plutonium 0.64.0 → 0.66.0

data/lib/plutonium/invites/concerns/invite_user.rb

@@ -69,10 +69,15 @@ module Plutonium
           ::Invites::UserInvite
         end
 
-        # Override to specify the membership model class
+        # Override to specify the membership model class. There is no default
+        # because the membership join model is app-specific (e.g. OrganizationUser).
+        # Omitting the override raises NotImplementedError so the failure is
+        # actionable instead of a confusing NameError on a non-existent constant.
         # @return [Class]
         def membership_class
-          EntityMembership
+          raise NotImplementedError,
+            "#{self.class}#membership_class must return the membership model class. " \
+            "Specify --membership-model when generating, or override this method."
         end
 
         # Override to specify the user model class
@@ -109,7 +114,7 @@ module Plutonium
 
         # Override to customize success message
         def success_message
-          "Invitation sent to #{email}"
+          I18n.t("plutonium.invites.invite_user.sent", email: email)
         end
 
         # Override to specify the entity association name on membership
@@ -141,7 +146,7 @@ module Plutonium
             membership_entity_attribute => entity,
             user_association => existing_user
           )
-          errors.add(:email, "is already a member") if membership
+          errors.add(:email, :already_a_member) if membership
         end
 
         def no_pending_invitation
@@ -152,7 +157,7 @@ module Plutonium
             :email => email,
             :state => :pending
           )
-          errors.add(:email, "already has a pending invitation") if pending
+          errors.add(:email, :already_has_pending_invitation) if pending
         end
 
         # Override if user association has a different name

data/lib/plutonium/invites/concerns/resend_invite.rb

@@ -26,14 +26,14 @@ module Plutonium
         extend ActiveSupport::Concern
 
         included do
-          presents label: "Resend Invitation", icon: Phlex::TablerIcons::MailForward
+          presents label: t("plutonium.invites.resend_invite.label"), icon: Phlex::TablerIcons::MailForward
 
           attribute :resource
         end
 
         def execute
           unless resource.pending?
-            return failed("Can only resend pending invitations")
+            return failed(I18n.t("plutonium.invites.resend_invite.not_pending"))
           end
 
           resource.update!(expires_at: new_expiry)
@@ -41,7 +41,7 @@ module Plutonium
 
           succeed(resource).with_message(success_message)
         rescue => error
-          failed("Failed to resend: #{error.message}")
+          failed(I18n.t("plutonium.invites.resend_invite.failed", error: error.message))
         end
 
         private
@@ -58,7 +58,7 @@ module Plutonium
 
         # Override to customize success message
         def success_message
-          "Invitation resent to #{resource.email}"
+          I18n.t("plutonium.invites.resend_invite.resent", email: resource.email)
         end
       end
     end

data/lib/plutonium/invites/controller.rb

@@ -57,7 +57,7 @@ module Plutonium
             @invite.validate_email_constraints!(current_user.email)
             render :show
           rescue ActiveRecord::RecordInvalid => e
-            @error_title = "Email Validation Error"
+            @error_title = t("plutonium.invites.controller.email_validation_error")
             @error_message = e.record.errors.full_messages.join(", ")
             render :error, status: :forbidden
           end
@@ -74,7 +74,7 @@ module Plutonium
 
         unless current_user
           redirect_to invitation_path_for(params[:token]),
-            alert: "Please sign in to accept this invitation"
+            alert: t("plutonium.invites.controller.sign_in_to_accept")
           return
         end
 
@@ -82,9 +82,9 @@ module Plutonium
         cookies.delete(:pending_invitation)
 
         redirect_to after_accept_path,
-          notice: "Invitation accepted! Welcome to #{@invite.entity.to_label}!"
+          notice: t("plutonium.invites.controller.accepted", entity: @invite.entity.to_label)
       rescue ActiveRecord::RecordInvalid => e
-        @error_title = "Acceptance Error"
+        @error_title = t("plutonium.invites.controller.acceptance_error")
         @error_message = e.record.errors.full_messages.join(", ")
         render :error, status: :forbidden
       end
@@ -112,8 +112,8 @@ module Plutonium
         invite = invite_class.find_for_acceptance(token)
 
         unless invite
-          @error_title = "Invalid or Expired Invitation"
-          @error_message = "This invitation link is no longer valid. It may have expired or already been used."
+          @error_title = t("plutonium.invites.controller.invalid_or_expired")
+          @error_message = t("plutonium.invites.controller.no_longer_valid")
           render :error, status: :not_found
           return nil
         end
@@ -131,7 +131,7 @@ module Plutonium
         password_confirmation = params[:password_confirmation]
 
         if password != password_confirmation
-          flash.now[:alert] = "Passwords don't match"
+          flash.now[:alert] = t("plutonium.invites.controller.passwords_dont_match")
           render :signup
           return
         end
@@ -140,7 +140,7 @@ module Plutonium
           ActiveRecord::Base.transaction do
             existing_user = user_class.find_by(email: email)
             if existing_user
-              flash.now[:alert] = "An account with this email already exists. Please sign in instead."
+              flash.now[:alert] = t("plutonium.invites.controller.account_exists")
               render :signup
               return
             end
@@ -153,7 +153,7 @@ module Plutonium
               sign_in_user(user)
               redirect_to after_accept_path
             else
-              flash.now[:alert] = "Failed to create account"
+              flash.now[:alert] = t("plutonium.invites.controller.create_account_failed")
               render :signup
             end
           end
@@ -161,11 +161,11 @@ module Plutonium
           flash.now[:alert] = if e.record.is_a?(invite_class)
             e.record.errors.full_messages.join(", ")
           else
-            "Failed to create account: #{e.record.errors.full_messages.join(", ")}"
+            t("plutonium.invites.controller.create_account_failed_with_error", error: e.record.errors.full_messages.join(", "))
           end
           render :signup
         rescue => e
-          flash.now[:alert] = "Failed to create account: #{e.message}"
+          flash.now[:alert] = t("plutonium.invites.controller.create_account_failed_with_error", error: e.message)
           render :signup
         end
       end

data/lib/plutonium/kanban/column.rb

@@ -12,10 +12,19 @@ module Plutonium
         lost: {color: :red, collapsed: true}
       }.freeze
 
-      attr_reader :key, :label, :color, :wip, :scope, :on_enter, :on_exit, :accepts, :actions, :enter_interaction
+      attr_reader :key, :color, :wip, :scope, :on_enter, :on_exit, :accepts, :actions, :enter_interaction
+
+      # `label:` if given, else plutonium.kanban_columns.<model>.<key>, else the
+      # titleized key. Resolved on every read so it follows the request locale.
+      def label
+        Plutonium::Translation.resolve(@label) ||
+          Plutonium::Translation.label_for(:kanban_column, @resource_class, key) ||
+          key.to_s.titleize
+      end
 
       def initialize(key, label: nil, color: nil, wip: nil, scope: nil, on_enter: nil, on_exit: nil, on_drop: nil,
-        collapsed: nil, add: nil, accepts: nil, locked: nil, role: nil, enter_interaction: nil, drop_interaction: nil)
+        collapsed: nil, add: nil, accepts: nil, locked: nil, role: nil, enter_interaction: nil, drop_interaction: nil,
+        resource_class: nil)
         # on_drop:/drop_interaction: were renamed to on_enter:/enter_interaction:.
         # Resolve the deprecated aliases first (dev/test raise; deployed envs warn
         # and map — see resolve_renamed_option) so the rest of initialize only
@@ -48,7 +57,8 @@ module Plutonium
           raise ArgumentError, "kanban column `accepts:` no longer accepts a Proc; use true/false or an Array of source keys, and put record/user conditions in the kanban_move? policy."
         end
         @key = key.to_sym
-        @label = label || key.to_s.titleize
+        @label = label
+        @resource_class = resource_class
         @color = color.nil? ? preset[:color] : color
         @wip = wip
         @scope = scope

data/lib/plutonium/kanban/dsl.rb

@@ -3,13 +3,16 @@
 module Plutonium
   module Kanban
     class DSL
-      def self.build(&block)
-        dsl = new
+      # `resource_class:` lets column labels resolve through the
+      # plutonium.kanban_columns.<model>.<key> convention.
+      def self.build(resource_class: nil, &block)
+        dsl = new(resource_class:)
         dsl.instance_eval(&block) if block
         dsl.to_board
       end
 
-      def initialize
+      def initialize(resource_class: nil)
+        @resource_class = resource_class
         @columns = []
         @columns_block = nil
         @card_fields = nil
@@ -24,7 +27,7 @@ module Plutonium
       end
 
       def column(key, **opts, &blk)
-        col = Column.new(key, **opts)
+        col = Column.new(key, resource_class: @resource_class, **opts)
         col.instance_eval(&blk) if blk
         @columns << col
       end

data/lib/plutonium/models/has_cents.rb

@@ -173,7 +173,7 @@ module Plutonium
             def #{name}=(value)
               self.#{cents_name} = begin
                 (BigDecimal(value.to_s) * #{rate}).to_i if value.present?
-              rescue ArgumentError
+              rescue ArgumentError, FloatDomainError
                 nil
               end
             end

data/lib/plutonium/profile/security_section.rb

@@ -4,46 +4,34 @@ module Plutonium
   module Profile
     # Renders security settings links based on enabled Rodauth features.
     class SecuritySection < Plutonium::UI::Component::Base
+      # Labels and descriptions come from
+      # plutonium.profile.security_section.features.<feature>.{label,description}.
       FEATURES = {
         change_password: {
-          label: "Change Password",
-          description: "Update your account password",
           icon: Phlex::TablerIcons::Key,
           path_method: :change_password_path
         },
         change_login: {
-          label: "Change Email",
-          description: "Update your email address",
           icon: Phlex::TablerIcons::Mail,
           path_method: :change_login_path
         },
         otp: {
-          label: "Two-Factor Authentication",
-          description: "Add an extra layer of security",
           icon: Phlex::TablerIcons::DeviceMobile,
           path_method: :otp_setup_path
         },
         recovery_codes: {
-          label: "Recovery Codes",
-          description: "View or regenerate backup codes",
           icon: Phlex::TablerIcons::FileCode,
           path_method: :recovery_codes_path
         },
         webauthn: {
-          label: "Security Keys",
-          description: "Manage passkeys and security keys",
           icon: Phlex::TablerIcons::Fingerprint,
           path_method: :webauthn_setup_path
         },
         active_sessions: {
-          label: "Active Sessions",
-          description: "View and manage your sessions",
           icon: Phlex::TablerIcons::DevicesCheck,
           path_method: :active_sessions_path
         },
         close_account: {
-          label: "Close Account",
-          description: "Permanently delete your account",
           icon: Phlex::TablerIcons::Trash,
           path_method: :close_account_path,
           danger: true
@@ -61,8 +49,8 @@ module Plutonium
 
       def render_section_header
         div(class: "mb-4") do
-          h2(class: "text-lg font-semibold text-[var(--pu-text)]") { "Security Settings" }
-          p(class: "text-sm text-[var(--pu-text-muted)]") { "Manage your account security" }
+          h2(class: "text-lg font-semibold text-[var(--pu-text)]") { t("plutonium.profile.security_section.title") }
+          p(class: "text-sm text-[var(--pu-text-muted)]") { t("plutonium.profile.security_section.description") }
         end
       end
 
@@ -95,8 +83,8 @@ module Plutonium
 
           # Content
           div(class: "flex-grow") do
-            div(class: "font-medium") { config[:label] }
-            div(class: "text-sm text-[var(--pu-text-muted)]") { config[:description] }
+            div(class: "font-medium") { feature_text(feature, :label) }
+            div(class: "text-sm text-[var(--pu-text-muted)]") { feature_text(feature, :description) }
           end
 
           # Arrow
@@ -106,6 +94,10 @@ module Plutonium
         end
       end
 
+      def feature_text(feature, slot)
+        t("plutonium.profile.security_section.features.#{feature}.#{slot}")
+      end
+
       def enabled_features
         FEATURES.select { |feature, _config| feature_enabled?(feature) }
       end

data/lib/plutonium/query/filter.rb

@@ -19,10 +19,19 @@ module Plutonium
 
       attr_reader :resource_class
 
-      def initialize(key:, resource_class: nil)
+      def initialize(key:, resource_class: nil, label: nil)
         super()
         @key = key
         @resource_class = resource_class
+        @label = label
+      end
+
+      # The filter's display label: `label:` if given, else the
+      # plutonium.filters.<model>.<key> convention, else the humanized key.
+      def label
+        Plutonium::Translation.resolve(@label) ||
+          Plutonium::Translation.label_for(:filter, resource_class, key) ||
+          key.to_s.humanize
       end
     end
   end

data/lib/plutonium/query/filters/association.rb

@@ -27,7 +27,14 @@ module Plutonium
           return "" if value.blank?
           ids = decode_ids(value)
           return "" if ids.empty?
-          records = association_class.where(id: ids)
+          # Resolve labels through the same scope-honouring relation that the
+          # dropdown (ResourceSelect#authorized_relation) and the typeahead
+          # (Typeahead#filter_association) already enforce. A bare
+          # `association_class.where(id: ids)` here would widen past the
+          # configured `scope:` and let a crafted `?q[<key>][value]=<out-of-scope
+          # id>` render the hidden record's `to_label` into the active-filter
+          # pill even though the matching filter was dropped at submission.
+          records = scoped_relation.where(id: ids)
           records.map { |r| r.respond_to?(:to_label) ? r.to_label : r.to_s }.join(", ")
         rescue
           Array(value).reject(&:blank?).join(", ")
@@ -45,7 +52,8 @@ module Plutonium
             as: :resource_select,
             association_class: association_class,
             multiple: @multiple,
-            include_blank: @multiple ? false : "All"
+            include_blank: @multiple ? false : Plutonium::Translation.t("plutonium.query.all"),
+            scope: @scope_proc
         end
 
         private
@@ -86,6 +94,23 @@ module Plutonium
         def infer_class_from_key
           key.to_s.classify.constantize
         end
+
+        # The relation used to resolve `humanize_value` labels, narrowed by the
+        # configured `scope:` exactly like ResourceSelect#apply_scope and
+        # Typeahead#apply_scope. The arity dispatch — Symbol, zero-arg Proc
+        # (kanban form `-> { ... }`), one-arg Proc (documented form
+        # `->(s) { s.active }`), nil — must stay in lock-step with those two
+        # sites; any divergence re-opens the leak this method closes. Unsupported
+        # scope types raise ArgumentError loudly rather than silently widening.
+        def scoped_relation
+          relation = association_class.all
+          case @scope_proc
+          when Symbol then relation.public_send(@scope_proc)
+          when Proc then @scope_proc.arity.zero? ? relation.instance_exec(&@scope_proc) : @scope_proc.call(relation)
+          when nil then relation
+          else raise ArgumentError, "Unsupported association scope: #{@scope_proc.inspect} (expected Symbol, Proc, or nil)"
+          end
+        end
       end
     end
   end

data/lib/plutonium/query/filters/boolean.rb

@@ -10,10 +10,10 @@ module Plutonium
       #   filter :published, with: :boolean, true_label: "Published", false_label: "Draft"
       #
       class Boolean < Filter
-        def initialize(true_label: "Yes", false_label: "No", **)
+        def initialize(true_label: nil, false_label: nil, **)
           super(**)
-          @true_label = true_label
-          @false_label = false_label
+          @true_label = true_label || Plutonium::Translation.t("plutonium.boolean.true")
+          @false_label = false_label || Plutonium::Translation.t("plutonium.boolean.false")
         end
 
         def humanize_value(value)
@@ -32,7 +32,7 @@ module Plutonium
           input :value,
             as: :select,
             choices: [[@true_label, "true"], [@false_label, "false"]],
-            include_blank: "All"
+            include_blank: Plutonium::Translation.t("plutonium.query.all")
         end
       end
     end

data/lib/plutonium/query/filters/date.rb

@@ -73,23 +73,10 @@ module Plutonium
         end
 
         def generate_placeholder
-          base = key.to_s.humanize
-          case @predicate
-          when :eq
-            base
-          when :not_eq
-            "#{base} not on..."
-          when :lt
-            "#{base} before..."
-          when :lteq
-            "#{base} on or before..."
-          when :gt
-            "#{base} after..."
-          when :gteq
-            "#{base} on or after..."
-          else
-            base
-          end
+          base = label
+          return base if @predicate == :eq
+
+          Plutonium::Translation.t("plutonium.query.filters.date.#{@predicate}", label: base)
         end
       end
     end

data/lib/plutonium/query/filters/date_range.rb

@@ -34,8 +34,8 @@ module Plutonium
         def customize_inputs
           input :from, as: :date
           input :to, as: :date
-          field :from, placeholder: @from_label || "#{key.to_s.humanize} from..."
-          field :to, placeholder: @to_label || "#{key.to_s.humanize} to..."
+          field :from, placeholder: @from_label || Plutonium::Translation.t("plutonium.query.filters.date_range.from", label: label)
+          field :to, placeholder: @to_label || Plutonium::Translation.t("plutonium.query.filters.date_range.to", label: label)
         end
 
         private

data/lib/plutonium/query/filters/select.rb

@@ -29,12 +29,21 @@ module Plutonium
           end
         end
 
+        # Active-filter pill text: each chosen value through the enum-value
+        # convention (activerecord.attributes.<model>.<key>/<value> or
+        # plutonium.values.<model>.<key>.<value>), else the raw value.
+        def humanize_value(value)
+          Array(value).reject(&:blank?).map do |choice|
+            Plutonium::Translation.value_label(resource_class, key, choice) || choice.to_s
+          end.join(", ")
+        end
+
         def customize_inputs
           input :value,
             as: :select,
             choices: resolved_choices,
             multiple: @multiple,
-            include_blank: @multiple ? false : "All"
+            include_blank: @multiple ? false : Plutonium::Translation.t("plutonium.query.all")
         end
 
         private

data/lib/plutonium/query/filters/text.rb

@@ -52,19 +52,16 @@ module Plutonium
         private
 
         def generate_placeholder
-          base = key.to_s.humanize
-          case @predicate
-          when :matches, :not_matches
-            "#{base} (use * as wildcard)"
-          when :starts_with
-            "#{base} starts with..."
-          when :ends_with
-            "#{base} ends with..."
-          when :contains, :not_contains
-            "#{base} contains..."
-          else
-            base
+          base = label
+          phrase = case @predicate
+          when :matches, :not_matches then :matches
+          when :starts_with then :starts_with
+          when :ends_with then :ends_with
+          when :contains, :not_contains then :contains
           end
+          return base unless phrase
+
+          Plutonium::Translation.t("plutonium.query.filters.text.#{phrase}", label: base)
         end
 
         def sanitize_like(string)

data/lib/plutonium/railtie.rb

@@ -16,6 +16,7 @@ module Plutonium
     # end
     PRECOMPILE_ASSETS = %w[
       plutonium.js plutonium.js.map plutonium.min.js plutonium.min.js.map
+      plutonium-charts.js plutonium-charts.js.map plutonium-charts.min.js plutonium-charts.min.js.map
       plutonium.css plutonium.png plutonium.ico
     ].freeze
 
@@ -25,6 +26,8 @@ module Plutonium
 
     initializer "plutonium.rescue_responses", before: "action_dispatch.configure" do |app|
       app.config.action_dispatch.rescue_responses["ActionPolicy::Unauthorized"] = :forbidden
+      app.config.action_dispatch.rescue_responses["Plutonium::Dashboard::UnknownCardError"] = :not_found
+      app.config.action_dispatch.rescue_responses["Plutonium::Dashboard::UnknownDashboardError"] = :not_found
     end
 
     initializer "plutonium.deprecator" do |app|
@@ -39,6 +42,19 @@ module Plutonium
       load_plutonium_initializers
     end
 
+    # Plutonium is a Railtie, not an Engine, so it gets no config/locales path
+    # for free. Register it the way Rails::Engine#add_locales does: through
+    # railties_load_path, which the I18n railtie unshifts ahead of the app's
+    # own locales in registration order. Registering before every engine's
+    # add_locales puts the gem's strings at the lowest precedence: a package or
+    # portal engine's config/locales overrides them, and the host app overrides
+    # both.
+    initializer "plutonium.i18n", before: :add_locales do
+      locales = Rails::Paths::Root.new(Plutonium.root.to_s)
+      locales.add "config/locales", glob: "**/*.{rb,yml}"
+      config.i18n.railties_load_path << locales["config/locales"]
+    end
+
     initializer "plutonium.register_migrations" do
       Plutonium::Migrations.register(:wizards, Plutonium.root.join("db/migrate/wizard").to_s)
       Plutonium::Migrations.register(:async_interactions, Plutonium.root.join("db/migrate/async_interactions").to_s)
@@ -131,6 +147,7 @@ module Plutonium
     def extend_action_dispatch
       ActionDispatch::Routing::Mapper.prepend Plutonium::Routing::MapperExtensions
       ActionDispatch::Routing::Mapper.prepend Plutonium::Routing::WizardRegistration
+      ActionDispatch::Routing::Mapper.prepend Plutonium::Routing::DashboardRegistration
       ActionDispatch::Routing::RouteSet.prepend Plutonium::Routing::RouteSetExtensions
       Rails::Engine.include Plutonium::Routing::ResourceRegistration
     end

data/lib/plutonium/resource/controller.rb

@@ -188,14 +188,19 @@ module Plutonium
         end
       end
 
-      # Attachment/file input names (as Strings) declared on the current
-      # definition — inputs whose `as:` is a file type (`:file`/`:uppy`/
-      # `:attachment`). Excluded from the extraction-record pre-assignment so a
-      # single-read Rack upload isn't consumed before create/update reads it.
+      # Attachment/file input names (as Strings) for the current resource —
+      # inputs declared with a file `as:` (`:file`/`:uppy`/`:attachment`)
+      # unioned with the attachments reflected on the model, so auto-detected
+      # attachments (no `input` declaration) are covered too. Excluded from the
+      # extraction-record pre-assignment so a single-read Rack upload isn't
+      # consumed before create/update reads it.
       def attachment_input_keys
-        current_definition.defined_inputs.filter_map { |name, config|
+        declared = current_definition.defined_inputs.filter_map { |name, config|
           name.to_s if Plutonium::Definition::InputAliases.file_input?(config.dig(:options, :as))
         }
+        reflected = (resource_class.has_one_attached_field_names + resource_class.has_many_attached_field_names)
+          .map(&:to_s)
+        declared | reflected
       end
 
       # Returns the resource parameters, including scoped and parent parameters