is pinned to HTML: the garage
+    # pipeline around this controller otherwise resolves every request as
+    # JSON (the json_ui_garage pages above).
+    def json_ui_garage_content
+      name = params[:name]
+      return head :not_found unless %w[web_panel_a web_panel_b].include?(name)
+
+      render "json_ui/garage/content/#{name}", formats: :html, layout: false
+    end
+
     def chat
       chat_params = params[:chat]
 

data/app/helpers/glib/json_ui/abstract_builder.rb

@@ -313,6 +313,35 @@ module Glib
               end
             end
 
+            # Sub-hash validation, one level deep: each `nested` key names a
+            # sub-hash whose own required/optional lists are checked the same
+            # way the top level is checked, so a typo inside a composite hash
+            # (e.g. a field's `draw` options) fails loudly at render time
+            # instead of passing silently. A nested spec that declares any
+            # keys (required or optional) CLOSES its sub-hash: keys outside
+            # required+optional raise. No recursion: sub-hashes of sub-hashes
+            # are the app's own data.
+            (options[:nested] || {}).each do |key, sub_options|
+              sub_value = value[key]
+              next if sub_value.nil?
+              raise ArgumentError, "Hash property: '#{key}' must be a hash" if !sub_value.is_a?(Hash)
+
+              sub_value = ActiveSupport::HashWithIndifferentAccess.new(sub_value)
+              sub_required = sub_options[:required] || []
+              sub_optional = sub_options[:optional] || []
+
+              sub_required.each do |req|
+                raise ArgumentError, "Hash property: '#{key}.#{req}' is required" if sub_value[req.to_s].nil?
+              end
+
+              allowed = sub_required + sub_optional
+              if allowed.present?
+                sub_value.each_key do |k|
+                  raise ArgumentError, "Unknown hash property: '#{key}.#{k}'" if !allowed.include?(k.to_sym)
+                end
+              end
+            end
+
             json.set! propName, value
           end
         end

data/app/helpers/glib/json_ui/action_builder/popovers.rb

@@ -8,6 +8,11 @@ class Glib::JsonUi::ActionBuilder
         string :key
         # views :childViews
         string :placement
+        # 'element' (default: the component that ran the action, or `targetId`)
+        # or 'pointer': the popover anchors to the click/tap point that started
+        # the action, for a menu opened from a large control where the control's
+        # corner may be far from the finger (a full-width signature box).
+        string :anchor
         int :offset
         int :width
         bool :persistent

data/app/helpers/glib/json_ui/page_helper.rb

@@ -10,6 +10,17 @@ module Glib
         )
       end
 
+      # The garage's engine-served content pages (spec 204). Unlike
+      # json_ui_garage_url, no _render/format params ride along: the content
+      # GET is a plain fetch whose recorded path must stay query-less.
+      def json_ui_garage_content_url(options = {})
+        Glib::Web::Engine.routes.url_helpers.json_ui_garage_content_url(options.merge(
+                                                                          protocol: request.protocol,
+                                                                          host: request.host,
+                                                                          port: request.port)
+        )
+      end
+
       def glib_chat_url(options = {})
         Glib::Web::Engine.routes.url_helpers.chat_url(options.merge(
                                                         protocol: request.protocol,

data/app/helpers/glib/json_ui/view_builder/fields.rb

@@ -916,9 +916,12 @@ class Glib::JsonUi::ViewBuilder
     # a dialog with the drawing canvas, and Confirm uploads the drawing as a
     # PNG to `directUploadUrl` and submits the resulting signed id under
     # `name`. The placeholder then shows the signature, and reopening the
-    # dialog lets the user edit it. Because the canvas is not in the form,
-    # the placeholder can be given the same height as a neighbouring input
-    # (e.g. a typed-name alternative) without losing drawing space.
+    # dialog paints it back onto the canvas read-only -- a drawing shown on
+    # the canvas is never editable; clear it to draw again (the
+    # `draw.confirmedHint` cue says so under the canvas). Because the canvas
+    # is not in the form, the placeholder can be given the same height as a
+    # neighbouring input (e.g. a typed-name alternative) without losing
+    # drawing space.
     #
     # `label` titles the dialog; `placeholder` replaces the "Tap to sign"
     # prompt.
@@ -956,6 +959,36 @@ class Glib::JsonUi::ViewBuilder
     #     width: 220,
     #     height: 100
     #
+    # @example Offered saved signature
+    #   # The app composes the menu on the empty box from generic pieces:
+    #   # `onClick` runs while the field is blank, `popovers_show
+    #   # anchor: 'pointer'` opens it at the tap point, `logics_set` fills the
+    #   # field with the kept signature's signed id (which `savedSignature`
+    #   # turns into a preview), and `components_invoke action_open` opens the
+    #   # dialog. See the garage page for the full two-row composition.
+    #   form.fields_sign \
+    #     id: 'signature_offered',
+    #     name: 'user[signature_offered]',
+    #     directUploadUrl: glib_direct_uploads_url,
+    #     width: 320, height: 160,
+    #     onClick: ->(action) do
+    #       action.popovers_show key: 'menu', anchor: 'pointer', placement: 'bottom-start',
+    #         content: ->(popover) do
+    #           popover.body styleClasses: ['popover', 'popover-menu'], childViews: ->(body) do
+    #             body.panels_horizontal styleClasses: ['popover-menu-item'], align: 'middle',
+    #               childViews: ->(row) { row.label text: 'Use my saved signature' },
+    #               onClick: ->(sub) do
+    #                 sub.logics_set targetId: 'signature_offered', data: { value: 'saved-signed-id' }
+    #               end
+    #           end
+    #         end
+    #     end,
+    #     draw: {
+    #       hint: 'Draw it once. We keep it for next time.',
+    #       savedSignature: { value: 'saved-signed-id', fileUrl: signature_url },
+    #       saveOption: { name: 'user[save_signature_offered]', label: 'Save this signature for next time' }
+    #     }
+    #
     # @note A saved signature is a signed id that cannot be redrawn from the
     #   canvas: when a record is re-edited the field pre-populates `value`
     #   with the existing attachment's signed id (the component renders a
@@ -982,6 +1015,32 @@ class Glib::JsonUi::ViewBuilder
       # server routes it to the name attribute.
       hash :typedName, optional: [:name, :value, :label, :placeholder]
 
+      # Run instead of opening the dialog while the field is BLANK (a filled box
+      # always opens the dialog on what it holds). The app composes whatever the
+      # tap should do first, e.g. a popovers_show menu offering a kept signature
+      # (logics_set of its signed id) or the dialog (components_invoke
+      # name: 'action_open').
+      action :onClick
+
+      # The Draw tab's hash, the parallel of `typedName` for the Type tab. `hint`
+      # is a line under the canvas, shown only while the canvas is blank;
+      # `placeholder` replaces the in-canvas "Draw your signature here" cue;
+      # `confirmedHint` is the line under a painted (read-only) drawing on reopen;
+      # `savedSignature` is plain data: when the field's value is set to `value`
+      # (by logics_set, typically from the onClick menu) the box previews
+      # `fileUrl`; `saveOption` is a checkbox shown under fresh ink, in the
+      # fields_check shape, whose tick is submitted under `saveOption[:name]` as a
+      # SECOND hidden input -- the one exception to the field's single-param
+      # contract, because a boolean cannot share the input that carries the signed
+      # id or the typed name. Distinct from `fileUrl` above: that is the box's OWN
+      # value on re-edit, pre-filled and, like any painted drawing, read-only on
+      # the canvas until cleared.
+      hash :draw, optional: [:hint, :placeholder, :confirmedHint, :savedSignature, :saveOption],
+            nested: {
+              savedSignature: { required: [:value, :fileUrl] },
+              saveOption: { required: [:name], optional: [:label, :value, :tooltip] }
+            }
+
       # Override
       # A stored signature is an attachment -- submit its signed id (mirrors
       # File#determine_value) so re-editing a signed submission pre-fills the

data/app/views/json_ui/garage/content/web_panel_a.html.erb

@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <!-- The empty data-uri icon suppresses the WebView's automatic
+       /favicon.ico fetch, a byproduct request no cassette entry covers
+       (the served-through assertion would fail it). -->
+  <link rel="icon" href="data:,">
+  <title>Web Panel Content A</title>
+</head>
+<body style="margin:0; font-family: sans-serif; background:#e8f5e9;">
+  <h1 style="margin:0; padding:12px; font-size:20px; color:#1b5e20;">Web Panel A</h1>
+  <div style="margin:12px; height:80px; background:#4caf50; border-radius:4px;"></div>
+  <p style="margin:12px; color:#1b5e20;">Content page A for the renderer contract suite.</p>
+</body>
+</html>

data/app/views/json_ui/garage/content/web_panel_b.html.erb

@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <!-- The empty data-uri icon suppresses the WebView's automatic
+       /favicon.ico fetch, a byproduct request no cassette entry covers
+       (the served-through assertion would fail it). -->
+  <link rel="icon" href="data:,">
+  <title>Web Panel Content B</title>
+</head>
+<body style="margin:0; font-family: sans-serif; background:#e3f2fd;">
+  <h1 style="margin:0; padding:12px; font-size:24px; color:#0d47a1;">Web Panel B</h1>
+  <div style="margin:12px; height:120px; background:#2196f3; border-radius:8px;"></div>
+  <p style="margin:12px; color:#0d47a1;">Alternate content page B for the swap state.</p>
+</body>
+</html>

data/app/views/json_ui/garage/test_page/components.json.jbuilder

@@ -84,6 +84,19 @@ page.body(
           end
         )
 
+        res.spacer height: 8
+        res.label id: 'chip_keyboard_status', text: 'Chip: idle'
+        res.spacer height: 8
+        # Chips are keyboard-activatable: Enter/Space run onClick through the
+        # same $onClick path a mouse click does.
+        res.chip(
+          id: 'chip_keyboard',
+          text: 'Chip with onClick',
+          onClick: ->(action) do
+            action.logics_set targetId: 'chip_keyboard_status', data: { text: 'Chip: activated' }
+          end
+        )
+
         res.spacer height: 16
         res.hr width: 'matchParent'
         res.spacer height: 16

data/app/views/json_ui/garage/test_page/fields_sign.json.jbuilder

@@ -180,6 +180,114 @@ page.body(
             form.hr width: 'matchParent'
             form.spacer height: 12
 
+            form.h2 text: 'Offered saved signature'
+            form.spacer height: 8
+            form.label text: 'onClick composes a menu on the empty box (popovers_show at the pointer): use the kept signature (logics_set) or open the dialog (components_invoke action_open); draw.saveOption asks whether a fresh drawing should be saved.'
+            form.spacer height: 8
+            form.fields_sign(
+              id: 'signature_offered',
+              name: 'user[signature_offered]',
+              typedName: { label: 'Type your full name', placeholder: 'Full name' },
+              directUploadUrl: glib_direct_uploads_url,
+              width: 320,
+              height: 160,
+              onClick: ->(action) do
+                action.popovers_show key: 'menu', anchor: 'pointer', placement: 'bottom-start', content: ->(popover) do
+                  popover.body styleClasses: ['popover', 'popover-menu'], childViews: ->(pbody) do
+                    pbody.panels_horizontal styleClasses: ['popover-menu-item'], align: 'middle', childViews: ->(row) do
+                      row.icon name: 'folder_open'
+                      row.spacer width: 8
+                      row.label text: 'Use my saved signature'
+                    end, onClick: ->(sub) do
+                      sub.runMultiple childActions: ->(m) do
+                        m.logics_set targetId: 'signature_offered', data: { value: 'saved-signed-id' }
+                        m.popovers_close key: 'menu'
+                      end
+                    end
+                    pbody.panels_horizontal styleClasses: ['popover-menu-item'], align: 'middle', childViews: ->(row) do
+                      row.icon name: 'draw'
+                      row.spacer width: 8
+                      row.label text: 'Draw or type a new signature'
+                    end, onClick: ->(sub) do
+                      sub.runMultiple childActions: ->(m) do
+                        m.components_invoke targetId: 'signature_offered', name: 'action_open'
+                        m.popovers_close key: 'menu'
+                      end
+                    end
+                  end
+                end
+              end,
+              draw: {
+                hint: 'Draw it once. We keep it for next time.',
+                placeholder: 'Sign inside the box',
+                confirmedHint: 'Keep it, or clear it and sign again.',
+                savedSignature: { value: 'saved-signed-id', fileUrl: preview_data_uri },
+                saveOption: {
+                  name: 'user[save_signature_offered]',
+                  label: 'Save this signature for next time',
+                  tooltip: { text: 'This will replace the signature currently saved.' }
+                }
+              }
+            )
+            form.spacer height: 8
+            form.panels_flow(
+              innerPadding: { bottom: 0 },
+              width: 'matchParent',
+              childViews: ->(flow) do
+                flow.button(
+                  text: 'Reset offered',
+                  onClick: ->(action) do
+                    action.fields_reset targetId: 'signature_offered'
+                  end
+                )
+                flow.spacer width: 8
+                flow.button(
+                  text: 'Open offered field',
+                  onClick: ->(action) do
+                    action.components_invoke targetId: 'signature_offered', name: 'action_open'
+                  end
+                )
+              end
+            )
+
+            form.spacer height: 12
+            form.hr width: 'matchParent'
+            form.spacer height: 12
+
+            form.h2 text: 'Hints on a blank canvas'
+            form.spacer height: 8
+            form.fields_sign(
+              id: 'signature_hinted',
+              name: 'user[signature_hinted]',
+              directUploadUrl: glib_direct_uploads_url,
+              width: 320,
+              height: 160,
+              draw: { hint: 'Draw it once. We keep it for next time.', placeholder: 'Sign inside the box',
+                      confirmedHint: 'Keep it, or clear it and sign again.' }
+            )
+
+            form.spacer height: 12
+            form.hr width: 'matchParent'
+            form.spacer height: 12
+
+            form.h2 text: 'Failed image load'
+            form.spacer height: 8
+            form.label text: 'A dead fileUrl: the dialog must fall back to a drawable blank canvas, not a locked one.'
+            form.spacer height: 8
+            form.fields_sign(
+              id: 'signature_deadfile',
+              name: 'user[signature_deadfile]',
+              value: 'deadfile-signed-id',
+              fileUrl: '/signatures/missing.png',
+              directUploadUrl: glib_direct_uploads_url,
+              width: 320,
+              height: 160
+            )
+
+            form.spacer height: 12
+            form.hr width: 'matchParent'
+            form.spacer height: 12
+
             form.h2 text: 'Read-only (pre-filled)'
             form.spacer height: 8
             form.label text: 'A saved signature on a read-only field: the preview shows, the edit overlay does not.'

data/app/views/json_ui/garage/test_page/popovers.json.jbuilder

@@ -186,6 +186,25 @@ page.body(
             )
           end
         )
+        res.spacer height: 8
+        res.button(
+          text: 'popovers/show (pointer)',
+          onClick: ->(action) do
+            action.popovers_show(
+              key: 'popover_pointer',
+              anchor: 'pointer',
+              placement: 'bottom-start',
+              content: ->(dialog) do
+                dialog.body(
+                  padding: glib_json_padding_body,
+                  childViews: ->(menu) do
+                    menu.label text: 'Opened at the click point'
+                  end
+                )
+              end
+            )
+          end
+        )
       end
     )
   end

data/app/views/json_ui/garage/test_page/web.json.jbuilder

@@ -10,13 +10,14 @@ page.body childViews: ->(body) do
     res.h2 text: 'Overview'
     res.p text: 'Web panels embed external web content within a panel container.'
 
-    # Hermetic content on the serving host itself (spec 169, Decision 5):
-    # the recording host's public/ carries the two deterministic pages, so
-    # the emitted URLs bake an origin the cassette replay can rewrite and
-    # serve — an external URL would leave the emulator for the real network
-    # and no golden could depend on it.
-    url_content = "#{request.base_url}/g-web-panel.html"
-    url_alt = "#{request.base_url}/g-web-panel-alt.html"
+    # Hermetic content served by the engine itself (spec 204): the two
+    # deterministic pages ride the engine's json_ui_garage/content route,
+    # so every host that mounts the engine serves them identically — no
+    # host's public/ is involved. The emitted URLs bake an origin the
+    # cassette replay can rewrite and serve; an external URL would leave
+    # the emulator for the real network and no golden could depend on it.
+    url_content = json_ui_garage_content_url(name: 'web_panel_a')
+    url_alt = json_ui_garage_content_url(name: 'web_panel_b')
 
     res.spacer height: 12
     res.hr width: 'matchParent'

data/app/views/json_ui/garage/views/map_cluster_data.json.jbuilder

@@ -34,7 +34,10 @@ json.pins do
       json.longitude location[:lng]
       json.clusterSize location[:size]
       json.infoWindow do
-        json.title "TEST #{rand(1000)}"
+        # Pinned for byte-stable re-records (spec 203, Decision 14): was
+        # "TEST #{rand(1000)}" — every re-record renamed every cluster pin
+        # and the cassette diff was noise.
+        json.title 'TEST 500'
       end
     end
   end

data/app/views/json_ui/garage/views/map_data.json.jbuilder

@@ -24,8 +24,12 @@ json.pins do
   end
 
   json.child! do
-    json.latitude 13.375903 + rand(0..0.1)
-    json.longitude 144.749791 + rand(0..0.1)
+    # Pinned for byte-stable re-records (spec 203, Decision 14): was
+    # 13.375903 + rand(0..0.1) / 144.749791 + rand(0..0.1) — the recorder
+    # hits this live fixture, so the jitter moved every pin on every
+    # re-record and the cassette diff was noise.
+    json.latitude 13.425903
+    json.longitude 144.799791
     json.infoWindow do
       json.title 'Place 3'
       json.subtitle 'Random location'

data/config/routes.rb

@@ -4,10 +4,11 @@ Glib::Web::Engine.routes.draw do
     post 'json_ui_garage', to: 'home#json_ui_garage'
     patch 'json_ui_garage', to: 'home#json_ui_garage'
     delete 'json_ui_garage', to: 'home#json_ui_garage'
+    get 'json_ui_garage/content/:name', to: 'home#json_ui_garage_content', as: :json_ui_garage_content
     post 'chat', to: 'home#chat'
 
     resources :glib_direct_uploads, only: [:create]
     resources :blob_url_generators, only: [:create]
     resources :errors, only: [:create]
   end
-end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: glib-web
 version: !ruby/object:Gem::Version
-  version: 7.2.0
+  version: 7.3.0
 platform: ruby
 authors:
 - ''
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-13 00:00:00.000000000 Z
+date: 2026-10-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activestorage
@@ -312,6 +312,8 @@ files:
 - app/views/json_ui/garage/actions/index.json.jbuilder
 - app/views/json_ui/garage/actions/partial_update.json.jbuilder
 - app/views/json_ui/garage/actions/sheet_content.json.jbuilder
+- app/views/json_ui/garage/content/web_panel_a.html.erb
+- app/views/json_ui/garage/content/web_panel_b.html.erb
 - app/views/json_ui/garage/empty.json.jbuilder
 - app/views/json_ui/garage/forms/_alert_post_all_data.json.jbuilder
 - app/views/json_ui/garage/forms/_alert_post_data.json.jbuilder