panda-core 0.7.3 → 0.7.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2d1c4f83377c0b031d5a68ef550668e6ce9d0e09f9d0865da9ab7a5b7349d981
-  data.tar.gz: c82ab418857a1b1961270f417f69ae9e236e1bb36fb3612b7c6e7001ac440cc9
+  metadata.gz: a2cf8c2a2e3d0ee0034e6d066e6b0091a91ac26b45175137bd20e55b428d0b27
+  data.tar.gz: dfce6c83389d46e65195b10ac115d6fde5ae27eb7aeaab791e102b12aa428917
 SHA512:
-  metadata.gz: 3ab5424862f54e04222d4a8909487e0179e5a73ba1852cce491bd0767cfd26d177d02e720317c610d610275bd895f757cec61d337708a211fd12240db6d3fe47
-  data.tar.gz: d24d95c56a5ceac68c0713e51cb029a63b27f88476bf1d93007ae6822a472ea456d919e833c0f26817489dee98af8407a3d6f958b8f2d73846a8b5a064e51dd1
+  metadata.gz: 733a874eeff0435314e2fde0ec445a35b13c3f5623bb4bb711d6bc6a5709bdc9bf07699cfa7c241868f3157c0421c3993b91a1f43c7704378aae0f7e07c5f74e
+  data.tar.gz: 3fed89c4393a1b33ab120308a40657189719c1a9b956afb822823eefda663989a259f769535fb00a587dd9e3136d70e6c0fcb4b8ceb0dbac4cc4b8511b001ff1

data/app/components/panda/core/admin/user_display_component.rb

@@ -31,14 +31,15 @@ module Panda
 
         def render_avatar
           has_image = resolved_user.respond_to?(:avatar_url) &&
-            resolved_user.avatar_url.present?
+            resolved_user.avatar_url(size: :small).present?
 
           if has_image
             div do
               img(
                 class: "inline-block w-10 h-10 rounded-full object-cover",
-                src: resolved_user.avatar_url,
-                alt: ""
+                src: resolved_user.avatar_url(size: :small),
+                alt: "",
+                loading: "lazy"
               )
             end
           else

data/app/models/panda/core/user.rb

@@ -5,8 +5,13 @@ module Panda
     class User < ApplicationRecord
       self.table_name = "panda_core_users"
 
-      # Active Storage attachment for avatar
-      has_one_attached :avatar
+      # Active Storage attachment for avatar with variants
+      has_one_attached :avatar do |attachable|
+        attachable.variant :thumb, resize_to_limit: [50, 50], preprocessed: true
+        attachable.variant :small, resize_to_limit: [100, 100], preprocessed: true
+        attachable.variant :medium, resize_to_limit: [200, 200], preprocessed: true
+        attachable.variant :large, resize_to_limit: [400, 400], preprocessed: true
+      end
 
       validates :email, presence: true, uniqueness: {case_sensitive: false}
 
@@ -90,9 +95,15 @@ module Panda
 
       # Returns the URL for the user's avatar
       # Prefers Active Storage attachment over OAuth provider URL
-      def avatar_url
+      # @param size [Symbol] The variant size (:thumb, :small, :medium, :large, or nil for original)
+      # @return [String, nil] The avatar URL or nil if no avatar available
+      def avatar_url(size: nil)
         if avatar.attached?
-          Rails.application.routes.url_helpers.rails_blob_path(avatar, only_path: true)
+          if size && [:thumb, :small, :medium, :large].include?(size)
+            Rails.application.routes.url_helpers.rails_blob_path(avatar.variant(size), only_path: true)
+          else
+            Rails.application.routes.url_helpers.rails_blob_path(avatar, only_path: true)
+          end
         elsif self[:image_url].present?
           # Fallback to OAuth provider URL if no avatar is attached yet
           self[:image_url]

data/app/services/panda/core/attach_avatar_service.rb

@@ -5,6 +5,9 @@ require "open-uri"
 module Panda
   module Core
     class AttachAvatarService < Services::BaseService
+      MAX_FILE_SIZE = 5.megabytes
+      MAX_DIMENSION = 800 # Max width/height for optimization
+
       def initialize(user:, avatar_url:)
         @user = user
         @avatar_url = avatar_url
@@ -33,25 +36,67 @@ module Panda
         URI.open(@avatar_url, read_timeout: 10, open_timeout: 10, redirect: true) do |downloaded_file|
           # standard:enable Security/Open
           # Validate file size (max 5MB)
-          if downloaded_file.size > 5.megabytes
+          if downloaded_file.size > MAX_FILE_SIZE
             raise "Avatar file too large (#{downloaded_file.size} bytes)"
           end
 
           # Determine content type and filename
           content_type = downloaded_file.content_type || "image/jpeg"
-          extension = determine_extension(content_type)
-          filename = "avatar_#{@user.id}_#{Time.current.to_i}#{extension}"
 
-          # Attach the avatar
+          # Optimize and attach the avatar
+          optimized_file = optimize_image(downloaded_file, content_type)
+
+          filename = "avatar_#{@user.id}_#{Time.current.to_i}.webp"
+
+          # Attach the optimized avatar
           @user.avatar.attach(
-            io: downloaded_file,
+            io: optimized_file,
             filename: filename,
-            content_type: content_type
+            content_type: "image/webp"
           )
         end
         # standard:enable Security/Open
       end
 
+      def optimize_image(file, content_type)
+        processor = Panda::Core.config.avatar_image_processor
+        loader = load_image_processor(processor)
+        return file unless loader
+
+        begin
+          processed = loader
+            .source(file)
+            .resize_to_limit(MAX_DIMENSION, MAX_DIMENSION)
+            .convert("webp")
+            .saver(quality: 85, strip: true) # Strip metadata, 85% quality
+            .call
+
+          # Return File object
+          File.open(processed.path)
+        rescue => e
+          Rails.logger.warn("Image optimization failed (#{processor}), using original: #{e.message}")
+          # Fallback to original file if optimization fails
+          file
+        end
+      end
+
+      def load_image_processor(processor)
+        case processor
+        when :vips
+          require "image_processing/vips"
+          ImageProcessing::Vips
+        when :mini_magick
+          require "image_processing/mini_magick"
+          ImageProcessing::MiniMagick
+        else
+          Rails.logger.warn("Unknown image processor: #{processor}, avatar optimization disabled")
+          nil
+        end
+      rescue LoadError => e
+        Rails.logger.warn("Image processor #{processor} not available: #{e.message}")
+        nil
+      end
+
       def determine_extension(content_type)
         case content_type
         when /jpeg|jpg/

data/lib/panda/core/configuration.rb

@@ -24,7 +24,12 @@ module Panda
         :login_page_title,
         :admin_title,
         :initial_admin_breadcrumb,
-        :dashboard_redirect_path
+        :dashboard_redirect_path,
+        :avatar_variants,
+        :avatar_max_file_size,
+        :avatar_max_dimension,
+        :avatar_optimization_quality,
+        :avatar_image_processor
 
       def initialize
         @user_class = "Panda::Core::User"
@@ -80,6 +85,18 @@ module Panda
         @admin_title = "Panda Admin"
         @initial_admin_breadcrumb = nil  # Proc that returns [label, path]
         @dashboard_redirect_path = nil  # Path to redirect to after login (defaults to admin_root_path)
+
+        # Avatar configuration
+        @avatar_variants = {
+          thumb: {resize_to_limit: [50, 50]},
+          small: {resize_to_limit: [100, 100]},
+          medium: {resize_to_limit: [200, 200]},
+          large: {resize_to_limit: [400, 400]}
+        }
+        @avatar_max_file_size = 5.megabytes
+        @avatar_max_dimension = 800
+        @avatar_optimization_quality = 85
+        @avatar_image_processor = :vips # or :mini_magick
       end
     end
 

data/lib/panda/core/version.rb

@@ -2,6 +2,6 @@
 
 module Panda
   module Core
-    VERSION = "0.7.3"
+    VERSION = "0.7.4"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: panda-core
 version: !ruby/object:Gem::Version
-  version: 0.7.3
+  version: 0.7.4
 platform: ruby
 authors:
 - Otaina Limited
@@ -10,6 +10,20 @@ bindir: bin
 cert_chain: []
 date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: image_processing
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
 - !ruby/object:Gem::Dependency
   name: importmap-rails
   requirement: !ruby/object:Gem::Requirement