helios-press 0.1.0 → 0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e3b7ae24fbb56776cc12ecba0e5c5f8c4fe86add758aceeddf4a2556233f65ad
-  data.tar.gz: 27ec84d4133ac49444df9b70f145214e1c57757f8098e19af4d3261271a08eef
+  metadata.gz: 1d3b3438e1adcc7a8776aab2c1504eca5768bdb82529e1a8013b5c52786b1322
+  data.tar.gz: 0caad891b10dc08f98f43ded048b20abfeec168829642cdcc26505f0360dc862
 SHA512:
-  metadata.gz: d0224ef4872b8727d78d1dc9e1aba083b254bf6380a0e1cf5ea5ffbd4b30a8903b1847253963620f7a2f84a4da93a621d31fba0a81b0297c7e70b9f68236fddb
-  data.tar.gz: 26d02bcc128f38ead744f8dacc50005caa749bb2f8da86249af09053aed2461766f32594e439242a4bf91765816dfcb6c5e3492d91281bf1d5a2a8a590c75b38
+  metadata.gz: 6f42ac281d93c06b6bbdd98b869f9c6a63f68309f4036a9cefd85f32e87770ae18f62a2fbce701b8940fcc6ba3d3d8569aee9175f72585ebb5ff80cb8c05001a
+  data.tar.gz: c999f3186d81ee01f529de8170b3b32677c93939ca3a6af02979a670554b19dbce6e2a10d0f87d8222a70481147d4b3a56214bee24202acdaa8beb94b48949c6

data/README.md

@@ -32,6 +32,9 @@ Helios::Press.configure do |config|
   # Parent controller for admin views (must provide authentication)
   config.admin_parent_controller = "Admin::BaseController"
 
+  # Parent controller for public views (blog index/show)
+  config.public_parent_controller = "ApplicationController"
+
   # Optional slug prefix for posts
   config.post_slug_prefix = nil  # e.g., "blog/" for /blog/my-post
 
@@ -49,16 +52,40 @@ end
 
 ## Routes
 
-Mount the engine:
+Helios::Press provides three independent engines that you can mount wherever you want:
+
+```ruby
+# Admin block editor — mount behind your auth
+mount Helios::Press::Admin::Engine, at: "/admin/press"
+
+# Public blog index/show — mount at your preferred public path
+mount Helios::Press::Public::Engine, at: "/blog"
+
+# API for external post ingestion
+mount Helios::Press::Api::Engine, at: "/api/press"
+```
+
+Mount only the engines you need. For example, if you only want the admin editor and will build your own public views:
 
 ```ruby
-mount Helios::Press::Engine, at: "/helios_press"
+mount Helios::Press::Admin::Engine, at: "/admin/press"
 ```
 
-This provides:
-- **Admin UI**: `/helios_press/admin/posts` - Full block editor
-- **API**: `POST /helios_press/api/posts` - Ingest posts from external sources
-- **Public**: Define your own catch-all route pointing to `Helios::Press::PostsController#show`
+### Routes provided
+
+**Admin Engine:**
+- `GET /` — Posts list
+- `GET /posts/new` — New post form
+- `GET /posts/:id/edit` — Block editor
+- `POST/PATCH/DELETE /posts/:id` — CRUD
+- Block and image sub-resources
+
+**Public Engine:**
+- `GET /` — Published posts index
+- `GET /:slug` — Single post view
+
+**API Engine:**
+- `POST /posts` — Upsert a post by `external_id`
 
 ## JavaScript Setup
 
@@ -69,15 +96,11 @@ import {
   HeliosPressBlocksController,
   HeliosPressTextBlockController,
   HeliosPressImageBlockController
-} from "helios-press"
+} from "helios/press"
 
 application.register("helios-press-blocks", HeliosPressBlocksController)
 application.register("helios-press-text-block", HeliosPressTextBlockController)
 application.register("helios-press-image-block", HeliosPressImageBlockController)
-
-// If using helios-videos:
-import { HeliosVideoBlockController } from "helios-videos"
-application.register("helios-video-block", HeliosVideoBlockController)
 ```
 
 **npm dependencies** (add to your host app's package.json):
@@ -86,13 +109,35 @@ application.register("helios-video-block", HeliosVideoBlockController)
 - `@rails/activestorage`
 - `trix` and `@rails/actiontext`
 
+### Vite
+
+If your host app uses Vite, add an alias so Vite can resolve the gem's JavaScript:
+
+```typescript
+// vite.config.mts
+resolve: {
+  alias: {
+    'helios/press': resolve(__dirname, '/path/to/helios-press/app/javascript/helios/press'),
+  },
+},
+```
+
+When using a local path gem, point to the local checkout. When using the published gem, point to the installed gem path (e.g., via `bundle show helios-press`).
+
 ## CSS
 
-Include the block editor styles in your asset pipeline:
+Include the block editor styles in your stylesheet:
 
-```css
-/* In your application CSS */
-@import "helios/press/blocks";
+```scss
+@import 'helios_press_blocks';
+```
+
+You can either symlink or copy the file from the gem:
+
+```bash
+# Symlink (local development)
+ln -s /path/to/helios-press/app/assets/stylesheets/helios/press/blocks.css \
+      app/assets/stylesheets/_helios_press_blocks.scss
 ```
 
 ## Block Types
@@ -103,7 +148,7 @@ Include the block editor styles in your asset pipeline:
 
 ## API Ingestion
 
-POST to `/helios_press/api/posts` with `X-API-Key` header:
+POST to your mounted API path with `X-API-Key` header:
 
 ```json
 {
@@ -112,11 +157,31 @@ POST to `/helios_press/api/posts` with `X-API-Key` header:
   "slug": "my-post-title",
   "description": "Meta description",
   "keywords": "keyword1, keyword2",
-  "body_html": "<p>Post content...</p>",
-  "published": true
+  "body_html": "<p>Post content with <img src=\"https://example.com/photo.jpg\"> tags...</p>",
+  "published": true,
+  "images": [
+    {
+      "reference_key": "hero1",
+      "url": "https://example.com/hero.jpg",
+      "alt": "Hero image",
+      "caption": "Photo credit: Example"
+    }
+  ]
 }
 ```
 
+### Image Ingestion
+
+When a post is ingested via the API, all images in `body_html` are automatically downloaded, stored via ActiveStorage (e.g., to S3), and the `<img>` src attributes are rewritten to local proxy URLs. This ensures no external image hotlinking in published posts.
+
+Two modes are supported:
+
+1. **Explicit references**: Use `src="helios://image/<reference_key>"` in your `body_html` and provide the actual download URL in the `images` array. The ingestor matches them by `reference_key`.
+
+2. **Auto-import**: Any `src="https://..."` URL in `body_html` is automatically downloaded. Images are deduplicated by a SHA256 hash of the URL path (ignoring query strings/signatures), so re-ingesting the same image with different signed URLs won't create duplicates.
+
+Images are stored as `BlockImage` records with ActiveStorage attachments and served via `rails_storage_proxy_path`. Failed downloads are logged and skipped (soft failure — the original src is preserved).
+
 ## License
 
 Proprietary. All rights reserved.

data/app/controllers/helios/press/admin/base_controller.rb

@@ -1,8 +1,7 @@
 module Helios
   module Press
     module Admin
-      class BaseController < ::ApplicationController
-        layout "helios/press/admin"
+      class BaseController < Helios::Press.configuration.admin_parent_controller.constantize
       end
     end
   end

data/app/controllers/helios/press/admin/blocks_controller.rb

@@ -30,7 +30,7 @@ module Helios
 
             # Handle video upload for video_container blocks (when helios-videos is present)
             if @block.video_container? && params[:video_signed_id].present? && Helios::Press.videos_enabled?
-              video = Helios::Videos::Video.new(name: params[:video_name], block: @block)
+              video = Helios::Videos.video_class.new(name: params[:video_name], block: @block)
               video.video_file.attach(params[:video_signed_id])
               video.save!
             end

data/app/controllers/helios/press/admin/posts_controller.rb

@@ -23,7 +23,7 @@ module Helios
           @post = Post.new(post_params)
 
           if @post.save
-            redirect_to helios_press.edit_admin_post_path(@post), notice: "Post was successfully created."
+            redirect_to helios_press_admin.edit_post_path(@post), notice: "Post was successfully created."
           else
             render :new, status: :unprocessable_entity
           end
@@ -42,7 +42,7 @@ module Helios
           end
 
           if @post.update(update_params)
-            redirect_to helios_press.edit_admin_post_path(@post), notice: success_message
+            redirect_to helios_press_admin.edit_post_path(@post), notice: success_message
           else
             render :edit, status: :unprocessable_entity
           end
@@ -50,7 +50,7 @@ module Helios
 
         def destroy
           @post.destroy
-          redirect_to helios_press.admin_posts_path, notice: "Post was successfully deleted."
+          redirect_to helios_press_admin.posts_path, notice: "Post was successfully deleted."
         end
 
         private
@@ -63,8 +63,8 @@ module Helios
           params.require(:post).permit(:name, :published, :slug, :keywords, :description)
         end
 
-        def helios_press
-          Helios::Press::Engine.routes.url_helpers
+        def helios_press_admin
+          Helios::Press::Admin::Engine.routes.url_helpers
         end
       end
     end

data/app/controllers/helios/press/api/posts_controller.rb

@@ -2,7 +2,7 @@ module Helios
   module Press
     module Api
       class PostsController < Helios::Press::Api::BaseController
-        # POST /api/v1/posts
+        # POST /api/press/posts
         # Upsert a post by external_id. Payload shape:
         # {
         #   "external_id":       "helios-blog-post-draft-4821",
@@ -10,9 +10,18 @@ module Helios
         #   "slug":              "...",
         #   "keywords":          "...",
         #   "description":       "...",
-        #   "body_html":         "...",
-        #   "published":         true
+        #   "body_html":         "<p>Content with <img src=\"https://...\"> tags...</p>",
+        #   "published":         true,
+        #   "images":            [
+        #     { "reference_key": "hero1", "url": "https://...", "alt": "...", "caption": "..." }
+        #   ]
         # }
+        #
+        # Images in body_html are automatically downloaded, stored via ActiveStorage,
+        # and their src attributes rewritten to local proxy URLs. Two modes:
+        #   1. Explicit: use src="helios://image/<reference_key>" in body_html and
+        #      provide the download URL in the images array.
+        #   2. Auto: any src="https://..." in body_html is downloaded automatically.
         def create
           external_id = params[:external_id].to_s
           return render json: { error: "external_id is required" }, status: :bad_request if external_id.blank?
@@ -27,19 +36,16 @@ module Helios
             published: ActiveModel::Type::Boolean.new.cast(params[:published])
           )
 
-          # If body_html is provided, create/update a single text block with the content
+          post.save!
+
           if params[:body_html].present?
-            if post.persisted?
-              # Update or create the first text block
-              text_block = post.blocks.find_by(block_type: "text") || post.blocks.build(block_type: "text", position: 0)
-              text_block.content = params[:body_html]
-            else
-              post.blocks.build(block_type: "text", position: 0, content: params[:body_html])
-            end
+            ingestor = ImageIngestor.new(post)
+            ingestor.call(
+              body_html: params[:body_html],
+              images_payload: params[:images] || []
+            )
           end
 
-          post.save!
-
           render json: {
             ok: true,
             id: post.id,

data/app/controllers/helios/press/posts_controller.rb

@@ -1,6 +1,10 @@
 module Helios
   module Press
-    class PostsController < ::ApplicationController
+    class PostsController < Helios::Press.configuration.public_parent_controller.constantize
+      def index
+        @posts = Post.published.reverse_sorted
+      end
+
       def show
         @post = Post.published.find_by!(slug: params[:slug])
       end

data/app/models/helios/press/block_image.rb

@@ -8,9 +8,31 @@ module Helios
       has_one_attached :file
 
       validates :position, presence: true, numericality: { only_integer: true, greater_than_or_equal_to: 0 }
-      validates :file, presence: true
+      validates :file, presence: true, unless: :reference_key?
+
+      def reference_key?
+        reference_key.present?
+      end
 
       acts_as_list scope: :block
+
+      DOCUMENT_CONTENT_TYPES = %w[
+        application/pdf
+        application/msword
+        application/vnd.openxmlformats-officedocument.wordprocessingml.document
+      ].freeze
+
+      def svg?
+        file.attached? && file.content_type == "image/svg+xml"
+      end
+
+      def document?
+        file.attached? && DOCUMENT_CONTENT_TYPES.include?(file.content_type)
+      end
+
+      def variable?
+        file.attached? && file.variable?
+      end
     end
   end
 end

data/app/services/helios/press/image_ingestor.rb

@@ -0,0 +1,167 @@
+# frozen_string_literal: true
+
+require "net/http"
+require "nokogiri"
+require "uri"
+require "digest"
+
+module Helios
+  module Press
+    # Downloads remote images referenced in ingested post HTML, stores them via
+    # ActiveStorage, and rewrites the body HTML so <img> src attributes point at
+    # locally-hosted ActiveStorage proxy URLs.
+    #
+    # Supports two modes:
+    #   1. Explicit references: src="helios://image/<reference_key>" paired with
+    #      an images_payload array containing download URLs.
+    #   2. Auto-import: any remaining src="https://..." URLs are downloaded,
+    #      deduplicated by a SHA256 of the URL path.
+    class ImageIngestor
+      class FetchError < StandardError; end
+
+      MAX_BYTES = 15.megabytes
+
+      def initialize(post)
+        @post = post
+      end
+
+      # images_payload: Array of Hashes
+      #   [{ "reference_key" => "abc123", "url" => "https://...", "alt" => "...", "caption" => "..." }]
+      def call(body_html:, images_payload: [])
+        ensure_text_block!
+        upsert_inline_images(images_payload)
+        rewritten = rewrite_body_html(body_html)
+        text_block.content = rewritten
+        text_block.save!
+        rewritten
+      end
+
+      private
+
+      attr_reader :post
+
+      def text_block
+        @text_block ||= post.blocks.find_by(block_type: "text") ||
+                        post.blocks.build(block_type: "text", position: 0)
+      end
+
+      def ensure_text_block!
+        text_block # trigger lazy init
+      end
+
+      def image_block
+        @image_block ||= post.blocks.find_by(block_type: "image_container") ||
+                         post.blocks.create!(block_type: "image_container", position: 1)
+      end
+
+      def upsert_inline_images(payload)
+        return if payload.blank?
+
+        payload.each do |entry|
+          key = entry["reference_key"].presence
+          next unless key
+
+          bi = image_block.block_images.find_or_initialize_by(reference_key: key)
+          bi.caption = entry["caption"].to_s if entry["caption"].present?
+          bi.position ||= (image_block.block_images.maximum(:position) || 0) + 1
+
+          if bi.file.attached?
+            bi.save! if bi.changed?
+            next
+          end
+
+          blob = fetch_as_blob(entry["url"])
+          unless blob
+            Rails.logger.warn("Helios::Press::ImageIngestor: skipping #{key} — blob fetch failed")
+            next
+          end
+
+          bi.file.attach(blob)
+          bi.save!
+        end
+      end
+
+      def rewrite_body_html(html)
+        return html if html.blank?
+
+        doc = Nokogiri::HTML.fragment(html)
+        doc.css("img").each do |img|
+          src = img["src"].to_s
+
+          if src.start_with?("helios://image/")
+            key = src.delete_prefix("helios://image/")
+            bi = image_block.block_images.find_by(reference_key: key)
+            next unless bi&.file&.attached?
+
+            img["src"] = proxy_path(bi.file)
+            img["alt"] = bi.caption if bi.caption.present? && img["alt"].blank?
+          elsif src.match?(%r{\Ahttps?://}i)
+            bi = import_remote_image(src, alt: img["alt"].to_s)
+            next unless bi&.file&.attached?
+
+            img["src"] = proxy_path(bi.file)
+          end
+        end
+
+        doc.to_html
+      end
+
+      def import_remote_image(url, alt: "")
+        uri = URI.parse(url)
+        key = "auto_#{Digest::SHA256.hexdigest(uri.path.to_s)[0, 16]}"
+
+        bi = image_block.block_images.find_or_initialize_by(reference_key: key)
+        bi.caption = alt if alt.present? && bi.caption.blank?
+        bi.position ||= (image_block.block_images.maximum(:position) || 0) + 1
+
+        if bi.file.attached?
+          bi.save! if bi.changed?
+          return bi
+        end
+
+        blob = fetch_as_blob(url)
+        unless blob
+          Rails.logger.warn("Helios::Press::ImageIngestor: skipping remote image #{url} — blob fetch failed")
+          return nil
+        end
+
+        bi.file.attach(blob)
+        bi.save!
+        bi
+      rescue StandardError => e
+        Rails.logger.error("Helios::Press::ImageIngestor: failed to import #{url} — #{e.class}: #{e.message}")
+        nil
+      end
+
+      def proxy_path(attachment)
+        Rails.application.routes.url_helpers.rails_storage_proxy_path(attachment, only_path: true)
+      end
+
+      def fetch_as_blob(url)
+        uri = URI.parse(url)
+        return nil unless uri.is_a?(URI::HTTP) || uri.is_a?(URI::HTTPS)
+
+        response = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https") do |http|
+          http.open_timeout = 10
+          http.read_timeout = 30
+          http.request(Net::HTTP::Get.new(uri))
+        end
+
+        raise FetchError, "HTTP #{response.code} fetching #{url}" unless response.is_a?(Net::HTTPSuccess)
+        raise FetchError, "Image too large: #{response.body.bytesize}" if response.body.bytesize > MAX_BYTES
+
+        filename = File.basename(uri.path.presence || "image")
+        filename = "image.jpg" if filename.blank? || filename == "/"
+
+        ActiveStorage::Blob.create_and_upload!(
+          io: StringIO.new(response.body),
+          filename: filename,
+          content_type: response["content-type"] || "application/octet-stream"
+        )
+      rescue StandardError => e
+        Rails.logger.error("Helios::Press::ImageIngestor: failed to fetch #{url} — #{e.class}: #{e.message}")
+        nil
+      end
+    end
+  end
+end

data/app/views/helios/press/admin/blocks/_image_block.html.erb

@@ -1,8 +1,8 @@
 <div data-controller="helios-press-image-block"
      data-helios-press-image-block-id-value="<%= block.id %>"
      data-helios-press-image-block-post-id-value="<%= post.id %>"
-     data-helios-press-image-block-base-url-value="<%= helios_press.admin_post_block_images_path(post, block) %>"
-     data-helios-press-image-block-block-url-value="<%= helios_press.admin_post_block_path(post, block) %>"
+     data-helios-press-image-block-base-url-value="<%= helios_press_admin.post_block_images_path(post, block) %>"
+     data-helios-press-image-block-block-url-value="<%= helios_press_admin.post_block_path(post, block) %>"
      class="image-block-container">
 
   <!-- Block Controls -->

data/app/views/helios/press/admin/blocks/_image_item.html.erb

@@ -2,10 +2,22 @@
      data-helios-press-image-block-target="image"
      data-image-id="<%= block_image.id %>">
 
-  <!-- Image -->
+  <!-- Image / Document -->
   <div class="image-wrapper">
     <% if block_image.file.attached? %>
-      <%= image_tag block_image.file.variant(resize_to_limit: [800, 800]), class: "block-image" %>
+      <% if block_image.svg? %>
+        <%= image_tag url_for(block_image.file), class: "block-image" %>
+      <% elsif block_image.document? %>
+        <div class="document-preview d-flex flex-column align-items-center justify-content-center h-100">
+          <i class="bi <%= block_image.file.content_type.include?('pdf') ? 'bi-file-earmark-pdf' : 'bi-file-earmark-word' %>" style="font-size: 3rem; color: #6c757d;"></i>
+          <small class="text-muted mt-1"><%= block_image.file.filename %></small>
+          <%= link_to "Download", url_for(block_image.file), class: "btn btn-sm btn-outline-secondary mt-1", download: true %>
+        </div>
+      <% elsif block_image.variable? %>
+        <%= image_tag block_image.file.variant(resize_to_limit: [800, 800]), class: "block-image" %>
+      <% else %>
+        <%= image_tag url_for(block_image.file), class: "block-image" %>
+      <% end %>
     <% end %>
 
     <!-- Delete button -->

data/app/views/helios/press/admin/blocks/_text_block.html.erb

@@ -1,7 +1,7 @@
 <div data-controller="helios-press-text-block"
      data-helios-press-text-block-id-value="<%= block.id %>"
      data-helios-press-text-block-post-id-value="<%= post.id %>"
-     data-helios-press-text-block-base-url-value="<%= helios_press.admin_post_block_path(post, block) %>"
+     data-helios-press-text-block-base-url-value="<%= helios_press_admin.post_block_path(post, block) %>"
      data-helios-press-text-block-mode-value="view">
 
   <!-- View Mode -->
@@ -18,7 +18,7 @@
   <!-- Edit Mode -->
   <div data-helios-press-text-block-target="editMode" class="block-edit-mode d-none">
     <%= form_with(model: block,
-                  url: helios_press.admin_post_block_path(post, block),
+                  url: helios_press_admin.post_block_path(post, block),
                   data: { helios_press_text_block_target: "form" }) do |f| %>
       <%= f.rich_text_area :content,
                           data: { helios_press_text_block_target: "editor" },

data/app/views/helios/press/admin/blocks/_video_block.html.erb

@@ -1,7 +1,10 @@
 <% if block.respond_to?(:video) && block.video.present? %>
   <% video = block.video %>
+  <% video_ready = video.key.present? && video.playback_urls.present? %>
   <div data-controller="helios-video-block"
        data-helios-video-block-video-id-value="<%= video.id %>"
+       data-helios-video-block-ready-value="<%= video_ready %>"
+       data-helios-video-block-status-url-value="<%= helios_videos.admin_video_path(video) %>"
        class="video-block-container">
     <!-- Block Controls -->
     <div class="d-flex justify-content-end mb-2">
@@ -32,12 +35,17 @@
     </div>
 
     <!-- Video Player -->
-    <div class="video-player-wrapper">
+    <div class="video-player-wrapper" data-helios-video-block-target="player">
       <%= video.player_component.html_safe %>
     </div>
   </div>
 <% else %>
-  <div class="alert alert-warning mb-0">
-    No video found for this block.
+  <div class="alert alert-warning mb-0 d-flex justify-content-between align-items-center">
+    <span>No video found for this block.</span>
+    <button type="button"
+            class="btn btn-sm btn-danger"
+            data-action="click->helios-press-blocks#deleteBlock">
+      Delete Block
+    </button>
   </div>
 <% end %>

data/app/views/helios/press/admin/posts/_form.html.erb

@@ -1,4 +1,4 @@
-<%= form_with(model: post, url: post.persisted? ? helios_press.admin_post_path(post) : helios_press.admin_posts_path, local: true) do |form| %>
+<%= form_with(model: post, url: post.persisted? ? helios_press_admin.post_path(post) : helios_press_admin.posts_path, local: true) do |form| %>
   <% if post.errors.any? %>
     <div class="alert alert-danger">
       <h4><%= pluralize(post.errors.count, "error") %> prohibited this post from being saved:</h4>
@@ -43,6 +43,6 @@
     <% if post.persisted? && !post.published? %>
       <%= form.submit "Publish Now", name: "publish", class: "btn btn-success", data: { turbo_confirm: "Publish this post now?" } %>
     <% end %>
-    <%= link_to "Cancel", helios_press.admin_posts_path, class: "btn btn-secondary" %>
+    <%= link_to "Cancel", helios_press_admin.posts_path, class: "btn btn-secondary" %>
   </div>
 <% end %>

data/app/views/helios/press/admin/posts/edit.html.erb

@@ -16,7 +16,7 @@
           <h5 class="mb-0">Content Blocks</h5>
         </div>
         <div class="card-body">
-          <div data-controller="helios-press-blocks" data-helios-press-blocks-post-id-value="<%= @post.id %>" data-helios-press-blocks-base-url-value="<%= helios_press.admin_post_blocks_path(@post) %>">
+          <div data-controller="helios-press-blocks" data-helios-press-blocks-post-id-value="<%= @post.id %>" data-helios-press-blocks-base-url-value="<%= helios_press_admin.post_blocks_path(@post) %>">
             <%= render "blocks_container", post: @post %>
           </div>
         </div>

data/app/views/helios/press/admin/posts/index.html.erb

@@ -1,30 +1,41 @@
 <div class="container py-5">
   <div class="d-flex justify-content-between align-items-center mb-4">
     <h1>Posts</h1>
-    <%= link_to "New Post", helios_press.new_admin_post_path, class: "btn btn-primary" %>
+    <%= link_to "New Post", helios_press_admin.new_post_path, class: "btn btn-primary" %>
   </div>
 
   <% if @posts.any? %>
-    <div class="list-group">
-      <% @posts.each do |post| %>
-        <div class="list-group-item d-flex justify-content-between align-items-center">
-          <div>
-            <h5 class="mb-1">
-              <%= link_to post.name, helios_press.edit_admin_post_path(post) %>
-            </h5>
-            <small class="text-muted">/<%= post.slug %></small>
-            <% if post.published? %>
-              <span class="badge bg-success ms-2">Published</span>
-            <% else %>
-              <span class="badge bg-secondary ms-2">Draft</span>
-            <% end %>
-          </div>
-          <div>
-            <small class="text-muted"><%= post.updated_at.strftime("%m/%d/%y") %></small>
-          </div>
-        </div>
-      <% end %>
-    </div>
+    <table class="table">
+      <thead>
+        <tr>
+          <th>Title</th>
+          <th>Slug</th>
+          <th>Status</th>
+          <th>Last Updated</th>
+          <th>Actions</th>
+        </tr>
+      </thead>
+      <tbody>
+        <% @posts.each do |post| %>
+          <tr>
+            <td><%= link_to post.name, helios_press_admin.edit_post_path(post) %></td>
+            <td><small class="text-muted">/<%= post.slug %></small></td>
+            <td>
+              <% if post.published? %>
+                <span class="badge bg-success">Published</span>
+              <% else %>
+                <span class="badge bg-secondary">Draft</span>
+              <% end %>
+            </td>
+            <td><%= post.updated_at.strftime("%m/%d/%y") %></td>
+            <td>
+              <%= link_to "Edit", helios_press_admin.edit_post_path(post), class: "btn btn-sm btn-outline-primary" %>
+              <%= link_to "Delete", helios_press_admin.post_path(post), data: { turbo_method: :delete, turbo_confirm: "Are you sure?" }, class: "btn btn-sm btn-outline-danger" %>
+            </td>
+          </tr>
+        <% end %>
+      </tbody>
+    </table>
   <% else %>
     <p class="text-muted">No posts yet. Create your first post!</p>
   <% end %>

data/app/views/helios/press/posts/blocks/_image_container.html.erb

@@ -3,9 +3,26 @@
     <% block.block_images.each do |block_image| %>
       <div class="image-item">
         <% if block_image.file.attached? %>
-          <%= image_tag block_image.file.variant(resize_to_limit: [1200, 1200]),
-                    class: "img-fluid rounded",
-                    alt: block_image.caption.presence || "" %>
+          <% if block_image.svg? %>
+            <%= image_tag url_for(block_image.file),
+                      class: "img-fluid rounded",
+                      alt: block_image.caption.presence || "" %>
+          <% elsif block_image.document? %>
+            <div class="document-download text-center p-3">
+              <i class="bi <%= block_image.file.content_type.include?('pdf') ? 'bi-file-earmark-pdf' : 'bi-file-earmark-word' %>" style="font-size: 3rem;"></i>
+              <p class="mt-2 mb-0">
+                <%= link_to block_image.file.filename, url_for(block_image.file), download: true %>
+              </p>
+            </div>
+          <% elsif block_image.variable? %>
+            <%= image_tag block_image.file.variant(resize_to_limit: [1200, 1200]),
+                      class: "img-fluid rounded",
+                      alt: block_image.caption.presence || "" %>
+          <% else %>
+            <%= image_tag url_for(block_image.file),
+                      class: "img-fluid rounded",
+                      alt: block_image.caption.presence || "" %>
+          <% end %>
         <% end %>
         <% if block_image.caption.present? %>
           <p class="image-caption text-muted mt-2 small">

data/app/views/helios/press/posts/index.html.erb

@@ -0,0 +1,21 @@
+<div class="container my-5">
+  <h1>Blog</h1>
+
+  <% if @posts.any? %>
+    <% @posts.each do |post| %>
+      <article class="mb-4">
+        <h2><%= link_to post.name, helios_press_public.post_path(post.slug) %></h2>
+        <p class="text-muted">
+          <time datetime="<%= post.updated_at.iso8601 %>">
+            <%= post.updated_at.strftime("%m/%d/%y") %>
+          </time>
+        </p>
+        <% if post.description.present? %>
+          <p><%= post.description %></p>
+        <% end %>
+      </article>
+    <% end %>
+  <% else %>
+    <p>No posts yet.</p>
+  <% end %>
+</div>

data/config/routes/admin.rb

@@ -0,0 +1,17 @@
+Helios::Press::Admin::Engine.routes.draw do
+  scope module: "helios/press/admin" do
+    root to: "posts#index"
+    resources :posts do
+      resources :blocks, only: [:create, :update, :destroy] do
+        collection do
+          patch :reorder
+        end
+        resources :images, controller: "block_images", only: [:create, :update, :destroy] do
+          collection do
+            patch :reorder
+          end
+        end
+      end
+    end
+  end
+end

data/config/routes/api.rb

@@ -0,0 +1,5 @@
+Helios::Press::Api::Engine.routes.draw do
+  scope module: "helios/press/api" do
+    resources :posts, only: [:create]
+  end
+end

data/config/routes/public.rb

@@ -0,0 +1,6 @@
+Helios::Press::Public::Engine.routes.draw do
+  scope module: "helios/press" do
+    root to: "posts#index"
+    get ":slug", to: "posts#show", as: :post
+  end
+end

data/config/routes.rb

@@ -1,21 +1,2 @@
 Helios::Press::Engine.routes.draw do
-  namespace :admin do
-    root to: "posts#index"
-    resources :posts do
-      resources :blocks, only: [:create, :update, :destroy] do
-        collection do
-          patch :reorder
-        end
-        resources :images, controller: "block_images", only: [:create, :update, :destroy] do
-          collection do
-            patch :reorder
-          end
-        end
-      end
-    end
-  end
-
-  namespace :api do
-    resources :posts, only: [:create]
-  end
 end

data/db/migrate/20250526000001_add_image_ingestion_to_helios_press.rb

@@ -0,0 +1,6 @@
+class AddImageIngestionToHeliosPress < ActiveRecord::Migration[8.0]
+  def change
+    add_column :helios_press_block_images, :reference_key, :string
+    add_index :helios_press_block_images, [:block_id, :reference_key], unique: true
+  end
+end

data/lib/helios/press/configuration.rb

@@ -2,12 +2,14 @@ module Helios
   module Press
     class Configuration
       attr_accessor :admin_parent_controller,
+                    :public_parent_controller,
                     :api_parent_controller,
                     :api_authentication,
                     :post_slug_prefix
 
       def initialize
         @admin_parent_controller = "ApplicationController"
+        @public_parent_controller = "ApplicationController"
         @api_parent_controller = "ActionController::API"
         @api_authentication = nil
         @post_slug_prefix = nil

data/lib/helios/press/engine.rb

@@ -6,6 +6,48 @@ module Helios
       initializer "helios_press.assets" do |app|
         app.config.assets.precompile += %w[helios/press/blocks.css] if app.config.respond_to?(:assets)
       end
+
+      initializer "helios_press.helpers" do
+        ActiveSupport.on_load(:action_controller) do
+          helper Rails.application.routes.url_helpers
+        end
+      end
+    end
+
+    module Admin
+      class Engine < ::Rails::Engine
+        engine_name "helios_press_admin"
+
+        self.paths["config/routes.rb"] = "config/routes/admin.rb"
+
+        initializer "helios_press_admin.helpers" do
+          ActiveSupport.on_load(:action_controller) do
+            helper Rails.application.routes.url_helpers
+          end
+        end
+      end
+    end
+
+    module Public
+      class Engine < ::Rails::Engine
+        engine_name "helios_press_public"
+
+        self.paths["config/routes.rb"] = "config/routes/public.rb"
+
+        initializer "helios_press_public.helpers" do
+          ActiveSupport.on_load(:action_controller) do
+            helper Rails.application.routes.url_helpers
+          end
+        end
+      end
+    end
+
+    module Api
+      class Engine < ::Rails::Engine
+        engine_name "helios_press_api"
+
+        self.paths["config/routes.rb"] = "config/routes/api.rb"
+      end
     end
   end
 end

data/lib/helios/press/version.rb

@@ -1,5 +1,5 @@
 module Helios
   module Press
-    VERSION = "0.1.0"
+    VERSION = "0.3"
   end
 end

data/lib/helios/press.rb

@@ -1,6 +1,7 @@
 require "helios/press/version"
 require "helios/press/engine"
 require "helios/press/configuration"
+require "acts_as_list"
 require "helios-videos"
 require "helios-sitemap"
 

data/lib/helios-press.rb

@@ -0,0 +1 @@
+require "helios/press"

metadata

@@ -1,13 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: helios-press
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: '0.3'
 platform: ruby
 authors:
 - Jason Fleetwood-Boldt
+autorequire:
 bindir: bin
 cert_chain: []
-date: 1980-01-02 00:00:00.000000000 Z
+date: 2026-05-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -37,6 +38,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.13'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.13'
 - !ruby/object:Gem::Dependency
   name: helios-videos
   requirement: !ruby/object:Gem::Requirement
@@ -97,6 +112,7 @@ files:
 - app/models/helios/press/block.rb
 - app/models/helios/press/block_image.rb
 - app/models/helios/press/post.rb
+- app/services/helios/press/image_ingestor.rb
 - app/views/helios/press/admin/blocks/_block.html.erb
 - app/views/helios/press/admin/blocks/_image_block.html.erb
 - app/views/helios/press/admin/blocks/_image_item.html.erb
@@ -110,13 +126,19 @@ files:
 - app/views/helios/press/posts/blocks/_image_container.html.erb
 - app/views/helios/press/posts/blocks/_text.html.erb
 - app/views/helios/press/posts/blocks/_video_container.html.erb
+- app/views/helios/press/posts/index.html.erb
 - app/views/helios/press/posts/show.html.erb
 - app/views/layouts/helios/press/admin.html.erb
 - app/views/layouts/helios/press/application.html.erb
 - config/routes.rb
+- config/routes/admin.rb
+- config/routes/api.rb
+- config/routes/public.rb
 - db/migrate/20250510000001_create_helios_press_posts.rb
 - db/migrate/20250510000002_create_helios_press_blocks.rb
 - db/migrate/20250510000003_create_helios_press_block_images.rb
+- db/migrate/20250526000001_add_image_ingestion_to_helios_press.rb
+- lib/helios-press.rb
 - lib/helios/press.rb
 - lib/helios/press/configuration.rb
 - lib/helios/press/engine.rb
@@ -128,6 +150,7 @@ licenses:
 metadata:
   homepage_uri: https://github.com/heliosdev-shop/helios-press
   source_code_uri: https://github.com/heliosdev-shop/helios-press
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -142,7 +165,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 3.4.19
+signing_key:
 specification_version: 4
 summary: Multi-block blog post editor for Rails with drag-to-reorder
 test_files: []