phlex-reactive 0.16.0 → 0.16.2

data/lib/phlex/reactive/component/registry.rb

@@ -103,6 +103,13 @@ module Phlex
         # attribute fragments), shared by warm! so a non-main Ractor can read it.
         MEMO_IVARS = %i[@reactive_record_ivar @reactive_state_ivars @reactive_effect_attrs @reactive_on_complete_attr].freeze
 
+        # Every class ivar warm! leaves for a request to read, each shared
+        # deeply so a non-main Ractor can read it: the class's own
+        # declarations, the resolution cache and the render path's memos.
+        # (The generation counters next to them are Integers, shareable as
+        # they are.)
+        WARMED_IVARS = [*OWN_IVARS.values, :@reactive_registry_cache, *MEMO_IVARS].freeze
+
         # Every class with the reactive DSL, a ClientBindings-only view
         # included (Streamable's registry has only the token-bearing ones):
         # what the engine warms at boot. Per-Ractor (Phlex::Reactive::Store);
@@ -161,7 +168,7 @@ module Phlex
 
           # Resolve every registry kind and build the render path's per-class
           # memos for each reactive component class among `classes`, then
-          # freeze each class's resolution cache. The engine runs it at boot
+          # share (deep-freeze) what each class keeps (WARMED_IVARS). The engine runs it at boot
           # when the app eager-loads (every class is loaded by then), so a
           # request reads memos and never writes the class. A declaration
           # after it (a development reload) bumps the generation and the next
@@ -226,10 +233,14 @@ module Phlex
           end
 
           # The class's own storage for `kind`, initialized from the block on
-          # first write.
+          # first write. warm! shares (freezes) it, so a declaration after
+          # warm! (a development reload) writes to a fresh copy.
           def own!(klass, kind)
             ivar = OWN_IVARS.fetch(kind)
-            klass.instance_variable_get(ivar) || klass.instance_variable_set(ivar, yield)
+            current = klass.instance_variable_get(ivar)
+            return current if current && !current.frozen?
+
+            klass.instance_variable_set(ivar, current ? current.dup : yield)
           end
 
           # Invalidate every resolution memo in the process (generation bump)
@@ -257,8 +268,7 @@ module Phlex
 
           def warm_class(klass)
             [*READERS.values, *MEMO_READERS].each { klass.public_send(it) if klass.respond_to?(it) }
-            klass.instance_variable_get(:@reactive_registry_cache)&.freeze
-            MEMO_IVARS.each do
+            WARMED_IVARS.each do
               next unless klass.instance_variable_defined?(it)
 
               klass.instance_variable_set(it, Phlex::Reactive::Shareable.share(klass.instance_variable_get(it)))

data/lib/phlex/reactive/engine.rb

@@ -20,10 +20,12 @@ module Phlex
       # build script (scripts/build_client.js), the core's own table and the
       # default entry name the same features —
       # spec/phlex/engine_client_pin_spec.rb fails when they disagree.
-      CLIENT_FEATURES = %w[persist defer form bindings compute sortable presence countdown effects hints devtools].freeze
-      # (Gzipped, bun zlib level 9, KB = 1,024 B: the default file 30.9 KB; the core 14.3 KB;
-      # persist 3.1, defer 2.9, form 1.1, bindings 6.5, compute 2.0, sortable
-      # 3.1, presence 1.3, countdown 0.9, effects 1.7, hints 0.9, devtools 1.5 KB. spec/javascript/bundle_budget.test.js
+      CLIENT_FEATURES = %w[
+        persist defer form bindings compute sortable drag presence countdown effects hints devtools
+      ].freeze
+      # (Gzipped, bun zlib level 9, KB = 1,024 B: the default file 39.5 KB; the core 17.9 KB;
+      # persist 3.2, defer 2.9, form 1.2, bindings 8.0, compute 2.0, sortable
+      # 3.1, drag 3.5, presence 1.3, countdown 0.9, effects 1.7, hints 0.9, devtools 1.5 KB. spec/javascript/bundle_budget.test.js
       # is the source of truth and holds a ratchet on each.)
 
       # Mount POST /reactive/actions -> Phlex::Reactive::ActionsController#create
@@ -32,13 +34,20 @@ module Phlex
       # (the privately cacheable lazy render, issue #277). Apps can change the
       # paths with Phlex::Reactive.action_path / .defer_path / .fragment_path
       # before boot.
+      #
+      # Rails main's RouteSet#finalize! makes the route set Ractor-shareable,
+      # append blocks included, and a block's self here is the engine, which
+      # no Ractor can share. Ractor.shareable_proc (Ruby 4.0+) gives the block
+      # a nil self; Mapper evaluates it with its own self either way.
       initializer "phlex_reactive.routes" do
-        it.routes.append do
+        routes = proc do
           post Phlex::Reactive.action_path, to: "phlex/reactive/actions#create", as: :phlex_reactive_action
           post Phlex::Reactive.defer_path, to: "phlex/reactive/actions#deferred", as: :phlex_reactive_defer
           get "#{Phlex::Reactive.fragment_path}/:id", to: "phlex/reactive/fragments#show",
             as: :phlex_reactive_fragment
         end
+        routes = ::Ractor.shareable_proc(&routes) if defined?(::Ractor) && ::Ractor.respond_to?(:shareable_proc)
+        it.routes.append(&routes)
       end
 
       # Make the MINIFIED client build available to Propshaft/Sprockets so it can

data/lib/phlex/reactive/held_fields.rb

@@ -14,9 +14,15 @@ module Phlex
     #
     #   def save(title: nil)
     #     authorize!(@note, to: :update?)
-    #     return conflict! if reactive_held_fields.include?("title") && title != @note.title
+    #     return reply.morph.refused("title") if reactive_held_fields.include?("title") && title != @note.title
     #     ...
     #
+    # A reply to the root's own request releases its marks: it answers exactly
+    # those values. A refusal (`reply.morph.refused`, issue #413) is sent back
+    # in the X-Reactive-Refused header, and the client keeps the marks it names,
+    # so the user's next keystroke is refused too until the action stores the
+    # field or the user takes the other value.
+    #
     # The header is UNTRUSTED input, like every request field: it carries names
     # only, never values, and is read as data — capped in bytes, count and
     # length, non-strings dropped, and filtered to the names the running action
@@ -26,6 +32,8 @@ module Phlex
     # It is a hint about what the user saw, not authorization.
     module HeldFields
       HEADER = "X-Reactive-Held"
+      # The response header a refusing reply sends (issue #413).
+      REFUSED_HEADER = "X-Reactive-Refused"
 
       # A raw header longer than this is ignored unparsed.
       MAX_BYTES = 4_096
@@ -62,6 +70,18 @@ module Phlex
           EMPTY
         end
 
+        # The X-Reactive-Refused value for Response#refused_fields: "*" keeps
+        # every mark, a JSON list keeps those names. ASCII only (a header is a
+        # byte string), as the client escapes X-Reactive-Held. A list past
+        # MAX_BYTES (a header a proxy may refuse) widens to "*": keeping more
+        # marks than named is safe, losing the refusal is not.
+        def refused_header(fields)
+          return "*" if fields == :all
+
+          json = JSON.generate(fields, ascii_only: true)
+          json.bytesize > MAX_BYTES ? "*" : json
+        end
+
         # Keep the strings among `names` that `action_def` declares as params.
         def filter(names, action_def)
           declared = declared_names(action_def)

data/lib/phlex/reactive/param_schema.rb

@@ -143,8 +143,12 @@ module Phlex
 
       attr_reader :schema
 
+      # Ractor-shareable once built: a deep-frozen copy of the declared schema
+      # (the app's own Hash is left alone) and nothing written after this, so
+      # a warmed action definition can be read from a non-main Ractor.
       def initialize(schema)
-        @schema = schema
+        @schema = Phlex::Reactive::Shareable.share(schema)
+        freeze
       end
 
       # Coerce client params against this schema. Anything not in the schema is

data/lib/phlex/reactive/response.rb

@@ -19,6 +19,7 @@ module Phlex
     #   reply.remove                           # drop the element (e.g. moderation queue)
     #   reply.redirect(article_url(@article))  # slug changed -> Turbo.visit the new URL
     #   reply.replace.stream(Totals.update(@order))  # multi-stream
+    #   reply.morph.refused("title")           # answered, not stored: keep the field held
     class Response
       attr_reader :streams, :redirect_url, :token_component, :subject_component
 
@@ -351,8 +352,11 @@ data-reactive-ops="#{ERB::Util.html_escape(json)}"></turbo-stream>).html_safe
       # reply never allocates an empty array per Response.
       NO_SEGMENTS = [].freeze
 
+      # refused: what #refused recorded (issue #413) — nil, :all, or a frozen
+      # list of field names.
       def initialize(streams: [], redirect_url: nil, render_self: true, token_component: nil,
-                     subject_component: nil, deferred_segments: NO_SEGMENTS, pending_segments: NO_SEGMENTS)
+                     subject_component: nil, deferred_segments: NO_SEGMENTS, pending_segments: NO_SEGMENTS,
+                     refused: nil)
         @streams = streams.freeze
         @redirect_url = redirect_url
         @render_self = render_self
@@ -360,9 +364,14 @@ data-reactive-ops="#{ERB::Util.html_escape(json)}"></turbo-stream>).html_safe
         @subject_component = subject_component
         @deferred_segments = deferred_segments.freeze
         @pending_segments = pending_segments.freeze
+        @refused_fields = refused
         freeze
       end
 
+      # What the reply refused (issue #413): :all, the field names, or nil when
+      # it refused nothing.
+      attr_reader :refused_fields
+
       # The recorded reply.defer segments (issue #165), in call order. The
       # Response only RECORDS them; the endpoint (via the Defer module) builds
       # the placeholder + directive streams AFTER the action's transaction
@@ -388,7 +397,8 @@ data-reactive-ops="#{ERB::Util.html_escape(json)}"></turbo-stream>).html_safe
           token_component: @token_component,
           subject_component: @subject_component,
           deferred_segments: @deferred_segments,
-          pending_segments: @pending_segments
+          pending_segments: @pending_segments,
+          refused: @refused_fields
         )
       end
 
@@ -420,7 +430,8 @@ data-reactive-ops="#{ERB::Util.html_escape(json)}"></turbo-stream>).html_safe
           subject_component: @subject_component,
           deferred_segments: @deferred_segments +
             [Phlex::Reactive::Defer::Segment.new(component:, placeholder:, morph:)],
-          pending_segments: @pending_segments
+          pending_segments: @pending_segments,
+          refused: @refused_fields
         )
       end
 
@@ -464,10 +475,50 @@ data-reactive-ops="#{ERB::Util.html_escape(json)}"></turbo-stream>).html_safe
           token_component: @token_component || built.token_component,
           subject_component: @subject_component,
           deferred_segments: @deferred_segments,
-          pending_segments: @pending_segments + built.pending_segments
+          pending_segments: @pending_segments + built.pending_segments,
+          refused: @refused_fields
+        )
+      end
+
+      # Answer the posted values without storing them (issue #413). Every reply
+      # to a root's own request releases the fields a morph held (issue #370),
+      # because it answers exactly those values. A reply that refused them says
+      # so, and the client keeps the marks: the root's next action names the
+      # same fields in X-Reactive-Held again, instead of saving over the other
+      # change on the user's next keystroke.
+      #
+      #   if reactive_held_fields.include?("title") && title != @note.title
+      #     @conflict = title
+      #     return reply.morph.refused("title")
+      #   end
+      #
+      # No names keeps every mark the root holds; names (the fields' `name`
+      # attributes, as reactive_held_fields reports them) keep only those, and
+      # the root's other marks release as usual. Nothing else about the reply
+      # changes: it is a 200, with no error marker and no reactive:error.
+      # Returns a NEW Response (immutable). Dead on a redirect, like #defer.
+      def refused(*names)
+        if redirect?
+          raise Phlex::Reactive::Error,
+            "reply.refused on a redirect reply is dead — the client is navigating away, " \
+            "so there is no held field left to keep"
+        end
+
+        names = names.flatten.map { -it.to_s }.uniq.freeze
+        self.class.new(
+          streams: @streams,
+          redirect_url: @redirect_url,
+          render_self: @render_self,
+          token_component: @token_component,
+          subject_component: @subject_component,
+          deferred_segments: @deferred_segments,
+          pending_segments: @pending_segments,
+          refused: names.empty? ? :all : names
         )
       end
 
+      def refused? = !@refused_fields.nil?
+
       # Chain a `reactive:js` op stream — server-pushed client DOM ops (issue
       # #97) — onto this reply, so a focus/dispatch/class toggle runs on the
       # client after the render applies:

data/lib/phlex/reactive/shareable.rb

@@ -23,6 +23,10 @@ module Phlex
       #     works on the main Ractor only;
       #   * a Hash keeps its default value or default proc and its
       #     compare_by_identity;
+      #   * a Data value (the gem's declarations: an action, a compute, a
+      #     collection) comes back as a copy with every member shared, when
+      #     its class keeps Data's own initialize (one of its own may
+      #     normalize or validate, and is never run again);
       #   * any other object (a MessageVerifier, an APM adapter, an app object)
       #     is kept as is.
       #
@@ -35,6 +39,7 @@ module Phlex
         when ::Proc then share_proc(value.dup) || value
         when ::Array then seal(value.map { share(it) })
         when ::Hash then share_hash(value)
+        when ::Data then plain_data?(value) ? share_data(value) : value
         when ::String then value.dup.freeze
         else value
         end
@@ -60,12 +65,14 @@ module Phlex
       end
 
       # The Proc made shareable in place, or nil when it cannot be (or there
-      # is no Ractor).
+      # is no Ractor). Ruby raises Ractor::IsolationError for an unshareable
+      # self or capture, and ArgumentError for a Proc that assigns a variable
+      # it captures.
       def share_proc(callable)
         return unless defined?(::Ractor)
 
         ::Ractor.make_shareable(callable)
-      rescue ::Ractor::Error
+      rescue ::Ractor::Error, ::ArgumentError
         nil
       end
 
@@ -78,10 +85,18 @@ module Phlex
         seal(copy)
       end
 
+      # Data#with runs the class's initialize again: only Data's own, which
+      # just assigns the members, is safe to.
+      def plain_data?(data) = data.class.instance_method(:initialize).owner.equal?(::Data)
+
+      # A copy with every member shared. Data is always frozen, so the copy
+      # is shareable when every member is.
+      def share_data(data) = data.with(**data.to_h.transform_values { share(it) })
+
       # Frozen; shareable as well when everything inside it is.
       def seal(collection) = collection.freeze
 
-      private_class_method :share_proc, :share_hash, :seal
+      private_class_method :share_proc, :share_hash, :plain_data?, :share_data, :seal
     end
   end
 end

data/lib/phlex/reactive/test_helpers.rb

@@ -271,6 +271,12 @@ module Phlex
           @response&.redirect_url
         end
 
+        # The action answered without storing (reply.morph.refused, issue #413):
+        # the client keeps the fields it held.
+        def refused?
+          !@response.nil? && @response.refused?
+        end
+
         # The actor's turbo-stream strings, exactly as the endpoint would render
         # them (response_streams) — a legacy return is the single self-replace; a
         # Response is honored, with the same token-refresh streams appended.

data/lib/phlex/reactive/version.rb

@@ -2,6 +2,6 @@
 
 module Phlex
   module Reactive
-    VERSION = "0.16.0"
+    VERSION = "0.16.2"
   end
 end

data/sig/phlex/reactive/response.rbs

@@ -9,6 +9,7 @@ module Phlex
       attr_reader subject_component: untyped
       attr_reader deferred_segments: Array[untyped]
       attr_reader pending_segments: Array[untyped]
+      attr_reader refused_fields: (:all | Array[String])?
 
       # --- chaining ---
       def stream: (*String more) -> Response
@@ -17,6 +18,7 @@ module Phlex
       def also: (?untyped companion, ?morph: bool, **untyped targets) -> Response
       def defer: (untyped component, ?placeholder: untyped, ?morph: bool) -> Response
       def pending: (untyped records, ?peers: bool, ?job: untyped, ?args: untyped, **untyped opts) ?{ (?) -> untyped } -> Response
+      def refused: (*(String | Symbol | Array[String | Symbol]) names) -> Response
 
       # Removed: each raises a guided error naming its replacement.
       def also_update: (untyped target, **untyped) -> bot
@@ -28,6 +30,7 @@ module Phlex
       def refresh_token?: () -> bool
       def deferred?: () -> bool
       def pending?: () -> bool
+      def refused?: () -> bool
 
       # --- the builders `reply` delegates to ---
       def self.build_replace: (untyped component, ?morph: bool, ?effect: untyped) -> Response

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: phlex-reactive
 version: !ruby/object:Gem::Version
-  version: 0.16.0
+  version: 0.16.2
 platform: ruby
 authors:
 - Mikael Henriksson
@@ -149,6 +149,9 @@ files:
 - app/javascript/phlex/reactive/features/devtools.js
 - app/javascript/phlex/reactive/features/devtools.min.js
 - app/javascript/phlex/reactive/features/devtools.min.js.map
+- app/javascript/phlex/reactive/features/drag.js
+- app/javascript/phlex/reactive/features/drag.min.js
+- app/javascript/phlex/reactive/features/drag.min.js.map
 - app/javascript/phlex/reactive/features/effects.js
 - app/javascript/phlex/reactive/features/effects.min.js
 - app/javascript/phlex/reactive/features/effects.min.js.map
@@ -197,6 +200,8 @@ files:
 - lib/phlex/reactive/collections.rb
 - lib/phlex/reactive/component.rb
 - lib/phlex/reactive/component/countdown_binding.rb
+- lib/phlex/reactive/component/css_vars_binding.rb
+- lib/phlex/reactive/component/drag.rb
 - lib/phlex/reactive/component/dsl.rb
 - lib/phlex/reactive/component/editable.rb
 - lib/phlex/reactive/component/field_references.rb