plutonium 0.62.2 → 0.63.0

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: plutonium
 version: !ruby/object:Gem::Version
-  version: 0.62.2
+  version: 0.63.0
 platform: ruby
 authors:
 - Stefan Froelich
 bindir: exe
 cert_chain: []
-date: 2026-07-09 00:00:00.000000000 Z
+date: 2026-08-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: zeitwerk
@@ -29,14 +29,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.2'
+        version: 7.2.3.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.2'
+        version: 7.2.3.1
 - !ruby/object:Gem::Dependency
   name: csv
   requirement: !ruby/object:Gem::Requirement
@@ -429,6 +429,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: acts_as_list
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: Plutonium is a Rapid Application Development toolkit for Rails. Convention-driven
   and fully customizable, it adds application-level concepts like resources, policies,
   definitions, and portals that make building complex apps faster. Built for the AI
@@ -442,6 +456,7 @@ extra_rdoc_files: []
 files:
 - "# Plutonium: The pre-alpha demo.md"
 - ".claude/skills/plutonium-app/SKILL.md"
+- ".claude/skills/plutonium-async-interactions/SKILL.md"
 - ".claude/skills/plutonium-auth/SKILL.md"
 - ".claude/skills/plutonium-behavior/SKILL.md"
 - ".claude/skills/plutonium-kanban/SKILL.md"
@@ -553,20 +568,36 @@ files:
 - config/initializers/pagy.rb
 - config/initializers/rabl.rb
 - config/initializers/sqlite_alias.rb
+- db/migrate/async_interactions/20260817000001_create_plutonium_async_runs.rb
 - db/migrate/wizard/20260615000001_create_plutonium_wizard_sessions.rb
 - docs/.vitepress/config.ts
 - docs/.vitepress/sync-skills.mjs
-- docs/.vitepress/theme/components/HomeAudienceSplit.vue
+- docs/.vitepress/theme/blog.data.ts
+- docs/.vitepress/theme/components/BlogIndex.vue
+- docs/.vitepress/theme/components/BlogMeta.vue
 - docs/.vitepress/theme/components/HomeCta.vue
+- docs/.vitepress/theme/components/HomeFeatureTour.vue
 - docs/.vitepress/theme/components/HomeHero.vue
 - docs/.vitepress/theme/components/HomeInTheBox.vue
-- docs/.vitepress/theme/components/HomePillars.vue
 - docs/.vitepress/theme/components/HomeStopWriting.vue
 - docs/.vitepress/theme/components/HomeWalkthrough.vue
+- docs/.vitepress/theme/components/HomeWhyPlutonium.vue
 - docs/.vitepress/theme/components/SectionLanding.vue
 - docs/.vitepress/theme/custom.css
 - docs/.vitepress/theme/index.ts
 - docs/ai.md
+- docs/blog/association-inputs-post-signed-ids.md
+- docs/blog/fix-the-model-not-the-policy.md
+- docs/blog/fractional-ordering-runs-out-of-room.md
+- docs/blog/half-finished-forms-are-pii.md
+- docs/blog/index.md
+- docs/blog/interactions-are-presentation-objects.md
+- docs/blog/introducing-plutonium.md
+- docs/blog/jobs-are-not-permission-snapshots.md
+- docs/blog/plutonium-and-ai-agents.md
+- docs/blog/realtime-is-one-line-and-four-dependencies.md
+- docs/blog/two-forms-one-dom-id.md
+- docs/blog/whats-new-async-kanban-wizards.md
 - docs/getting-started/index.md
 - docs/getting-started/installation.md
 - docs/getting-started/tutorial/01-setup.md
@@ -588,6 +619,7 @@ files:
 - docs/guides/kanban.md
 - docs/guides/multi-tenancy.md
 - docs/guides/nested-resources.md
+- docs/guides/performance.md
 - docs/guides/search-filtering.md
 - docs/guides/testing.md
 - docs/guides/theming.md
@@ -631,6 +663,13 @@ files:
 - docs/public/images/home-index.png
 - docs/public/images/home-new.png
 - docs/public/images/home-show.png
+- docs/public/images/home/tour-actions.png
+- docs/public/images/home/tour-async.png
+- docs/public/images/home/tour-kanban.png
+- docs/public/images/home/tour-tenancy.png
+- docs/public/images/home/tour-wizard.png
+- docs/public/images/reference/async-progress-page.png
+- docs/public/images/reference/async-running-banner.png
 - docs/public/images/reference/structured-inputs-removed.png
 - docs/public/images/reference/structured-inputs.png
 - docs/public/images/tutorial/02-empty-index.png
@@ -651,6 +690,7 @@ files:
 - docs/public/plutonium.png
 - docs/public/site.webmanifest
 - docs/public/templates/base.rb
+- docs/public/templates/experimental.rb
 - docs/public/templates/lite.rb
 - docs/public/templates/pluton8.rb
 - docs/public/templates/plutonium.rb
@@ -670,6 +710,7 @@ files:
 - docs/reference/auth/accounts.md
 - docs/reference/auth/index.md
 - docs/reference/auth/profile.md
+- docs/reference/behavior/async-interactions.md
 - docs/reference/behavior/controllers.md
 - docs/reference/behavior/index.md
 - docs/reference/behavior/interactions.md
@@ -681,6 +722,7 @@ files:
 - docs/reference/kanban/dsl.md
 - docs/reference/kanban/index.md
 - docs/reference/kanban/positioning.md
+- docs/reference/positioning.md
 - docs/reference/resource/actions.md
 - docs/reference/resource/definition.md
 - docs/reference/resource/export.md
@@ -729,6 +771,12 @@ files:
 - docs/superpowers/plans/2026-06-26-kanban-dsl.md.tasks.json
 - docs/superpowers/plans/2026-07-02-kanban-drop-interactions.md
 - docs/superpowers/plans/2026-07-02-kanban-drop-interactions.md.tasks.json
+- docs/superpowers/plans/2026-07-16-homepage-depth-upgrade.md
+- docs/superpowers/plans/2026-07-16-homepage-depth-upgrade.md.tasks.json
+- docs/superpowers/plans/2026-07-31-positioned-drag-and-drop.md
+- docs/superpowers/plans/2026-07-31-positioned-drag-and-drop.md.tasks.json
+- docs/superpowers/plans/2026-08-17-async-interactions.md
+- docs/superpowers/plans/2026-08-17-async-interactions.md.tasks.json
 - docs/superpowers/specs/2026-04-08-plutonium-skills-overhaul-design.md
 - docs/superpowers/specs/2026-04-14-plutonium-testing-design.md
 - docs/superpowers/specs/2026-05-07-ui-layout-overhaul-design.md
@@ -749,6 +797,10 @@ files:
 - docs/superpowers/specs/2026-06-18-wizard-hosting-design.md
 - docs/superpowers/specs/2026-06-26-kanban-dsl-design.md
 - docs/superpowers/specs/2026-07-03-kanban-auth-simplification.md
+- docs/superpowers/specs/2026-07-16-homepage-depth-upgrade-design.md
+- docs/superpowers/specs/2026-07-17-action-html-attributes-design.md
+- docs/superpowers/specs/2026-07-31-positioned-drag-and-drop-design.md
+- docs/superpowers/specs/2026-08-17-async-interactions-design.md
 - esbuild.config.js
 - exe/pug
 - gemfiles/postgres.gemfile
@@ -762,6 +814,8 @@ files:
 - lib/active_model/validations/array_validator.rb
 - lib/active_model/validations/attached_validator.rb
 - lib/active_model/validations/url_validator.rb
+- lib/generators/pu/async_interactions/install_generator.rb
+- lib/generators/pu/async_interactions/templates/app/controllers/async_runs_controller.rb.tt
 - lib/generators/pu/core/assets/assets_generator.rb
 - lib/generators/pu/core/assets/templates/.keep
 - lib/generators/pu/core/assets/templates/postcss.config.js
@@ -858,6 +912,7 @@ files:
 - lib/generators/pu/lib/plutonium_generators/concerns/logger.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/mounts_engines.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/package_selector.rb
+- lib/generators/pu/lib/plutonium_generators/concerns/resource_registration.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/resource_selector.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/rodauth_redirects.rb
 - lib/generators/pu/lib/plutonium_generators/concerns/serializer.rb
@@ -1025,6 +1080,7 @@ files:
 - lib/generators/pu/test/install/templates/plutonium_testing.rb.tt
 - lib/generators/pu/test/scaffold/scaffold_generator.rb
 - lib/generators/pu/test/scaffold/templates/integration_test.rb.tt
+- lib/generators/pu/wizards/install_generator.rb
 - lib/plutonium.rb
 - lib/plutonium/action/README.md
 - lib/plutonium/action/base.rb
@@ -1036,6 +1092,7 @@ files:
 - lib/plutonium/api_client.rb
 - lib/plutonium/api_client/concerns/create_api_client.rb
 - lib/plutonium/api_client/concerns/disable_api_client.rb
+- lib/plutonium/attachments.rb
 - lib/plutonium/auth.rb
 - lib/plutonium/auth/public.rb
 - lib/plutonium/auth/rodauth.rb
@@ -1051,11 +1108,15 @@ files:
 - lib/plutonium/definition/base.rb
 - lib/plutonium/definition/config_attr.rb
 - lib/plutonium/definition/defineable_props.rb
+- lib/plutonium/definition/display_layout.rb
 - lib/plutonium/definition/form_layout.rb
 - lib/plutonium/definition/index_views.rb
 - lib/plutonium/definition/inheritable_config_attr.rb
+- lib/plutonium/definition/input_aliases.rb
 - lib/plutonium/definition/metadata.rb
 - lib/plutonium/definition/nested_inputs.rb
+- lib/plutonium/definition/page_widths.rb
+- lib/plutonium/definition/positioning.rb
 - lib/plutonium/definition/presentable.rb
 - lib/plutonium/definition/scoping.rb
 - lib/plutonium/definition/search.rb
@@ -1072,7 +1133,16 @@ files:
 - lib/plutonium/helpers/turbo_helper.rb
 - lib/plutonium/helpers/turbo_stream_actions_helper.rb
 - lib/plutonium/interaction/README.md
+- lib/plutonium/interaction/async/configuration.rb
+- lib/plutonium/interaction/async/context.rb
+- lib/plutonium/interaction/async/executor.rb
+- lib/plutonium/interaction/async/job.rb
+- lib/plutonium/interaction/async/reap_job.rb
+- lib/plutonium/interaction/async/run.rb
+- lib/plutonium/interaction/async/run_definition.rb
+- lib/plutonium/interaction/async/run_policy.rb
 - lib/plutonium/interaction/base.rb
+- lib/plutonium/interaction/concerns/dispatchable.rb
 - lib/plutonium/interaction/concerns/scoping.rb
 - lib/plutonium/interaction/concerns/workflow_dsl.rb
 - lib/plutonium/interaction/outcome.rb
@@ -1111,6 +1181,8 @@ files:
 - lib/plutonium/portal/dynamic_controllers.rb
 - lib/plutonium/portal/engine.rb
 - lib/plutonium/positioning.rb
+- lib/plutonium/positioning/config.rb
+- lib/plutonium/positioning/model.rb
 - lib/plutonium/profile/security_section.rb
 - lib/plutonium/query/adhoc_block.rb
 - lib/plutonium/query/base.rb
@@ -1130,9 +1202,11 @@ files:
 - lib/plutonium/resource/controllers/crud_actions.rb
 - lib/plutonium/resource/controllers/crud_actions/index_action.rb
 - lib/plutonium/resource/controllers/defineable.rb
+- lib/plutonium/resource/controllers/eager_loading.rb
 - lib/plutonium/resource/controllers/export_csv.rb
 - lib/plutonium/resource/controllers/interactive_actions.rb
 - lib/plutonium/resource/controllers/kanban_actions.rb
+- lib/plutonium/resource/controllers/position_actions.rb
 - lib/plutonium/resource/controllers/presentable.rb
 - lib/plutonium/resource/controllers/queryable.rb
 - lib/plutonium/resource/controllers/typeahead.rb
@@ -1177,6 +1251,9 @@ files:
 - lib/plutonium/ui/component/behaviour.rb
 - lib/plutonium/ui/component/kit.rb
 - lib/plutonium/ui/component/methods.rb
+- lib/plutonium/ui/component/positionable.rb
+- lib/plutonium/ui/component/resolves_tags.rb
+- lib/plutonium/ui/component/section.rb
 - lib/plutonium/ui/component/tokens.rb
 - lib/plutonium/ui/component_classes.rb
 - lib/plutonium/ui/display/base.rb
@@ -1186,8 +1263,10 @@ files:
 - lib/plutonium/ui/display/components/boolean.rb
 - lib/plutonium/ui/display/components/color.rb
 - lib/plutonium/ui/display/components/currency.rb
+- lib/plutonium/ui/display/components/formatted_value.rb
 - lib/plutonium/ui/display/components/markdown.rb
 - lib/plutonium/ui/display/components/phlexi_render.rb
+- lib/plutonium/ui/display/components/section.rb
 - lib/plutonium/ui/display/options/inferred_types.rb
 - lib/plutonium/ui/display/resource.rb
 - lib/plutonium/ui/display/theme.rb
@@ -1226,6 +1305,8 @@ files:
 - lib/plutonium/ui/frame_navigator_panel.rb
 - lib/plutonium/ui/grid/card.rb
 - lib/plutonium/ui/grid/resource.rb
+- lib/plutonium/ui/interaction/async/run_progress.rb
+- lib/plutonium/ui/interaction/async/running_banner.rb
 - lib/plutonium/ui/kanban/card.rb
 - lib/plutonium/ui/kanban/color_dot.rb
 - lib/plutonium/ui/kanban/column.rb
@@ -1255,6 +1336,7 @@ files:
 - lib/plutonium/ui/page/wizard_chooser.rb
 - lib/plutonium/ui/page/wizard_completed.rb
 - lib/plutonium/ui/page_header.rb
+- lib/plutonium/ui/page_width.rb
 - lib/plutonium/ui/panel.rb
 - lib/plutonium/ui/sidebar_menu.rb
 - lib/plutonium/ui/skeleton_table.rb
@@ -1262,6 +1344,7 @@ files:
 - lib/plutonium/ui/table/base.rb
 - lib/plutonium/ui/table/components/attachment.rb
 - lib/plutonium/ui/table/components/bulk_actions_toolbar.rb
+- lib/plutonium/ui/table/components/drag_handle.rb
 - lib/plutonium/ui/table/components/filter_form.rb
 - lib/plutonium/ui/table/components/filter_pills.rb
 - lib/plutonium/ui/table/components/pagy_info.rb
@@ -1311,6 +1394,7 @@ files:
 - lib/plutonium/wizard/sweep_job.rb
 - lib/plutonium/wizard/unknown_wizard_error.rb
 - lib/rodauth/features/case_insensitive_login.rb
+- lib/rodauth/features/session_isolation.rb
 - lib/rodauth/plugins.rb
 - lib/tasks/.keep
 - lib/tasks/release.rake
@@ -1337,6 +1421,7 @@ files:
 - src/js/controllers/attachment_preview_container_controller.js
 - src/js/controllers/attachment_preview_controller.js
 - src/js/controllers/autosubmit_controller.js
+- src/js/controllers/breadcrumbs_controller.js
 - src/js/controllers/bulk_actions_controller.js
 - src/js/controllers/capture_url_controller.js
 - src/js/controllers/clipboard_controller.js
@@ -1356,6 +1441,7 @@ files:
 - src/js/controllers/nested_resource_form_fields_controller.js
 - src/js/controllers/password_sentinel_controller.js
 - src/js/controllers/password_visibility_controller.js
+- src/js/controllers/positioned_controller.js
 - src/js/controllers/register_controllers.js
 - src/js/controllers/remote_modal_controller.js
 - src/js/controllers/resource_collapse_controller.js
@@ -1364,6 +1450,7 @@ files:
 - src/js/controllers/resource_header_controller.js
 - src/js/controllers/resource_tab_list_controller.js
 - src/js/controllers/row_click_controller.js
+- src/js/controllers/run_progress_controller.js
 - src/js/controllers/select_navigator.js
 - src/js/controllers/sidebar_controller.js
 - src/js/controllers/slim_select_controller.js
@@ -1374,6 +1461,7 @@ files:
 - src/js/controllers/view_switcher_controller.js
 - src/js/controllers/wizard_controller.js
 - src/js/core.js
+- src/js/drag/sortable.js
 - src/js/plutonium.js
 - src/js/support/dom_element.js
 - src/js/support/mime_icon.js
@@ -1394,20 +1482,19 @@ metadata:
   homepage_uri: https://radioactive-labs.github.io/plutonium-core/
   source_code_uri: https://github.com/radioactive-labs/plutonium-core
 post_install_message: |
-  ℹ️  Plutonium — breaking change introduced in 0.49.0
+  ⚠️  Ruby 3.2 support ends in the NEXT release
 
-  Entity-scoped URL helpers and path params were renamed in 0.49.0 from
-  `<entity>_scope_*` to `<entity>_scoped_*`.
+  This is the last Plutonium release that installs on Ruby 3.2.
 
-  Examples:
-    organization_scope_widgets_path  →  organization_scoped_widgets_path
-    params[:organization_scope]      →  params[:organization_scoped]
+  Why: pagy patches CVE-2026-54659 (a path-traversal in
+  `Pagy::I18n.locale=`) only in >= 43.5.6, and pagy dropped Ruby 3.2 in
+  43.5.0. No pagy version is both patched and installable on 3.2, so
+  continuing to support it means shipping a known-vulnerable dependency.
 
-  If you are upgrading from 0.48.0 or earlier and reference these helpers or
-  params directly (e.g. in tests, custom redirects, or hand-written links),
-  update them to the new names.
+  Ruby 3.2 reached end-of-life in March 2026.
 
-  Apps that only use `resource_url_for` are unaffected.
+  Action: upgrade to Ruby 3.3 or newer before your next Plutonium bump.
+  If you stay on 3.2, `bundle update plutonium` will hold you here.
 rdoc_options: []
 require_paths:
 - lib

data/docs/.vitepress/theme/components/HomeAudienceSplit.vue

@@ -1,53 +0,0 @@
-<template>
-  <section class="pu-section pu-section--band">
-    <div class="pu-section-inner">
-      <h2 class="pu-section-title">Plutonium fits two kinds of teams.</h2>
-      <div class="ha-grid">
-        <div class="ha-col">
-          <div class="ha-head">For Rails developers</div>
-          <p class="ha-lede">The missing layer between Rails and the apps you keep building.</p>
-          <ul class="ha-list">
-            <li><IconArrowRight class="ha-arr" :size="16" :stroke-width="2.25" /><span>Convention extended to CRUD, policies, and portals</span></li>
-            <li><IconArrowRight class="ha-arr" :size="16" :stroke-width="2.25" /><span>Generated code lives in your repo — edit anything</span></li>
-            <li><IconArrowRight class="ha-arr" :size="16" :stroke-width="2.25" /><span>Mountable Rails engines for packages and portals</span></li>
-            <li><IconArrowRight class="ha-arr" :size="16" :stroke-width="2.25" /><span>ActionPolicy authorization, baked in</span></li>
-          </ul>
-        </div>
-        <div class="ha-col ha-col--right">
-          <div class="ha-head">For founders &amp; teams</div>
-          <p class="ha-lede">Skip the SaaS template debate. Plutonium turns Rails into a SaaS toolkit.</p>
-          <ul class="ha-list">
-            <li><IconArrowRight class="ha-arr" :size="16" :stroke-width="2.25" /><span>Admin panel, signup, and invites on day one</span></li>
-            <li><IconArrowRight class="ha-arr" :size="16" :stroke-width="2.25" /><span>Multi-tenant scoping when you need it</span></li>
-            <li><IconArrowRight class="ha-arr" :size="16" :stroke-width="2.25" /><span>No template lock-in — it's just your Rails app</span></li>
-            <li><IconArrowRight class="ha-arr" :size="16" :stroke-width="2.25" /><span>Ship faster with AI tools that understand your code</span></li>
-          </ul>
-        </div>
-      </div>
-    </div>
-  </section>
-</template>
-
-<script setup>
-import { IconArrowRight } from "@tabler/icons-vue"
-</script>
-
-<style scoped>
-.ha-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 32px; }
-.ha-col--right { border-left: 1px solid var(--pu-border); padding-left: 32px; }
-.ha-head {
-  font-size: 11px; text-transform: uppercase; letter-spacing: 0.1em;
-  color: var(--pu-accent); font-weight: 600; margin-bottom: 8px;
-}
-.ha-lede {
-  font-size: 17px; line-height: 1.35; font-weight: 500; color: var(--pu-text);
-  margin: 0 0 14px; letter-spacing: -0.01em;
-}
-.ha-list { list-style: none; padding: 0; margin: 0; font-size: 14px; line-height: 1.6; color: var(--pu-text-muted); }
-.ha-list li { display: flex; gap: 10px; align-items: flex-start; padding: 5px 0; }
-.ha-arr { color: var(--pu-accent); flex-shrink: 0; margin-top: 3px; }
-@media (max-width: 768px) {
-  .ha-grid { grid-template-columns: 1fr; }
-  .ha-col--right { border-left: none; padding-left: 0; border-top: 1px solid var(--pu-border); padding-top: 24px; }
-}
-</style>

data/docs/.vitepress/theme/components/HomePillars.vue

@@ -1,42 +0,0 @@
-<template>
-  <section class="pu-section pu-section--band">
-    <div class="pu-section-inner">
-      <h2 class="pu-section-title">Built on Rails. Wired for shipping.</h2>
-      <div class="hp-grid">
-        <div class="hp-card" v-for="p in pillars" :key="p.name">
-          <component :is="p.icon" class="hp-icon" :size="22" :stroke-width="1.75" />
-          <div class="hp-name">{{ p.name }}</div>
-          <div class="hp-desc">{{ p.desc }}</div>
-        </div>
-      </div>
-    </div>
-  </section>
-</template>
-
-<script setup>
-import { IconRoute, IconCode, IconBuildingSkyscraper, IconRobot } from "@tabler/icons-vue"
-
-const pillars = [
-  { icon: IconRoute, name: "Convention over configuration",
-    desc: "Extended to resources, policies, portals, and tenancy — not just routes and views." },
-  { icon: IconCode, name: "It's just Rails",
-    desc: 'Generated code lives in your repo. Edit it, override it, delete it. The “magic” is regular Ruby mixins you can read.' },
-  { icon: IconBuildingSkyscraper, name: "Multi-tenant ready",
-    desc: "Path or domain tenancy. Scoped relations. Invites and memberships out of the box." },
-  { icon: IconRobot, name: "AI-readable",
-    desc: "Predictable file layout and naming. Built-in skills teach AI assistants the patterns." },
-]
-</script>
-
-<style scoped>
-.hp-grid { display: grid; grid-template-columns: repeat(4, 1fr); gap: 16px; }
-.hp-card {
-  padding: 18px; border: 1px solid var(--pu-border-soft); border-radius: 8px;
-  background: var(--pu-bg-light);
-}
-.hp-icon { color: var(--pu-accent); margin-bottom: 10px; display: block; }
-.hp-name { font-weight: 600; font-size: 15px; color: var(--pu-text); margin-bottom: 6px; line-height: 1.25; }
-.hp-desc { font-size: 13px; color: var(--pu-text-muted); line-height: 1.5; }
-@media (max-width: 900px) { .hp-grid { grid-template-columns: repeat(2, 1fr); } }
-@media (max-width: 480px) { .hp-grid { grid-template-columns: 1fr; } }
-</style>