phlex-reactive 0.12.3 → 0.12.4

data/lib/phlex/reactive/component/helpers.rb

@@ -408,6 +408,11 @@ module Phlex
           # on()'s flags above.
           attrs[:data][:reactive_outside_param] = "true" if outside
           attrs[:data][:reactive_window_param] = "true" if window_bound
+          # Issue #228: mark a clipboard-reading trigger so the client can gate
+          # its visibility on availability — on connect the controller sets
+          # hidden = !navigator.clipboard.readText. Render the trigger `hidden`
+          # for reveal-when-available (a dead paste button never shows).
+          attrs[:data][:reactive_clipboard] = "true" if ops.ops.any? { |name, _| name == "paste_into" }
           # Issue #178: confirm: gates the client-op chain behind the SAME
           # overridable confirmResolver on(:action, confirm:) uses (#52/#55). Emits
           # the identical data-reactive-confirm-param; the client's runOps prompts

data/lib/phlex/reactive/js.rb

@@ -185,6 +185,35 @@ module Phlex
         append("submit", target_args(to, global:))
       end
 
+      # --- Clipboard-source paste (issue #228) ---
+      #
+      # paste_into(to) — on a user gesture, read navigator.clipboard.readText()
+      # and feed the text into the target field through the normal `input`
+      # pipeline: set .value, dispatch a bubbling `input` event (so
+      # reactive_compute reducers, reactive_show, and reactive_on_complete all
+      # run exactly as if the user had typed it), then focus the field. The
+      # permission UX is the browser's own; a rejected or unavailable read is a
+      # SILENT NO-OP — page state must not change. The target is a FIELD: there
+      # is no :root default and an explicit :root is refused loudly (pasting
+      # into the root div is always a call-site bug). ACTOR-ONLY like
+      # focus/submit: allowed from on_client / reply.js / reactive_on_complete,
+      # refused in broadcast_to(js:) — a broadcast that reads every
+      # subscriber's clipboard would be hostile. on_client marks the trigger
+      # with data-reactive-clipboard so the client can hide it wherever the
+      # clipboard API is missing (no dead button). NOTE: the gate owns the
+      # trigger's `hidden` flag — don't also bind reactive_show to the trigger
+      # element (the two passes would fight over the same attribute).
+
+      def paste_into(to, global: false)
+        if to == :root
+          raise ArgumentError,
+            "#{self.class}: paste_into targets a field, not the component root — " \
+            "pass the input's CSS selector (e.g. js.paste_into(\"[name=code]\"))"
+        end
+
+        append("paste_into", target_args(to, global:))
+      end
+
       # --- Text content (issue #159) ---
       #
       # text(to, value) — set the target's textContent (stringified; nil clears).

data/lib/phlex/reactive/streamable.rb

@@ -35,10 +35,11 @@ module Phlex
 
       # Actor-only ops: a js broadcast rejects a broadcast that carries one.
       # Focus ops steal focus in every subscriber's tab (issue #96); submit
-      # (issue #226) would force-submit every subscriber's form. Both belong to
+      # (issue #226) would force-submit every subscriber's form; paste_into
+      # (issue #228) would read every subscriber's clipboard. They belong to
       # the actor's own reply (reply.js) or gesture (on_client / a reducer's
       # $ops), never a broadcast. Names mirror Phlex::Reactive::JS's verbs.
-      BROADCAST_REFUSED_OPS = %w[focus focus_first submit].freeze
+      BROADCAST_REFUSED_OPS = %w[focus focus_first submit paste_into].freeze
 
       # The broadcast_to verb kwargs (issue #185) → their Turbo stream action.
       # SELF-TARGETING verbs derive the target from the component's #id (require a
@@ -124,22 +125,45 @@ module Phlex
               "append/prepend/remove), not client-op dispatches"
           end
           resolved_target = resolve_broadcast_target(verb, component, payload, target)
-          # broadcast_js_ops_json is a private class method on the owner Streamable
-          # class (reached via send); the instrumentation + pgbus thread-locals are
-          # owned HERE so the class-level and module-level (plain-component) forms
-          # share ONE path and neither is silently un-instrumented (issue #185).
+          # The instrumentation + pgbus thread-locals are owned HERE so the
+          # class-level and module-level (plain-component) forms share ONE path
+          # and neither is silently un-instrumented (issue #185). The js ops
+          # serializer lives HERE too (issue #228): when it was a private method
+          # on the includer class, the module-level owner (the Streamable module
+          # itself) crashed with NoMethodError instead of refusing — the
+          # actor-only gate must be reachable from BOTH broadcast doors.
           component_name = component ? component.class.name : owner.name
           Phlex::Reactive.instrument(
             "broadcast", { component: component_name, stream_action: BROADCAST_VERBS[verb], streamables: keys.size }
           ) do
             with_pgbus_broadcast_opts(exclude:, visible_to:) do
               html = verb == :js ? nil : render_broadcast_html(component)
-              ops_json = verb == :js ? owner.send(:broadcast_js_ops_json, payload) : nil
+              ops_json = verb == :js ? broadcast_js_ops_json(payload) : nil
               keys.each { dispatch_broadcast(verb, it, resolved_target, html, ops_json, morph, effect) }
             end
           end
         end
 
+        # Validate + serialize broadcast ops: reject actor-only ops (focus steals
+        # focus in every tab; submit force-submits every subscriber's form;
+        # paste_into reads every subscriber's clipboard) and an empty chain (a
+        # dead broadcast), then return the JSON wire form. Works on a JS chain
+        # (inspect .ops) and a raw array. Lives on the module singleton — the
+        # ONE enforcement point both broadcast doors funnel through.
+        def broadcast_js_ops_json(ops)
+          pairs = ops.is_a?(Phlex::Reactive::JS) ? ops.ops : Array(ops)
+          refused = pairs.map { |name, _| name.to_s } & Phlex::Reactive::Streamable::BROADCAST_REFUSED_OPS
+          unless refused.empty?
+            raise ArgumentError,
+              "broadcast_to(js:) refuses actor-only op(s) #{refused.join(", ")} — broadcasting focus " \
+              "steals it in every subscriber's tab; broadcasting submit force-submits every " \
+              "subscriber's form; broadcasting paste_into reads every subscriber's clipboard. " \
+              "These are actor concerns (reply.js / on_client / $ops)."
+          end
+
+          Phlex::Reactive::Response.js_ops_json(ops)
+        end
+
         # Render a built component to HTML for a broadcast, ALWAYS instrumented
         # (issue #185): a Streamable renders through its own render_component (which
         # fires render.phlex_reactive); a plain component renders through the module
@@ -519,23 +543,6 @@ module Phlex
         # instrumentation + pgbus-threading path for the class-level and module-level
         # broadcast_to, so the transport logic has exactly one spelling.)
 
-        # Validate + serialize broadcast ops: reject actor-only ops (focus steals
-        # focus in every tab; submit force-submits every subscriber's form) and an
-        # empty chain (a dead broadcast), then return the JSON wire form. Works on
-        # a JS chain (inspect .ops) and a raw array.
-        def broadcast_js_ops_json(ops)
-          pairs = ops.is_a?(Phlex::Reactive::JS) ? ops.ops : Array(ops)
-          refused = pairs.map { |name, _| name.to_s } & Phlex::Reactive::Streamable::BROADCAST_REFUSED_OPS
-          unless refused.empty?
-            raise ArgumentError,
-              "broadcast_to(js:) refuses actor-only op(s) #{refused.join(", ")} — broadcasting focus " \
-              "steals it in every subscriber's tab; broadcasting submit force-submits every " \
-              "subscriber's form. These are actor concerns (reply.js / on_client / $ops)."
-          end
-
-          Phlex::Reactive::Response.js_ops_json(ops)
-        end
-
         def build(model, options)
           new(**(model ? component_args(model, options) : options))
         end

data/lib/phlex/reactive/version.rb

@@ -2,6 +2,6 @@
 
 module Phlex
   module Reactive
-    VERSION = "0.12.3"
+    VERSION = "0.12.4"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: phlex-reactive
 version: !ruby/object:Gem::Version
-  version: 0.12.3
+  version: 0.12.4
 platform: ruby
 authors:
 - Mikael Henriksson