plutonium 0.48.0 → 0.49.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d07d40ddf359fb63528f92bae1e1c10c0ec19d4d8101a7202e1c7ae30a798e90
-  data.tar.gz: 30fe5b1d2c89bd08552b3d64eb84795bc12e5417805b7ffd6c18f84f5f05d8d1
+  metadata.gz: 5016bbce0d2ef39825a923b820797c304a848396853f334d94757f22a90a99e9
+  data.tar.gz: aa95cd0b1d994c093dd0e51587d5c95c3b0a527b0ca5a8f771be1a6f21fd9daa
 SHA512:
-  metadata.gz: f5652a759d23236d48265376846ed7269a34ab6a7796bb40c6cc2331a7be308a8de472cda0405e7453ce52ae6452bcb291aaf2c784d305a9dbec451d1be3efa8
-  data.tar.gz: 3aee38cfc32329df17558559fcda9f1cae1c0605dc8c5a70d3e8ccd74ec5a4de9a04082e95b7368a07e812fe9a1b7d59e89405077e1dfb8210241710f59b3397
+  metadata.gz: 6aeedc9109ad0ac05e2343981de71497ba08be96017e5af800bde70eb5035a96a027477ec2280ad78a1e9449c530e2c67290663efc28a2cc41f97c492056e1e9
+  data.tar.gz: 5b697b2d753c9f80443210c2169f2abe42642f0d36bb1f0aa909965da6317cc1e4c90406560d9bf0156457e5a01b9a009b38250c0aed134b09328d50cb47484f

data/.claude/skills/plutonium-invites/SKILL.md

@@ -46,6 +46,7 @@ rails generate pu:invites:install
 |--------|---------|-------------|
 | `--entity-model=NAME` | Entity | Entity model name for scoping |
 | `--user-model=NAME` | User | User model name |
+| `--invite-model=NAME` | `<EntityModel><UserModel>Invite` | Invite class name. Omit for single-flow apps; set per-invocation when running the generator more than once. |
 | `--membership-model=NAME` | EntityUser | Membership join model |
 | `--roles=ROLES` | member,admin | Comma-separated roles |
 | `--rodauth=NAME` | user | Rodauth configuration for signup |
@@ -113,6 +114,46 @@ get "invitations/:token/signup", to: "invites/user_invitations#signup"
 post "invitations/:token/signup", to: "invites/user_invitations#signup"
 ```
 
+## Multiple invite flows in one app
+
+A single app can run several independent invite flows side-by-side — for example, one for inviting customers to organizations and another for inviting funders to projects. Run `pu:invites:install` once per flow.
+
+**Default derivation rule.** When `--invite_model` is omitted, the generator derives the class name as `<EntityModel><UserModel>Invite`. So with the defaults (`--entity_model=Organization --user_model=User`) the generated class is `Invites::OrganizationUserInvite` — there is no literal `UserInvite` default. Single-flow apps don't need to pass `--invite_model` at all.
+
+Multi-flow apps typically vary `--entity_model` / `--user_model` per invocation; the derived names diverge automatically, so `--invite_model` is only needed when you want a custom class name.
+
+```bash
+rails g pu:invites:install \
+  --entity_model=FunderOrganization \
+  --user_model=SpenderAccount \
+  --invite_model=FunderInvite
+
+rails g pu:invites:install \
+  --entity_model=Project \
+  --user_model=Member \
+  --invite_model=ProjectInvite
+```
+
+Each invocation creates an independent flow: model `Invites::FunderInvite` on `funder_invites`, controller `Invites::FunderInvitationsController` on `/funder_invitations/:token`, helper `funder_invitation_path`, etc. The shared `Invites::WelcomeController` accumulates each new class into its `invite_classes` array, so `pending_invite` checks all flows in priority order (first-match wins).
+
+Override hooks at the model level:
+- `def user_attribute; :spender_account; end` — when `belongs_to :spender_account` instead of `:user`.
+- `def invite_entity_attribute; :funder_organization; end` — when `belongs_to :funder_organization` instead of `:entity`.
+
+Override hooks at the controller level (auto-generated by the install generator, shown here so you understand what it emits and can tweak it):
+
+```ruby
+# packages/invites/app/controllers/invites/welcome_controller.rb
+def invite_classes
+  [::Invites::FunderInvite, ::Invites::ProjectInvite]
+end
+
+# packages/invites/app/controllers/invites/funder_invitations_controller.rb
+def invitation_path_for(token)
+  funder_invitation_path(token: token)
+end
+```
+
 ## Connecting Invitables
 
 Invitables are models that trigger invitations and get notified when they're accepted. Common examples:

data/CHANGELOG.md

@@ -1,3 +1,41 @@
+## [0.49.1] - 2026-05-06
+
+### 🚀 Features
+
+- *(invites)* Support multiple invite models per app
+
+### 🐛 Bug Fixes
+
+- *(policy)* Scope parent association only to matching relations
+- *(ui)* Preserve sidebar scroll across Turbo navigations
+- *(invites)* Add invite_entity_attribute hook for non-:entity invite models
+- *(interactive_actions)* Restore default layout on direct loads
+- *(invites)* Unblock acceptance + non-importmap apps
+- *(interactive_actions)* Force text/html on failure response
+- *(flatpickr)* Position calendar correctly inside modal dialogs
+## [0.49.0] - 2026-05-04
+
+### 🚀 Features
+
+- *(generators)* Add `pu:gem:actual_db_schema` and wire into app template
+- *(ui)* Add auto mode to color mode selector
+- *(ui)* Render color mode selector on rodauth layout
+- *(generators)* Flesh out rails_pulse initializer template
+
+### 🐛 Bug Fixes
+
+- *(controller)* Return clean 403 from non-HTML unauthorized handler
+- *(generators)* Align pu:lite:rails_pulse with v0.3 schema flow
+- *(rodauth)* Prefer main_app.root_path over login_redirect
+
+### 🚜 Refactor
+
+- *(routing)* Rename entity scope prefix from `_scope` to `_scoped`
+
+### ⚙️ Miscellaneous Tasks
+
+- *(pagy)* Rename :client_max_limit to :max_limit
+- Run appraisals
 ## [0.48.0] - 2026-04-16
 
 ### 🚀 Features

data/app/assets/plutonium.js

@@ -13383,49 +13383,62 @@
   };
 
   // src/js/controllers/color_mode_controller.js
+  var ORDER = ["auto", "light", "dark"];
   var color_mode_controller_default = class extends Controller {
     static values = { current: String };
     connect() {
-      const mode = localStorage.getItem("theme") || "light";
-      this.setMode(mode);
+      this.applyMode(this.readMode());
       this.handleStorageChange = (e4) => {
-        console.log("Storage event received in color-mode controller:", e4.key, e4.newValue, e4.oldValue);
-        if (e4.key === "theme" && e4.newValue) {
-          console.log("Updating color-mode theme to:", e4.newValue);
-          this.setMode(e4.newValue);
-        }
+        if (e4.key === "theme")
+          this.applyMode(this.readMode());
       };
       window.addEventListener("storage", this.handleStorageChange);
+      this.mq = window.matchMedia("(prefers-color-scheme: dark)");
+      this.handleMqChange = () => {
+        if (this.readMode() === "auto")
+          this.applyMode("auto");
+      };
+      this.mq.addEventListener("change", this.handleMqChange);
     }
     disconnect() {
       window.removeEventListener("storage", this.handleStorageChange);
+      if (this.mq)
+        this.mq.removeEventListener("change", this.handleMqChange);
     }
     toggleMode() {
-      const current = this.currentValue || "light";
-      const next = current === "light" ? "dark" : "light";
+      const current = this.readMode();
+      const next = ORDER[(ORDER.indexOf(current) + 1) % ORDER.length];
       this.setMode(next);
     }
     setMode(mode) {
-      if (mode === "dark") {
-        document.documentElement.classList.add("dark");
-      } else {
-        document.documentElement.classList.remove("dark");
-      }
+      localStorage.setItem("theme", mode);
+      this.applyMode(mode);
+    }
+    applyMode(mode) {
+      const effective = this.effectiveMode(mode);
+      document.documentElement.classList.toggle("dark", effective === "dark");
       this.currentValue = mode;
       this.toggleIcons(mode);
-      localStorage.setItem("theme", mode);
+    }
+    readMode() {
+      const saved = localStorage.getItem("theme");
+      return ORDER.includes(saved) ? saved : "auto";
+    }
+    effectiveMode(mode) {
+      if (mode === "light" || mode === "dark")
+        return mode;
+      return window.matchMedia("(prefers-color-scheme: dark)").matches ? "dark" : "light";
     }
     toggleIcons(mode) {
-      const sun = this.element.querySelector(".color-mode-icon-light");
-      const moon = this.element.querySelector(".color-mode-icon-dark");
-      if (sun && moon) {
-        if (mode === "light") {
-          sun.classList.remove("hidden");
-          moon.classList.add("hidden");
-        } else {
-          sun.classList.add("hidden");
-          moon.classList.remove("hidden");
-        }
+      const icons = {
+        auto: this.element.querySelector(".color-mode-icon-auto"),
+        light: this.element.querySelector(".color-mode-icon-light"),
+        dark: this.element.querySelector(".color-mode-icon-dark")
+      };
+      for (const [key, el] of Object.entries(icons)) {
+        if (!el)
+          continue;
+        el.classList.toggle("hidden", key !== mode);
       }
     }
   };
@@ -16871,6 +16884,21 @@ ${text2}</tr>
       }
       if (this.modal) {
         options2.appendTo = this.modal;
+        options2.position = (instance) => {
+          const input = instance.altInput || instance.input;
+          const inputRect = input.getBoundingClientRect();
+          const modalRect = this.modal.getBoundingClientRect();
+          const cal = instance.calendarContainer;
+          const calHeight = cal.offsetHeight;
+          const spaceBelow = window.innerHeight - inputRect.bottom;
+          const showAbove = spaceBelow < calHeight && inputRect.top > calHeight;
+          const top2 = showAbove ? inputRect.top - modalRect.top - calHeight - 2 : inputRect.bottom - modalRect.top + 2;
+          cal.style.top = `${top2}px`;
+          cal.style.left = `${inputRect.left - modalRect.left}px`;
+          cal.style.right = "auto";
+          cal.classList.toggle("arrowTop", !showAbove);
+          cal.classList.toggle("arrowBottom", showAbove);
+        };
       }
       return options2;
     }
@@ -27661,7 +27689,27 @@ this.ifd0Offset: ${this.ifd0Offset}, file.byteLength: ${e4.byteLength}`), e4.tif
   };
 
   // src/js/controllers/sidebar_controller.js
+  var savedScrollTop = 0;
   var sidebar_controller_default = class extends Controller {
+    static targets = ["scroll"];
+    connect() {
+      this.beforeRender = this.beforeRender.bind(this);
+      this.afterRender = this.afterRender.bind(this);
+      document.addEventListener("turbo:before-render", this.beforeRender);
+      document.addEventListener("turbo:render", this.afterRender);
+    }
+    disconnect() {
+      document.removeEventListener("turbo:before-render", this.beforeRender);
+      document.removeEventListener("turbo:render", this.afterRender);
+    }
+    beforeRender() {
+      if (this.hasScrollTarget)
+        savedScrollTop = this.scrollTarget.scrollTop;
+    }
+    afterRender() {
+      if (this.hasScrollTarget)
+        this.scrollTarget.scrollTop = savedScrollTop;
+    }
   };
 
   // src/js/controllers/password_visibility_controller.js