inline_forms 8.1.21 → 8.1.40

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dcda1708a5210f445c14024312d495fe28821927ccc6fb816f410110c47190e0
-  data.tar.gz: 7d47792cc13d0423639152ee2005287b369f4e1cf542e4195e4b92b027e5bf93
+  metadata.gz: 6e2f71a943f446268125b1012392c5156bcc5cbfc1df84385b4fc10225545135
+  data.tar.gz: ee90225c78498b2a1b0759805363e7871b772c79cdc2f41620a4470e2ed01e2b
 SHA512:
-  metadata.gz: 7ba52c31b810465c24b2c5e4d63cee7aaca6e424a1a436ead90d2c7e90a4a13fcfb9c67fbd9cb3f04459c5be9ec4b5604088491fdc8b92f909df32f973c6bc37
-  data.tar.gz: d96895cd2923769b62a597c5ad7bf26446180cfd8b2d2bfafa17c6c48cfa2f6f564063cd1b15e2340a94026c6d360db423f14244389d3d60b831c9a9d4fdc258
+  metadata.gz: 4aded88b4f1ffeb2c4509505c16ef2e362e9bc89b86dc526fde9f83680750f850dad489a45d2067db754e558e05cd8d3871eb3dc48ec71e09e0d6e02f24c6717
+  data.tar.gz: 318a3f451539ae8a3a0775053b1a6f3f422759114cb4587f7ba89fd2d225a1186904e600a4e6f86c9f1424c9c2784975d3aaf595062722fb83ecc8b74126d3ea

data/.forgejo/workflows/ci.yml

@@ -0,0 +1,63 @@
+# CI for Forgejo Actions (runner on dev02, jobs run in Docker containers).
+# Mirrors the Papiamentu setup: runner label `docker`, shared CI image
+# `papiamentu-ci:ruby-4.0.4-node20` (same Ruby as these gems; node for the
+# checkout/cache actions). See stuff/2026-07-06-forgejo-ci-rubocop-brakeman.md.
+#
+# GitHub deliberately has NO workflows (.github/workflows was removed in
+# 8.1.34): pushing to GitHub triggers nothing; CI runs only on Forgejo.
+name: CI
+
+# Push triggers on EVERY branch (stuff/prompt/workflow.md: "every commit runs
+# through CI") — feature branches were silently skipping CI when this was
+# `branches: [master]`.
+on:
+  push:
+  pull_request:
+
+jobs:
+  test:
+    runs-on: docker
+    container:
+      image: papiamentu-ci:ruby-4.0.4-node20
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          path: inline_forms
+
+      # The dev Gemfile points at the validation_hints sibling
+      # (gem "validation_hints", path: "../validation_hints"). The job's
+      # automatic token is scoped to this repo only and validation_hints is
+      # private, so the repo secret VALIDATION_HINTS (a token with read
+      # access to ace/validation_hints) authorizes the checkout.
+      - uses: actions/checkout@v4
+        with:
+          repository: ace/validation_hints
+          token: ${{ secrets.VALIDATION_HINTS }}
+          path: validation_hints
+
+      - name: Cache gems
+        uses: actions/cache@v4
+        with:
+          path: inline_forms/vendor/bundle
+          key: gems-inline_forms-${{ hashFiles('inline_forms/Gemfile', 'inline_forms/inline_forms.gemspec') }}
+          restore-keys: gems-inline_forms-
+
+      - name: Install gems
+        working-directory: inline_forms
+        run: |
+          bundle config set --local path vendor/bundle
+          bundle install --jobs 4
+
+      - name: Tests (unit + dummy-app integration harness)
+        working-directory: inline_forms
+        run: bundle exec rake test
+
+      - name: RuboCop
+        working-directory: inline_forms
+        run: bundle exec rubocop
+
+      - name: bundler-audit
+        working-directory: inline_forms
+        run: |
+          gem install bundler-audit --no-document
+          bundle-audit check --update

data/.forgejo/workflows/full-gate.yml

@@ -0,0 +1,75 @@
+# The full release gate as a CI job: build all three gems, install them,
+# generate the example app (which runs its own 150+ test suite as part of
+# `inline_forms create`), then run Brakeman against the generated app.
+#
+# Brakeman is aimed at Rails *applications*; scanning the generated MyApp
+# covers the engine's controllers/views in their real app context plus
+# everything the installer writes — scanning the bare engine repo would
+# skip most checks. bundler-audit for the engine runs in ci.yml.
+#
+# Heavy (~3-4 min: rails new + bundle + migrations + tests), so it runs on
+# demand and weekly, not per push. Requires network access to rubygems.org
+# from the runner (same as Papiamentu's bundle install).
+name: Full gate
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "17 4 * * 1"  # Mondays 04:17
+
+jobs:
+  full-gate:
+    runs-on: docker
+    container:
+      image: papiamentu-ci:ruby-4.0.4-node20
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          path: inline_forms
+
+      - uses: actions/checkout@v4
+        with:
+          repository: ace/validation_hints
+          token: ${{ secrets.VALIDATION_HINTS }}
+          path: validation_hints
+
+      - name: Build the three gems
+        run: |
+          cd validation_hints && gem build validation_hints.gemspec && cd ..
+          cd inline_forms && gem build inline_forms.gemspec && gem build inline_forms_installer.gemspec
+
+      - name: Install built gems
+        run: |
+          gem install --no-document \
+            validation_hints/validation_hints-*.gem \
+            inline_forms/inline_forms-*.gem \
+            inline_forms/inline_forms_installer-*.gem
+
+      # The installer git-inits the generated app and makes an initial commit
+      # (installer_core.rb: `git add .` + `git commit`); a bare container has
+      # no git identity and the commit — and with it the whole create — fails
+      # ("unable to auto-detect email address", seen in run 3).
+      - name: Git identity for the installer's initial commit
+        run: |
+          git config --global user.email "forgejo-ci@dev02.invalid"
+          git config --global user.name "Forgejo CI"
+
+      # The installer's example gate runs `bundle exec rails test` itself and
+      # aborts (non-zero) on any failure — this step IS the release gate.
+      # HOME keeps Rails/Bundler caches inside the workspace container.
+      - name: Generate example app (runs its own test suite)
+        run: |
+          mkdir -p apps
+          cd apps
+          inline_forms create MyApp -d sqlite --example --no-rvm
+
+      - name: Brakeman against the generated app
+        run: |
+          gem install brakeman --no-document
+          cd apps/MyApp
+          # Default check set is ENFORCING (baseline triaged 2026-07-06:
+          # 0 warnings; the one ForceSSL finding was fixed in 8.1.36).
+          brakeman --no-pager
+          # Pedantic full set stays informational: it includes checks that
+          # can fire on perfectly reasonable future code.
+          brakeman --run-all-checks --no-pager || true

data/.gitignore

@@ -26,6 +26,7 @@ Gemfile.lock
 # Local notes / analysis (not tracked)
 stuff/
 
-# Local sample images for the example app (not tracked; copied into
-# generated MyApp by the installer when --example is used)
-pics/
+
+# test/dummy runtime artifacts (in-memory DB; only logs/tmp may appear)
+test/dummy/log/
+test/dummy/tmp/

data/.rubocop.yml

@@ -0,0 +1,30 @@
+# RuboCop with the Rails "omakase" preset (same recipe as Papiamentu).
+# All heredoc-free files are clean. The remaining violations (grandfathered in
+# .rubocop_todo.yml) live in files with heredocs that emit generated-app code
+# (installer core, generators, form-element helpers); those files are left
+# untouched on purpose — autocorrect near heredocs risks changing emitted code.
+# Run with: bundle exec rubocop
+inherit_gem:
+  rubocop-rails-omakase: rubocop.yml
+
+inherit_from: .rubocop_todo.yml
+
+AllCops:
+  # The engine targets Ruby >= 4.0 (gemspec).
+  TargetRubyVersion: 3.3
+  Exclude:
+    - "pkg/**/*"
+    - "vendor/**/*"
+    - "archived/**/*"            # frozen historical code; linting defeats the purpose
+    - "lib/installer_templates/**/*" # templates for *generated apps*, not engine style
+    - "lib/vagrant/**/*"
+    - "lib/otherstuff/**/*"
+    - "stuff/**/*"
+    - "test/dummy/log/**/*"
+    - "test/dummy/tmp/**/*"
+    - "script/**/*"              # one-off maintainer migration script
+
+# Heredoc bodies are generated-file content (installer/form-element templates);
+# whitespace there is part of the emitted output and is never auto-fixed.
+Layout/TrailingWhitespace:
+  AllowInHeredoc: true

data/.rubocop_todo.yml

@@ -0,0 +1,151 @@
+# This configuration was generated by
+# `rubocop --auto-gen-config --auto-gen-only-exclude --exclude-limit 60 --no-auto-gen-timestamp`
+# using RuboCop version 1.88.1.
+# The point is for the user to remove these configuration records
+# one by one as the offenses are removed from the code base.
+# Note that changes in the inspected code, or installation of new
+# versions of RuboCop, may require this file to be generated again.
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle, IndentOneStep, IndentationWidth.
+# SupportedStyles: case, end
+Layout/CaseIndentation:
+  Exclude:
+    - 'lib/generators/inline_forms_generator.rb'
+
+# Offense count: 3
+# This cop supports safe autocorrection (--autocorrect).
+Layout/ElseAlignment:
+  Exclude:
+    - 'lib/inline_forms_installer/installer_core.rb'
+
+# Offense count: 37
+# This cop supports safe autocorrection (--autocorrect).
+Layout/EmptyLineAfterMagicComment:
+  Exclude:
+    - 'lib/generators/inline_forms_addto_generator.rb'
+    - 'lib/generators/inline_forms_generator.rb'
+    - 'lib/inline_forms/form_elements/audio_field_helper.rb'
+    - 'lib/inline_forms/form_elements/check_box_helper.rb'
+    - 'lib/inline_forms/form_elements/check_list_helper.rb'
+    - 'lib/inline_forms/form_elements/color_field_helper.rb'
+    - 'lib/inline_forms/form_elements/date_helper.rb'
+    - 'lib/inline_forms/form_elements/decimal_field_helper.rb'
+    - 'lib/inline_forms/form_elements/devise_password_field_helper.rb'
+    - 'lib/inline_forms/form_elements/dropdown_helper.rb'
+    - 'lib/inline_forms/form_elements/dropdown_with_integers_helper.rb'
+    - 'lib/inline_forms/form_elements/dropdown_with_other_helper.rb'
+    - 'lib/inline_forms/form_elements/dropdown_with_values_helper.rb'
+    - 'lib/inline_forms/form_elements/dropdown_with_values_with_stars_helper.rb'
+    - 'lib/inline_forms/form_elements/file_field_helper.rb'
+    - 'lib/inline_forms/form_elements/header_helper.rb'
+    - 'lib/inline_forms/form_elements/image_field_helper.rb'
+    - 'lib/inline_forms/form_elements/info_helper.rb'
+    - 'lib/inline_forms/form_elements/info_list_helper.rb'
+    - 'lib/inline_forms/form_elements/integer_field_helper.rb'
+    - 'lib/inline_forms/form_elements/money_field_helper.rb'
+    - 'lib/inline_forms/form_elements/month_select_helper.rb'
+    - 'lib/inline_forms/form_elements/month_year_picker_helper.rb'
+    - 'lib/inline_forms/form_elements/multi_image_field_helper.rb'
+    - 'lib/inline_forms/form_elements/pdf_link_helper.rb'
+    - 'lib/inline_forms/form_elements/plain_text_area_helper.rb'
+    - 'lib/inline_forms/form_elements/plain_text_helper.rb'
+    - 'lib/inline_forms/form_elements/radio_button_helper.rb'
+    - 'lib/inline_forms/form_elements/rich_text_helper.rb'
+    - 'lib/inline_forms/form_elements/scale_with_integers_helper.rb'
+    - 'lib/inline_forms/form_elements/scale_with_values_helper.rb'
+    - 'lib/inline_forms/form_elements/simple_file_field_helper.rb'
+    - 'lib/inline_forms/form_elements/slider_with_values_helper.rb'
+    - 'lib/inline_forms/form_elements/text_area_helper.rb'
+    - 'lib/inline_forms/form_elements/text_field_helper.rb'
+    - 'lib/inline_forms/form_elements/time_helper.rb'
+    - 'lib/inline_forms_installer/create_log.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle.
+# SupportedStyles: empty_lines, empty_lines_except_namespace, empty_lines_special, no_empty_lines, beginning_only, ending_only
+Layout/EmptyLinesAroundClassBody:
+  Exclude:
+    - 'lib/generators/inline_forms_generator.rb'
+
+# Offense count: 2
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyleAlignWith.
+# SupportedStylesAlignWith: keyword, variable, start_of_line
+Layout/EndAlignment:
+  Exclude:
+    - 'lib/inline_forms_installer/installer_core.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: AllowDoxygenCommentStyle, AllowGemfileRubyComment, AllowRBSInlineAnnotation, AllowSteepAnnotation.
+Layout/LeadingCommentSpace:
+  Exclude:
+    - 'lib/inline_forms_installer/installer_core.rb'
+
+# Offense count: 4
+# This cop supports safe autocorrection (--autocorrect).
+Layout/SpaceAfterComma:
+  Exclude:
+    - 'lib/inline_forms_installer/installer_core.rb'
+
+# Offense count: 2
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle, EnforcedStyleForEmptyBrackets.
+# SupportedStyles: space, no_space, compact
+# SupportedStylesForEmptyBrackets: space, no_space
+Layout/SpaceInsideArrayLiteralBrackets:
+  Exclude:
+    - 'lib/inline_forms_installer/create_log.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+Lint/RedundantStringCoercion:
+  Exclude:
+    - 'lib/generators/inline_forms_generator.rb'
+
+# Offense count: 8
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle, EnforcedShorthandSyntax, UseHashRocketsWithSymbolValues, PreferHashRocketsForNonAlnumEndingSymbols.
+# SupportedStyles: ruby19, hash_rockets, no_mixed_keys, ruby19_no_mixed_keys
+# SupportedShorthandSyntax: always, never, either, consistent, either_consistent
+Style/HashSyntax:
+  Exclude:
+    - 'lib/generators/inline_forms_generator.rb'
+    - 'lib/inline_forms_installer/installer_core.rb'
+
+# Offense count: 2
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: PreferredDelimiters.
+Style/PercentLiteralDelimiters:
+  Exclude:
+    - 'lib/inline_forms_installer/installer_core.rb'
+
+# Offense count: 131
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle, ConsistentQuotesInMultiline.
+# SupportedStyles: single_quotes, double_quotes
+Style/StringLiterals:
+  Exclude:
+    - 'lib/generators/inline_forms_generator.rb'
+    - 'lib/inline_forms_installer/installer_core.rb'
+    - 'test/inline_forms_addto_generator_test.rb'
+    - 'test/inline_forms_generator_test.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyleForMultiline.
+# SupportedStylesForMultiline: comma, consistent_comma, diff_comma, no_comma
+Style/TrailingCommaInArrayLiteral:
+  Exclude:
+    - 'lib/inline_forms_installer/installer_core.rb'
+
+# Offense count: 2
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyleForMultiline.
+# SupportedStylesForMultiline: comma, consistent_comma, diff_comma, no_comma
+Style/TrailingCommaInHashLiteral:
+  Exclude:
+    - 'lib/inline_forms_installer/installer_core.rb'

data/CHANGELOG.md

@@ -4,6 +4,267 @@ All notable changes to this project are documented in this file.
 
 ## [Unreleased]
 
+## [8.1.40] - 2026-07-10
+
+### Added
+
+- **Example app demonstrates nesting-in-nesting** (Apartment → Photo → Comment): the installer now generates a `Comment` model (`body:text_area photo:belongs_to`, not accessible through top-level HTML, like Photo) and gives Photo `comments:has_many comments:associated`, so opening a photo row inside an apartment's photos panel exposes a second-level comments panel with its own nested new/create/open/close flows. The seed migration puts two comments on each seeded apartment's first photo so the panel is visibly populated out of the box (and removes them in `down`).
+- Example-app test `example_app_photo_comments_test.rb`: comments blocked as a standalone HTML resource, comments panel + new link inside the opened nested photo row, panel lists existing comments, nested new/create with the photo FK, comment row open/close. Also documents that open-after-create does not fire for nested creates (Comment has no `:associated` panel; the nested flow keeps the plain frame response).
+
+### Lockstep
+
+- validation_hints 8.1.40, inline_forms_installer 8.1.40 (no changes of their own).
+
+## [8.1.39] - 2026-07-10
+
+### Added
+
+- **"Open after create"** (Option A of `stuff/2026-07-10-nested-creation-options.md`): a successful *top-level* create of a model whose attribute list contains an `:associated` (has_many) panel now responds with Turbo Streams that refresh the list **and** open the freshly created record's row. The user lands directly where the nested panel — which only exists on a persisted record — is usable (e.g. create an Apartment, immediately add Photos), instead of hunting for the new row in the closed list. Nested creates, models without `:associated` panels, failed saves, and clients without a turbo-stream Accept header keep the existing list-frame HTML responses. If the new record sorts onto a different page of the list, the row-open stream finds no target and degrades silently to the old list-refresh behavior. (`InlineFormsController#open_created_row?` / `#render_created_row_open_streams`.)
+- Engine test coverage: new dummy models `Machine`/`Part` (mirroring Apartment/Photo) plus `test/integration/open_after_create_test.rb` (stream response, html fallback, no-associated fallback, nested create unchanged, failed create unchanged). The dummy host app gained the minimal chrome the full `inline_forms` layout needs (current_user stub with `role?`, `application_name` helper, `_inline_forms_tabs` partial, empty `MODEL_TABS`, devise logout route stand-in), so create/new HTML flows are now testable in the fast engine suite at all.
+- Example-app test: `example_app_apartment_top_level_new_test.rb` verifies the turbo-stream create response opens the new Apartment's row with the photos panel and its "new photo" link.
+
+### Lockstep
+
+- validation_hints 8.1.39, inline_forms_installer 8.1.39 (no changes of their own).
+
+## [8.1.38] - 2026-07-07
+
+### Changed
+
+- **RuboCop todo shrunk from 590 to 196 offenses (54 → 40 files, all heredoc-bearing).** Every heredoc-free file was safe-autocorrected in reviewed batches (engine tests green after each): validators, gemspecs, Rakefile, dummy-app models, engine core (`lib/inline_forms.rb`, form-element registry, turbo tabs builder), controller/helpers, installer `creator.rb`/`user_model_config.rb`, and the archived-elements list — bracket spacing, hash syntax (`:a => 1` → `a: 1`), string quotes, comment spacing, `%q{}` → `%q()`. One manual fix: the `if/else` alignment in `turbo_tabs_builder.rb` that autocorrect mangled cosmetically (rewritten as an indented assignment).
+- **Heredoc policy, made explicit:** files whose heredocs emit generated-app code (installer core, generators, form-element helpers, generator tests) are deliberately untouched — autocorrect near heredocs risks changing emitted code. `Layout/TrailingWhitespace` now runs with `AllowInHeredoc: true` (heredoc bodies are generated-file content); outside heredocs the tree is whitespace-clean. The remaining todo entries are per-file excludes on exactly those 40 heredoc files.
+- Full example-app gate passed: MyApp generated from the 8.1.38 gems, 157 runs / 960 assertions / 0 failures.
+
+### Lockstep
+
+- validation_hints 8.1.38, inline_forms_installer 8.1.38 (no changes of their own).
+
+## [8.1.37] - 2026-07-06
+
+### Lockstep
+
+- **validation_hints 8.1.37**: RuboCop todo eliminated — all 22 grandfathered offenses autocorrected (style-only: bracket spacing, magic-comment blank line, one trailing comma), `.rubocop_todo.yml` deleted. inline_forms and inline_forms_installer have no changes of their own. (inline_forms' own 590-offense todo remains; it shrinks incrementally as files get cleaned.)
+
+## [8.1.36] - 2026-07-06
+
+### Changed
+
+- **Generated apps force SSL in production** (`config.assume_ssl = true` + `config.force_ssl = true`). `rails new` only enables these when Kamal is skipped; generated apps deploy through the shipped Capistrano/Unicorn setup behind an SSL-terminating proxy, and the injected Devise mailer config already assumed https. This was the **only finding of the first Brakeman baseline** (full-gate CI run 6 against the generated app: default check set 0 warnings, `--run-all-checks` exactly this one High/ForceSSL). Internal plain-HTTP apps can re-comment the two lines in their own `production.rb`.
+- **full-gate CI: Brakeman's default check set is now enforcing** (baseline is clean); the pedantic `--run-all-checks` pass stays informational.
+
+### Added
+
+- Regression test `example_app_production_ssl_test.rb`: the generated `production.rb` must enable `assume_ssl`/`force_ssl` (guards the installer's gsub against Rails template drift).
+
+### Lockstep
+
+- validation_hints 8.1.36, inline_forms_installer 8.1.36 (no changes of their own).
+
+## [8.1.35] - 2026-07-06
+
+### Fixed
+
+- **Example-app photo seeding no longer depends on a maintainer-only local folder.** The installer looked for gallery images in a *gitignored* `pics/` folder (falling back to the hardcoded `/home/code/inline_forms/pics`), which exists only on the maintainer's machine — any gem install elsewhere (first exposed by the Forgejo `full-gate` CI run) silently seeded **zero** photos and failed 12 gallery/pagination/revert tests. Nine CC0 placeholder PNGs (~4 KB each, solid pastel with an "Apt N / Room" label, generated with ImageMagick) now ship inside the installer under `lib/installer_templates/example_app_assets/seed_images/`, so every install gets the same gallery. `INLINE_FORMS_SEED_PICS` still overrides with a custom folder; the old `pics/` convention is retired.
+- **`full-gate` CI workflow: git identity.** The installer's initial `git commit` in the generated app failed in the bare job container (`unable to auto-detect email address`); the workflow now sets a CI git identity first.
+
+### Lockstep
+
+- validation_hints 8.1.35, inline_forms_installer 8.1.35 (no changes of their own).
+
+## [8.1.34] - 2026-07-06
+
+### Added
+
+- **CI moved to Forgejo Actions** (`.forgejo/workflows/`, plan: `stuff/2026-07-06-forgejo-ci-rubocop-brakeman.md`). `ci.yml` runs the engine suite, RuboCop, and bundler-audit per push on the dev02 runner (shared `papiamentu-ci:ruby-4.0.4-node20` image); `full-gate.yml` (manual + weekly) rebuilds all three gems, generates the example app — whose embedded 150+-test run is the release gate — and runs **Brakeman against the generated app** (report-only until the baseline is triaged). `.github/workflows/` was **deleted**: pushing to GitHub deliberately triggers nothing.
+- **RuboCop** (Rails omakase preset, same recipe as Papiamentu) in the dev bundle, with all 590 pre-existing offenses grandfathered in `.rubocop_todo.yml` (delete entries as files get cleaned; new code is linted). Generated-app territory is excluded (`lib/installer_templates/`, `archived/`, …). `bundle exec rubocop`: 91 files, no offenses.
+
+### Lockstep
+
+- validation_hints 8.1.34 (same CI + RuboCop treatment: 12 files, 22 offenses grandfathered), inline_forms_installer 8.1.34.
+
+## [8.1.33] - 2026-07-06
+
+### Changed
+
+- **README refresh** (docs only; the README ships inside the gem). Tabs sections now describe the vendored `InlineForms::Tabs` instead of the removed `tabs_on_rails` gem; the example-app model list includes `FormElementShowcase`; new sections document the native inputs (post-jQuery UI) and the per-user theme / custom colors / locale features with the host-app opt-in contract (`#inline_forms_theme`, `#inline_forms_color_overrides`).
+
+### Lockstep
+
+- validation_hints 8.1.33, inline_forms_installer 8.1.33 (no code changes in any gem).
+
+## [8.1.32] - 2026-07-06
+
+### Added
+
+- **Theming Pattern 2: per-user color overrides** (completes the `stuff/user-preferences-and-theming.md` baseline of Pattern 1 + 2).
+  - New engine helper `inline_forms_user_color_overrides_style`, rendered in the layouts' `<head>`: when `current_user` responds to `#inline_forms_color_overrides` (a hash of `--if-color-` suffix => `"#rrggbb"`), it emits one scoped inline `<style>` (`body.theme-<name> { --if-color-primary: …; }`) so user colors win over the preset palette while the main CSS stays fully cached. Keys and values are strictly re-validated before interpolation; no style tag is emitted when there are no overrides.
+  - **New Tier 1 form element `:color_field`** — native `<input type="color">` editing a `"#rrggbb"` string column; show renders a color swatch + hex, update normalizes to lowercase and rejects anything that is not a 6-digit hex (stored as `nil`). Registered as `:string` in the generator registry.
+  - Installer: generated user models get `primary_color` / `accent_color` columns with format validations, `#inline_forms_color_overrides`, and two `color_field` rows on the user panel.
+  - Tests: dummy-harness color_field render/round-trip/junk-rejection; example-app tests for the scoped override style, the no-overrides case, and the user-panel rows.
+
+### Lockstep
+
+- validation_hints 8.1.32, inline_forms_installer 8.1.32.
+
+## [8.1.31] - 2026-07-06
+
+### Added
+
+- **Per-user locale.** The user model has always carried a `locale` association (`[:locale, :dropdown]` on the user panel), but nothing read it. Generated apps' `ApplicationController` now wraps every request in `I18n.with_locale(current_user.locale.name)` (`around_action :switch_locale`): unknown/blank names fall back to `I18n.default_locale`, and `with_locale` restores afterwards so nothing leaks across requests. The old commented subdomain-based `set_locale` sample was replaced with an `I18n.with_locale`-based variant.
+- Example-app regression tests (`example_app_user_locale_test.rb`): default `<html lang="en">`, `nl` switching, unknown-name fallback.
+
+### Changed
+
+- **Engine layout `<html lang>` follows `I18n.locale`** (was hardcoded `"en"` in `layouts/inline_forms.html.erb`).
+
+### Fixed
+
+- **`InlineFormsApplicationController` no longer clobbers `I18n.available_locales`.** It hard-assigned `[:en, :nl, :pp]` at class-load time — which in development happens *after* app initializers, silently stomping any `config.i18n.available_locales` the host configured. Hosts that relied on the implicit `[:en, :nl, :pp]` restriction should set it explicitly in `config/application.rb`.
+
+### Lockstep
+
+- validation_hints 8.1.31, inline_forms_installer 8.1.31.
+
+## [8.1.30] - 2026-07-06
+
+### Removed
+
+- **App-specific form elements `:question_list` and `:dnsrecords` archived.** `question_list` hardcoded a host `Question` model with `subquestions` (survey app); `dnsrecords` called host `a_records` / `djbdns_line` APIs (DNS-admin app) and was never even in the generator registry (its helper methods were named `dnsrecords_*`). Neither had any example-app or test coverage, and neither can render outside its original host schema. Models still declaring the symbols raise `InlineForms::ArchivedFormElementError` at boot with restore instructions; source lives under `archived/form_elements/{question_list,dns_records}/` with per-element READMEs.
+
+### Lockstep
+
+- validation_hints 8.1.30, inline_forms_installer 8.1.30.
+
+## [8.1.29] - 2026-07-06
+
+### Added
+
+- **Per-user preset themes (Pattern 1 of `stuff/user-preferences-and-theming.md`), built on the 8.1.24 CSS-variable bridge.**
+  - Engine `_theme.scss` ships three preset palettes — `theme-dark`, `theme-sepia`, `theme-high-contrast` — as `body.<class>` blocks overriding the `--if-color-*` custom properties (`theme-default` is the `:root` palette). Dark also patches input/textarea/trix backgrounds (Foundation compiles those from the light Sass palette); high-contrast underlines links.
+  - Engine layouts emit `<body class="theme-<name>">` via the new `inline_forms_body_theme_class` helper. The host opts in by having `current_user` respond to `#inline_forms_theme` (one of `default|dark|sepia|high-contrast`); anonymous users and non-opted hosts get `theme-default`, and the class name is validated against a safe pattern before interpolation.
+  - Installer: generated user models get an integer `theme` column (default 0), an `INLINE_FORMS_THEMES` map, `#inline_forms_theme`, and a `[:theme, :dropdown_with_values, …]` row on the user panel — so picking a theme is ordinary inline editing, stored on the user record (no localStorage; per the design doc's "Rejected" list).
+  - Example-app regression tests (`example_app_user_theme_test.rb`): default body class, dark/high-contrast switching, and the theme dropdown frame on the user panel.
+
+### Lockstep
+
+- validation_hints 8.1.29, inline_forms_installer 8.1.29.
+
+## [8.1.28] - 2026-07-06
+
+### Added
+
+- **`multi_image_field` joins the FormElementShowcase** as `gallery` (deferred item from the original showcase plan): `mount_uploaders :gallery, ImageUploader` with the filename array JSON-serialized into a `text` column, a seeded one-image gallery on "Full demo", a `Gallery (multiple images)` label, and a new `example_app_showcase_gallery_test.rb` (array show render, `gallery[]` multiple file input, empty-state plus link).
+- Dummy-harness render coverage for `simple_file_field` and `pdf_link` (`test/integration/legacy_elements_test.rb`) — first tests these two legacy elements have ever had.
+
+### Fixed
+
+- **`multi_image_field_show` crashed the moment the column actually held images.** A `mount_uploaders` (plural) reader returns an *array* of uploaders; the old code called `.url` on that array (`NoMethodError`). It now renders every image in the array (using the `palm` thumb version when defined) and still accepts a bare single uploader.
+- **`multi_image_field_edit` lost all but the last chosen file.** The input was named `gallery` (no `[]`), so Rack kept only the final part of a multiple-file submission; it now submits `gallery[]` and the update assigns the full array (ignoring blank submissions instead of clearing).
+- **`attribute_values`' error path raised the wrong error.** `raise t("fatal.no_values_defined_in", @Klass, attribute)` passed positional args to Rails' `translate` (key + kwargs API) and died with `ArgumentError (given 3, expected 1)` instead of the intended message. Now raises a plain descriptive RuntimeError naming the model and attribute.
+
+### Lockstep
+
+- validation_hints 8.1.28, inline_forms_installer 8.1.28.
+
+## [8.1.27] - 2026-07-06
+
+### Added
+
+- **In-repo integration test harness (`test/dummy` + `test/integration/`).** A minimal host app (in-memory SQLite, will_paginate + paper_trail + turbo-rails from the dev bundle, no Devise/CanCanCan/Sprockets/ActionText) boots the engine so `InlineFormsController`, the Turbo-frame views, and the form-element helpers can be exercised in ~1.5 s via `bundle exec rake test` — previously every such regression needed the full release gate (build gems → `inline_forms create MyApp --example` → app test suite, minutes). 19 new tests cover list/search/show/edit/update, the 8.1.19 failed-save behavior, destroy + undo, 8.1.13 destroy-version targeting, 8.1.17 revert idempotency, the versions panel, and every 8.1.25/8.1.26 native input. The example-app gate remains the release check.
+- **GitHub Actions workflow** (`.github/workflows/ci.yml`): engine tests + `bundler-audit` (checks out the `validation_hints` sibling for the path dependency).
+
+### Fixed
+
+Latent engine bugs on hosts without the full Devise+CanCanCan stack, found by the new harness (generated apps always bundle that stack, so they never hit these):
+
+- `_show.html.erb` called `can?(:list_versions, …)` and `link_to_versions_list` called `can?` without the `cancan_disabled?` guard every other call site uses — `NoMethodError` when CanCanCan is absent.
+- `destroy` and `revert` called `current_user.role?(:superadmin)` unguarded — `NoMethodError` on `nil.role?` for hosts without Devise/roles (or a signed-out replay). Both now use `destroy_permitted?`: superadmin-only when the host's user responds to `role?` (generated-app behavior unchanged), no extra gate otherwise (CanCan's `load_and_authorize_resource` still applies where enabled).
+- `slider_with_values` show/edit crashed with `NoMethodError` on `nil[1]` when the stored value has no entry in the values hash (e.g. `1..5` scale with the column still `nil`/`0` — exactly the state a fresh row is in); it now falls back to the bare number.
+- The engine's asset-precompile initializer assumed a Sprockets-style `config.assets`; it now skips hosts without one.
+
+### Lockstep
+
+- validation_hints 8.1.27, inline_forms_installer 8.1.27.
+
+## [8.1.26] - 2026-07-06
+
+### Changed
+
+- **jQuery UI is fully removed** (follow-up to 8.1.25's native pickers; jQuery itself remains only because Foundation 6's JS requires it):
+  - **`dropdown_with_other`** now renders a native combobox — a text input backed by a `<datalist>` of the existing records — instead of a hidden `<select>` plus the jQuery UI autocomplete "custom.combobox" widget and its ~100-line inline `<script>` (the last inline script emitted by any form element). Typing a listed name picks that record; any other text becomes the free-form `<attribute>_other` value. The submitted field is unchanged (`_<model>[<attribute>_other]`) and `dropdown_with_other_update` is behaviorally identical (it never read the posted foreign key; it re-derives it by name lookup). Two stray `puts` debug lines removed from the update path.
+  - **`slider_with_values`** now renders a native `<input type="range">` on edit (labels ride in `data-slider-values`; an `<output>` shows the current label, kept in sync by `initSliderValueLabels` in `inline_forms.js`) and a non-interactive `<progress>` bar on show (a disabled range input would swallow the click-to-edit). No more jQuery UI slider or per-field scripts; the old hardcoded `max: 5` on edit now derives from the values hash.
+  - **Removed from the engine:** `//= require jquery.ui.all`, `//= require autocomplete-rails`, the vendored jQuery UI SCSS (`app/assets/stylesheets/jquery_ui/`, sunny theme) and theme images (`app/assets/images/jquery-ui/`, ~70 files), the `inline_forms.jquery_ui_stylesheet_path` initializer, and the dead `.custom-combobox` CSS.
+  - **Removed from generated Gemfiles:** `jquery-ui-rails`, `rails-jquery-autocomplete`.
+
+### Lockstep
+
+- validation_hints 8.1.26, inline_forms_installer 8.1.26.
+
+## [8.1.25] - 2026-07-06
+
+### Changed
+
+- **Date/time/month pickers are native HTML inputs; jQuery UI datepicker and the jquery.timepicker plugin are gone.**
+  - `date_select` edit renders `<input type="date">` (was `text_field_tag class="datepicker"` + jQuery UI datepicker). The browser shows a locale-formatted picker with month/year dropdowns built in; the wire format is ISO 8601 (`YYYY-MM-DD`), which Active Record casts directly — sturdier than the old `dd-mm-yy` text parsing.
+  - `time_select` edit renders `<input type="time">` (was `class="timepicker"` + jquery.timepicker); submits 24h `HH:MM`. Value now pre-fills as `09:15` instead of `" 9:15am"`; the show format (`%l:%M%P`) is unchanged.
+  - `month_year_picker` edit renders `<input type="month">` (was the jQuery UI `MM yy` datepicker hack with the onClose month/year scrape); submits `YYYY-MM`. `month_year_picker_update` parses `YYYY-MM` via `Date.strptime` (Ruby's `Date.parse` raises on it) and still accepts the legacy `"September 2026"` display format as a fallback.
+  - Edit-input CSS classes renamed to match the form element names (`date_select`, `time_select`, `month_year_picker`); the old `datepicker`/`timepicker`/`datepicker-month-year` hooks are gone so host-app JS that still binds jQuery pickers to them will not double-bind against the native inputs.
+  - `initInlineFormsWidgets` now wires only validation-hint tooltips; `$.datepicker.setDefaults` and all picker init removed from `inline_forms.js`. `jquery.ui.all` stays in the bundle solely for the autocomplete widget (`dropdown_with_other`) and `slider_with_values`.
+  - Installer: **`jquery-timepicker-rails` removed** from generated Gemfiles.
+
+### Added
+
+- Example-app regression tests: native `type="date"`/`type="time"`/`type="month"` edits with ISO value prefill, plus round-trips for a native `HH:MM` time submission, a native `YYYY-MM` month submission, the legacy `"November 2027"` month fallback, and an ISO date submission.
+
+### Lockstep
+
+- validation_hints 8.1.25, inline_forms_installer 8.1.25.
+
+## [8.1.24] - 2026-07-06
+
+### Added
+
+- **Theme bridge: the admin-chrome palette is now exposed as CSS custom properties** (new `_theme.scss`, emitted into both `inline_forms.css` and `devise.css`). Every hardcoded chrome color in `inline_forms.scss` / `devise.scss` (dark-red `#A3381E`, brick `#B94C32`, gold `#E1C150`, header band `rgb(239,202,75)`, zebra rows `#FBE38E`/`#FBEEC1`, input backgrounds, flash/error/success colors) moved to `var(--if-color-*)` with identical build-time values — the rendered UI is unchanged until a host app overrides a variable (e.g. `:root { --if-color-primary: #2563eb; }` or a `body.theme-dark` block). This is the prerequisite bridging layer for per-user theming (`stuff/user-preferences-and-theming.md`); Foundation's own components still compile from Sass settings.
+- Body background/text and anchor color are bridged too (`--if-color-body-bg`, `--if-color-body-text`, `--if-color-anchor`), sourced from Foundation's `$body-background` / `$body-font-color` / `$anchor-color` at build time.
+
+### Changed
+
+- **Sass module-system status made explicit.** `foundation_icons` now loads via `@use`; `lighten()` calls replaced with `color.adjust` (kills the Dart Sass color-functions deprecation). The remaining `@import`s cannot convert while the stack sits on foundation-rails 6.9, whose Sass is `@import`-only and feeds globals (`$body-background`, `rem-calc`, …) into our overrides — documented in `inline_forms.scss` and `stuff/improvement-plan.md` §1. Remaining deprecation warnings (import/global-builtin/if-function) originate inside foundation-rails itself.
+
+### Lockstep
+
+- validation_hints 8.1.24, inline_forms_installer 8.1.24 (no changes of their own).
+
+## [8.1.23] - 2026-07-06
+
+### Changed
+
+- **`tabs_on_rails` is no longer a dependency; tabs support is vendored.** The gem (last released 2017, unmaintained) provided four things inline_forms used: the controller `set_tab` DSL, the `current_tab` / `current_tab?` helpers, the `tabs_tag` view helper, and the `TabsBuilder` base class that `InlineForms::TurboTabsBuilder` subclasses. All four are now ported into the engine as `InlineForms::Tabs` (`lib/inline_forms/tabs.rb`, API-compatible; MIT attribution retained) and included into `ActionController::Base` by an engine initializer. It was also an *undeclared* dependency: the engine `require`d `tabs_on_rails` at load time but never listed it in the gemspec — only the installer-written app Gemfile made that work. The installer no longer writes `gem 'tabs_on_rails'`; apps generated before 8.1.23 keep working because the initializer skips the vendored controller include when the gem's own `TabsOnRails::ActionController` is present.
+
+### Added
+
+- **Unit tests** (`test/tabs_test.rb`) for the vendored default builder (active `current` class, `<span>` for the active tab), custom `active_class`, the `TurboTabsBuilder` contract (threads `link_options:`/`data-turbo-frame` onto the anchor, `aria-current`/`aria-selected` state, href-less active tab), and the `set_tab`/`current_tab?` namespace semantics.
+
+### Lockstep
+
+- validation_hints 8.1.23, inline_forms_installer 8.1.23.
+
+## [8.1.22] - 2026-07-06
+
+### Changed
+
+- **Trix is vendored; unpkg CDN tags removed.** All layouts loaded Trix from `https://unpkg.com/trix@1.3.1/dist/trix.{css,js}` — a 2020-era version and a hard runtime dependency on a third-party CDN. Trix **2.1.19** now ships in the engine (`vendor/assets/javascripts/trix.min.js`, `vendor/assets/stylesheets/trix.css`) and is served through Sprockets (`javascript_include_tag "trix.min"` / `stylesheet_link_tag "trix"`). The Trix 1-era manual re-init in `initInlineFormsWidgets` (`new Trix.Editor(el)`) was dropped: Trix 2's `<trix-editor>` is a custom element the browser upgrades automatically after Turbo frame swaps.
+- **Open Sans is self-hosted; no more `http://fonts.googleapis.com`.** `inline_forms.scss` and `devise.scss` imported Open Sans over plain HTTP at runtime. The latin 400/400-italic woff2 files (v44) now live in `app/assets/fonts/`, declared in a new Sprockets-served `inline_forms_fonts.css.erb` (ERB so `asset_path` emits digested URLs) linked from all three layouts.
+- **Installer Gemfile: last floating gems pinned** — `cancancan '~> 3.6'`, `will_paginate '~> 4.0'` (the versions generated apps already resolve).
+
+### Fixed
+
+- **Foundation Icons `@font-face` 404.** The `@font-face` lived in the Dart Sass-built `inline_forms.css`, which is served from `/assets/inline_forms/…`; its relative `url("foundation-icons.woff")` therefore resolved to `/assets/inline_forms/foundation-icons.woff` — a 404 (the fonts' logical paths are flat: `/assets/foundation-icons.woff`). Icon glyphs (`fi-*`) silently fell back to the text font. The declaration moved into `inline_forms_fonts.css.erb` with proper `asset_path` URLs; the fonts (and Open Sans) are added to the precompile list.
+
+### Lockstep
+
+- validation_hints 8.1.22, inline_forms_installer 8.1.22 (no changes of their own).
+
 ## [8.1.21] - 2026-06-03
 
 ### Removed

data/Gemfile

@@ -5,5 +5,17 @@ gemspec name: "inline_forms"
 # Local sibling until validation_hints 8.0.0 is on RubyGems (maintainer dev only).
 gem "validation_hints", path: "../validation_hints"
 
-# Engine loads TurboTabsBuilder at require time (used in generated apps).
-gem "tabs_on_rails", "~> 3.0"
+# test/dummy host-app stand-ins: the engine expects the host to supply these
+# (generated apps get them from the installer Gemfile). Used only by the
+# integration tests under test/integration/.
+group :test do
+  gem "sqlite3", ">= 2.1"
+  gem "will_paginate", "~> 4.0"
+  gem "paper_trail", "~> 17.0"
+  gem "turbo-rails"
+end
+
+group :development, :test do
+  # Rails omakase style; offenses grandfathered in .rubocop_todo.yml.
+  gem "rubocop-rails-omakase", require: false
+end