panda-core 0.6.0 → 0.7.0

data/app/javascript/panda/core/controllers/image_cropper_controller.js

@@ -0,0 +1,158 @@
+import { Controller } from "@hotwired/stimulus"
+import Cropper from "cropperjs"
+
+// Connects to data-controller="image-cropper"
+export default class extends Controller {
+  static targets = ["input", "preview", "cropperContainer", "croppedInput"]
+  static values = {
+    aspectRatio: Number,
+    minWidth: { type: Number, default: 0 },
+    minHeight: { type: Number, default: 0 }
+  }
+
+  connect() {
+    this.cropper = null
+    this.originalFile = null
+  }
+
+  disconnect() {
+    if (this.cropper) {
+      this.cropper.destroy()
+      this.cropper = null
+    }
+  }
+
+  handleFileSelect(event) {
+    const file = event.target.files[0]
+    if (file && file.type.startsWith('image/')) {
+      this.originalFile = file
+      this.showCropper(file)
+    }
+  }
+
+  showCropper(file) {
+    const reader = new FileReader()
+    reader.onload = (e) => {
+      // Show the cropper container
+      this.cropperContainerTarget.classList.remove('hidden')
+
+      // Set the image source
+      this.previewTarget.src = e.target.result
+
+      // Initialize cropper after a short delay to ensure image is loaded
+      setTimeout(() => this.initializeCropper(), 100)
+    }
+    reader.readAsDataURL(file)
+  }
+
+  initializeCropper() {
+    // Destroy existing cropper if any
+    if (this.cropper) {
+      this.cropper.destroy()
+    }
+
+    const options = {
+      viewMode: 1,
+      dragMode: 'move',
+      aspectRatio: this.aspectRatioValue || NaN,
+      autoCropArea: 1,
+      restore: false,
+      guides: true,
+      center: true,
+      highlight: true,
+      cropBoxMovable: true,
+      cropBoxResizable: true,
+      toggleDragModeOnDblclick: false,
+      responsive: true,
+      checkOrientation: true,
+      minContainerWidth: 200,
+      minContainerHeight: 200
+    }
+
+    this.cropper = new Cropper(this.previewTarget, options)
+  }
+
+  crop() {
+    if (!this.cropper) return
+
+    const canvas = this.cropper.getCroppedCanvas({
+      minWidth: this.minWidthValue,
+      minHeight: this.minHeightValue,
+      maxWidth: 4096,
+      maxHeight: 4096,
+      fillColor: '#fff',
+      imageSmoothingEnabled: true,
+      imageSmoothingQuality: 'high'
+    })
+
+    canvas.toBlob((blob) => {
+      // Create a new File object with the cropped image
+      const fileName = this.originalFile.name
+      const croppedFile = new File([blob], fileName, { type: this.originalFile.type })
+
+      // Create a DataTransfer to set the file input value
+      const dataTransfer = new DataTransfer()
+      dataTransfer.items.add(croppedFile)
+      this.inputTarget.files = dataTransfer.files
+
+      // Hide the cropper
+      this.cropperContainerTarget.classList.add('hidden')
+
+      // Destroy the cropper instance
+      if (this.cropper) {
+        this.cropper.destroy()
+        this.cropper = null
+      }
+
+      // Dispatch event to notify form of change
+      this.inputTarget.dispatchEvent(new Event('change', { bubbles: true }))
+    }, this.originalFile.type)
+  }
+
+  cancel() {
+    // Clear the file input
+    this.inputTarget.value = ''
+
+    // Hide the cropper
+    this.cropperContainerTarget.classList.add('hidden')
+
+    // Destroy the cropper instance
+    if (this.cropper) {
+      this.cropper.destroy()
+      this.cropper = null
+    }
+  }
+
+  reset() {
+    if (this.cropper) {
+      this.cropper.reset()
+    }
+  }
+
+  rotate(event) {
+    const degrees = parseInt(event.currentTarget.dataset.degrees) || 90
+    if (this.cropper) {
+      this.cropper.rotate(degrees)
+    }
+  }
+
+  flip(event) {
+    const direction = event.currentTarget.dataset.direction || 'horizontal'
+    if (this.cropper) {
+      if (direction === 'horizontal') {
+        const scaleX = this.cropper.getData().scaleX || 1
+        this.cropper.scaleX(-scaleX)
+      } else {
+        const scaleY = this.cropper.getData().scaleY || 1
+        this.cropper.scaleY(-scaleY)
+      }
+    }
+  }
+
+  zoom(event) {
+    const ratio = parseFloat(event.currentTarget.dataset.ratio) || 0.1
+    if (this.cropper) {
+      this.cropper.zoom(ratio)
+    }
+  }
+}

data/app/javascript/panda/core/controllers/index.js

@@ -4,6 +4,12 @@ import { application } from "../application.js"
 import ThemeFormController from "./theme_form_controller.js"
 application.register("theme-form", ThemeFormController)
 
+import ImageCropperController from "./image_cropper_controller.js"
+application.register("image-cropper", ImageCropperController)
+
+import NavigationToggleController from "./navigation_toggle_controller.js"
+application.register("navigation-toggle", NavigationToggleController)
+
 // Import and register TailwindCSS Stimulus Components
 // These are needed for UI components like slideover, modals, alerts, etc.
 import { Alert, Autosave, ColorPreview, Dropdown, Modal, Tabs, Popover, Toggle, Slideover } from "../tailwindcss-stimulus-components.js"

data/app/javascript/panda/core/controllers/navigation_toggle_controller.js

@@ -0,0 +1,60 @@
+import { Controller } from "@hotwired/stimulus"
+
+// Navigation toggle controller for expandable menu items
+// Usage:
+//   <div data-controller="navigation-toggle">
+//     <button data-navigation-toggle-target="button"
+//             data-action="click->navigation-toggle#toggle"
+//             aria-controls="sub-menu-1"
+//             aria-expanded="false">
+//       <span>Menu Item</span>
+//       <i data-navigation-toggle-target="icon" class="fa-solid fa-chevron-right"></i>
+//     </button>
+//     <div id="sub-menu-1" data-navigation-toggle-target="menu" class="hidden">
+//       <a href="#">Sub Item 1</a>
+//       <a href="#">Sub Item 2</a>
+//     </div>
+//   </div>
+export default class extends Controller {
+  static targets = ["button", "menu", "icon"]
+
+  connect() {
+    // Check if this menu should be expanded by default (if a child is active)
+    const hasActiveChild = this.menuTarget.querySelector(".bg-mid")
+    if (hasActiveChild) {
+      this.expand()
+    }
+  }
+
+  toggle(event) {
+    if (event) {
+      event.preventDefault()
+    }
+
+    const isExpanded = this.buttonTarget.getAttribute("aria-expanded") === "true"
+
+    if (isExpanded) {
+      this.collapse()
+    } else {
+      this.expand()
+    }
+  }
+
+  expand() {
+    this.menuTarget.classList.remove("hidden")
+    this.buttonTarget.setAttribute("aria-expanded", "true")
+
+    if (this.hasIconTarget) {
+      this.iconTarget.classList.add("rotate-90")
+    }
+  }
+
+  collapse() {
+    this.menuTarget.classList.add("hidden")
+    this.buttonTarget.setAttribute("aria-expanded", "false")
+
+    if (this.hasIconTarget) {
+      this.iconTarget.classList.remove("rotate-90")
+    }
+  }
+}

data/app/models/panda/core/user.rb

@@ -13,7 +13,16 @@ module Panda
       before_save :downcase_email
 
       # Scopes
-      scope :admins, -> { where(is_admin: true) }
+      # Support both 'admin' (newer) and 'is_admin' (older) column names
+      scope :admins, -> {
+        if column_names.include?("admin")
+          where(admin: true)
+        elsif column_names.include?("is_admin")
+          where(is_admin: true)
+        else
+          none
+        end
+      }
 
       def self.find_or_create_from_auth_hash(auth_hash)
         user = find_by(email: auth_hash.info.email.downcase)
@@ -56,8 +65,10 @@ module Panda
         user
       end
 
+      # Admin status check
+      # Note: Column is named 'admin' in newer schemas, 'is_admin' in older ones
       def admin?
-        is_admin
+        self[:admin] || self[:is_admin] || false
       end
 
       def active_for_authentication?

data/app/services/panda/core/attach_avatar_service.rb

@@ -28,7 +28,10 @@ module Panda
 
       def download_and_attach_avatar
         # Open the URL with a timeout and size limit
+        # standard:disable Security/Open
+        # Safe in this context as URL comes from trusted OAuth providers (Microsoft, Google, GitHub)
         URI.open(@avatar_url, read_timeout: 10, open_timeout: 10, redirect: true) do |downloaded_file|
+          # standard:enable Security/Open
           # Validate file size (max 5MB)
           if downloaded_file.size > 5.megabytes
             raise "Avatar file too large (#{downloaded_file.size} bytes)"
@@ -46,6 +49,7 @@ module Panda
             content_type: content_type
           )
         end
+        # standard:enable Security/Open
       end
 
       def determine_extension(content_type)

data/app/views/layouts/panda/core/admin.html.erb

@@ -13,26 +13,51 @@
       <%= yield %>
     </div>
     <% if content_for :sidebar %>
-      <div data-toggle-target="toggleable" class="hidden flex absolute right-0 flex-col h-full bg-white divide-y divide-gray-200 shadow-xl basis-3/12"
-            data-transition-enter="transform transition ease-in-out duration-500"
+      <!-- Backdrop overlay -->
+      <div data-toggle-target="toggleable" class="hidden fixed inset-0 bg-gray-500/75 transition-opacity duration-500 ease-in-out dark:bg-gray-900/50 z-40"
+           data-transition-enter="transition-opacity duration-500 ease-in-out"
+           data-transition-enter-from="opacity-0"
+           data-transition-enter-to="opacity-100"
+           data-transition-leave="transition-opacity duration-500 ease-in-out"
+           data-transition-leave-from="opacity-100"
+           data-transition-leave-to="opacity-0"></div>
+
+      <!-- Slideover panel -->
+      <div data-toggle-target="toggleable" class="hidden ml-auto block size-full max-w-md transform fixed right-0 top-0 h-full z-50"
+            data-transition-enter="transform transition ease-in-out duration-500 sm:duration-700"
             data-transition-enter-from="translate-x-full"
             data-transition-enter-to="translate-x-0"
-            data-transition-leave="transform transition ease-in-out duration-500"
-            data-transition-leave-from="translate-x-full"
-            data-transition-leave-to="translate-x-0"
+            data-transition-leave="transform transition ease-in-out duration-500 sm:duration-700"
+            data-transition-leave-from="translate-x-0"
+            data-transition-leave-to="translate-x-full"
             id="slideover">
-        <div class="overflow-y-auto flex-1 h-0">
-          <div class="py-3 px-4 mb-4 bg-black">
-            <div class="flex justify-between items-center">
-              <h2 class="text-base font-semibold leading-6 text-white" id="slideover-title"><i class="mr-2 fa-solid fa-gear"></i> <%= yield :sidebar_title %> </h2>
-              <button type="button" data-action="click->toggle#toggle touch->toggle#toggle"><i class="font-bold text-white fa-solid fa-xmark right"></i></button>
+        <div class="relative flex h-full flex-col bg-white shadow-xl dark:bg-gray-800 dark:after:absolute dark:after:inset-y-0 dark:after:left-0 dark:after:w-px dark:after:bg-white/10">
+          <!-- Header -->
+          <div class="bg-gradient-admin px-4 py-3 sm:px-6">
+            <div class="flex items-center justify-between">
+              <h2 class="text-base font-semibold text-white" id="slideover-title"><%= yield :sidebar_title %></h2>
+              <div class="ml-3 flex items-center">
+                <button type="button" data-action="click->toggle#toggle touch->toggle#toggle" class="flex items-center gap-x-2 rounded-md px-3 py-1.5 text-white bg-white/10 hover:bg-white/20 transition-colors border border-white/20">
+                  <span class="text-sm font-semibold uppercase tracking-wide">Close</span>
+                  <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" aria-hidden="true" class="size-5">
+                    <path d="M6 18 18 6M6 6l12 12" stroke-linecap="round" stroke-linejoin="round" />
+                  </svg>
+                </button>
+              </div>
             </div>
           </div>
-          <div class="flex flex-col flex-1 justify-between">
-            <div class="px-4 space-y-6">
-              <%= yield :sidebar %>
-            </div>
+
+          <!-- Content -->
+          <div class="flex-1 overflow-y-auto">
+            <%= yield :sidebar %>
           </div>
+
+          <!-- Footer (if present) -->
+          <% if content_for?(:sidebar_footer) %>
+            <div class="flex shrink-0 justify-end gap-x-3 border-t border-gray-200 px-4 py-4 dark:border-white/10">
+              <%= yield :sidebar_footer %>
+            </div>
+          <% end %>
         </div>
       </div>
     <% end %>

data/app/views/panda/core/admin/dashboard/_default_content.html.erb

@@ -45,7 +45,7 @@
       </div>
     </div>
 
-    <% # Hook for additional dashboard cards %>
+    <%# Hook for additional dashboard cards %>
     <% if Panda::Core.config.respond_to?(:admin_dashboard_cards) %>
       <% cards = Panda::Core.config.admin_dashboard_cards&.call(current_user) %>
       <% cards&.each do |card| %>

data/app/views/panda/core/admin/dashboard/show.html.erb

@@ -1,8 +1,8 @@
 <div class="" data-controller="dashboard">
   <%= render Panda::Core::Admin::ContainerComponent.new do |container| %>
-    <% container.with_heading(text: "Dashboard", level: 1) %>
-    
-    <% # Hook for dashboard widgets %>
+    <% container.heading(text: "Dashboard", level: 1) %>
+
+    <%# Hook for dashboard widgets %>
     <% if Panda::Core.config.admin_dashboard_widgets %>
       <% widgets = Panda::Core.config.admin_dashboard_widgets.call(current_user) %>
       <% if widgets && widgets.any? %>

data/app/views/panda/core/admin/sessions/new.html.erb

@@ -35,4 +35,4 @@
       </div>
     </div>
   <% end %>
-</div>
+</div>

data/app/views/panda/core/admin/shared/_breadcrumbs.html.erb

@@ -1,28 +1,18 @@
 <% breadcrumb_styles = "text-black/60 hover:text-black/80" %>
 
-<div class="flex mt-1 -mb-1">
-  <nav aria-label="Breadcrumb" id="panda-breadcrumbs" class="grow">
-    <ol role="list" class="px-4 w-full sm:px-6">
+<nav aria-label="Breadcrumb" id="panda-breadcrumbs" class="px-4 w-full sm:px-6 py-2.5">
+  <ol role="list">
+    <li class="inline-block">
+      <a href="<%= Panda::Core.config.admin_path %>" class="<%= breadcrumb_styles %>">
+        <i class="fa fa-solid fa-house fa-fw inline-block w-4 text-center"></i>
+        <span class="sr-only">Home</span>
+      </a>
+    </li>
+    <% breadcrumbs.each do |crumb| %>
       <li class="inline-block">
-        <a href="<%= Panda::Core.config.admin_path %>" class="<%= breadcrumb_styles %>">
-          <i class="fa fa-solid fa-house fa-fw inline-block w-4 text-center"></i>
-          <span class="sr-only">Home</span>
-        </a>
+        <i class="fa-solid fa-chevron-right fa-fw inline-block w-4 text-center font-light <%= breadcrumb_styles %> px-2"></i>
+        <a href="<%= crumb.path %>" class="text-sm font-normal <%= breadcrumb_styles %>"><%= crumb.name %></a>
       </li>
-      <% breadcrumbs.each do |crumb| %>
-        <li class="inline-block">
-          <i class="fa-solid fa-chevron-right fa-fw inline-block w-4 text-center font-light <%= breadcrumb_styles %> px-2"></i>
-          <a href="<%= crumb.path %>" class="text-sm font-normal <%= breadcrumb_styles %>"><%= crumb.name %></a>
-        </li>
-      <% end %>
-    </ol>
-  </nav>
-
-  <% if content_for :sidebar %>
-    <div class="pt-4 pr-8 text-black/80" tabindex="-1">
-      <button type="button" id="slideover-toggle" data-action="click->toggle#toggle touch->toggle#toggle" class="text-sm font-light">
-        <i class="mr-1 fa-light fa-gear"></i> <%= yield :sidebar_title %>
-      </button>
-    </div>
-  <% end %>
-</div>
+    <% end %>
+  </ol>
+</nav>

data/app/views/panda/core/admin/shared/_sidebar.html.erb

@@ -5,21 +5,67 @@
       # Get navigation items in original order for display
       nav_items = Panda::Core.config.admin_navigation_items&.call(current_user) || []
 
+      # Helper to recursively collect all paths from nav items
+      def collect_paths(items)
+        items.flat_map do |item|
+          paths = item[:path] ? [item[:path]] : []
+          paths += collect_paths(item[:children] || [])
+          paths
+        end
+      end
+
       # Find the most specific matching path by checking longest paths first
-      active_path = nav_items
-        .sort_by { |item| -item[:path].length }
-        .find { |item| request.path == item[:path] || request.path.starts_with?(item[:path] + "/") }
-        &.dig(:path)
+      all_paths = collect_paths(nav_items)
+      active_path = all_paths
+        .sort_by { |path| -path.length }
+        .find { |path| request.path == path || request.path.starts_with?(path + "/") }
     %>
-    <% nav_items.each do |item| %>
+    <% nav_items.each_with_index do |item, index| %>
       <li>
         <%
-          # Check if this item is the active one
-          is_active = item[:path] == active_path
+          has_children = item[:children].present?
+
+          # For items with children, check if any child is active
+          if has_children
+            is_active = item[:children].any? do |child|
+              child[:path] && (request.path == child[:path] || request.path.starts_with?(child[:path] + "/"))
+            end
+          else
+            is_active = item[:path] == active_path
+          end
         %>
-        <%= link_to item[:path], class: "#{is_active ? "bg-mid text-white relative flex items-center transition-all py-3 px-2 mb-2 rounded-md group gap-x-3 text-base leading-6 font-normal" : "text-white hover:bg-mid/60 transition-all group flex items-center gap-x-3 py-3 px-2 mb-2 rounded-md text-base leading-6 font-normal"}" do %>
-          <span class="text-center w-6"><i class="<%= item[:icon] %> text-xl fa-fw"></i></span>
-          <span><%= item[:label] %></span>
+
+        <% if has_children %>
+          <div class="space-y-1" data-controller="navigation-toggle">
+            <button type="button"
+                    data-navigation-toggle-target="button"
+                    data-action="click->navigation-toggle#toggle"
+                    aria-controls="sub-menu-<%= index %>"
+                    aria-expanded="false"
+                    class="<%= is_active ? 'bg-mid text-white' : 'text-white hover:bg-mid/60' %> transition-all group flex items-center w-full gap-x-3 py-3 px-2 mb-2 rounded-md text-base leading-6 font-normal">
+              <span class="text-center w-6"><i class="<%= item[:icon] %> text-xl fa-fw"></i></span>
+              <span class="flex-1 text-left"><%= item[:label] %></span>
+              <i class="fa-solid fa-chevron-right text-xs transition-transform duration-150 ease-in-out"
+                 data-navigation-toggle-target="icon"></i>
+            </button>
+            <div id="sub-menu-<%= index %>"
+                 class="space-y-1 hidden"
+                 data-navigation-toggle-target="menu">
+              <% item[:children].each do |child| %>
+                <%
+                  child_is_active = child[:path] && (request.path == child[:path] || request.path.starts_with?(child[:path] + "/"))
+                %>
+                <%= link_to child[:path], class: "#{child_is_active ? 'bg-mid text-white' : 'text-white hover:bg-mid/60'} group flex items-center w-full py-2 pr-2 pl-11 rounded-md text-sm font-normal transition-all" do %>
+                  <%= child[:label] %>
+                <% end %>
+              <% end %>
+            </div>
+          </div>
+        <% else %>
+          <%= link_to item[:path], class: "#{is_active ? "bg-mid text-white relative flex items-center transition-all py-3 px-2 mb-2 rounded-md group gap-x-3 text-base leading-6 font-normal" : "text-white hover:bg-mid/60 transition-all group flex items-center gap-x-3 py-3 px-2 mb-2 rounded-md text-base leading-6 font-normal"}" do %>
+            <span class="text-center w-6"><i class="<%= item[:icon] %> text-xl fa-fw"></i></span>
+            <span><%= item[:label] %></span>
+          <% end %>
         <% end %>
       </li>
     <% end %>
@@ -30,7 +76,11 @@
       <% end %>
     </li>
     <li class="mt-auto">
-      <%= link_to panda_core.edit_admin_my_profile_path, class: "text-white hover:bg-mid/60 transition-all group flex items-center gap-x-3 py-3 px-2 mb-2 rounded-md text-base leading-6 font-normal w-full", title: "Edit my Profile" do %>
+      <%
+        # Check if we're in the my_profile section
+        is_my_profile_active = request.path.starts_with?("#{Panda::Core.config.admin_path}/my_profile")
+      %>
+      <%= link_to panda_core.admin_my_profile_path, class: "#{is_my_profile_active ? 'bg-mid text-white' : 'text-white hover:bg-mid/60'} transition-all group flex items-center gap-x-3 py-3 px-2 mb-2 rounded-md text-base leading-6 font-normal w-full", title: "My Profile" do %>
         <% if current_user.avatar.attached? %>
           <span class="text-center w-6"><%= image_tag main_app.url_for(current_user.avatar), alt: current_user.name, class: "w-auto h-7 rounded-full object-cover" %></span>
         <% elsif !current_user.image_url.to_s.empty? %>

data/app/views/panda/core/admin/shared/_slideover.html.erb

@@ -30,4 +30,4 @@
       </div>
     </div>
   </div>
-</div>
+</div>

data/config/importmap.rb

@@ -6,6 +6,7 @@ pin "panda/core/application", to: "/panda/core/application.js"
 pin "panda/core/controllers/index", to: "/panda/core/controllers/index.js"
 pin "panda/core/controllers/toggle_controller", to: "/panda/core/controllers/toggle_controller.js"
 pin "panda/core/controllers/theme_form_controller", to: "/panda/core/controllers/theme_form_controller.js"
+pin "panda/core/controllers/image_cropper_controller", to: "/panda/core/controllers/image_cropper_controller.js"
 pin "panda/core/tailwindplus-elements", to: "/panda/core/tailwindplus-elements.js"
 
 # Base JavaScript dependencies for Panda Core (vendored for reliability)
@@ -21,3 +22,7 @@ pin "@fortawesome/fontawesome-free", to: "https://ga.jspm.io/npm:@fortawesome/fo
 # Provides: Autocomplete, Command palette, Dialog, Disclosure, Dropdown menu, Popover, Select, Tabs
 # Note: Using esm.sh instead of jsdelivr for better ES module support
 pin "@tailwindplus/elements", to: "https://esm.sh/@tailwindplus/elements@1", preload: false
+
+# Cropper.js - Image cropping library (via esm.sh for reliable ES module support)
+pin "cropperjs", to: "https://esm.sh/cropperjs@1.6.2"
+# Note: Cropper.css is loaded separately via stylesheet_link_tag in views that use cropper

data/config/routes.rb

@@ -17,7 +17,7 @@ Panda::Core::Engine.routes.draw do
     get "/", to: "admin/dashboard#show", as: :root
 
     # Profile management
-    resource :my_profile, only: %i[edit update], controller: "admin/my_profile", path: "my_profile"
+    resource :my_profile, only: %i[show edit update], controller: "admin/my_profile", path: "my_profile"
 
     # Test-only authentication endpoint (available in development and test environments)
     # This bypasses OAuth for faster, more reliable test execution

data/lib/panda/core/asset_loader.rb

@@ -39,11 +39,14 @@ module Panda
 
         # Check if GitHub-hosted assets should be used
         def use_github_assets?
+          # In test, never use GitHub assets (use local engine assets instead)
+          # This allows system tests to load CSS/JS from the engine's public directory
+          return false if Rails.env.test? || in_test_environment?
+
           # Use GitHub assets in production or when explicitly enabled
           Rails.env.production? ||
             ENV["PANDA_CORE_USE_GITHUB_ASSETS"] == "true" ||
-            !development_assets_available? ||
-            ((Rails.env.test? || in_test_environment?) && compiled_assets_available?)
+            !development_assets_available?
         end
 
         private

data/lib/panda/core/engine.rb

@@ -1,15 +1,35 @@
 require "rubygems"
+require "stringio"
 
 require "rails/engine"
 require "omniauth"
-require "omniauth/rails_csrf_protection"
-require "view_component"
+
+# Silence ActiveSupport::Configurable deprecation from omniauth-rails_csrf_protection
+# This gem uses the deprecated module but hasn't been updated yet
+# Issue: https://github.com/cookpad/omniauth-rails_csrf_protection/issues/23
+# This can be removed once the gem is updated or Rails 8.2 is released
+#
+# We suppress the warning by temporarily redirecting stderr since
+# ActiveSupport::Deprecation.silence was removed in Rails 8.1
+original_stderr = $stderr
+$stderr = StringIO.new
+begin
+  require "omniauth/rails_csrf_protection"
+ensure
+  $stderr = original_stderr
+end
 
 module Panda
   module Core
     class Engine < ::Rails::Engine
       isolate_namespace Panda::Core
 
+      # For testing: Don't expose engine migrations since we use "copy to host app" strategy
+      # In test environment, migrations should be copied to the host app
+      if Rails.env.test?
+        config.paths["db/migrate"] = []
+      end
+
       config.eager_load_namespaces << Panda::Core::Engine
 
       # Add engine's app directories to autoload paths
@@ -46,14 +66,6 @@ module Panda
         g.factory_bot dir: "spec/factories"
       end
 
-      initializer "panda_core.append_migrations" do |app|
-        unless app.root.to_s.match?(root.to_s)
-          config.paths["db/migrate"].expanded.each do |expanded_path|
-            app.config.paths["db/migrate"] << expanded_path
-          end
-        end
-      end
-
       initializer "panda_core.config" do |app|
         # Configuration is already initialized with defaults in Configuration class
       end
@@ -76,6 +88,10 @@ module Panda
       end
 
       initializer "panda_core.omniauth" do |app|
+        # Load OAuth provider gems
+        require_relative "oauth_providers"
+        Panda::Core::OAuthProviders.setup
+
         # Mount OmniAuth at configurable admin path
         app.middleware.use OmniAuth::Builder do
           # Configure OmniAuth to use the configured admin path
@@ -121,21 +137,6 @@ module Panda
         require root.join("app/components/panda/core/base")
       end
 
-      # Set up ViewComponent and Lookbook previews
-      initializer "panda_core.view_component" do |app|
-        app.config.view_component.preview_paths ||= []
-        app.config.view_component.preview_paths << root.join("spec/components/previews")
-
-        # Add preview directories to autoload paths in development
-        if Rails.env.development?
-          # Handle frozen autoload_paths array
-          if app.config.autoload_paths.frozen?
-            app.config.autoload_paths = app.config.autoload_paths.dup
-          end
-          app.config.autoload_paths << root.join("spec/components/previews")
-        end
-      end
-
       # Create AdminController alias after controllers are loaded
       # This allows other gems to inherit from Panda::Core::AdminController
       initializer "panda_core.admin_controller_alias", after: :load_config_initializers do