plutonium 0.39.1 → 0.40.0

data/lib/plutonium/invites/controller.rb

@@ -0,0 +1,226 @@
+# frozen_string_literal: true
+
+module Plutonium
+  module Invites
+    # Controller provides the invitation acceptance flow for controllers.
+    #
+    # This concern handles:
+    # - Showing the invitation landing page
+    # - Accepting invitations for logged-in users
+    # - Signup flow for new users
+    # - Cookie management for pending invitations
+    #
+    # @example Basic usage
+    #   class UserInvitationsController < ApplicationController
+    #     include Plutonium::Invites::Controller
+    #
+    #     layout "invitation"
+    #
+    #     private
+    #
+    #     def invite_class
+    #       UserInvite
+    #     end
+    #
+    #     def after_accept_path
+    #       root_path
+    #     end
+    #
+    #     def login_path
+    #       rodauth.login_path
+    #     end
+    #   end
+    #
+    module Controller
+      extend ActiveSupport::Concern
+
+      included do
+        helper_method :current_user if respond_to?(:helper_method)
+      end
+
+      # GET /invitations/:token
+      #
+      # Shows the invitation landing page. If the user is logged in,
+      # shows the acceptance form. If not, shows signup/login options.
+      def show
+        return unless (@invite = load_and_validate_invite(params[:token]))
+
+        # Store invitation token in cookie for later use
+        cookies.encrypted[:pending_invitation] = {
+          value: params[:token],
+          expires: 1.hour.from_now
+        }
+
+        if current_user
+          begin
+            @invite.validate_email_constraints!(current_user.email)
+            render :show
+          rescue ActiveRecord::RecordInvalid => e
+            @error_title = "Email Validation Error"
+            @error_message = e.record.errors.full_messages.join(", ")
+            render :error, status: :forbidden
+          end
+        else
+          render :landing
+        end
+      end
+
+      # POST /invitations/:token/accept
+      #
+      # Accepts the invitation for the currently logged-in user.
+      def accept
+        return unless (@invite = load_and_validate_invite(params[:token]))
+
+        unless current_user
+          redirect_to invitation_path(token: params[:token]),
+            alert: "Please sign in to accept this invitation"
+          return
+        end
+
+        @invite.accept_for_user!(current_user)
+        cookies.delete(:pending_invitation)
+
+        redirect_to after_accept_path,
+          notice: "Invitation accepted! Welcome to #{@invite.entity.to_label}!"
+      rescue ActiveRecord::RecordInvalid => e
+        @error_title = "Acceptance Error"
+        @error_message = e.record.errors.full_messages.join(", ")
+        render :error, status: :forbidden
+      end
+
+      # GET/POST /invitations/:token/signup
+      #
+      # Handles new user signup directly from the invitation.
+      def signup
+        return unless (@invite = load_and_validate_invite(params[:token]))
+
+        if request.post?
+          handle_signup_submission
+        else
+          render :signup
+        end
+      end
+
+      private
+
+      # Load and validate an invite by token.
+      #
+      # @param token [String] the invitation token
+      # @return [Object, nil] the invite or nil (renders error)
+      def load_and_validate_invite(token)
+        invite = invite_class.find_for_acceptance(token)
+
+        unless invite
+          @error_title = "Invalid or Expired Invitation"
+          @error_message = "This invitation link is no longer valid. It may have expired or already been used."
+          render :error, status: :not_found
+          return nil
+        end
+
+        invite
+      end
+
+      # Handle the signup form submission.
+      def handle_signup_submission
+        email = @invite.enforce_email? ? @invite.email : params[:email]
+        password = params[:password]
+        password_confirmation = params[:password_confirmation]
+
+        if password != password_confirmation
+          flash.now[:alert] = "Passwords don't match"
+          render :signup
+          return
+        end
+
+        begin
+          ActiveRecord::Base.transaction do
+            existing_user = user_class.find_by(email: email)
+            if existing_user
+              flash.now[:alert] = "An account with this email already exists. Please sign in instead."
+              render :signup
+              return
+            end
+
+            user = create_user_for_signup(email, password)
+
+            if user&.persisted?
+              @invite.accept_for_user!(user)
+              cookies.delete(:pending_invitation)
+              sign_in_user(user)
+              redirect_to after_accept_path
+            else
+              flash.now[:alert] = "Failed to create account"
+              render :signup
+            end
+          end
+        rescue ActiveRecord::RecordInvalid => e
+          if e.record.is_a?(invite_class)
+            flash.now[:alert] = e.record.errors.full_messages.join(", ")
+          else
+            flash.now[:alert] = "Failed to create account: #{e.record.errors.full_messages.join(", ")}"
+          end
+          render :signup
+        rescue => e
+          flash.now[:alert] = "Failed to create account: #{e.message}"
+          render :signup
+        end
+      end
+
+      # Override to specify the invite model class.
+      #
+      # @return [Class] the invite model class
+      # @raise [NotImplementedError] if not overridden
+      def invite_class
+        raise NotImplementedError, "#{self.class}#invite_class must return the invite model class"
+      end
+
+      # Override to specify the user model class.
+      #
+      # @return [Class] the user model class
+      def user_class
+        User
+      end
+
+      # Override to customize redirect after acceptance.
+      #
+      # @return [String] the path to redirect to
+      def after_accept_path
+        "/"
+      end
+
+      # Override to customize the login path.
+      #
+      # @return [String] the login path
+      def login_path
+        "/login"
+      end
+
+      # Override to create a user during signup.
+      #
+      # This method should be overridden to integrate with your
+      # authentication system (e.g., Rodauth).
+      #
+      # @param email [String] the user's email
+      # @param password [String] the user's password
+      # @return [Object] the created user
+      def create_user_for_signup(email, password)
+        raise NotImplementedError, "#{self.class}#create_user_for_signup must be implemented for signup flow"
+      end
+
+      # Override to sign in the user after signup.
+      #
+      # @param user [Object] the user to sign in
+      def sign_in_user(user)
+        # Override in controller to sign in the user
+        # e.g., for Rodauth: rodauth.account_from_login(user.email); rodauth.login("signup")
+      end
+
+      # Override to return the current logged-in user.
+      #
+      # @return [Object, nil] the current user or nil
+      def current_user
+        nil
+      end
+    end
+  end
+end

data/lib/plutonium/invites/pending_invite_check.rb

@@ -0,0 +1,76 @@
+# frozen_string_literal: true
+
+module Plutonium
+  module Invites
+    # PendingInviteCheck provides post-login invitation handling.
+    #
+    # Include this in a controller that users land on after login
+    # (e.g., WelcomeController, DashboardController) to check for
+    # pending invitations stored in cookies.
+    #
+    # @example Basic usage
+    #   class WelcomeController < ApplicationController
+    #     include Plutonium::Invites::PendingInviteCheck
+    #
+    #     def index
+    #       return if redirect_to_pending_invite!
+    #
+    #       # Normal post-login flow...
+    #       redirect_to dashboard_path
+    #     end
+    #
+    #     private
+    #
+    #     def invite_class
+    #       Invites::UserInvite
+    #     end
+    #   end
+    #
+    module PendingInviteCheck
+      extend ActiveSupport::Concern
+
+      private
+
+      # Check for a pending invitation and redirect if found.
+      #
+      # @return [Boolean] true if redirected, false otherwise
+      def redirect_to_pending_invite!
+        token = cookies.encrypted[:pending_invitation]
+        return false unless token
+
+        invite = invite_class.find_for_acceptance(token)
+
+        if invite
+          redirect_to invitation_path(token: token)
+          true
+        else
+          cookies.delete(:pending_invitation)
+          false
+        end
+      end
+
+      # Returns the pending invite if one exists.
+      #
+      # @return [Object, nil] the pending invite or nil
+      def pending_invite
+        token = cookies.encrypted[:pending_invitation]
+        return nil unless token
+
+        invite = invite_class.find_for_acceptance(token)
+        unless invite
+          cookies.delete(:pending_invitation)
+          return nil
+        end
+
+        invite
+      end
+
+      # Override to specify the invite model class.
+      #
+      # @return [Class] the invite model class
+      def invite_class
+        raise NotImplementedError, "#{self.class}#invite_class must return the invite model class"
+      end
+    end
+  end
+end

data/lib/plutonium/invites.rb

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+module Plutonium
+  module Invites
+  end
+end

data/lib/plutonium/resource/controllers/queryable.rb

@@ -29,6 +29,10 @@ module Plutonium
                 query_object.default_sort_config = current_definition.default_sort
               end
 
+              if current_definition.respond_to?(:default_scope) && current_definition.default_scope
+                query_object.default_scope_name = current_definition.default_scope
+              end
+
               current_definition.defined_filters.each do |key, value|
                 with = value[:options][:with]
                 if with

data/lib/plutonium/resource/query_object.rb

@@ -1,8 +1,8 @@
 module Plutonium
   module Resource
     class QueryObject
-      attr_reader :search_filter, :search_query, :default_scope_name
-      attr_accessor :default_sort_config
+      attr_reader :search_filter, :search_query
+      attr_accessor :default_sort_config, :default_scope_name
 
       # Initializes a QueryObject with the given resource_class and parameters.
       #
@@ -31,11 +31,9 @@ module Plutonium
       #
       # @param name [Symbol] The name of the scope.
       # @param body [Proc, nil] The body of the scope.
-      # @param default [Boolean] Whether this scope is the default.
-      def define_scope(name, body = nil, default: false, **)
+      def define_scope(name, body = nil, **)
         body ||= name
         scope_definitions[name] = build_query(body)
-        @default_scope_name = name.to_s if default
       end
 
       # Defines a sort with the given name and body.

data/lib/plutonium/version.rb

@@ -1,5 +1,5 @@
 module Plutonium
-  VERSION = "0.39.1"
+  VERSION = "0.40.0"
   NEXT_MAJOR_VERSION = VERSION.split(".").tap { |v|
     v[1] = v[1].to_i + 1
     v[2] = 0

data/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@radioactive-labs/plutonium",
-  "version": "0.39.1",
+  "version": "0.40.0",
   "description": "Build production-ready Rails apps in minutes, not days. Convention-driven, fully customizable, AI-ready.",
   "type": "module",
   "main": "src/js/core.js",

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: plutonium
 version: !ruby/object:Gem::Version
-  version: 0.39.1
+  version: 0.40.0
 platform: ruby
 authors:
 - Stefan Froelich
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-01-26 00:00:00.000000000 Z
+date: 2026-02-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: zeitwerk
@@ -411,6 +411,7 @@ files:
 - ".claude/skills/plutonium-forms/SKILL.md"
 - ".claude/skills/plutonium-installation/SKILL.md"
 - ".claude/skills/plutonium-interaction/SKILL.md"
+- ".claude/skills/plutonium-invites/SKILL.md"
 - ".claude/skills/plutonium-model-features/SKILL.md"
 - ".claude/skills/plutonium-model/SKILL.md"
 - ".claude/skills/plutonium-nested-resources/SKILL.md"
@@ -541,6 +542,7 @@ files:
 - docs/guides/search-filtering.md
 - docs/guides/theming.md
 - docs/guides/troubleshooting.md
+- docs/guides/user-invites.md
 - docs/index.md
 - docs/og-image.html
 - docs/public/android-chrome-192x192.png
@@ -553,6 +555,7 @@ files:
 - docs/public/plutonium.png
 - docs/public/site.webmanifest
 - docs/public/templates/base.rb
+- docs/public/templates/lite.rb
 - docs/public/templates/pluton8.rb
 - docs/public/templates/plutonium.rb
 - docs/public/tutorial/plutonium-association-panel.png
@@ -625,6 +628,8 @@ files:
 - lib/generators/pu/field/renderer/renderer_generator.rb
 - lib/generators/pu/field/renderer/templates/.keep
 - lib/generators/pu/field/renderer/templates/renderer.rb.tt
+- lib/generators/pu/gem/active_shrine/active_shrine_generator.rb
+- lib/generators/pu/gem/active_shrine/templates/config/initializers/shrine.rb.tt
 - lib/generators/pu/gem/annotated/annotated_generator.rb
 - lib/generators/pu/gem/annotated/templates/.keep
 - lib/generators/pu/gem/annotated/templates/lib/tasks/auto_annotate_models.rake
@@ -642,17 +647,54 @@ files:
 - lib/generators/pu/gem/state_machines/state_machines_generator.rb
 - lib/generators/pu/gen/pug/pug_generator.rb
 - lib/generators/pu/gen/pug/templates/pug.rb.tt
+- lib/generators/pu/invites/USAGE
+- lib/generators/pu/invites/install_generator.rb
+- lib/generators/pu/invites/invitable/USAGE
+- lib/generators/pu/invites/invitable_generator.rb
+- lib/generators/pu/invites/templates/INSTRUCTIONS
+- lib/generators/pu/invites/templates/app/interactions/invite_user_interaction.rb.tt
+- lib/generators/pu/invites/templates/app/interactions/user_invite_user_interaction.rb.tt
+- lib/generators/pu/invites/templates/db/migrate/create_user_invites.rb.tt
+- lib/generators/pu/invites/templates/invitable/invitation.html.erb.tt
+- lib/generators/pu/invites/templates/invitable/invitation.text.erb.tt
+- lib/generators/pu/invites/templates/invitable/invite_user_interaction.rb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/controllers/invites/user_invitations_controller.rb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/controllers/invites/welcome_controller.rb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/definitions/invites/user_invite_definition.rb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/interactions/invites/cancel_invite_interaction.rb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/interactions/invites/resend_invite_interaction.rb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/mailers/invites/user_invite_mailer.rb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/models/invites/user_invite.rb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/policies/invites/user_invite_policy.rb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/views/invites/user_invitations/error.html.erb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/views/invites/user_invitations/landing.html.erb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/views/invites/user_invitations/show.html.erb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/views/invites/user_invitations/signup.html.erb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/views/invites/user_invite_mailer/invitation.html.erb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/views/invites/user_invite_mailer/invitation.text.erb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/views/invites/welcome/pending_invitation.html.erb.tt
+- lib/generators/pu/invites/templates/packages/invites/app/views/layouts/invites/invitation.html.erb.tt
 - lib/generators/pu/lib/plutonium_generators.rb
 - lib/generators/pu/lib/plutonium_generators/cli.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/actions.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/config.rb
+- lib/generators/pu/lib/plutonium_generators/concerns/configures_sqlite.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/logger.rb
+- lib/generators/pu/lib/plutonium_generators/concerns/mounts_engines.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/package_selector.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/resource_selector.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/serializer.rb
 - lib/generators/pu/lib/plutonium_generators/generator.rb
 - lib/generators/pu/lib/plutonium_generators/installer.rb
 - lib/generators/pu/lib/plutonium_generators/model_generator_base.rb
+- lib/generators/pu/lite/litestream/litestream_generator.rb
+- lib/generators/pu/lite/rails_pulse/rails_pulse_generator.rb
+- lib/generators/pu/lite/rails_pulse/templates/config/initializers/rails_pulse.rb.tt
+- lib/generators/pu/lite/setup/setup_generator.rb
+- lib/generators/pu/lite/solid_cable/solid_cable_generator.rb
+- lib/generators/pu/lite/solid_cache/solid_cache_generator.rb
+- lib/generators/pu/lite/solid_errors/solid_errors_generator.rb
+- lib/generators/pu/lite/solid_queue/solid_queue_generator.rb
 - lib/generators/pu/pkg/package/package_generator.rb
 - lib/generators/pu/pkg/package/templates/.keep
 - lib/generators/pu/pkg/package/templates/app/controllers/resource_controller.rb.tt
@@ -668,6 +710,7 @@ files:
 - lib/generators/pu/pkg/portal/templates/app/controllers/concerns/controller.rb.tt
 - lib/generators/pu/pkg/portal/templates/app/controllers/dashboard_controller.rb.tt
 - lib/generators/pu/pkg/portal/templates/app/controllers/plutonium_controller.rb.tt
+- lib/generators/pu/pkg/portal/templates/app/controllers/resource_controller.rb.tt
 - lib/generators/pu/pkg/portal/templates/app/definitions/resource_definition.rb.tt
 - lib/generators/pu/pkg/portal/templates/app/policies/resource_policy.rb.tt
 - lib/generators/pu/pkg/portal/templates/app/presenters/resource_presenter.rb.tt
@@ -684,7 +727,6 @@ files:
 - lib/generators/pu/res/conn/templates/app/policies/resource_policy.rb.tt
 - lib/generators/pu/res/conn/templates/app/presenters/resource_presenter.rb.tt
 - lib/generators/pu/res/conn/templates/app/query_objects/resource_query_object.rb.tt
-- lib/generators/pu/res/entity/entity_generator.rb
 - lib/generators/pu/res/model/USAGE
 - lib/generators/pu/res/model/model_generator.rb
 - lib/generators/pu/res/model/templates/create_table_migration.rb.tt
@@ -703,7 +745,6 @@ files:
 - lib/generators/pu/rodauth/concerns/account_selector.rb
 - lib/generators/pu/rodauth/concerns/configuration.rb
 - lib/generators/pu/rodauth/concerns/feature_selector.rb
-- lib/generators/pu/rodauth/customer_generator.rb
 - lib/generators/pu/rodauth/install_generator.rb
 - lib/generators/pu/rodauth/migration/active_record/account_expiration.erb
 - lib/generators/pu/rodauth/migration/active_record/active_sessions.erb
@@ -729,6 +770,7 @@ files:
 - lib/generators/pu/rodauth/templates/INSTRUCTIONS
 - lib/generators/pu/rodauth/templates/app/controllers/plugin_controller.rb.tt
 - lib/generators/pu/rodauth/templates/app/controllers/rodauth_controller.rb.tt
+- lib/generators/pu/rodauth/templates/app/interactions/invite_admin_interaction.rb.tt
 - lib/generators/pu/rodauth/templates/app/mailers/account_mailer.rb.tt
 - lib/generators/pu/rodauth/templates/app/mailers/rodauth_mailer.rb.tt
 - lib/generators/pu/rodauth/templates/app/models/account.rb.tt
@@ -756,6 +798,15 @@ files:
 - lib/generators/pu/rodauth/templates/db/migrate/install_rodauth.rb.tt
 - lib/generators/pu/rodauth/templates/lib/tasks/rodauth_admin.rake.tt
 - lib/generators/pu/rodauth/views_generator.rb
+- lib/generators/pu/saas/USAGE
+- lib/generators/pu/saas/entity/USAGE
+- lib/generators/pu/saas/entity_generator.rb
+- lib/generators/pu/saas/membership/USAGE
+- lib/generators/pu/saas/membership_generator.rb
+- lib/generators/pu/saas/setup/USAGE
+- lib/generators/pu/saas/setup_generator.rb
+- lib/generators/pu/saas/user/USAGE
+- lib/generators/pu/saas/user_generator.rb
 - lib/generators/pu/service/postgres/postgres_generator.rb
 - lib/generators/pu/service/postgres/templates/.keep
 - lib/generators/pu/service/postgres/templates/bin/initdb.d/create-multiple-postgresql-databases.sh
@@ -792,6 +843,7 @@ files:
 - lib/plutonium/definition/inheritable_config_attr.rb
 - lib/plutonium/definition/nested_inputs.rb
 - lib/plutonium/definition/presentable.rb
+- lib/plutonium/definition/scoping.rb
 - lib/plutonium/definition/search.rb
 - lib/plutonium/definition/sorting.rb
 - lib/plutonium/engine.rb
@@ -816,6 +868,14 @@ files:
 - lib/plutonium/interaction/response/null.rb
 - lib/plutonium/interaction/response/redirect.rb
 - lib/plutonium/interaction/response/render.rb
+- lib/plutonium/invites.rb
+- lib/plutonium/invites/concerns/cancel_invite.rb
+- lib/plutonium/invites/concerns/invitable.rb
+- lib/plutonium/invites/concerns/invite_token.rb
+- lib/plutonium/invites/concerns/invite_user.rb
+- lib/plutonium/invites/concerns/resend_invite.rb
+- lib/plutonium/invites/controller.rb
+- lib/plutonium/invites/pending_invite_check.rb
 - lib/plutonium/lib/after_commit.rb
 - lib/plutonium/lib/bit_flags.rb
 - lib/plutonium/lib/deep_freezer.rb
@@ -947,9 +1007,6 @@ files:
 - postcss.config.js
 - public/.keep
 - public/plutonium-assets/application.js
-- public/plutonium-assets/plutonium-logo-original.png
-- public/plutonium-assets/plutonium-logo-white.png
-- public/plutonium-assets/plutonium-logo.png
 - public/plutonium-assets/plutonium.ico
 - sig/.keep
 - src/.npmignore