lesli 5.1.12 → 5.1.13

data/app/views/lesli/errors/unauthorized.html.erb

@@ -1,38 +1,23 @@
-<style>
-.error-403 .material-symbols {
-    font-size: 8rem;
-    color: #7a0000;
-}
-.error-403 h2 {
-    font-size: 2rem;
-    color: #7a0000;
-}
-
-.error-403 p {
-    font-size: 1.4rem;
-    font-weight: 300;
-}
-</style>
 <%= render(LesliView::Layout::Container.new("accounts")) do %>
-    <section class="hero is-medium error-403">
-        <div class="hero-body has-text-centered">
+    <section class="px-4 py-24 sm:px-6 sm:py-36" aria-labelledby="unauthorized-title">
+        <div class="mx-auto max-w-2xl text-center">
 
-            <div class="mb-6">
-                <span class="icon">
-                    <span class="material-symbols">
-                        shield_lock
-                    </span>
+            <div class="mb-6" aria-hidden="true">
+                <span class="material-symbols !text-[8rem] leading-none text-danger-800">
+                    shield_lock
                 </span>
             </div>
 
-            <h2 class="mb-4">403 <%= I18n.t("lesli.shared.message_error_unauthorized") %></h2>
+            <h2 id="unauthorized-title" class="mb-4 text-[2rem] font-semibold leading-tight text-danger-800">
+                403 <%= I18n.t("lesli.shared.message_error_unauthorized") %>
+            </h2>
 
-            <p>
+            <p class="text-[1.4rem] font-light leading-relaxed text-neutral-700">
                 <%= I18n.t("lesli.shared.message_error_unauthorized_credentials") %>
             </p>
 
-            <div class="box mt-6">
-                <ul>
+            <div class="mx-auto mt-6 max-w-xl rounded-lg border border-neutral-200 bg-white p-5 text-sm text-neutral-600 shadow-sm">
+                <ul class="space-y-1">
                     <li>
                         <%= @error_object.dig(:error_details, :controller) %>
                         (<%= @error_object.dig(:error_details, :action) %>)
@@ -43,4 +28,3 @@
         </div>
     </section>
 <% end %>
-

data/app/views/lesli/layouts/application-devise.html.erb

@@ -2,7 +2,7 @@
 
 Lesli
 
-Copyright (c) 2025, Lesli Technologies, S. A.
+Copyright (c) 2026, Lesli Technologies, S. A.
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
@@ -27,28 +27,29 @@ Building a better future, one line of code at a time.
 @license  GPLv3 http://www.gnu.org/licenses/gpl-3.0.en.html
 
 // · ~·~     ~·~     ~·~     ~·~     ~·~     ~·~     ~·~     ~·~     ~·~
-// · 
+// ·
 %>
 
-<% public_app_controller = controller_path.split('/')[1] || controller_path %>
+<% public_app_controller = controller_path.split("/")[1] || controller_path %>
 
 <!DOCTYPE html>
-<html lang="en">
+<html lang="<%= I18n.locale %>">
 <head>
     <%= render(partial: "lesli/partials/application-lesli-head") %>
-    <%= stylesheet_link_tag(lesli_asset_path(:lesli_assets, 'public.tailwind'), media: "all") %>
-    <%= stylesheet_link_tag(lesli_asset_path(:lesli_shield, public_app_controller.concat(".tailwind")), media: "all") %>
-    <%# Disable back button in browser after Logout using JavaScript %>
+    <%= yield :head %>
+    <%= stylesheet_link_tag(lesli_asset_path(:lesli_assets, "public"), media: "all") %>
+    <%= stylesheet_link_tag(lesli_asset_path(:lesli_shield, public_app_controller), media: "all") %>
+    <%# Prevent browser history from reopening an authenticated page after logout. %>
     <% if flash[:logout] == true %>
         <script>
             history.pushState(null, null, null, null, null);
-            window.addEventListener('popstate', function () {
+            window.addEventListener("popstate", function () {
                 history.pushState(null, null, null, null, null);
             });
         </script>
     <% end %>
 </head>
-<body class="<%= lesli_application_body_class() %>">
+<body class="<%= lesli_application_body_class %>">
     <%= yield %>
     <%= render(partial: "lesli/partials/application-lesli-analytics") %>
 </body>

data/app/views/lesli/layouts/application-lesli.html.erb

@@ -45,7 +45,7 @@ Building a better future, one line of code at a time.
 <body class="<%= lesli_application_body_class() %>">
     <%= render(partial: "lesli/partials/application-lesli-header") %>
     <%= render(partial: "lesli/partials/application-lesli-notifications") %>
-    <main class="flex">
+    <main class="flex mb-10">
         <%= render(partial: "lesli/partials/application-lesli-sidebar") %>
         <%= render(partial: "lesli/partials/application-lesli-content") %>
     </main>

data/app/views/lesli/partials/_application-lesli-assets.html.erb

@@ -50,9 +50,9 @@ Building a better future, one line of code at a time.
 
 
 <%# Loading stylesheets from engines %> 
-<%= stylesheet_link_tag(lesli_asset_path(:lesli_assets, 'application.tailwind'), media: "all") %>
-<%= stylesheet_link_tag(lesli_asset_path(:lesli_assets, 'view.tailwind'), media: "all") %>
-<%= stylesheet_link_tag(lesli_asset_path(nil,'application.tailwind'), media: "all") %>
+<%= stylesheet_link_tag(lesli_asset_path(:lesli_assets, 'application'), media: "all") %>
+<%= stylesheet_link_tag(lesli_asset_path(:lesli_view, 'view'), media: "all") %>
+<%= stylesheet_link_tag(lesli_asset_path(), media: "all") %>
 
 
 <%# Loading javascripts from engines %> 

data/app/views/lesli/partials/_application-lesli-header.html.erb

@@ -107,20 +107,16 @@ Building a better future, one line of code at a time.
                 <i class="ri-apps-2-line text-[24px] leading-none" aria-hidden="true"></i>
             <% end %>
 
-            <% if defined?(LesliAdmin) %>
-                <%= link_to lesli_admin.profile_path,
-                    class: action_class.call(lesli_admin.profile_path),
-                    aria: {
-                        label: profile_label,
-                        current: current_page?(lesli_admin.profile_path) ? "page" : nil
-                    },
+            <% if defined?(LesliShield) %>
+
+                <%= link_to lesli_shield.profile_path,
+                    class: header_action_class,
+                    aria: { label: profile_label },
                     title: profile_label,
                     data: { turbo_frame: "_top" } do %>
                     <i class="ri-user-smile-line text-[24px] leading-none" aria-hidden="true"></i>
                 <% end %>
-            <% end %>
 
-            <% if defined?(LesliShield) %>
                 <%= link_to main_app.destroy_user_session_path,
                     class: logout_action_class,
                     aria: { label: logout_label },

data/config/initializers/lesli.rb

@@ -127,7 +127,10 @@ Lesli.configure do |config|
         prefix: 'LA',
         enable_logs: true,
         enable_journals: true,
-        enable_analytics: true
+        enable_analytics: true,
+        journal_retention_days: 90,
+        analytics_retention_days: 400,
+        audit_retention_days: nil
     }
 
 

data/config/locales/translations.en.yml

@@ -1,6 +1,40 @@
 ---
 :en:
   lesli:
+    items:
+      activities:
+        empty: No activities have been recorded yet.
+        unknown_actor: Unknown user
+      discussions:
+        add: Add comment
+        created: Comment added successfully
+        empty: No comments have been added yet.
+        invalid: Comment could not be added
+        unknown_author: Unknown user
+      tasks:
+        add: Add task
+        complete_action: Mark task as complete
+        completed: Task completed successfully
+        created: Task created successfully
+        empty: No tasks have been added yet.
+        reopen_action: Mark task as incomplete
+        reopened: Task reopened successfully
+      attachments:
+        add: Add file
+        category: Category
+        choose_file: Choose a file
+        created: File uploaded successfully
+        deleted: File removed successfully
+        download: Download
+        empty: No files have been attached yet.
+        label: Label
+        remove: Remove
+        confirm_remove: Remove this file?
+        uploading: Uploading...
+        errors:
+          required: must be attached
+          too_large: must be smaller than %{size}
+          unsupported_type: has an unsupported file type
     header:
       applications: Applications
       dashboard: Lesli Dashboard

data/config/locales/translations.es.yml

@@ -1,6 +1,40 @@
 ---
 :es:
   lesli:
+    items:
+      activities:
+        empty: Todavía no se ha registrado actividad.
+        unknown_actor: Usuario desconocido
+      discussions:
+        add: Agregar comentario
+        created: Comentario agregado exitosamente
+        empty: Todavía no se han agregado comentarios.
+        invalid: No se pudo agregar el comentario
+        unknown_author: Usuario desconocido
+      tasks:
+        add: Agregar tarea
+        complete_action: Marcar tarea como completada
+        completed: Tarea completada exitosamente
+        created: Tarea creada exitosamente
+        empty: Todavía no se han agregado tareas.
+        reopen_action: Marcar tarea como pendiente
+        reopened: Tarea reabierta exitosamente
+      attachments:
+        add: Agregar archivo
+        category: Categoría
+        choose_file: Seleccionar archivo
+        created: Archivo subido exitosamente
+        deleted: Archivo eliminado exitosamente
+        download: Descargar
+        empty: Todavía no se han adjuntado archivos.
+        label: Etiqueta
+        remove: Eliminar
+        confirm_remove: ¿Eliminar este archivo?
+        uploading: Subiendo...
+        errors:
+          required: debe ser adjuntado
+          too_large: debe ser menor de %{size}
+          unsupported_type: tiene un tipo de archivo no permitido
     header:
       applications: Aplicaciones
       dashboard: Panel de Lesli

data/db/seed/accounts.rb

@@ -41,14 +41,14 @@ account = Lesli::Account.find_or_create_by(email: company[:email]) do |account|
     account.status = 'active'
     account.save!
 
-    # account.detail.company_name = company[:name]
-    # account.detail.public_email = company[:email]
-    # account.detail.company_tagline = company[:tag_line] || ""
+    # account.admin.detail.company_name = company[:name]
+    # account.admin.detail.public_email = company[:email]
+    # account.admin.detail.company_tagline = company[:tag_line] || ""
     # #account.registered!
-    # account.detail.save!
+    # account.admin.detail.save!
 
 end
 
 # print some separators so will be easy to find these messages later
-Termline.br(3);
+Termline.br(2);
 Termline.success("Account #{ account.name } <#{ account.email }> successfully created!")

data/db/seed/users.rb

@@ -31,17 +31,17 @@ Building a better future, one line of code at a time.
 =end
 
 
-
 # get the account information
-account = Lesli::Account.first
+account = Lesli::Account.find_by!(email: Lesli.config.company.fetch(:email))
 
 
-# try to extract the domain name from the main email address
-email_domain = account[:email].scan(/.*@(\S+)/)&.first&.first
+# extract the domain name from the main email address
+email_domain = account.email.to_s.split("@", 2).second
+raise ArgumentError, "The account email must include a domain" if email_domain.blank?
 
 
 # get the emails for the initial accounts
-emailowner = account[:email]
+emailowner = account.email
 emailadmin = "admin@#{email_domain}"
 emailguest = "guest@#{email_domain}"
 
@@ -64,17 +64,9 @@ end
 
 
 # create the owner user for the account, 
-userowner = create_account_user(emailowner, "owner", "Owner", account[:company_name], passowner)
-useradmin = create_account_user(emailadmin, "admin", "Admin", account[:company_name], passadmin)
-userguest = create_account_user(emailguest, "guest", "Guest", account[:company_name], passguest)
-
-
-# print the owner user credentials, so we can save those credentials
-Termline.success(
-    "Owner user created successfully with email: #{emailowner} and password: #{passowner}",
-    "Admin user created successfully with email: #{emailadmin} and password: #{passadmin}",
-    "Admin user created successfully with email: #{emailguest} and password: #{passguest}"
-)
+create_account_user(account: account, email: emailowner, role_name: "owner", first_name: "Owner", last_name: account.name, password: passowner)
+create_account_user(account: account, email: emailadmin, role_name: "admin", first_name: "Admin", last_name: account.name, password: passadmin)
+create_account_user(account: account, email: emailguest, role_name: "guest", first_name: "Guest", last_name: account.name, password: passguest)
 
 
 # print some separators so will be easy to find these messages later

data/db/seed/xyz.rb

@@ -30,27 +30,48 @@ Building a better future, one line of code at a time.
 // · 
 =end
 
-def create_account_user email, rolename, firstname, lastname, password
-
-    account = Lesli::Account.find_by(email: Lesli.config.company.dig(:email))
-
-    # create development users if email is not registered yet
-    Lesli::User.find_or_create_by(email: email) do |user|
-        user.account = account
-        user.password = password
-        user.password_confirmation = password
-
-        # confirm user through device
-        user.confirm unless user.confirmed?
+def create_account_user(account:, email:, role_name:, first_name:, last_name:, password: nil)
+    user = Lesli::User.find_or_initialize_by(email: email)
+    authentication_enabled =
+        user.respond_to?(:password=) &&
+        user.respond_to?(:password_confirmation=)
+    credentials_created = false
+
+    Lesli::User.transaction do
+        user.assign_attributes(
+            account: account,
+            first_name: first_name,
+            last_name: last_name
+        )
+
+        # LesliShield installs Devise directly on the Core user model. Checking
+        # the model capability keeps this seeder independent from Devise and
+        # allows Lesli Core to seed users without an authentication engine.
+        if authentication_enabled && user.encrypted_password.blank?
+            raise ArgumentError, "A password is required when authentication is enabled" if password.blank?
+
+            user.password = password
+            user.password_confirmation = password
+            user.skip_confirmation! if user.respond_to?(:skip_confirmation!)
+            credentials_created = true
+        end
 
-        user.first_name = firstname
-        user.last_name = lastname
         user.save!
 
-        if(defined?(LesliShield))
-            user.user_roles.create!({ role: Lesli::Role.find_by(:name => rolename) })
+        # Role assignments are owned by LesliShield and should only be created
+        # when its concrete join model is available.
+        if authentication_enabled && defined?(LesliShield::User::Role)
+            role = account.roles.find_by!(name: role_name)
+            user.user_roles.find_or_create_by!(role: role)
         end
+    end
 
-        user
+    if credentials_created
+        Termline.success(
+            "#{role_name.capitalize} user created successfully with " \
+            "email: #{email} and password: #{password}"
+        )
     end
+
+    user
 end

data/lib/lesli/engine.rb

@@ -38,10 +38,6 @@ require "kaminari"
 require "termline"
 require "acts_as_paranoid"
 
-# The hole Lesli ecosystem depends on current_user, so we
-# include the dependency in the core
-require "devise"
-
 require "lesli_date"
 require "lesli_view"
 require "lesli_assets"

data/lib/lesli/router.rb

@@ -74,10 +74,13 @@ module Lesli
             router.namespace :items do
 
                 # Load item tasks
-                router.resources :tasks, only: %i[index update create]
+                router.resources :tasks, only: %i[update create]
 
                 # Load item discussions
-                router.resources :discussions, only: %i[index update create]
+                router.resources :discussions, only: :create
+
+                # Load attachments
+                router.resources :attachments, only: %i[index show create destroy]
             end
 
             # Optional: health check inside engine scope (pick a consistent path)

data/lib/lesli/version.rb

@@ -1,4 +1,4 @@
 module Lesli
-  VERSION = "5.1.12"
-  BUILD = "1791607001"
+  VERSION = "5.1.13"
+  BUILD = "1792716699"
 end

data/lib/migrate/items/activity_structure.rb

@@ -2,7 +2,7 @@
 
 Lesli
 
-Copyright (c) 2025, Lesli Technologies, S. A.
+Copyright (c) 2026, Lesli Technologies, S. A.
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
@@ -35,7 +35,7 @@ module MigrationHelpers
         module ActivityStructure
             def create_table_lesli_item_activities_10(engine)
 
-                table_name, foreign_key = table_name_for_items(engine, :activities)
+                table_name, = table_name_for_items(engine, :activities)
 
                 create_table table_name do |t|
 
@@ -43,13 +43,13 @@ module MigrationHelpers
                     t.string :description
 
                     # Tipo principal del registro
-                    t.string :activity_type, null: false, default: :activity
+                    t.string :activity_type, null: false, default: "activity"
 
                     # Subtipo para actividades
-                    t.string :activity_code
+                    t.string :activity_code, null: false
 
                     # Metadatos opcionales (JSON)
-                    t.json :metadata, default: {}
+                    t.json :metadata, null: false, default: {}
 
                     # Polymorphic target
                     t.string  :subject_type, null: false
@@ -59,9 +59,9 @@ module MigrationHelpers
                     t.datetime :deleted_at, index: true
                 end
 
-                add_reference(table_name, :user, foreign_key: { to_table: :lesli_users }) 
-                add_reference(table_name, :account, foreign_key: { to_table: "#{engine}_accounts".to_sym })
-                add_index(table_name, [:account_id, :subject_type, :subject_id], name: "#{table_name}_activities_type_id")
+                add_reference(table_name, :user, null: false, foreign_key: { to_table: :lesli_users })
+                add_reference(table_name, :account, null: false, foreign_key: { to_table: "#{engine}_accounts".to_sym })
+                add_index(table_name, [:subject_type, :subject_id, :deleted_at, :created_at, :id], name: "#{table_name}_timeline")
             end
         end
     end

data/lib/migrate/items/attachment_structure.rb

@@ -2,7 +2,7 @@
 
 Lesli
 
-Copyright (c) 2025, Lesli Technologies, S. A.
+Copyright (c) 2026, Lesli Technologies, S. A.
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
@@ -33,29 +33,24 @@ Building a better future, one line of code at a time.
 module MigrationHelpers
     module Items
         module AttachmentStructure
-            def create_table_lesli_item_attachments_10(resources)
+            def create_table_lesli_item_attachments_10(engine)
 
-                table_name, foreign_key = table_name_for_items(resources, :attachments)
+                table_name, = table_name_for_items(engine, :attachments)
 
                 create_table table_name do |t|
-                    t.string :name
+                    t.string :label
                     t.string :category
-                    t.decimal :size_mb
 
-                    t.string :attachment
-                    t.string :attachment_remote # like S3
-                    t.string :attachment_public
-                    
-                    t.boolean  :public
-                    t.string   :public_url
-                    t.datetime :public_url_expiration_at
+                    t.string :attachable_type, null: false
+                    t.bigint :attachable_id, null: false
 
                     t.datetime :deleted_at, index: true
                     t.timestamps
                 end
 
-                add_reference(table_name, :user, foreign_key: { to_table: :lesli_users })
-                add_reference(table_name, foreign_key, foreign_key: { to_table: resources })
+                add_reference(table_name, :user, null: false, foreign_key: { to_table: :lesli_users })
+                add_reference(table_name, :account, null: false, foreign_key: { to_table: "#{engine}_accounts".to_sym })
+                add_index(table_name, [:account_id, :attachable_type, :attachable_id], name: "#{table_name}_attachable_type_id".to_sym)
             end
         end
     end

data/lib/migrate/items/discussion_structure.rb

@@ -35,21 +35,21 @@ module MigrationHelpers
         module DiscussionStructure
             def create_table_lesli_item_discussions_10(engine)
 
-                table_name, foreign_key = table_name_for_items(engine, :discussions)
+                table_name, = table_name_for_items(engine, :discussions)
     
                 create_table table_name do |t|
-                    t.text :message
+                    t.text :message, null: false
 
                     # Polymorphic target
                     t.string  :discussable_type, null: false
                     t.bigint  :discussable_id,   null: false
 
                     t.timestamps
-                    t.datetime :deleted_at, index: true
                 end
 
-                add_reference(table_name, :user, foreign_key: { to_table: :lesli_users })
-                add_reference(table_name, :account, foreign_key: { to_table: "#{engine}_accounts".to_sym })
+                add_reference(table_name, :user, null: false, foreign_key: { to_table: :lesli_users })
+                add_reference(table_name, :account, null: false, foreign_key: { to_table: "#{engine}_accounts".to_sym })
+                add_index(table_name, [:account_id, :discussable_type, :discussable_id], name: "#{table_name}_discussable_type_id".to_sym)
             end
         end
     end

data/lib/migrate/items/task_structure.rb

@@ -46,11 +46,10 @@ module MigrationHelpers
                     t.bigint  :taskable_id,   null: false
 
                     t.timestamps
-                    t.datetime :deleted_at, index: true
                 end
 
-                add_reference(table_name, :user, foreign_key: { to_table: :lesli_users })
-                add_reference(table_name, :account, foreign_key: { to_table: "#{engine}_accounts".to_sym })
+                add_reference(table_name, :user, null: false, foreign_key: { to_table: :lesli_users })
+                add_reference(table_name, :account, null: false, foreign_key: { to_table: "#{engine}_accounts".to_sym })
                 add_index(table_name, [:account_id, :taskable_type, :taskable_id], name: "#{table_name}_taskable_type_id".to_sym)
             end
         end

data/lib/migrate/shared/account_structure.rb

@@ -14,7 +14,7 @@ module MigrationHelpers
                     t.timestamps 
                 end
     
-                add_reference(table_name, :account, null: false, foreign_key: { to_table: :lesli_accounts }, index: true)
+                add_reference(table_name, :account, null: false, index: { unique: true }, foreign_key: { to_table: :lesli_accounts })
             end
         end
     end

data/lib/tasks/lesli_tasks.rake

@@ -66,9 +66,8 @@ namespace :lesli do
         Termline.br(2)
 
         # core information
-        Termline.info(instance, tag:'Instance:', time:false)
-        Termline.info(Rails.env, tag:'Environment:', time:false)
-        Termline.br()
+        Termline.details(Instance: instance, Environment: Rails.env, icon: :info)
+        Termline.br(2)
 
         # print list of engines
         Termline.table(engines)

data/readme.md

@@ -11,10 +11,10 @@
 <br />
 
 <div align="center">
-    <a target="_blank" href="https://github.com/LesliTech/Lesli/actions/workflows/lesli-ci-tests.yaml">
+    <a target="_blank" href="https://github.com/LesliTech/Lesli/actions/workflows/lesli-ci-engine.yaml">
         <img
             alt="Lesli test status"
-            src="https://img.shields.io/github/actions/workflow/status/LesliTech/Lesli/lesli-ci-tests.yaml?branch=master&style=for-the-badge&logo=github&label=tests">
+            src="https://img.shields.io/github/actions/workflow/status/LesliTech/Lesli/lesli-ci-engine.yaml?branch=master&style=for-the-badge&logo=github&label=tests">
     </a>
     <a target="_blank" href="https://rubygems.org/gems/lesli">
         <img alt="Gem Version" src="https://img.shields.io/gem/v/lesli?style=for-the-badge&logo=ruby">
@@ -75,7 +75,7 @@ Lesli core and its official engines provide:
 
 ### Requirements
 
-- Ruby 3.2 or newer
+- Ruby 3.3 or newer (the release workflow uses Ruby 3.3.5)
 - Rails 8.1
 - SQLite, included in the default Rails application
 

data/test/fixtures/lesli_accounts.yml

@@ -0,0 +1,18 @@
+
+# test/fixtures/lesli_accounts.yml
+
+one:
+  status: "active"
+  name: "Lesli Demo Account"
+  email: "account-one@example.com"
+  region: "america"
+  created_at: <%= Time.current %>
+  updated_at: <%= Time.current %>
+
+two:
+  status: "active"
+  name: "Second Account"
+  email: "account-two@example.com"
+  region: "america"
+  created_at: <%= Time.current %>
+  updated_at: <%= Time.current %>

data/test/fixtures/lesli_users.yml

@@ -0,0 +1,23 @@
+# test/fixtures/lesli_users.yml
+
+one:
+  uid: "USR-0001"
+  active: true
+  email: "one@example.com"
+  encrypted_password: "provided-by-authentication-engine"
+  first_name: "Luis"
+  last_name: "Donis"
+  sign_in_count: 0
+  account: one
+  created_at: <%= Time.current %>
+  updated_at: <%= Time.current %>
+
+two:
+  uid: "USR-0002"
+  active: true
+  email: "two@example.com"
+  encrypted_password: "provided-by-authentication-engine"
+  sign_in_count: 0
+  account: two
+  created_at: <%= Time.current %>
+  updated_at: <%= Time.current %>