plutonium 0.46.0 → 0.48.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f603d6d8cf1a941e6880307ac384bf03c4d81a90a3c71fe6be6b2397a509de93
-  data.tar.gz: 58cf196911c99bb2d91d06f784a6336c3fbf7371189faa9d626eab2b5db4e11e
+  metadata.gz: d07d40ddf359fb63528f92bae1e1c10c0ec19d4d8101a7202e1c7ae30a798e90
+  data.tar.gz: 30fe5b1d2c89bd08552b3d64eb84795bc12e5417805b7ffd6c18f84f5f05d8d1
 SHA512:
-  metadata.gz: 5d9af8748fda86912aad6a2a64deeb9536ad17d08cae17a7fe8d61ab72e8f19c2c0668851e52ba1288a386dbb71eb4e0c2075f8af6955e4b5a491abaa25701d4
-  data.tar.gz: f99fdb5497ef022daeab3147d556aa6e37ca5c4bb2812a4660afbe449b6666474fd36d1db70f36912778b85f156ec20984bf9a1d02ef6be7357c89b60cb2f46a
+  metadata.gz: f5652a759d23236d48265376846ed7269a34ab6a7796bb40c6cc2331a7be308a8de472cda0405e7453ce52ae6452bcb291aaf2c784d305a9dbec451d1be3efa8
+  data.tar.gz: 3aee38cfc32329df17558559fcda9f1cae1c0605dc8c5a70d3e8ccd74ec5a4de9a04082e95b7368a07e812fe9a1b7d59e89405077e1dfb8210241710f59b3397

data/.claude/skills/plutonium/SKILL.md

@@ -61,6 +61,7 @@ Optional additions when relevant:
 | Create a portal or feature package | `plutonium-portal` / `plutonium-package` |
 | Mount a portal, configure entity strategies, route portal resources | `plutonium-portal` (+ `plutonium-entity-scoping` for tenancy) |
 | Install Plutonium in a Rails app | `plutonium-installation` |
+| Write tests for a resource, run `pu:test:scaffold`, or include `Plutonium::Testing::*` concerns | `plutonium-testing` |
 
 ## Generator catalog
 
@@ -87,6 +88,8 @@ Every Plutonium generator is discoverable via `rails g pu:<tab>`. Always pass `-
 | `pu:field:renderer NAME` | Custom display renderer | `plutonium-definition` |
 | `pu:eject:layout` | Eject the base layout for customization | `plutonium-views` |
 | `pu:skills:sync` | Sync Plutonium Claude skills into the project | `plutonium` |
+| `pu:test:install` | Install Plutonium::Testing scaffolding | `plutonium-testing` |
+| `pu:test:scaffold NAME --portals=...` | Scaffold integration tests per (resource × portal) | `plutonium-testing` |
 
 ## Resource architecture at a glance
 
@@ -144,3 +147,4 @@ Meta-generators (`pu:saas:setup`) propagate these flags to the generators they c
 - `plutonium-installation` · `plutonium-create-resource` · `plutonium-model` · `plutonium-policy` · `plutonium-entity-scoping` · `plutonium-portal` · `plutonium-definition`
 - `plutonium-controller` · `plutonium-interaction` · `plutonium-views` · `plutonium-forms` · `plutonium-assets`
 - `plutonium-auth` · `plutonium-invites` · `plutonium-package` · `plutonium-nested-resources`
+- `plutonium-testing` — default test concerns and scaffolding

data/.claude/skills/plutonium-interaction/SKILL.md

@@ -373,6 +373,29 @@ class Company::InviteUserInteraction < Plutonium::Resource::Interaction
 end
 ```
 
+## Generating Interaction URLs
+
+Use the `interaction:` kwarg on `resource_url_for`. The action type (record/bulk/resource) is inferred from the element and presence of `ids:`:
+
+```ruby
+# Record action — instance argument
+resource_url_for(@post, interaction: :publish)
+# => /posts/:id/record_actions/publish
+
+# Resource (class-level) action — class with no ids
+resource_url_for(Post, interaction: :import)
+# => /posts/resource_actions/import
+
+# Bulk action — class + ids
+resource_url_for(Post, interaction: :archive, ids: [1, 2, 3])
+# => /posts/bulk_actions/archive?ids[]=1&ids[]=2&ids[]=3
+
+# Composes with parent / entity scoping
+resource_url_for(@post, parent: @user, interaction: :publish)
+```
+
+The same URL serves both GET (form/confirmation) and POST (commit) — the verb determines which controller action runs. Passing both `interaction:` and `action:` raises `ArgumentError`.
+
 ## Best Practices
 
 1. **Keep interactions focused** - One action per interaction

data/.claude/skills/plutonium-nested-resources/SKILL.md

@@ -178,6 +178,16 @@ resource_url_for(company_profile, parent: company)
 
 resource_url_for(CompanyProfile, action: :new, parent: company)
 # => /companies/123/nested_company_profile/new
+
+# Interactions (composes with parent — see plutonium-interaction skill)
+resource_url_for(property, parent: company, interaction: :archive)
+# => /companies/123/nested_properties/456/record_actions/archive
+
+resource_url_for(Property, parent: company, interaction: :import)
+# => /companies/123/nested_properties/resource_actions/import
+
+resource_url_for(Property, parent: company, interaction: :bulk_delete, ids: [1, 2])
+# => /companies/123/nested_properties/bulk_actions/bulk_delete?ids[]=1&ids[]=2
 ```
 
 ### Cross-Package URL Generation

data/.claude/skills/plutonium-testing/SKILL.md

@@ -0,0 +1,268 @@
+---
+name: plutonium-testing
+description: Use BEFORE writing tests for a Plutonium resource, running pu:test:scaffold, or including Plutonium::Testing::* concerns. Covers the full testing toolkit — CRUD, policy, definition, interaction, model, nested, portal access, and auth helpers.
+---
+
+# Plutonium Testing
+
+## 🚨 Critical (read first)
+
+- **Use the generators.** `pu:test:install` once per app, then `pu:test:scaffold ResourceClass --portals=...` per resource × portal. Hand-written test files drift from conventions.
+- **Tests are opt-in.** `Plutonium::Testing` is only loaded when `require "plutonium/testing"` runs — it's never autoloaded, never present in production.
+- **One file per (resource × portal).** Same model in admin and org portals = two test files. Each portal has different auth, scoping, and allowed actions.
+- **Stub methods are required.** Concerns ship with `NotImplementedError` stubs — your test class supplies the test data via `create_resource!`, `valid_create_params`, `policy_roles`, etc.
+
+## Quick start
+
+```bash
+# Once per app
+rails g pu:test:install
+
+# Per resource × portal pairing
+rails g pu:test:scaffold Blogging::Post --portals=admin,org
+
+# Run
+bin/rails test
+```
+
+`pu:test:install` adds `require "plutonium/testing"` to `test/test_helper.rb` and creates `test/support/plutonium_testing.rb` (a stub for non-Rodauth auth overrides).
+
+## DSL reference
+
+Every concern uses the same class-level DSL:
+
+```ruby
+resource_tests_for ResourceClass,
+  portal:           :admin,                                # required
+  path_prefix:      "/admin",                              # optional override
+  parent:           :organization,                         # for nested resources
+  actions:          %i[index show new create edit update destroy],
+  skip:             %i[destroy],
+  associated_with:  :organization,                         # ResourceModel only
+  sgid_routing:     true,                                  # ResourceModel only
+  has_cents:        %i[price]                              # ResourceModel only
+```
+
+The **portal symbol** drives:
+
+| Derived | `:admin` example | `:org` example |
+|---|---|---|
+| `path_prefix` | `/admin` | `/org` |
+| Default sign-in helper | admin Rodauth | user Rodauth |
+| Allowed action set | from definition | from definition |
+
+`path_prefix` is auto-resolved from the mounted portal engine. For mounts inside `constraints` (typical Plutonium setup), the resolver walks the route tree and finds the engine.
+
+## Concerns catalog
+
+Each concern is `include`d separately. Pick the ones you need.
+
+### `Plutonium::Testing::ResourceCrud`
+
+Generates index / show / new / create / edit / update / destroy integration tests against the portal-mounted resource.
+
+**Stubs:**
+- `create_resource!` → persisted record
+- `valid_create_params` → Hash for POST
+- `valid_update_params` → Hash for PATCH
+
+```ruby
+class AdminPortal::BloggingPostsTest < ActionDispatch::IntegrationTest
+  include IntegrationTestHelper
+  include Plutonium::Testing::ResourceCrud
+
+  resource_tests_for Blogging::Post, portal: :admin
+
+  setup do
+    @admin = create_admin!
+    @user = create_user!
+    @org = create_organization!
+    login_as(@admin)
+  end
+
+  def create_resource! = create_post!(user: @user, organization: @org)
+  def valid_create_params
+    {title: "x", body: "y", status: :draft, user: @user.to_sgid.to_s, organization: @org.to_sgid.to_s}
+  end
+  def valid_update_params = {title: "Updated"}
+end
+```
+
+### `Plutonium::Testing::ResourcePolicy`
+
+Asserts the `permit?` matrix across action × role and verifies `relation_scope` returns an `ActiveRecord::Relation`.
+
+**Stubs:**
+- `policy_roles` → `{role_sym => -> { account }}`
+- `policy_record` → persisted record under test
+- `policy_matrix` → `{action_sym => [allowed_role_syms]}`
+- `policy_context` (optional) → extra kwargs (defaults to `{entity_scope: nil}`)
+
+```ruby
+def policy_roles = {admin: -> { @admin }, member: -> { @user }}
+def policy_record = create_post!(user: @user, organization: @org)
+def policy_matrix = {
+  index: %i[admin member], show: %i[admin member],
+  create: %i[admin], update: %i[admin], destroy: %i[admin]
+}
+```
+
+### `Plutonium::Testing::ResourceDefinition`
+
+Smoke-tests the resource definition: the class is constantize-able, every defineable prop dictionary (fields/inputs/displays/columns/scopes/filters/sorts/actions) is queryable, and declared fields exist on the model.
+
+**No stubs required** for the happy path.
+
+### `Plutonium::Testing::ResourceInteraction`
+
+Outcome-assertion helpers for `Plutonium::Interaction::Base` subclasses.
+
+**Helpers:**
+- `assert_interaction_success(klass, **input)` → returns the success outcome
+- `assert_interaction_failure(klass, **input)` → returns the failure outcome
+- `interaction_view_context` (overridable) → defaults to a mock view context
+
+```ruby
+test "RebuildSearchInteraction succeeds" do
+  outcome = assert_interaction_success(RebuildSearchInteraction, since: 1.day.ago)
+  assert_equal 42, outcome.value[:rebuilt_count]
+end
+```
+
+### `Plutonium::Testing::ResourceModel`
+
+Tests `associated_with` scope, SGID routing, and `has_cents` accessors — gated by DSL flags.
+
+**Stubs:**
+- `model_test_record` → persisted record
+
+```ruby
+resource_tests_for Catalog::Product, portal: :admin,
+  associated_with: :organization,
+  sgid_routing: true,
+  has_cents: %i[price]
+
+def model_test_record = create_product!(user: @user, organization: @org)
+```
+
+Only the flagged features generate tests.
+
+### `Plutonium::Testing::NestedResource`
+
+Asserts CRUD under a parent + scope-boundary tests (sibling tenants invisible).
+
+**Stubs:**
+- `parent_record!` → current tenant
+- `other_parent_record!` → sibling tenant
+- `create_resource!(parent:)` → persisted record under given parent
+
+### `Plutonium::Testing::PortalAccess`
+
+Cross-portal access boundaries. Uses its own DSL — not `resource_tests_for`.
+
+```ruby
+class PortalAccessTest < ActionDispatch::IntegrationTest
+  include IntegrationTestHelper
+  include Plutonium::Testing::PortalAccess
+
+  portal_access_for portals: %i[admin org],
+    matrix: {admin: %i[admin], member: %i[org]}
+
+  setup do
+    @admin = create_admin!
+    @user = create_user!
+    @org = create_organization!
+    create_membership!(organization: @org, user: @user)
+  end
+
+  def login_as_role(role)
+    case role
+    when :admin then login_as(@admin, portal: :admin)
+    when :member then login_as(@user, portal: :user)
+    end
+  end
+
+  def portal_root_path(portal)
+    case portal
+    when :admin then "/admin"
+    when :org then "/org/#{@org.id}"
+    end
+  end
+end
+```
+
+Generates one test per (role × portal). Allowed = `200|302`; blocked = `302|401|403|404`.
+
+## Auth helpers
+
+`Plutonium::Testing::AuthHelpers` is included transitively by every concern.
+
+```ruby
+login_as(account)                          # uses portal from DSL
+login_as(account, portal: :admin)          # explicit override
+sign_out                                    # uses portal from DSL
+sign_out(portal: :admin)
+current_account                             # uses portal from DSL
+current_account(portal: :admin)
+with_portal(:org) { ... }                  # scoped portal switch
+```
+
+**Override hook for non-Rodauth apps:** define `sign_in_for_tests(account, portal:)` in your test class (or in `test/support/plutonium_testing.rb` for project-wide use). `AuthHelpers` will defer to it.
+
+```ruby
+def sign_in_for_tests(account, portal:)
+  # your custom auth flow here
+end
+```
+
+## Generator reference
+
+### `pu:test:install`
+
+```bash
+rails g pu:test:install
+```
+
+- Adds `require "plutonium/testing"` to `test/test_helper.rb` (idempotent)
+- Creates `test/support/plutonium_testing.rb` with override stub
+
+### `pu:test:scaffold`
+
+```bash
+rails g pu:test:scaffold Blogging::Post --portals=admin,org
+rails g pu:test:scaffold Blogging::Post --portals=admin --concerns=crud,policy,definition
+rails g pu:test:scaffold Blogging::Post --portals=org --parent=organization --dest=blogging
+```
+
+| Flag | Default | Purpose |
+|---|---|---|
+| `--portals=admin,org` | required | Emit one file per portal |
+| `--concerns=...` | `crud,policy,definition` | Concerns to include (`crud,policy,definition,nested,model,interaction,portal_access`) |
+| `--parent=organization` | none | Wires `NestedResource` parent |
+| `--dest=main_app\|<package>` | `main_app` | Output destination |
+
+Output path: `test/integration/<portal>_portal/<resource_underscored>_test.rb`.
+
+## Customization & escape hatches
+
+- **Skip individual tests:** `resource_tests_for Klass, portal: :admin, skip: %i[destroy]`
+- **Restrict action set:** `resource_tests_for Klass, portal: :admin, actions: %i[index show]`
+- **Custom assertions:** add regular `test "..."` blocks alongside the generated matrix — they coexist.
+- **Non-Rodauth auth:** override `sign_in_for_tests`. See AuthHelpers section.
+- **Custom path prefix:** `path_prefix: "/v2/admin"` overrides portal resolution.
+
+## Common pitfalls
+
+- **Forgotten stubs raise `NotImplementedError`** with the stub name. Look for the missing method in your test class.
+- **Portal mismatch:** `:admin` portal expects `AdminPortal::Engine` constant. If your portal is named differently, pass `path_prefix:` explicitly.
+- **Tenant leakage in stubs:** `create_resource!` for an org portal must return a record bound to the test's `@org`. Otherwise scope filtering tests will pass for the wrong reason.
+- **`policy_record` for tenant-scoped resources** must belong to a tenant the role has access to — otherwise even allowed roles will see `false`.
+- **Nested resources need `parent: :foo`** in the DSL AND a real parent record from `parent_record!`. Without both, path interpolation fails.
+- **`PortalAccess` doesn't use `resource_tests_for`** — use `portal_access_for` instead. Mixing them on the same class is undefined behavior.
+
+## See also
+
+- `plutonium-policy` — write the policy this concern verifies
+- `plutonium-definition` — definition props the smoke test introspects
+- `plutonium-portal` — portal mounting and entity strategies that drive auth/scoping
+- `plutonium-auth` — Rodauth setup behind the default login flow

data/.yarnrc.yml

@@ -0,0 +1 @@
+nodeLinker: node-modules

data/CHANGELOG.md

@@ -1,3 +1,26 @@
+## [0.48.0] - 2026-04-16
+
+### 🚀 Features
+
+- *(turbo)* Preserve scroll by emitting refresh when redirect target matches referer
+
+### 🐛 Bug Fixes
+
+- *(action)* Respect `confirmation: false` on interactive actions
+
+### 🧪 Testing
+
+- *(system)* Browser coverage for Turbo refresh + scroll preservation
+## [0.47.0] - 2026-04-15
+
+### 🚀 Features
+
+- *(core)* Add `interaction:` kwarg to resource_url_for
+- *(testing)* Add Plutonium::Testing module, generators, skill, docs, and migrate in-repo tests
+
+### ⚙️ Miscellaneous Tasks
+
+- Update yarn
 ## [0.46.0] - 2026-04-11
 
 ### 🚀 Features

data/Rakefile

@@ -17,7 +17,16 @@ Rake::Task["build"].enhance ["assets"]
 # Unit + integration tests (safe to run together)
 Rake::TestTask.new(:test) do |t|
   t.libs << "test"
-  t.test_files = FileList["test/**/*_test.rb"].exclude("test/generators/**/*_test.rb")
+  t.test_files = FileList["test/**/*_test.rb"]
+    .exclude("test/generators/**/*_test.rb")
+    .exclude("test/system/**/*_test.rb")
+  t.verbose = true
+end
+
+# System tests — require a browser (headless Chrome) and run real Turbo/JS.
+Rake::TestTask.new("test:system") do |t|
+  t.libs << "test"
+  t.test_files = FileList["test/system/**/*_test.rb"]
   t.verbose = true
 end