nquery 0.1.0 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d4c0dfe128eef7e904add8f3f2509e4aff906effad952ebb9bbddf162011152b
-  data.tar.gz: a5b587385a1af1d99823b88b0c85fbe7fdef6c0a9810f7ad4d4deb17877de763
+  metadata.gz: 0460bb4897b3a7fbd9516dc0c8e39a69eb397fb4ab221bc2c27f5879a40fc04e
+  data.tar.gz: ffd6e74059060bb039706b611a1ee6b193b7d71a6a18a02ea01f88d58c8e3a79
 SHA512:
-  metadata.gz: abe36e2af6121fa02337da23f3b3db2241766a2dd2ce020c9d79da663839473185bdd414a89b97aec678ca3107795753266d12e776c98cf2791278d5d0447caf
-  data.tar.gz: e630e96d93edc3e5187ce0a31fc76206b7c045111f6c5f91b4d5c23895a00866c0d10827eced9a3960f7bf29f2b83711b0677033a6af0993a47b7375b86af419
+  metadata.gz: b2631cd177c4840a24d2c81f07669a02b168bd0a15f9ac90f80e0cb7f027348624521807f64c50783e8d8e66cb74554f01dfc8ac06941d70cfe9b8b768a0122d
+  data.tar.gz: 182717511432fa142146e3fcc097667ae8fbda4f923447aa6ebfabd3e39a23ce0ca23b61c8b4a3f006ad6f00d1a37d50335308222697443d4e3e50767d9a32a5

data/CHANGELOG.md

@@ -0,0 +1,32 @@
+# Changelog
+
+## [0.1.2] - 2026-09-07
+
+### Changed
+- Publish homepage URL https://github.com/caiohenrique12/nquery (RubyGems does not allow repushing 0.1.1)
+
+## [0.1.1] - 2026-09-07
+
+Host apps should `bundle update nquery` and run `rails db:migrate`. Re-run `rails generate nquery:install` if you installed 0.1.0 and need the updated initializer.
+
+### Added
+- PostgreSQL data sources with a Test Connection action on the admin form
+- Dashboard creation from the home page, with dashboards belonging to a collection
+- Post-install setup (`nquery:setup`) and first-admin onboarding via Devise
+- Encrypted data source credentials and improved admin data source forms
+- GitHub Actions CI with a shared `bin/ci` suite
+
+### Changed
+- Hide the home New dashboard CTA when the user cannot curate
+- Tighten Devise (`>= 5.0.4`) and Puma (`>= 7.2.1`) minimums for known CVEs
+- Bump sqlite3 to `>= 2.9.6` (GHSA-mwm8-39rw-8826)
+- Point gem homepage and source URLs to https://github.com/caiohenrique12/nquery
+
+### Fixed
+- PostgreSQL adapter connections
+- Read-only SQL enforcement on query create/save
+- JSON error when a test-connection data source id is missing
+
+## [0.1.0] - 2026-07-22
+
+Initial public release.

data/README.md

@@ -1,52 +1,291 @@
 # nquery
 
-SQL charts, dashboards, and data visualization for Rails — mountable engine gem.
+SQL charts, dashboards, and data visualization for Rails — a mountable engine gem.
 
-## What this is
+nquery lets a host Rails app expose a self-contained analytics UI. It:
 
-- **`lib/` + `app/`** — the gem (mount in any Rails app)
-- **`server/`** — thin demo app to run the UI locally (SQLite, no external database)
-- **Docker + Makefile** — local dev only (MVP)
+* Ships as a Rails engine you mount at a path (for example `/nquery`)
+* Provides query builders, charts, dashboards, collections, groups, and permissions
+* Provisions groups and data sources via `rails nquery:setup`
+* Creates the first administrator through a one-time onboarding wizard (no public signup)
 
-## Quick start (no Ruby required)
+## Table of contents
 
-```bash
-cp .env.example .env
-make up
-```
+- [Requirements](#requirements)
+- [Installation](#installation)
+- [Usage](#usage)
+  - [What `nquery:setup` does](#what-nquerysetup-does)
+  - [After onboarding](#after-onboarding)
+- [Configuration](#configuration)
+- [Authentication](#authentication)
+- [First admin onboarding](#first-admin-onboarding)
+- [Mail and SMTP](#mail-and-smtp)
+- [Data sources](#data-sources)
+- [Active Storage](#active-storage)
+- [Development](#development)
+- [Contributing](#contributing)
+- [License](#license)
 
-`make up` builds the image, runs migrations, seeds demo data, and starts the server — no separate seed step needed.
+## Requirements
 
-Open http://localhost:3000 — login: `admin@nquery.dev` / `password123`
+* Ruby `>= 3.2`
+* Rails `>= 7.1`, `< 9`
+* Active Storage (for organization logo / cover uploads)
 
-## Dev commands
+## Installation
 
-| Command | Description |
-|---------|-------------|
-| `make up` | Build, migrate, seed, and start server |
-| `make setup` | Migrate and seed only (without starting server) |
-| `make test` | Run RSpec |
-| `make console` | Rails console |
+Install the gem and add it to your application's Gemfile by executing:
+
+```bash
+bundle add nquery
+```
+
+If Bundler is not being used to manage dependencies, install the gem by executing:
+
+```bash
+gem install nquery
+```
 
-## Use as a gem (in a Rails app)
+Or add it manually:
 
 ```ruby
 # Gemfile
 gem "nquery"
+```
 
-# config/routes.rb
-mount Nquery::Engine, at: "/nquery"
+```bash
+bundle install
 ```
 
+Then run the install generator and complete setup:
+
 ```bash
 rails generate nquery:install
+rails active_storage:install   # required for organization logo/cover
+rails db:migrate               # engine migrations load from the gem
+rails nquery:setup
+```
+
+Mount the engine in `config/routes.rb`:
+
+```ruby
+mount Nquery::Engine, at: "/nquery"
+```
+
+Edit `config/initializers/nquery.rb` to set `mailer_sender` and `smtp` (required for confirmation email). Visit `/nquery` and complete the [first admin onboarding](#first-admin-onboarding) wizard.
+
+| Task | When to use | Creates users? | Creates demo charts? |
+|------|-------------|----------------|----------------------|
+| `rails nquery:setup` | Host / production install | No | No |
+| `rails nquery:seed` | Local demo only (`make up`) | Yes | Yes |
+
+Prefer `nquery:setup` in host apps. `nquery:seed` calls setup first, then adds sample content for the Docker demo.
+
+## Usage
+
+### What `nquery:setup` does
+
+`Nquery::Setup.run!` (invoked by `rails nquery:setup`) is idempotent and safe to re-run. It:
+
+1. Ensures system groups `administrators` and `all_users`
+2. Syncs `config.data_sources` into `Nquery::DataSource` rows (via `Nquery::DataSources::Syncer`)
+3. Ensures the root collection (`Our analytics`)
+4. Seeds default collection, data, and application permissions for those groups
+
+It intentionally does **not** create an organization, users, or demo charts. Those belong to onboarding (first admin) or `nquery:seed` (demo only).
+
+### After onboarding
+
+1. Sign in at `/nquery/login` (or your mount path + `/login`)
+2. Browse **Collections**, build queries/charts, assemble dashboards
+3. Manage **Users**, **Groups**, **Permissions**, and **Data sources** as an admin
+
+Default permissions from setup give administrators full application features and query access on the default data source; `all_users` gets view-oriented defaults on the root collection.
+
+## Configuration
+
+`rails generate nquery:install` copies `config/initializers/nquery.rb`. Example:
+
+```ruby
+Nquery.configure do |config|
+  config.mailer_sender = "noreply@example.com"
+  config.smtp = {
+    address: "smtp.example.com",
+    port: 587,
+    domain: "example.com",
+    user_name: "smtp-user",
+    password: "smtp-password",
+    authentication: :plain,
+    enable_starttls_auto: true
+  }
+
+  config.data_sources = {
+    main: { adapter: :rails, name: "Application database" }
+  }
+  config.default_data_source = :main
+end
+```
+
+| Option | Default | Description |
+|--------|---------|-------------|
+| `mailer_sender` | `nil` | From address for Devise / app mail |
+| `smtp` | `{}` | Passed to `ActionMailer::Base.smtp_settings` when present |
+| `data_sources` | `{ main: { adapter: :rails, name: "Application database" } }` | Identity-only map of configured sources |
+| `default_data_source` | `:main` | Key of the default source used by setup permissions |
+| `query_timeout` | `15` | Query timeout (seconds) |
+| `query_row_limit` | `10_000` | Max rows returned by a query |
+| `embed_secret` | `nil` | Override for embed token signing (falls back to `secret_key_base`) |
+
+**Not supported in config:** storing database credentials for data sources, SSO/hybrid auth hooks, or public self-registration.
+
+## Authentication
+
+Authentication is handled by [Devise](https://github.com/heartcombo/devise) end-to-end:
+
+* **Sessions** — `Devise::SessionsController` (sign in / sign out via Warden)
+* **Passwords** — Devise `:database_authenticatable` + `:validatable` on `Nquery::User`
+* **Confirmation** — Devise `:confirmable` (first admin sets a password from the confirmation link; tokens expire after 1 hour)
+
+There is **no** public signup route (`:registerable` is not enabled). Password reset (`:recoverable`) and remember-me (`:rememberable`) are not enabled. The first admin is created through [onboarding](#first-admin-onboarding); additional users are invited by an administrator under **Admin → Users** (confirmation email; invitee sets their password via the confirmation link).
+
+Login and logout use Devise routes (`/login`, `/logout`) backed by Warden. Authentication is Devise-only; custom session cookie auth and SSO/hybrid hooks are not supported.
+
+## First admin onboarding
+
+After install + `nquery:setup`, the first person to open the engine creates the organization and the first administrator. There is no seed admin in a production-style install.
+
+### When the wizard runs
+
+Onboarding is required until:
+
+* An `Nquery::Organization` exists
+* Onboarding is complete (a confirmed admin exists in `administrators`, or onboarding has been latched via `onboarding_completed_at`)
+
+Until then, visiting the engine redirects into the wizard instead of the normal login page. `nquery:setup` alone never completes onboarding — it only prepares groups and data sources.
+
+### Wizard steps
+
+Paths assume `mount Nquery::Engine, at: "/nquery"`. Drop the `/nquery` prefix when mounted at `/`.
+
+| Step | Path | What the user does | Result |
+|------|------|--------------------|--------|
+| 1. Company | `GET /nquery/onboarding/company/new` | Name, optional website, logo, cover | Creates `Organization`; advances to admin step |
+| 2. Admin | `GET /nquery/onboarding/admin/new` | First name, last name, email | Provisions admin into `administrators` + `all_users`; sends Devise confirmation email |
+| 3. Congrats | `GET /nquery/onboarding/congrats` | Read instructions | Explains that a confirmation email was sent |
+| 4. Confirm | `GET /nquery/onboarding/confirm?confirmation_token=…` | Choose password | Confirms the user, signs them in, locks the wizard |
+
+### Flow
+
+```text
+Visit /nquery
+  → Company form
+  → Admin form (email + name)
+  → Congrats (“check your email”)
+  → Open confirmation link
+  → Set password
+  → Signed in as admin; wizard locked
+```
+
+Mail must work for step 2 → 4. If SMTP is misconfigured, the admin user is still created and the wizard continues to congrats with a warning flash — fix mail settings and resend or use the confirmation token before continuing. The Docker demo writes mail to `server/tmp/mail` (`:file` delivery) instead of SMTP.
+
+### After the first admin
+
+* Revisiting onboarding routes redirects away (wizard locked)
+* `/signup` is not routed; the login page has no “Create an account” link
+* New users: **Admin → Users**
+
+### Checklist before first visit (host app)
+
+1. `rails nquery:setup` succeeded
+2. Engine mounted
+3. `mailer_sender` + `smtp` configured
+4. Action Mailer default URL options set in the host app (so confirmation links resolve)
+5. Active Storage installed if you want logo/cover uploads during company setup
+
+## Mail and SMTP
+
+Confirmation mail uses `Nquery::DeviseMailer` and `Nquery.configuration.mailer_sender`.
+
+Also configure the host app’s Action Mailer URL options so links in email are absolute:
+
+```ruby
+# config/environments/production.rb (example)
+config.action_mailer.default_url_options = { host: "analytics.example.com", protocol: "https" }
+```
+
+In development, Letter Opener or `:test` / `:file` delivery works as long as confirmation URLs use a reachable host.
+
+## Data sources
+
+`config.data_sources` describes **identity** for sources that setup syncs into the database:
+
+```ruby
+config.data_sources = {
+  main: { adapter: :rails, name: "Application database" }
+}
+config.default_data_source = :main
+```
+
+* Keys become the unique `key` on `nquery_data_sources` (e.g. `"main"`)
+* For `adapter: :rails`, connection config is empty — nquery uses the host app’s Active Record connection
+* Do **not** put database credentials in `Nquery.configure`; external adapters are managed in the admin UI after install
+* `Nquery::DataSources::Syncer` ignores credential-like keys if they appear in the hash
+
+After setup, review sources under **Admin → Data sources**.
+
+## Active Storage
+
+Required for organization `logo` and `cover_image` during company onboarding (and later branding):
+
+```bash
+rails active_storage:install
 rails db:migrate
 ```
 
+Configure `config.active_storage.service` in each environment (e.g. `:local` in development).
+
+## Development
+
+This repository includes a thin demo Rails app under `server/` (SQLite) for local UI work. Host apps install nquery migrations into their own database; the demo app is for contributors and exploration.
+
+After checking out the repo:
+
+```bash
+cp .env.example .env
+make up
+```
+
+`make up` builds the Docker image, runs migrations, seeds demo data (`nquery:seed`), and starts the server at http://localhost:3000.
+
+| Email | Password |
+|-------|----------|
+| `admin@nquery.dev` | `password123` |
+
+The demo seeds an organization + confirmed admin so you skip the first-run wizard and can sign in with Devise immediately.
+
+| Command | Description |
+|---------|-------------|
+| `make up` | Build, migrate, seed, and start the demo server |
+| `make setup` | Migrate and seed only (requires a running `nquery` service) |
+| `make tests` | Run RSpec via `docker compose exec` (requires running `nquery`) |
+| `make console` | Rails console for the demo app |
+| `make bash` | Shell inside the `nquery` container |
+
+| Path | Purpose |
+|------|---------|
+| `lib/` + `app/` | Mountable engine gem |
+| `spec/` | RSpec suite for the gem |
+| `server/` | Thin demo Rails app |
+| Docker + Makefile | Local development (recommended) |
+
+To install this gem onto your local machine from the checkout, use your usual Bundler path / gem build workflow against `nquery.gemspec`.
+
 ## Contributing
 
-Bug reports and pull requests are welcome. Please read [CONTRIBUTING.md](CONTRIBUTING.md) for the workflow we follow (issue discussion, focused PRs, tests, and development setup).
+Bug reports and pull requests are welcome on GitHub at https://github.com/caiohenrique12/nquery.
+
+Please read [CONTRIBUTING.md](CONTRIBUTING.md) for the workflow (issue discussion, focused PRs, tests, and development setup). AI / agent contributors should follow [AGENTS.md](AGENTS.md).
 
 ## License
 
-MIT
+The gem is available as open source under the terms of the [MIT License](LICENSE).

data/app/assets/builds/nquery/application.css

@@ -28,7 +28,7 @@ body.nq-body { margin: 0; font-family: -apple-system, BlinkMacSystemFont, "Segoe
 .nq-breadcrumb-item a[aria-current="page"] { color: var(--nq-text); font-weight: 500; }
 .nq-nav-section { font-size: 0.75rem; text-transform: uppercase; color: #94a3b8; margin: 1rem 0 0.5rem; }
 .nq-main { flex: 1; display: flex; flex-direction: column; min-width: 0; }
-.nq-topbar { display: flex; justify-content: space-between; align-items: center; padding: 0.75rem 1.5rem; background: var(--nq-card); border-bottom: 1px solid var(--nq-border); }
+.nq-topbar { display: flex; justify-content: flex-end; align-items: center; padding: 0.75rem 1.5rem; background: var(--nq-card); border-bottom: 1px solid var(--nq-border); }
 .nq-content { padding: 1.5rem; flex: 1; }
 .nq-page-header { display: grid; grid-template-columns: minmax(0, 1fr) auto; grid-template-areas: "title actions" "meta meta"; gap: 0.375rem 1rem; align-items: start; margin-bottom: 1.5rem; }
 .nq-page-header h1 { grid-area: title; margin: 0; font-size: 1.5rem; }
@@ -134,6 +134,26 @@ button.nq-menu-item-button.is-loading::before { content: ""; width: 1em; height:
 .nq-textarea { font-family: ui-monospace, monospace; resize: vertical; }
 .nq-form-row { margin-bottom: 1rem; }
 .nq-form-row label { display: block; margin-bottom: 0.25rem; font-weight: 500; font-size: 0.875rem; }
+.nq-form-grid { margin-bottom: 1rem; }
+.nq-form-grid .nq-form-row { margin-bottom: 0; }
+.nq-form-card { max-width: 40rem; }
+.nq-form-section { margin-bottom: 0.5rem; }
+.nq-form-section-title { margin: 0 0 1rem; font-size: 0.875rem; font-weight: 600; text-transform: uppercase; letter-spacing: 0.04em; color: var(--nq-muted); }
+.nq-form-actions { display: flex; flex-wrap: wrap; gap: 0.5rem; justify-content: flex-end; align-items: center; margin-top: 1.5rem; padding-top: 1.25rem; border-top: 1px solid var(--nq-border); }
+.nq-form-actions-start { margin-right: auto; }
+.nq-connection-status { margin: 0.75rem 0 0; font-size: 0.875rem; line-height: 1.4; }
+.nq-connection-status.is-success { color: #166534; }
+.nq-connection-status.is-error { color: #991b1b; }
+.nq-form-errors { margin-bottom: 1.25rem; padding: 0.875rem 1rem; border-radius: 8px; background: #fef2f2; border: 1px solid #fecaca; color: #991b1b; font-size: 0.875rem; }
+.nq-form-errors p { margin: 0 0 0.5rem; }
+.nq-form-errors ul { margin: 0; padding-left: 1.25rem; }
+.nq-field-hint { margin: 0.375rem 0 0; font-size: 0.8125rem; color: var(--nq-muted); line-height: 1.4; }
+.nq-textarea-prose { font-family: inherit; resize: vertical; min-height: 5rem; }
+.nq-badge-system { background: #dbeafe; color: #1d4ed8; }
+.nq-badge-custom { background: #e2e8f0; color: #334155; }
+.nq-group-description p { margin: 0; line-height: 1.5; color: var(--nq-text); }
+.nq-group-layout { align-items: start; }
+.nq-add-member-form .nq-form-row:last-of-type { margin-bottom: 1.25rem; }
 .nq-table { width: 100%; border-collapse: collapse; }
 .nq-table th, .nq-table td { text-align: left; padding: 0.75rem; border-bottom: 1px solid var(--nq-border); }
 .nq-card-table { padding: 0; overflow: hidden; }
@@ -148,6 +168,28 @@ button.nq-menu-item-button.is-loading::before { content: ""; width: 1em; height:
 .nq-card-table .nq-table td .nq-actions { justify-content: flex-end; }
 .nq-card-table .nq-table td .nq-actions form { display: inline-flex; margin: 0; }
 .nq-card-table .nq-table th:last-child { text-align: right; }
+.nq-card-table.nq-logs-table { overflow-x: auto; overflow-y: hidden; -webkit-overflow-scrolling: touch; }
+.nq-logs-table .nq-table { width: 100%; table-layout: fixed; }
+.nq-logs-table .nq-table th,
+.nq-logs-table .nq-table td { vertical-align: top; }
+.nq-logs-table .nq-table th:nth-child(1),
+.nq-logs-table .nq-table td:nth-child(1) { width: 18%; }
+.nq-logs-table .nq-table th:nth-child(2),
+.nq-logs-table .nq-table td:nth-child(2) { width: 34%; }
+.nq-logs-table .nq-table th:nth-child(3),
+.nq-logs-table .nq-table td:nth-child(3),
+.nq-logs-table .nq-table th:nth-child(4),
+.nq-logs-table .nq-table td:nth-child(4) { width: 14%; }
+.nq-logs-table .nq-table th:nth-child(5),
+.nq-logs-table .nq-table td:nth-child(5) { width: 6.5rem; }
+.nq-logs-table .nq-table th:nth-child(6),
+.nq-logs-table .nq-table td:nth-child(6) { width: 8.5rem; }
+.nq-logs-table .nq-table td { overflow: hidden; text-overflow: ellipsis; }
+.nq-logs-table .nq-table td:nth-child(5),
+.nq-logs-table .nq-table td:nth-child(6) { overflow: visible; text-overflow: unset; white-space: nowrap; }
+.nq-logs-query { display: block; max-width: 100%; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: 0.75rem; line-height: 1.4; font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace; background: #f8fafc; padding: 0.25rem 0.5rem; border-radius: 4px; }
+.nq-badge-success { background: #dcfce7; color: #15803d; }
+.nq-badge-error { background: #fee2e2; color: #b91c1c; }
 .nq-list { list-style: none; padding: 0; margin: 0; }
 .nq-list li { padding: 0.5rem 0; border-bottom: 1px solid var(--nq-border); }
 .nq-badge { display: inline-block; padding: 0.125rem 0.5rem; background: #e2e8f0; border-radius: 999px; font-size: 0.75rem; }
@@ -229,7 +271,6 @@ button.nq-menu-item-button.is-loading::before { content: ""; width: 1em; height:
 .nq-auth-footer { display: flex; flex-wrap: wrap; justify-content: center; align-items: center; gap: 0.375rem; margin-top: 1.5rem; padding-top: 1.5rem; border-top: 1px solid var(--nq-border); font-size: 0.875rem; }
 .nq-auth-link { color: var(--nq-primary); font-weight: 600; text-decoration: none; }
 .nq-auth-link:hover { color: var(--nq-primary-dark); text-decoration: underline; }
-.nq-search .nq-input { width: 320px; }
 .nq-topbar-actions { display: flex; align-items: center; gap: 1rem; }
 .nq-actions { display: flex; flex-wrap: wrap; gap: 0.5rem; align-items: center; justify-content: flex-end; }
 .nq-actions form { display: inline-flex; margin: 0; }
@@ -292,14 +333,13 @@ button.nq-menu-item-button.is-loading::before { content: ""; width: 1em; height:
 .nq-home-subtitle { margin: 0.5rem 0 0; font-size: 0.9375rem; }
 .nq-home-hero-actions { display: flex; align-items: center; gap: 0.75rem; flex-shrink: 0; }
 .nq-home-hero-cta { flex-shrink: 0; }
-.nq-home-actions { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 1rem; }
+.nq-home-actions { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 1rem; }
 .nq-home-action-card { display: flex; flex-direction: column; gap: 0.5rem; padding: 1.25rem; border: 1px solid var(--nq-border); border-radius: 8px; background: var(--nq-card); text-decoration: none; color: inherit; transition: border-color 0.15s, box-shadow 0.15s, transform 0.15s; }
 .nq-home-action-card:hover { border-color: var(--nq-primary); box-shadow: 0 8px 24px rgba(80, 158, 227, 0.12); transform: translateY(-1px); }
 .nq-home-action-icon { display: inline-flex; align-items: center; justify-content: center; width: 2.5rem; height: 2.5rem; border-radius: 10px; }
 .nq-home-action-icon .nq-icon { width: 1.25rem; height: 1.25rem; }
 .nq-home-action-icon-folder { background: #fef3c7; color: #b45309; }
 .nq-home-action-icon-dashboard { background: #dcfce7; color: #15803d; }
-.nq-home-action-icon-chart { background: #dbeafe; color: #1d4ed8; }
 .nq-home-action-label { font-size: 1rem; font-weight: 600; color: var(--nq-text); }
 .nq-home-action-desc { font-size: 0.8125rem; line-height: 1.4; }
 .nq-home-recents { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 1rem; align-items: start; }
@@ -336,4 +376,21 @@ button.nq-menu-item-button.is-loading::before { content: ""; width: 1em; height:
   .nq-home-actions, .nq-home-recents { grid-template-columns: 1fr; }
   .nq-home-list-time { display: none; }
   .nq-auth-form-row-split { grid-template-columns: 1fr; }
+  .nq-logs-table .nq-table { min-width: 0; table-layout: auto; }
+  .nq-logs-table .nq-table thead { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0, 0, 0, 0); border: 0; }
+  .nq-logs-table .nq-table,
+  .nq-logs-table .nq-table tbody,
+  .nq-logs-table .nq-table tr,
+  .nq-logs-table .nq-table td { display: block; width: 100%; }
+  .nq-logs-table .nq-table th:nth-child(n),
+  .nq-logs-table .nq-table td:nth-child(n) { width: 100%; overflow: visible; text-overflow: unset; white-space: normal; }
+  .nq-logs-table .nq-table tr { padding: 1rem 1.25rem; border-bottom: 1px solid var(--nq-border); }
+  .nq-logs-table .nq-table tbody tr:last-child { border-bottom: none; }
+  .nq-logs-table .nq-table td { display: grid; grid-template-columns: 6.5rem minmax(0, 1fr); align-items: start; gap: 0.35rem 0.75rem; padding: 0.35rem 0; border-bottom: none; text-align: left; }
+  .nq-logs-table .nq-table td::before { content: attr(data-label); font-size: 0.75rem; font-weight: 600; color: var(--nq-muted); text-transform: uppercase; letter-spacing: 0.04em; }
+  .nq-logs-table .nq-table th:last-child,
+  .nq-logs-table .nq-table td:last-child { text-align: left; }
+  .nq-logs-query { max-width: 100%; white-space: normal; overflow: visible; text-overflow: unset; word-break: break-word; }
+  .nq-logs-empty td { display: block; }
+  .nq-logs-empty td::before { content: none; }
 }

data/app/assets/builds/nquery/application.js

@@ -808,6 +808,23 @@ function initChartBuilders() {
       selectWorkspaceTab("output")
     }
 
+    const applyResult = (data, { outputTab } = {}) => {
+      if (!data?.columns) return
+
+      currentResult = data
+      if (outputTab) currentOutputTab = outputTab
+      populateAxisSelects(data.columns, data.rows)
+      renderTable(data)
+      if (meta) {
+        const parts = []
+        if (data.row_count != null) parts.push(`${data.row_count} rows`)
+        if (data.duration_ms != null) parts.push(`${data.duration_ms} ms`)
+        meta.textContent = parts.join(" · ")
+        meta.removeAttribute("hidden")
+      }
+      showResults()
+    }
+
     const runQuery = async (button) => {
       syncStatementField()
       setButtonLoading(button, true)
@@ -824,18 +841,7 @@ function initChartBuilders() {
           return
         }
 
-        currentResult = data
-        currentOutputTab = "table"
-        populateAxisSelects(data.columns, data.rows)
-        renderTable(data)
-        if (meta) {
-          const parts = []
-          if (data.row_count != null) parts.push(`${data.row_count} rows`)
-          if (data.duration_ms != null) parts.push(`${data.duration_ms} ms`)
-          meta.textContent = parts.join(" · ")
-          meta.removeAttribute("hidden")
-        }
-        showResults()
+        applyResult(data, { outputTab: "table" })
       } catch (e) {
         showError(e.message)
       } finally {
@@ -935,6 +941,21 @@ function initChartBuilders() {
 
     xAxis?.addEventListener("change", updateMapping)
     yAxis?.addEventListener("change", updateMapping)
+
+    // Saved charts: seed Output with the persisted query result and plot the saved viz.
+    const initialResultRaw = root.dataset.initialResult
+    if (initialResultRaw) {
+      try {
+        const initialResult = JSON.parse(initialResultRaw)
+        if (initialResult.error) {
+          showError(initialResult.error)
+        } else {
+          applyResult(initialResult)
+        }
+      } catch (_error) {
+        // Ignore malformed bootstrap payloads and keep the empty Output state.
+      }
+    }
   })
 }
 
@@ -966,6 +987,79 @@ function initQueryEditors() {
   })
 }
 
+function initDataSourceForms() {
+  document.querySelectorAll("[data-controller='data-source-form']").forEach(root => {
+    if (root.dataset.dataSourceFormInitialized === "true") return
+    root.dataset.dataSourceFormInitialized = "true"
+
+    const adapterField = root.querySelector("[data-data-source-form-target='adapter']")
+    const remoteFields = root.querySelector("[data-data-source-form-target='remoteFields']")
+    const sqliteFields = root.querySelector("[data-data-source-form-target='sqliteFields']")
+    const railsHint = root.querySelector("[data-data-source-form-target='railsHint']")
+    const portField = root.querySelector("[data-data-source-form-target='port']")
+    const testButton = root.querySelector("[data-data-source-form-target='testButton']")
+    const testStatus = root.querySelector("[data-data-source-form-target='testStatus']")
+
+    const toggle = () => {
+      const adapter = adapterField?.value || root.dataset.dataSourceFormAdapterValue || "postgresql"
+      const isRemote = adapter === "postgresql" || adapter === "mysql"
+      const isSqlite = adapter === "sqlite"
+      const isRails = adapter === "rails"
+
+      remoteFields?.toggleAttribute("hidden", !isRemote)
+      sqliteFields?.toggleAttribute("hidden", !isSqlite)
+      railsHint?.toggleAttribute("hidden", !isRails)
+
+      if (portField) {
+        portField.placeholder = adapter === "mysql" ? "3306" : "5432"
+      }
+    }
+
+    adapterField?.addEventListener("change", toggle)
+    toggle()
+
+    testButton?.addEventListener("click", async (event) => {
+      event.preventDefault()
+      const csrf = document.querySelector('meta[name="csrf-token"]')?.content
+      const formData = new FormData(root)
+      formData.delete("_method")
+      const dataSourceId = root.dataset.dataSourceFormIdValue
+      if (dataSourceId) formData.append("data_source_id", dataSourceId)
+
+      setButtonLoading(testButton, true)
+      if (testStatus) {
+        testStatus.hidden = true
+        testStatus.textContent = ""
+        testStatus.classList.remove("is-success", "is-error")
+      }
+
+      try {
+        const response = await fetch(root.dataset.dataSourceFormTestUrlValue, {
+          method: "POST",
+          headers: { Accept: "application/json", "X-CSRF-Token": csrf },
+          body: formData
+        })
+        const data = await response.json()
+        const success = response.ok && data.ok
+        if (testStatus) {
+          testStatus.textContent = success ? (data.message || "Connection successful.") : (data.error || "Connection failed.")
+          testStatus.classList.toggle("is-success", success)
+          testStatus.classList.toggle("is-error", !success)
+          testStatus.hidden = false
+        }
+      } catch (error) {
+        if (testStatus) {
+          testStatus.textContent = error.message || "Connection failed."
+          testStatus.classList.add("is-error")
+          testStatus.hidden = false
+        }
+      } finally {
+        setButtonLoading(testButton, false)
+      }
+    })
+  })
+}
+
 function initPage() {
   initButtonLoaders()
   initToastEvents()
@@ -974,6 +1068,7 @@ function initPage() {
   initQueryEditors()
   initChartBuilders()
   initChartPreviews()
+  initDataSourceForms()
 }
 
 function bootPage() {

data/app/controllers/concerns/nquery/breadcrumbs.rb

@@ -56,6 +56,8 @@ module Nquery
         when "edit"
           append_resource_breadcrumb(crumbs, breadcrumb_dashboard, path: dashboard_path(breadcrumb_dashboard), link: true)
           append_terminal_breadcrumb(crumbs, "Edit")
+        when "new"
+          append_terminal_breadcrumb(crumbs, "New dashboard")
         end
       when "nquery/collection/dashboards"
         append_section_breadcrumb(crumbs, "Collections", collections_path)
@@ -169,11 +171,11 @@ module Nquery
     def breadcrumb_parent_collection
       @breadcrumb_parent_collection ||= if @parent_collection
                                         @parent_collection
-                                      elsif @collection&.persisted?
+                                        elsif @collection&.persisted?
                                         @collection
-                                      elsif params[:collection_id].present?
+                                        elsif params[:collection_id].present?
                                         Collection.find_by(id: params[:collection_id])
-                                      end
+                                        end
     end
 
     def breadcrumb_dashboard

data/app/controllers/concerns/nquery/chart_actions.rb

@@ -95,6 +95,7 @@ module Nquery
     def load_chart_builder_assigns
       @data_sources = DataSource.active.order(:name)
       @schema = schema_for(@chart&.query&.data_source)
+      @result = chart_builder_result(@chart) if @chart&.persisted? && @chart.query&.statement.present?
     end
 
     def schema_for(data_source = nil)