panda-core 0.2.4 → 0.4.1

data/app/views/panda/core/admin/my_profile/edit.html.erb

@@ -1,49 +1,35 @@
 <%= render Panda::Core::Admin::ContainerComponent.new do |component| %>
-  <% component.with_heading(text: "My Profile", level: 1) %>
+  <% component.heading(text: "My Profile", level: 1) %>
 
   <%= form_with model: user,
-                url: admin_my_profile_path,
-                method: :patch,
-                local: true,
-                data: { controller: "theme-form" } do |f| %>
-    <% if user.errors.any? %>
-      <div class="mb-4 p-4 bg-red-50 border border-red-200 rounded-md">
-        <div class="text-sm text-red-600">
-          <% user.errors.full_messages.each do |message| %>
-            <p><%= message %></p>
-          <% end %>
-        </div>
-      </div>
-    <% end %>
+              url: admin_my_profile_path,
+              method: :patch,
+              local: true,
+              data: { controller: "theme-form" } do |f| %>
+    <%= render Panda::Core::Admin::FormErrorComponent.new(model: user) %>
 
     <div class="space-y-4">
       <div class="field">
-        <%= f.label :firstname, "First Name", class: "block text-sm font-medium text-gray-700" %>
-        <%= f.text_field :firstname, class: "mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm" %>
-      </div>
-
-      <div class="field">
-        <%= f.label :lastname, "Last Name", class: "block text-sm font-medium text-gray-700" %>
-        <%= f.text_field :lastname, class: "mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm" %>
+        <%= f.label :name %>
+        <%= f.text_field :name %>
       </div>
 
       <div class="field">
-        <%= f.label :email, class: "block text-sm font-medium text-gray-700" %>
-        <%= f.email_field :email, class: "mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm" %>
+        <%= f.label :email %>
+        <%= f.email_field :email %>
       </div>
 
       <div class="field">
-        <%= f.label :current_theme, "Theme", class: "block text-sm font-medium text-gray-700" %>
+        <%= f.label :current_theme, "Theme" %>
         <%= f.select :current_theme,
-                     options_for_select(Panda::Core.configuration.available_themes || [["Default", "default"], ["Sky", "sky"]], user.current_theme),
+                     options_for_select(Panda::Core.config.available_themes || [["Default", "default"], ["Sky", "sky"]], user.current_theme),
                      {},
-                     class: "mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm",
                      data: { action: "change->theme-form#updateTheme" } %>
       </div>
     </div>
 
     <%= f.submit "Update Profile",
-        class: "btn btn-primary mt-6",
+        class: "btn btn-primary mt-4",
         data: { disable_with: "Saving..." } %>
   <% end %>
 <% end %>

data/app/views/panda/core/admin/sessions/new.html.erb

@@ -1,20 +1,20 @@
 <div class="flex flex-col justify-center py-12 px-6 min-h-full text-center lg:px-8">
   <div class="text-center sm:mx-auto sm:w-full sm:max-w-sm">
-    <% if Panda::Core.configuration.login_logo_path %>
-      <img src="<%= Panda::Core.configuration.login_logo_path %>" class="py-2 mx-auto w-auto h-32">
+    <% if Panda::Core.config.login_logo_path %>
+      <img src="<%= Panda::Core.config.login_logo_path %>" class="py-2 mx-auto w-auto h-32">
     <% end %>
     <h2 class="mt-10 mb-6 text-2xl font-bold text-center text-white">
-      <%= Panda::Core.configuration.login_page_title || "Sign in to your account" %>
+      <%= Panda::Core.config.login_page_title || "Sign in to your account" %>
     </h2>
   </div>
-  <% if @providers&.any? || Panda::Core.configuration.authentication_providers.any? %>
-    <% providers = @providers || Panda::Core.configuration.authentication_providers.keys %>
+  <% if @providers&.any? || Panda::Core.config.authentication_providers.any? %>
+    <% providers = @providers || Panda::Core.config.authentication_providers.keys %>
     <% providers.each do |provider| %>
-      <% provider_config = Panda::Core.configuration.authentication_providers[provider] %>
+      <% provider_config = Panda::Core.config.authentication_providers[provider] %>
       <% provider_name = provider_config&.dig(:name) || provider.to_s.humanize %>
       <% provider_path = provider_config&.dig(:path_name) || provider %>
       <div class="mt-4 text-center sm:mx-auto sm:w-full sm:max-w-sm">
-        <%= form_tag "#{Panda::Core.configuration.admin_path}/auth/#{provider_path}", method: "post", data: {turbo: false} do %>
+        <%= form_tag "#{Panda::Core.config.admin_path}/auth/#{provider_path}", method: "post", data: {turbo: false} do %>
           <button type="submit" id="button-sign-in-<%= provider_path %>" class="inline-flex gap-x-2 items-center py-2.5 px-3.5 mx-auto mb-4 bg-white text-gray-900 rounded-md border min-w-56 border-neutral-400 hover:bg-gray-50">
             <i class="fa-brands fa-<%= oauth_provider_icon(provider) %> text-xl mr-1"></i>
             Sign in with <%= provider_name %>

data/app/views/panda/core/admin/shared/_breadcrumbs.html.erb

@@ -1,35 +1,28 @@
-<% if defined?(@breadcrumbs) && @breadcrumbs.any? %>
-  <div class="flex">
-    <nav class="flex-1 px-4 py-3 text-gray-700 border-b border-gray-200 bg-gray-50" aria-label="Breadcrumb" id="panda-breadcrumbs">
-      <ol class="inline-flex items-center space-x-1 md:space-x-3">
-        <% @breadcrumbs.each_with_index do |breadcrumb, index| %>
-          <li class="inline-flex items-center">
-            <% if index > 0 %>
-              <svg class="w-3 h-3 text-gray-400 mx-1" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 6 10">
-                <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m1 9 4-4-4-4"/>
-              </svg>
-            <% end %>
-            
-            <% if breadcrumb.path && index < @breadcrumbs.length - 1 %>
-              <%= link_to breadcrumb.label, breadcrumb.path, class: "inline-flex items-center text-sm font-medium text-gray-700 hover:text-blue-600" %>
-            <% else %>
-              <span class="text-sm font-medium text-gray-500"><%= breadcrumb.label %></span>
-            <% end %>
-          </li>
-        <% end %>
-      </ol>
-    </nav>
-    
-    <% if content_for?(:sidebar) %>
-      <div class="px-4 py-3 border-b border-gray-200 bg-gray-50 text-gray-700" tabindex="-1" data-controller="toggle">
-        <a href="#" id="slideover-toggle" data-action="click->toggle#toggle touch->toggle#toggle" class="inline-flex items-center text-sm font-medium text-gray-700 hover:text-blue-600">
-          <svg class="w-4 h-4 mr-1" fill="none" stroke="currentColor" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
-            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10.325 4.317c.426-1.756 2.924-1.756 3.35 0a1.724 1.724 0 002.573 1.066c1.543-.94 3.31.826 2.37 2.37a1.724 1.724 0 001.065 2.572c1.756.426 1.756 2.924 0 3.35a1.724 1.724 0 00-1.066 2.573c.94 1.543-.826 3.31-2.37 2.37a1.724 1.724 0 00-2.572 1.065c-.426 1.756-2.924 1.756-3.35 0a1.724 1.724 0 00-2.573-1.066c-1.543.94-3.31-.826-2.37-2.37a1.724 1.724 0 00-1.065-2.572c-1.756-.426-1.756-2.924 0-3.35a1.724 1.724 0 001.066-2.573c-.94-1.543.826-3.31 2.37-2.37.996.608 2.296.07 2.572-1.065z"></path>
-            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z"></path>
-          </svg>
-          <%= yield(:sidebar_title) || "Settings" %>
+<% breadcrumb_styles = "text-black/60 hover:text-black/80" %>
+
+<div class="flex mt-1 -mb-1">
+  <nav aria-label="Breadcrumb" id="panda-breadcrumbs" class="grow">
+    <ol role="list" class="px-4 w-full sm:px-6">
+      <li class="inline-block">
+        <a href="<%= Panda::Core.config.admin_path %>" class="<%= breadcrumb_styles %>">
+          <i class="fa fa-solid fa-house"></i>
+          <span class="sr-only">Home</span>
         </a>
-      </div>
-    <% end %>
-  </div>
-<% end %>
+      </li>
+      <% breadcrumbs.each do |crumb| %>
+        <li class="inline-block">
+          <i class="fa fa-regular fa-chevron-right font-light <%= breadcrumb_styles %> py-5 px-2"></i>
+          <a href="<%= crumb.path %>" class="text-sm font-normal <%= breadcrumb_styles %>"><%= crumb.name %></a>
+        </li>
+      <% end %>
+    </ol>
+  </nav>
+
+  <% if content_for :sidebar %>
+    <div class="pt-4 pr-8 text-black/80" tabindex="-1" data-controller="toggle">
+      <button type="button" id="slideover-toggle" data-action="click->toggle#toggle touch->toggle#toggle" class="text-sm font-light">
+        <i class="mr-1 fa-light fa-gear"></i> <%= yield :sidebar_title %>
+      </button>
+    </div>
+  <% end %>
+</div>

data/app/views/panda/core/admin/shared/_flash.html.erb

@@ -1,31 +1,5 @@
 <% if flash.any? %>
-  <div class="fixed top-4 right-4 z-50 space-y-2">
-    <% flash.each do |type, message| %>
-      <div class="bg-white rounded-lg shadow-lg p-4 max-w-sm" data-controller="flash" data-flash-delay-value="5000">
-        <div class="flex items-start">
-          <div class="flex-shrink-0">
-            <% if type == "success" %>
-              <i class="fa-regular fa-check-circle text-green-500"></i>
-            <% elsif type == "error" %>
-              <i class="fa-regular fa-times-circle text-red-500"></i>
-            <% elsif type == "warning" %>
-              <i class="fa-regular fa-exclamation-triangle text-yellow-500"></i>
-            <% else %>
-              <i class="fa-regular fa-info-circle text-blue-500"></i>
-            <% end %>
-          </div>
-          <div class="ml-3 w-0 flex-1">
-            <p class="text-sm font-medium text-gray-900">
-              <%= message %>
-            </p>
-          </div>
-          <div class="ml-4 flex-shrink-0 flex">
-            <button type="button" class="bg-white rounded-md inline-flex text-gray-400 hover:text-gray-500" data-action="click->flash#close">
-              <i class="fa-regular fa-times"></i>
-            </button>
-          </div>
-        </div>
-      </div>
-    <% end %>
-  </div>
-<% end %>
+  <% flash.each do |kind, message| %>
+    <%= render Panda::Core::Admin::FlashMessageComponent.new(kind: kind.to_sym, message: message) %>
+  <% end %>
+<% end %>

data/app/views/panda/core/admin/shared/_sidebar.html.erb

@@ -1,27 +1,43 @@
 <nav class="flex flex-col flex-1">
-  <ul role="list" class="flex flex-col flex-1 gap-y-7">
-    <li>
-      <ul role="list" class="-mx-2 space-y-1">
-        <% Panda::Core.configuration.admin_navigation_items&.call(current_user)&.each do |item| %>
-          <li>
-            <%= link_to item[:path], class: "group flex gap-x-3 rounded-md p-2 text-sm leading-6 font-semibold text-gray-200 hover:text-white hover:bg-gray-700" do %>
-              <i class="<%= item[:icon] %> text-gray-200 group-hover:text-white"></i>
-              <%= item[:label] %>
-            <% end %>
-          </li>
+  <ul role="list" class="flex flex-col flex-1">
+    <a class="block p-0 mt-4 mb-4 ml-2 text-xl font-medium text-white"><%= Panda::Core.config.admin_title || "Panda Admin" %></a>
+    <% Panda::Core.config.admin_navigation_items&.call(current_user)&.each do |item| %>
+      <li>
+        <%
+          # Exact match for dashboard, starts_with for others
+          # Check if current path matches this nav item
+          is_active = if request.path == item[:path]
+            true
+          elsif request.path.starts_with?(item[:path] + "/")
+            true
+          else
+            false
+          end
+        %>
+        <%= link_to item[:path], class: "#{is_active ? "bg-mid text-white relative flex items-center transition-all py-3 px-2 mb-2 rounded-md group gap-x-3 text-base leading-6 font-normal" : "text-white hover:bg-mid/60 transition-all group flex items-center gap-x-3 py-3 px-2 mb-2 rounded-md text-base leading-6 font-normal"}" do %>
+          <span class="text-center w-6"><i class="<%= item[:icon] %> text-xl fa-fw"></i></span>
+          <span><%= item[:label] %></span>
         <% end %>
-      </ul>
+      </li>
+    <% end %>
+    <li>
+      <%= button_to panda_core.admin_logout_path, method: :delete, id: "logout-link", data: { turbo: false }, class: "text-white hover:bg-mid/60 transition-all group flex items-center gap-x-3 py-3 px-2 mb-2 rounded-md text-base leading-6 font-normal w-full" do %>
+        <span class="text-center w-6"><i class="text-xl fa-solid fa-door-open fa-fw"></i></span>
+        <span>Logout</span>
+      <% end %>
     </li>
-    
     <li class="mt-auto">
-      <div class="flex items-center gap-x-4 px-6 py-3 text-sm font-semibold leading-6 text-gray-200">
-        <% if current_user %>
-          <span class="flex-1"><%= "#{current_user.firstname} #{current_user.lastname}" %></span>
-          <%= link_to panda_core.admin_logout_path, method: :delete, class: "text-gray-200 hover:text-white" do %>
-            <i class="fa-regular fa-sign-out"></i>
-          <% end %>
+      <%= link_to panda_core.edit_admin_my_profile_path, class: "text-white hover:bg-mid/60 transition-all group flex items-center gap-x-3 py-3 px-2 mb-2 rounded-md text-base leading-6 font-normal w-full", title: "Edit my Profile" do %>
+        <% if !current_user.image_url.to_s.empty? %>
+          <span class="text-center w-6"><img src="<%= current_user.image_url %>" class="w-auto h-7 rounded-full"></span>
+        <% else %>
+          <span class="text-center w-6"><i class="text-xl fa-regular fa-circle-user fa-fw"></i></span>
         <% end %>
-      </div>
+        <span><%= current_user.name %></span>
+      <% end %>
+    </li>
+    <li class="px-2 py-3">
+      <span class="text-xs text-white">Panda Core v<%= Panda::Core::VERSION %></span>
     </li>
   </ul>
-</nav>
+</nav>

data/app/views/panda/core/shared/_header.html.erb

@@ -1,11 +1,19 @@
 <!DOCTYPE html>
-<html data-theme="<%= Panda::Core::Current&.user&.current_theme || Panda::Core.configuration.default_theme %>" class="<%= local_assigns[:html_class] || "" %>">
+<html data-theme="<%= Panda::Core::Current&.user&.current_theme || Panda::Core.config.default_theme %>" class="<%= local_assigns[:html_class] || "" %>">
   <head>
-    <title><%= content_for?(:title) ? yield(:title) : (Panda::Core.configuration.admin_title || "Panda Admin") %></title>
+    <title><%= content_for?(:title) ? yield(:title) : (Panda::Core.config.admin_title || "Panda Admin") %></title>
     <%= csrf_meta_tags %>
     <%= csp_meta_tag %>
-    <script src="https://kit.fontawesome.com/7835d81e75.js" defer="true" crossorigin="anonymous"></script>
-    <link rel="stylesheet" href="/panda-core-assets/panda-core.css">
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@7.1.0/css/all.min.css">
+    <%= panda_core_stylesheet %>
+    <%= panda_core_javascript %>
+
+    <% if defined?(Panda::CMS) && controller.class.name.start_with?("Panda::CMS") %>
+      <!-- CMS Assets -->
+      <%= panda_cms_javascript %>
+      <%= render "panda/cms/shared/favicons" %>
+    <% end %>
+
     <%= yield :head %>
   </head>
-  <body class="h-full <%= local_assigns[:body_class] || "" %>" data-environment="<%= Rails.env %>">
+  <body class="overflow-hidden h-full <%= local_assigns[:body_class] || "" %>" data-environment="<%= Rails.env %>">

data/config/importmap.rb

@@ -1,10 +1,15 @@
 # frozen_string_literal: true
 
-# Base JavaScript dependencies for Panda Core
-pin "@hotwired/turbo", to: "@hotwired--turbo.js", preload: true # @8.0.18
-pin "@rails/actioncable/src", to: "@rails--actioncable--src.js", preload: true # @8.0.201
-pin "@hotwired/stimulus", to: "@hotwired--stimulus.js" # @3.2.2
-pin "tailwindcss-stimulus-components" # @6.1.3
+# Panda Core application and controllers
+pin "panda/core/application", to: "panda/core/application.js"
+pin "panda/core/controllers/index", to: "panda/core/controllers/index.js"
+pin_all_from Panda::Core::Engine.root.join("app/javascript/panda/core/controllers"), under: "panda/core/controllers"
 
-# Font Awesome icons
+# Base JavaScript dependencies for Panda Core (vendored for reliability)
+pin "@hotwired/stimulus", to: "panda/core/vendor/@hotwired--stimulus.js", preload: true # @3.2.2
+pin "@hotwired/turbo", to: "panda/core/vendor/@hotwired--turbo.js", preload: true # @8.0.18
+pin "@rails/actioncable/src", to: "panda/core/vendor/@rails--actioncable--src.js", preload: true # @8.0.201
+pin "tailwindcss-stimulus-components", to: "panda/core/tailwindcss-stimulus-components.js" # @6.1.3
+
+# Font Awesome icons (from CDN)
 pin "@fortawesome/fontawesome-free", to: "https://ga.jspm.io/npm:@fortawesome/fontawesome-free@7.1.0/js/all.js"

data/config/routes.rb

@@ -1,7 +1,7 @@
 Panda::Core::Engine.routes.draw do
   # Get admin_path from configuration
   # Default to "/admin" if not yet configured
-  admin_path = (Panda::Core.configuration.admin_path || "/admin").delete_prefix("/")
+  admin_path = (Panda::Core.config.admin_path || "/admin").delete_prefix("/")
 
   scope path: admin_path, as: "admin" do
     get "/login", to: "admin/sessions#new", as: :login
@@ -17,8 +17,6 @@ Panda::Core::Engine.routes.draw do
     get "/", to: "admin/dashboard#show", as: :root
 
     # Profile management
-    constraints Panda::Core::AdminConstraint.new do
-      resource :my_profile, only: %i[edit update], controller: "admin/my_profile", path: "my_profile"
-    end
+    resource :my_profile, only: %i[edit update], controller: "admin/my_profile", path: "my_profile"
   end
 end

data/db/migrate/20250810120000_add_current_theme_to_panda_core_users.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddCurrentThemeToPandaCoreUsers < ActiveRecord::Migration[7.1]
+  def change
+    add_column :panda_core_users, :current_theme, :string unless column_exists?(:panda_core_users, :current_theme)
+  end
+end

data/lib/panda/core/asset_loader.rb

@@ -105,9 +105,19 @@ module Panda
             end
 
           else
-            # Development mode - use importmap
+            # Development mode - use importmap for JS and static CSS
             tags = []
             tags << javascript_include_tag("panda/core/application", type: "module")
+
+            # Add CSS if available
+            css_path = development_css_url
+            if css_path
+              css_attrs = {
+                rel: "stylesheet",
+                href: css_path
+              }
+              tags << tag(:link, css_attrs)
+            end
           end
           tags.join("\n").html_safe
         end
@@ -144,11 +154,16 @@ module Panda
         end
 
         def development_css_url
-          return unless compiled_assets_available?
-
+          # Try versioned file first
           version = asset_version
-          css_file = "/panda-core-assets/panda-core-#{version}.css"
-          File.exist?(Rails.root.join("public#{css_file}")) ? css_file : nil
+          versioned_file = "/panda-core-assets/panda-core-#{version}.css"
+          return versioned_file if File.exist?(Rails.public_path.join("panda-core-assets", "panda-core-#{version}.css"))
+
+          # Fall back to unversioned file (always available from engine's public directory)
+          unversioned_file = "/panda-core-assets/panda-core.css"
+          return unversioned_file if File.exist?(Panda::Core::Engine.root.join("public", "panda-core-assets", "panda-core.css"))
+
+          nil
         end
 
         def asset_version
@@ -193,9 +208,9 @@ module Panda
           end.compact.join(" ")
 
           if content || block_given?
-            "<#{name}#{attrs.present? ? " #{attrs}" : ""}>#{content || (block_given? ? yield : "")}</#{name}>"
+            "<#{name}#{" #{attrs}" if attrs.present?}>#{content || (block_given? ? yield : "")}</#{name}>"
           else
-            "<#{name}#{attrs.present? ? " #{attrs}" : ""}><#{name}>"
+            "<#{name}#{" #{attrs}" if attrs.present?}><#{name}>"
           end
         end
 
@@ -208,7 +223,7 @@ module Panda
             end
           end.compact.join(" ")
 
-          "<#{name}#{attrs.present? ? " #{attrs}" : ""} />"
+          "<#{name}#{" #{attrs}" if attrs.present?} />"
         end
 
         def javascript_include_tag(source, options = {})

data/lib/panda/core/configuration.rb

@@ -46,7 +46,7 @@ module Panda
             {
               label: "Dashboard",
               path: @admin_path,
-              icon: "fa-regular fa-house"
+              icon: "fa-solid fa-house"
             }
           ]
 
@@ -55,14 +55,14 @@ module Panda
             items << {
               label: "Content",
               path: "#{@admin_path}/cms",
-              icon: "fa-regular fa-file-lines"
+              icon: "fa-solid fa-file-lines"
             }
           end
 
           items << {
             label: "My Profile",
             path: "#{@admin_path}/my_profile/edit",
-            icon: "fa-regular fa-user"
+            icon: "fa-solid fa-user"
           }
 
           items
@@ -84,19 +84,22 @@ module Panda
     end
 
     class << self
-      attr_writer :configuration
+      attr_writer :config
 
-      def configuration
-        @configuration ||= Configuration.new
+      def config
+        @config ||= Configuration.new
       end
 
       def configure
-        yield(configuration)
+        yield(config)
       end
 
-      def reset_configuration!
-        @configuration = Configuration.new
+      def reset_config!
+        @config = Configuration.new
       end
+
+      # Alias for backward compatibility with test expectations
+      alias_method :reset_configuration!, :reset_config!
     end
   end
 end

data/lib/panda/core/debug.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+module Panda
+  module Core
+    module Debug
+      class << self
+        # Check if debug mode is enabled via PANDA_DEBUG environment variable
+        def enabled?
+          ENV["PANDA_DEBUG"].to_s.downcase == "true" || ENV["PANDA_DEBUG"] == "1"
+        end
+
+        # Log a debug message if debug mode is enabled
+        def log(message, prefix: "PANDA")
+          return unless enabled?
+
+          timestamp = Time.current.strftime("%Y-%m-%d %H:%M:%S")
+          puts "[#{prefix} DEBUG #{timestamp}] #{message}"
+        end
+
+        # Log an object with pretty printing (using awesome_print if available)
+        def inspect(object, label: nil, prefix: "PANDA")
+          return unless enabled?
+
+          timestamp = Time.current.strftime("%Y-%m-%d %H:%M:%S")
+          header = label ? "#{label}: " : ""
+
+          puts "\n[#{prefix} DEBUG #{timestamp}] #{header}"
+          if defined?(AwesomePrint)
+            ap object
+          else
+            pp object
+          end
+          puts
+        end
+
+        # Enable HTTP debugging for Net::HTTP requests
+        def enable_http_debug!
+          return unless enabled? || ENV["DEBUG_HTTP"].to_s.downcase == "true"
+
+          require "net/http"
+          Net::HTTP.set_debug_output($stdout)
+          log("HTTP debugging enabled - all HTTP requests will be logged")
+        end
+      end
+    end
+  end
+end

data/lib/panda/core/engine.rb

@@ -13,6 +13,8 @@ module Panda
       config.eager_load_namespaces << Panda::Core::Engine
 
       # Add engine's app directories to autoload paths
+      # Note: Only add the root directories, not nested subdirectories
+      # Zeitwerk will automatically discover nested modules from these roots
       config.autoload_paths += Dir[root.join("app", "models")]
       config.autoload_paths += Dir[root.join("app", "controllers")]
       config.autoload_paths += Dir[root.join("app", "builders")]
@@ -43,7 +45,7 @@ module Panda
         end
       end
 
-      initializer "panda_core.configuration" do |app|
+      initializer "panda_core.config" do |app|
         # Configuration is already initialized with defaults in Configuration class
       end
 
@@ -64,18 +66,18 @@ module Panda
         end
       end
 
-
       initializer "panda_core.omniauth" do |app|
         # Mount OmniAuth at configurable admin path
         app.middleware.use OmniAuth::Builder do
           # Configure OmniAuth to use the configured admin path
           configure do |config|
-            config.path_prefix = "#{Panda::Core.configuration.admin_path}/auth"
-            # Allow POST requests for request phase (required for CSRF protection)
-            config.allowed_request_methods = [:get, :post]
+            config.path_prefix = "#{Panda::Core.config.admin_path}/auth"
+            # POST-only for CSRF protection (CVE-2015-9284)
+            # All login forms use POST via form_tag method: "post"
+            config.allowed_request_methods = [:post]
           end
 
-          Panda::Core.configuration.authentication_providers.each do |provider_name, settings|
+          Panda::Core.config.authentication_providers.each do |provider_name, settings|
             # Build provider options, allowing custom path name override
             provider_options = settings[:options] || {}
 
@@ -97,6 +99,41 @@ module Panda
           end
         end
       end
+
+      # Load Phlex base component after Rails application is initialized
+      # This ensures Rails.application.routes is available
+      initializer "panda_core.phlex_base", after: :load_config_initializers do
+        require "phlex"
+        require "phlex-rails"
+        require "literal"
+        require "tailwind_merge"
+
+        # Load the base component
+        require root.join("app/components/panda/core/base")
+      end
+
+      # Set up ViewComponent and Lookbook previews
+      initializer "panda_core.view_component" do |app|
+        app.config.view_component.preview_paths ||= []
+        app.config.view_component.preview_paths << root.join("spec/components/previews")
+
+        # Add preview directories to autoload paths in development
+        if Rails.env.development?
+          # Handle frozen autoload_paths array
+          if app.config.autoload_paths.frozen?
+            app.config.autoload_paths = app.config.autoload_paths.dup
+          end
+          app.config.autoload_paths << root.join("spec/components/previews")
+        end
+      end
+
+      # Create AdminController alias after controllers are loaded
+      # This allows other gems to inherit from Panda::Core::AdminController
+      initializer "panda_core.admin_controller_alias", after: :load_config_initializers do
+        ActiveSupport.on_load(:action_controller_base) do
+          Panda::Core.const_set(:AdminController, Panda::Core::Admin::BaseController) unless Panda::Core.const_defined?(:AdminController)
+        end
+      end
     end
   end
 end

data/lib/panda/core/version.rb

@@ -2,6 +2,6 @@
 
 module Panda
   module Core
-    VERSION = "0.2.4"
+    VERSION = "0.4.1"
   end
 end

data/lib/panda/core.rb

@@ -13,4 +13,5 @@ end
 require_relative "core/version"
 require_relative "core/configuration"
 require_relative "core/asset_loader"
+require_relative "core/debug"
 require_relative "core/engine" if defined?(Rails)