plutonium 0.33.1 → 0.34.0

data/lib/generators/pu/res/model/USAGE

@@ -1,113 +1,109 @@
 Description:
-Generates a new model. Pass the model name, either CamelCased or
-under_scored, and an optional list of attribute pairs as arguments.
-
-    Attribute pairs are field:type arguments specifying the
-    model's attributes. Timestamps are added by default, so you don't have to
-    specify them by hand as 'created_at:datetime updated_at:datetime'.
-
-    As a special case, specifying 'password:digest' will generate a
-    password_digest field of string type, and configure your generated model and
-    tests for use with Active Model has_secure_password (assuming the default ORM
-    and test framework are being used).
-
-    You don't have to think up every attribute up front, but it helps to
-    sketch out a few so you can start working with the model immediately.
-
-    This generator invokes your configured ORM and test framework, which
-    defaults to Active Record and TestUnit.
-
-    Finally, if --parent option is given, it's used as superclass of the
-    created model. This allows you create Single Table Inheritance models.
-
-    If you pass a namespaced model name (e.g. admin/account or Admin::Account)
-    then the generator will create a module with a table_name_prefix method
-    to prefix the model's table name with the module name (e.g. admin_accounts)
-
-Available field types:
-
-    Just after the field name you can specify a type like text or boolean.
-    It will generate the column with the associated SQL type. For instance:
-
-        `bin/rails generate model post title:string body:text`
-
-    will generate a title column with a varchar type and a body column with a text
-    type. If no type is specified the string type will be used by default.
-    You can use the following types:
-
-        integer
-        primary_key
-        decimal
-        float
-        boolean
-        binary
-        string
-        text
-        date
-        time
-        datetime
-
-    You can also consider `references` as a kind of type. For instance, if you run:
-
-        `bin/rails generate model photo title:string album:references`
-
-    It will generate an `album_id` column. You should generate these kinds of fields when
-    you will use a `belongs_to` association, for instance. `references` also supports
-    polymorphism, you can enable polymorphism like this:
-
-        `bin/rails generate model product supplier:references{polymorphic}`
-
-    For integer, string, text and binary fields, an integer in curly braces will
-    be set as the limit:
-
-        `bin/rails generate model user pseudo:string{30}`
-
-    For decimal, two integers separated by a comma in curly braces will be used
-    for precision and scale:
-
-        `bin/rails generate model product 'price:decimal{10,2}'`
-
-    You can add a `:uniq` or `:index` suffix for unique or standard indexes
-    respectively:
-
-        `bin/rails generate model user pseudo:string:uniq`
-        `bin/rails generate model user pseudo:string:index`
-
-    You can combine any single curly brace option with the index options:
-
-        `bin/rails generate model user username:string{30}:uniq`
-        `bin/rails generate model product supplier:references{polymorphic}:index`
-
-    If you require a `password_digest` string column for use with
-    has_secure_password, you can specify `password:digest`:
-
-        `bin/rails generate model user password:digest`
-
-    If you require a `token` string column for use with
-    has_secure_token, you can specify `auth_token:token`:
-
-        `bin/rails generate model user auth_token:token`
+    Generates a Plutonium model with migration.
+
+Usage:
+    rails g pu:res:model NAME [field:type field:type] [options]
+
+Options:
+    --dest=DESTINATION   Target destination (required to avoid interactive prompts)
+                         Use 'main_app' for main application resources
+                         Use 'package_name' for feature package resources
+
+Field Syntax:
+    name:type            Required field
+    'name:type?'         Nullable field (quote to prevent shell expansion)
+    name:type:index      Field with index
+    name:type:uniq       Field with unique index
+
+Supported Types:
+    string               VARCHAR
+    text                 TEXT
+    integer              INTEGER
+    float                FLOAT
+    decimal              DECIMAL
+    boolean              BOOLEAN
+    date                 DATE
+    datetime             DATETIME
+    time                 TIME
+    binary               BINARY
+    belongs_to           Foreign key with association
+    references           Same as belongs_to
+    rich_text            ActionText (has_rich_text)
+    attachment           Single file (has_one_attached)
+    attachments          Multiple files (has_many_attached)
+    token                Secure token (has_secure_token, auto unique index)
+    password_digest      Secure password (has_secure_password)
+
+Type Options (in curly braces):
+    'field:decimal{10,2}'        Decimal precision and scale
+    'field:decimal?{10,2}'       Nullable with precision
+    'field:string{100}'          String limit (optional)
+    'ref:references{polymorphic}' Polymorphic association (optional)
+
+    Note: For default values, edit the migration manually after generation.
+
+Nullable Fields:
+    Append ? to any type to make it nullable. Must quote to prevent shell expansion:
+
+        'name:string?'           null: true
+        'score:integer?'         null: true
+        'parent:belongs_to?'     null: true, optional: true in model
+        'amount:decimal?{10,2}'  null: true with precision
+
+Index Types:
+    email:string:index           Regular index
+    email:string:uniq            Unique index
+    'code:string{50}:uniq'       With limit and unique index
 
 Examples:
-`bin/rails generate model account`
-
-        For Active Record and TestUnit it creates:
-
-            Model:      app/models/account.rb
-            Test:       test/models/account_test.rb
-            Fixtures:   test/fixtures/accounts.yml
-            Migration:  db/migrate/XXX_create_accounts.rb
-
-    `bin/rails generate model post title:string body:text published:boolean`
-
-        Creates a Post model with a string title, text body, and published flag.
-
-    `bin/rails generate model admin/account`
-
-        For Active Record and TestUnit it creates:
-
-            Module:     app/models/admin.rb
-            Model:      app/models/admin/account.rb
-            Test:       test/models/admin/account_test.rb
-            Fixtures:   test/fixtures/admin/accounts.yml
-            Migration:  db/migrate/XXX_create_admin_accounts.rb
+    # Main app model
+    rails g pu:res:model post title:string 'body:text?' --dest=main_app
+
+    # Package model
+    rails g pu:res:model post title:string 'body:text?' --dest=blogging
+
+    # With associations
+    rails g pu:res:model article \
+        user:belongs_to \
+        'category:belongs_to?' \
+        title:string \
+        slug:string:uniq \
+        --dest=blogging
+
+    # With decimal precision
+    rails g pu:res:model product \
+        name:string \
+        'price:decimal{10,2}' \
+        'cost:decimal?{10,2}' \
+        --dest=inventory
+
+    # Cross-package reference
+    rails g pu:res:model order_item \
+        order:belongs_to \
+        inventory/product:belongs_to \
+        quantity:integer \
+        'unit_price:decimal{10,2}' \
+        --dest=sales
+
+    # With attachments and rich text
+    rails g pu:res:model article \
+        title:string \
+        content:rich_text \
+        cover:attachment \
+        gallery:attachments \
+        --dest=blogging
+
+    # With token
+    rails g pu:res:model api_key \
+        user:belongs_to \
+        access_token:token \
+        'expires_at:datetime?' \
+        --dest=auth
+
+Generated Files (main_app):
+    Model:      app/models/[name].rb
+    Migration:  db/migrate/xxx_create_[names].rb
+
+Generated Files (package):
+    Model:      app/models/[package]/[name].rb
+    Migration:  db/migrate/xxx_create_[package]_[names].rb

data/lib/generators/pu/res/model/templates/model.rb.tt

@@ -6,13 +6,17 @@ require_relative "../<%= class_path.last.underscore %>"
 class <%= class_name %> < <%= [feature_package_name, "ResourceRecord"].join "::" %>
   # add concerns above.
 
+  # add constants above.
+
+  # add enums above.
+
 <% attributes.select(&:cents?).each do |attribute| -%>
   has_cents :<%= attribute.name %>
 <% end -%>
   # add model configurations above.
 
 <% attributes.select(&:reference?).each do |attribute| -%>
-  belongs_to :<%= attribute.name %><%= ", polymorphic: true" if attribute.polymorphic? %><%= ", class_name: \"#{attribute.attr_options[:class_name]}\"" if attribute.attr_options[:class_name] %>
+  belongs_to :<%= attribute.name %><%= ", optional: true" unless attribute.required? %><%= ", polymorphic: true" if attribute.polymorphic? %><%= ", class_name: \"#{attribute.attr_options[:class_name]}\"" if attribute.attr_options[:class_name] %>
 <% end -%>
   # add belongs_to associations above.
 
@@ -51,6 +55,6 @@ class <%= class_name %> < <%= [feature_package_name, "ResourceRecord"].join "::"
 <% end -%>
   # add misc attribute macros above.
 
-  # add methods above.
+  # add methods above. add private methods below.
 end
 <% end -%>

data/lib/generators/pu/res/scaffold/USAGE

@@ -0,0 +1,85 @@
+Description:
+    Generates a complete Plutonium resource with model, migration, controller,
+    policy, and definition.
+
+Usage:
+    rails g pu:res:scaffold NAME [field:type field:type] --dest=DESTINATION
+
+Options:
+    --dest=DESTINATION   Target destination (required to avoid interactive prompts)
+                         Use 'main_app' for main application resources
+                         Use 'package_name' for feature package resources
+    --no-model           Skip model and migration generation
+
+Field Syntax:
+    name:type            Required field
+    'name:type?'         Nullable field (quote to prevent shell expansion)
+    name:type:index      Field with index
+    name:type:uniq       Field with unique index
+
+Supported Types:
+    string, text, integer, float, decimal, boolean, date, datetime, time,
+    binary, belongs_to, references, rich_text, attachment, attachments, token
+
+Type Options (decimal only):
+    'field:decimal{10,2}'      Precision and scale
+    'field:decimal?{10,2}'     Nullable with precision
+
+    Note: The {precision,scale} syntax only works for decimal types.
+    For default values on other types, edit the migration manually.
+
+Examples:
+    # Main app resource
+    rails g pu:res:scaffold post title:string 'body:text?' --dest=main_app
+
+    # Package resource with associations and indexes
+    rails g pu:res:scaffold article \
+        user:belongs_to \
+        title:string \
+        slug:string:uniq \
+        'content:text?' \
+        'published_at:datetime?' \
+        --dest=blogging
+
+    # Nullable association
+    rails g pu:res:scaffold comment \
+        user:belongs_to \
+        'parent:belongs_to?' \
+        body:text \
+        --dest=main_app
+
+    # With decimal precision
+    rails g pu:res:scaffold product \
+        name:string \
+        'price:decimal{10,2}' \
+        'weight:decimal?{8,3}' \
+        --dest=inventory
+
+    # Scaffold existing model (imports columns automatically)
+    rails g pu:res:scaffold ExistingModel --dest=main_app
+
+    # Cross-package reference
+    rails g pu:res:scaffold order \
+        customer:belongs_to \
+        inventory/product:belongs_to \
+        quantity:integer \
+        --dest=sales
+
+Generated Files (main_app):
+    Model:      app/models/[name].rb
+    Migration:  db/migrate/xxx_create_[names].rb
+    Controller: app/controllers/[names]_controller.rb
+    Policy:     app/policies/[name]_policy.rb
+    Definition: app/definitions/[name]_definition.rb
+
+Generated Files (package):
+    Model:      app/models/[package]/[name].rb
+    Migration:  db/migrate/xxx_create_[package]_[names].rb
+    Controller: packages/[package]/app/controllers/[package]/[names]_controller.rb
+    Policy:     packages/[package]/app/policies/[package]/[name]_policy.rb
+    Definition: packages/[package]/app/definitions/[package]/[name]_definition.rb
+
+After Generation:
+    1. Review migration (add cascade delete, defaults, composite indexes)
+    2. Run: rails db:migrate
+    3. Connect to portal: rails g pu:res:conn Post --dest=admin_portal

data/lib/generators/pu/rodauth/install_generator.rb

@@ -40,12 +40,8 @@ module Pu
         template "app/rodauth/rodauth_plugin.rb"
       end
 
-      def add_dev_config
-        return if Rails.version.to_f >= 8.0
-
-        insert_into_file "config/environments/development.rb",
-          "\n  config.action_mailer.default_url_options = { host: '127.0.0.1', port: ENV.fetch('PORT', 3000) }\n",
-          before: /^end/
+      def create_url_options_initializer
+        template "config/initializers/url_options.rb"
       end
 
       def create_install_migration

data/lib/generators/pu/rodauth/templates/config/initializers/url_options.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+Rails.application.config.after_initialize do
+  default_url = ENV["RAILS_DEFAULT_URL"]
+  if default_url && Rails.application.config.action_mailer.default_url_options.blank?
+    uri = URI.parse(default_url)
+    Rails.application.config.action_mailer.default_url_options = {
+      host: uri.host,
+      port: uri.port,
+      protocol: uri.scheme
+    }
+  end
+
+  if Rails.application.routes.default_url_options.blank?
+    Rails.application.routes.default_url_options = Rails.application.config.action_mailer.default_url_options
+  end
+end

data/lib/generators/pu/skills/sync/USAGE

@@ -0,0 +1,14 @@
+Description:
+    Syncs Claude Code skills from the Plutonium gem into your project's
+    .claude/skills/ directory.
+
+    This gives Claude Code access to Plutonium-specific skills for:
+    - Creating resources (scaffold generator)
+    - Connecting resources to portals
+    - Definition configuration (fields, actions, queries)
+
+Example:
+    rails generate pu:skills:sync
+
+    This will copy all skills from the Plutonium gem to:
+        .claude/skills/

data/lib/generators/pu/skills/sync/sync_generator.rb

@@ -0,0 +1,66 @@
+# frozen_string_literal: true
+
+require_relative "../../lib/plutonium_generators"
+
+module Pu
+  module Skills
+    class SyncGenerator < Rails::Generators::Base
+      include PlutoniumGenerators::Generator
+
+      desc "Sync Claude Code skills from Plutonium into your project"
+
+      def start
+        source_dir = Plutonium.root.join(".claude", "skills")
+        destination_dir = Rails.root.join(".claude", "skills")
+
+        unless File.directory?(source_dir)
+          say_status("error", "Source skills directory not found: #{source_dir}", :red)
+          return
+        end
+
+        # Create destination directory if it doesn't exist
+        FileUtils.mkdir_p(destination_dir)
+
+        # Get all skill directories
+        skill_dirs = Dir.children(source_dir).select { |f| File.directory?(source_dir.join(f)) }
+
+        if skill_dirs.empty?
+          say_status("info", "No skills found to sync", :yellow)
+          return
+        end
+
+        say_status("info", "Syncing #{skill_dirs.size} skills from Plutonium...", :blue)
+
+        skill_dirs.each do |skill_name|
+          sync_skill(source_dir, destination_dir, skill_name)
+        end
+
+        say_status("success", "Skills synced successfully!", :green)
+      rescue => e
+        exception "#{self.class} failed:", e
+      end
+
+      private
+
+      def sync_skill(source_dir, destination_dir, skill_name)
+        source_skill_dir = source_dir.join(skill_name)
+        dest_skill_dir = destination_dir.join(skill_name)
+
+        # Create skill directory
+        FileUtils.mkdir_p(dest_skill_dir)
+
+        # Copy all files in the skill directory
+        Dir.glob(source_skill_dir.join("*")).each do |source_file|
+          next unless File.file?(source_file)
+
+          filename = File.basename(source_file)
+          dest_file = dest_skill_dir.join(filename)
+
+          FileUtils.cp(source_file, dest_file)
+        end
+
+        say_status("synced", skill_name, :green)
+      end
+    end
+  end
+end

data/lib/plutonium/action_policy/sti_policy_lookup.rb

@@ -40,4 +40,4 @@ module Plutonium
       end
     end
   end
-end
+end

data/lib/plutonium/core/controller.rb

@@ -8,8 +8,8 @@ module Plutonium
 
       included do
         add_flash_types :success, :warning, :error
-        
-        protect_from_forgery with: :null_session, if: -> { request.headers['Authorization'].present? }
+
+        protect_from_forgery with: :null_session, if: -> { request.headers["Authorization"].present? }
 
         before_action do
           next unless defined?(ActiveStorage)

data/lib/plutonium/interaction/base.rb

@@ -27,6 +27,7 @@ module Plutonium
       include Plutonium::Definition::Presentable
       include Plutonium::Definition::NestedInputs
       include Plutonium::Interaction::NestedAttributes
+
       # include Plutonium::Interaction::Concerns::WorkflowDSL
 
       class Form < Plutonium::UI::Form::Interaction; end

data/lib/plutonium/package/engine.rb

@@ -10,17 +10,17 @@ module Plutonium
         config.before_configuration do
           # this touches the internals of rails, but I could not find a good way of doing this
           # we get the initializer instance and set the block property to a noop
-          # There is no error handling, to ensure we know when it breaks.
           add_view_paths_initializer = Rails.application.initializers.find do |a|
             a.context_class == self && a.name.to_s == "add_view_paths"
           end
-          add_view_paths_initializer.instance_variable_set(:@block, ->(app) {})
+          add_view_paths_initializer&.instance_variable_set(:@block, ->(app) {})
         end
 
         initializer :append_migrations do |app|
           unless app.root.to_s.match root.to_s
             config.paths["db/migrate"].expanded.each do |expanded_path|
               app.config.paths["db/migrate"] << expanded_path
+              ActiveRecord::Migrator.migrations_paths << expanded_path
             end
           end
         end

data/lib/plutonium/query/adhoc_block.rb

@@ -11,8 +11,12 @@ module Plutonium
         @body = body
       end
 
-      def apply(scope, **)
-        body.call(scope, **)
+      def apply(scope, context: nil, **)
+        if context
+          context.instance_exec(scope, **, &body)
+        else
+          body.call(scope, **)
+        end
       end
     end
   end

data/lib/plutonium/query/model_scope.rb

@@ -11,7 +11,7 @@ module Plutonium
         @name = name
       end
 
-      def apply(scope, **)
+      def apply(scope, context: nil, **)
         scope.public_send(name, **)
       end
     end

data/lib/plutonium/railtie.rb

@@ -23,6 +23,10 @@ module Plutonium
       Rails.application.class.include Plutonium::Engine
     end
 
+    initializer "plutonium.rescue_responses" do |app|
+      app.config.action_dispatch.rescue_responses["ActionPolicy::Unauthorized"] = :forbidden
+    end
+
     initializer "plutonium.deprecator" do |app|
       app.deprecators[:plutonium] = Plutonium.deprecator
     end

data/lib/plutonium/resource/controllers/crud_actions/index_action.rb

@@ -17,7 +17,7 @@ module Plutonium
               .extract_input(params, view_context:)[:q]
 
             base_query = current_authorized_scope
-            current_query_object.apply(base_query, query_params)
+            current_query_object.apply(base_query, query_params, context: self)
           end
         end
       end

data/lib/plutonium/resource/query_object.rb

@@ -1,7 +1,7 @@
 module Plutonium
   module Resource
     class QueryObject
-      attr_reader :search_filter, :search_query
+      attr_reader :search_filter, :search_query, :default_scope_name
       attr_accessor :default_sort_config
 
       # Initializes a QueryObject with the given resource_class and parameters.
@@ -31,9 +31,11 @@ module Plutonium
       #
       # @param name [Symbol] The name of the scope.
       # @param body [Proc, nil] The body of the scope.
-      def define_scope(name, body = nil)
+      # @param default [Boolean] Whether this scope is the default.
+      def define_scope(name, body = nil, default: false, **)
         body ||= name
         scope_definitions[name] = build_query(body)
+        @default_scope_name = name.to_s if default
       end
 
       # Defines a sort with the given name and body.
@@ -68,31 +70,53 @@ module Plutonium
         q = {}
 
         q[:search] = options.key?(:search) ? options[:search].presence : search_query
-        q[:scope] = options.key?(:scope) ? options[:scope].presence : selected_scope_filter
+        q[:scope] = if options.key?(:scope)
+          options[:scope].presence
+        else
+          selected_scope_filter
+        end
 
         q[:sort_directions] = selected_sort_directions.dup
         q[:sort_fields] = selected_sort_fields.dup
         handle_sort_options!(q, options)
 
         q.merge! params.slice(*filter_definitions.keys)
-        query_params = deep_compact({q: q}).to_param
+        compacted = deep_compact({q: q})
+
+        # Preserve explicit "All" selection (scope: nil in options means show all)
+        if options.key?(:scope) && options[:scope].nil?
+          compacted[:q] ||= {}
+          compacted[:q][:scope] = ""
+        end
+
+        query_params = compacted.to_param
         "#{@request_path}?#{query_params}"
       end
 
       # Applies the defined filters and sorts to the given scope.
       #
       # @param scope [Object] The initial scope to which filters and sorts are applied.
+      # @param params [Hash] The query parameters.
+      # @param context [Object] Optional context (e.g., controller) for executing scope blocks.
       # @return [Object] The modified scope.
-      def apply(scope, params)
+      def apply(scope, params, context: nil)
         params = deep_compact(params.with_indifferent_access)
         scope = search_filter.apply(scope, search: params[:search]) if search_filter && params[:search]
-        scope = scope_definitions[params[:scope]].apply(scope, **{}) if scope_definitions[params[:scope]]
+        # Use selected_scope which includes the default when no explicit selection
+        effective_scope = @selected_scope_filter
+        scope = scope_definitions[effective_scope].apply(scope, context:) if effective_scope && scope_definitions[effective_scope]
         scope = apply_sorts(scope, params)
         apply_filters(scope, params)
       end
 
       def scope_definitions = @scope_definitions ||= {}.with_indifferent_access
 
+      # Returns true if user explicitly selected "All" scope (no filtering)
+      def all_scope_selected? = @all_scope_selected
+
+      # Returns the currently selected scope (may be default if none explicitly selected)
+      def selected_scope = @selected_scope_filter
+
       def filter_definitions = @filter_definitions ||= {}.with_indifferent_access
 
       def sort_definitions = @sort_definitions ||= {}.with_indifferent_access
@@ -125,8 +149,14 @@ module Plutonium
       #
       # @param params [Hash] The parameters to extract.
       def extract_filter_params
-        @search_query = params[:search]
-        @selected_scope_filter = params[:scope]
+        @search_query = params[:search].presence&.strip
+        # Track if user explicitly selected "all" (scope param present but blank)
+        @all_scope_selected = params.key?(:scope) && params[:scope].blank?
+        @selected_scope_filter = if @all_scope_selected
+          nil  # User clicked "All"
+        else
+          params[:scope].presence || default_scope_name
+        end
       end
 
       # Extracts sort parameters from the given params.