pressroom 0.1.0

data/app/assets/stylesheets/pressroom/admin.css

@@ -0,0 +1,216 @@
+/* Pressroom admin. BEM: block, block__element, block--modifier. */
+
+.pressroom-admin {
+  --pressroom-bg: #ffffff;
+  --pressroom-fg: #16181d;
+  --pressroom-muted: #6b7280;
+  --pressroom-line: #e5e7eb;
+  --pressroom-accent: #2563eb;
+  --pressroom-danger: #b91c1c;
+  --pressroom-surface: #f9fafb;
+  --pressroom-radius: 6px;
+
+  margin: 0;
+  background: var(--pressroom-bg);
+  color: var(--pressroom-fg);
+  font: 15px/1.55 system-ui, -apple-system, "Segoe UI", sans-serif;
+}
+
+@media (prefers-color-scheme: dark) {
+  .pressroom-admin {
+    --pressroom-bg: #101215;
+    --pressroom-fg: #e8eaed;
+    --pressroom-muted: #9aa1ab;
+    --pressroom-line: #2a2f37;
+    --pressroom-accent: #6ea8fe;
+    --pressroom-danger: #f87171;
+    --pressroom-surface: #171a1f;
+  }
+}
+
+.pressroom-admin__header {
+  display: flex;
+  align-items: center;
+  gap: 24px;
+  padding: 12px 24px;
+  border-bottom: 1px solid var(--pressroom-line);
+}
+
+.pressroom-admin__brand {
+  font-weight: 600;
+  text-decoration: none;
+  color: inherit;
+}
+
+.pressroom-admin__nav { display: flex; gap: 16px; }
+
+.pressroom-admin__nav-link {
+  color: var(--pressroom-muted);
+  text-decoration: none;
+}
+
+.pressroom-admin__nav-link:hover { color: var(--pressroom-fg); }
+
+.pressroom-admin__main {
+  max-width: 860px;
+  margin: 0 auto;
+  padding: 24px;
+}
+
+.pressroom-toolbar {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+  margin-bottom: 16px;
+}
+
+.pressroom-toolbar__title { margin: 0; font-size: 22px; }
+.pressroom-toolbar__actions { display: flex; gap: 8px; }
+
+.pressroom-button {
+  display: inline-block;
+  padding: 7px 14px;
+  border: 1px solid var(--pressroom-line);
+  border-radius: var(--pressroom-radius);
+  background: var(--pressroom-surface);
+  color: inherit;
+  font: inherit;
+  text-decoration: none;
+  cursor: pointer;
+}
+
+.pressroom-button:hover { border-color: var(--pressroom-muted); }
+
+.pressroom-button--primary {
+  background: var(--pressroom-accent);
+  border-color: var(--pressroom-accent);
+  color: #fff;
+}
+
+.pressroom-button--danger { color: var(--pressroom-danger); }
+
+.pressroom-filters { display: flex; gap: 12px; margin-bottom: 16px; }
+
+.pressroom-filters__link {
+  color: var(--pressroom-muted);
+  text-decoration: none;
+  text-transform: capitalize;
+}
+
+.pressroom-table { width: 100%; border-collapse: collapse; }
+
+.pressroom-table__heading {
+  text-align: left;
+  padding: 8px 10px;
+  border-bottom: 1px solid var(--pressroom-line);
+  font-size: 12px;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  color: var(--pressroom-muted);
+}
+
+.pressroom-table__cell {
+  padding: 10px;
+  border-bottom: 1px solid var(--pressroom-line);
+  vertical-align: middle;
+}
+
+.pressroom-badge {
+  display: inline-block;
+  padding: 1px 8px;
+  border-radius: 999px;
+  background: var(--pressroom-surface);
+  border: 1px solid var(--pressroom-line);
+  font-size: 12px;
+}
+
+.pressroom-badge--published { border-color: var(--pressroom-accent); }
+.pressroom-badge--scheduled { border-style: dashed; }
+
+.pressroom-form { display: flex; flex-direction: column; gap: 16px; }
+
+.pressroom-field { display: flex; flex-direction: column; gap: 6px; }
+
+.pressroom-field__label { font-size: 13px; color: var(--pressroom-muted); }
+
+.pressroom-field__input {
+  width: 100%;
+  padding: 8px 10px;
+  border: 1px solid var(--pressroom-line);
+  border-radius: var(--pressroom-radius);
+  background: var(--pressroom-bg);
+  color: inherit;
+  font: inherit;
+  box-sizing: border-box;
+}
+
+.pressroom-editor {
+  border: 1px solid var(--pressroom-line);
+  border-radius: var(--pressroom-radius);
+  padding: 8px 16px;
+  background: var(--pressroom-bg);
+}
+
+/* Editor.js injects its own styles; this only sizes the container. */
+.pressroom-editor__holder { min-height: 240px; }
+
+.pressroom-schedule {
+  margin-bottom: 20px;
+  padding: 12px 16px;
+  border: 1px solid var(--pressroom-line);
+  border-radius: var(--pressroom-radius);
+  background: var(--pressroom-surface);
+}
+
+.pressroom-schedule__summary { cursor: pointer; }
+
+.pressroom-schedule__form {
+  display: flex;
+  gap: 8px;
+  align-items: center;
+  margin-top: 10px;
+}
+
+.pressroom-schedule__hint {
+  margin: 8px 0 0;
+  font-size: 13px;
+  color: var(--pressroom-muted);
+}
+
+.pressroom-errors {
+  margin: 0;
+  padding: 12px 16px 12px 32px;
+  border: 1px solid var(--pressroom-danger);
+  border-radius: var(--pressroom-radius);
+  color: var(--pressroom-danger);
+}
+
+.pressroom-errors__item { margin: 2px 0; }
+
+.pressroom-flash { max-width: 860px; margin: 12px auto 0; padding: 0 24px; }
+
+.pressroom-flash__message {
+  margin: 0 0 8px;
+  padding: 8px 12px;
+  border-radius: var(--pressroom-radius);
+  background: var(--pressroom-surface);
+  border: 1px solid var(--pressroom-line);
+}
+
+.pressroom-flash__message--alert { border-color: var(--pressroom-danger); }
+
+.pressroom-pagination { display: flex; gap: 6px; margin-top: 16px; }
+
+.pressroom-pagination__link {
+  padding: 4px 9px;
+  border: 1px solid var(--pressroom-line);
+  border-radius: var(--pressroom-radius);
+  color: inherit;
+  text-decoration: none;
+}
+
+.pressroom-pagination__link--current {
+  border-color: var(--pressroom-accent);
+  font-weight: 600;
+}

data/app/assets/stylesheets/pressroom/content.css

@@ -0,0 +1,18 @@
+/* Optional. Structural rules only -- the ones without which a rendered
+   block is broken rather than merely unstyled. Typography, colour and
+   spacing belong to the host application's design, not to this gem. */
+
+.pressroom-image__img {
+  max-width: 100%;
+  height: auto;
+  display: block;
+}
+
+.pressroom-image--stretched .pressroom-image__img { width: 100%; }
+
+.pressroom-code {
+  overflow-x: auto;
+  max-width: 100%;
+}
+
+.pressroom-list__nested { margin-left: 1.25em; }

data/app/controllers/pressroom/application_controller.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+module Pressroom
+  # Base controller for the admin.
+  #
+  # Inherits from the host application's controller so that its layout,
+  # helpers, current_user and middleware apply here too. The constant is
+  # resolved in the class body: initializers run before controllers are
+  # autoloaded, so configuration is already in place.
+  class ApplicationController < Pressroom.config.parent_controller.constantize
+    layout "pressroom/admin"
+
+    before_action :authenticate_pressroom_editor!
+
+    private
+
+    def authenticate_pressroom_editor!
+      hook = Pressroom.config.authenticate_with
+
+      raise Pressroom::ConfigurationError, missing_hook_message if hook.nil?
+
+      instance_exec(&hook)
+    end
+
+    # Failing closed is deliberate: an admin that opened to everyone until
+    # someone remembered to configure it would be a publishing panel left
+    # unlocked in production.
+    def missing_hook_message
+      <<~MESSAGE
+        Pressroom refuses to open its admin because no authentication hook
+        is configured. Add one to config/initializers/pressroom.rb:
+
+          Pressroom.configure do |config|
+            config.authenticate_with do
+              redirect_to main_app.root_path unless current_user&.editor?
+            end
+          end
+      MESSAGE
+    end
+  end
+end

data/app/controllers/pressroom/categories_controller.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+module Pressroom
+  class CategoriesController < ApplicationController
+    before_action :set_category, only: %i[edit update destroy]
+
+    def index
+      @categories = Category.order(:name)
+    end
+
+    def new
+      @category = Category.new
+    end
+
+    def edit; end
+
+    def create
+      @category = Category.new(category_params)
+
+      if @category.save
+        redirect_to categories_path, notice: t("pressroom.categories.created")
+      else
+        render :new, status: 422
+      end
+    end
+
+    def update
+      if @category.update(category_params)
+        redirect_to categories_path, notice: t("pressroom.categories.updated")
+      else
+        render :edit, status: 422
+      end
+    end
+
+    def destroy
+      @category.destroy!
+      redirect_to categories_path, notice: t("pressroom.categories.destroyed")
+    end
+
+    private
+
+    def set_category
+      @category = Category.find(params[:id])
+    end
+
+    def category_params
+      params.require(:category).permit(:name, :slug, :parent_id, :description)
+    end
+  end
+end

data/app/controllers/pressroom/posts_controller.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+module Pressroom
+  class PostsController < ApplicationController
+    before_action :set_post, only: %i[edit update destroy publish unpublish]
+
+    def index
+      @page = [params[:page].to_i, 1].max
+      @per_page = Pressroom.config.admin_per_page
+
+      scope = Post.includes(:category).recent
+      scope = scope.where(status: params[:status]) if Post.statuses.key?(params[:status])
+
+      @total = scope.count
+      @posts = scope.offset((@page - 1) * @per_page).limit(@per_page)
+    end
+
+    def new
+      @post = Post.new
+    end
+
+    def edit; end
+
+    def create
+      @post = Post.new(post_params)
+
+      if @post.save
+        redirect_to edit_post_path(@post), notice: t("pressroom.posts.created")
+      else
+        # Numeric rather than :unprocessable_entity: Rack deprecated that
+        # name, and its replacement is not available on every Rack version
+        # this gem supports.
+        render :new, status: 422
+      end
+    end
+
+    def update
+      if @post.update(post_params)
+        redirect_to edit_post_path(@post), notice: t("pressroom.posts.updated")
+      else
+        render :edit, status: 422
+      end
+    end
+
+    def destroy
+      @post.destroy!
+      redirect_to posts_path, notice: t("pressroom.posts.destroyed")
+    end
+
+    # Manual publication, and scheduling, are the same action: the only
+    # difference is whether the timestamp is in the future. Nothing polls
+    # and nothing is enqueued -- Post.published compares against the clock.
+    def publish
+      @post.update!(status: :published, published_at: requested_publish_time)
+
+      notice = @post.published? ? t("pressroom.posts.published") : t("pressroom.posts.scheduled")
+      redirect_to edit_post_path(@post), notice: notice
+    end
+
+    def unpublish
+      @post.update!(status: :draft, published_at: nil)
+      redirect_to edit_post_path(@post), notice: t("pressroom.posts.unpublished")
+    end
+
+    private
+
+    def set_post
+      @post = Post.find(params[:id])
+    end
+
+    def requested_publish_time
+      raw = params[:published_at]
+      return Time.current if raw.blank?
+
+      Time.zone.parse(raw.to_s) || Time.current
+    rescue ArgumentError
+      Time.current
+    end
+
+    def post_params
+      permitted = params.require(:post)
+                        .permit(:title, :slug, :excerpt, :category_id, :status,
+                                :published_at, :tag_names, :content)
+
+      permitted.merge(content: parse_content(permitted[:content]))
+    end
+
+    # The editor submits its document as a JSON string in a hidden field.
+    # A malformed payload must not lose the rest of the form.
+    def parse_content(raw)
+      return Post::EMPTY_DOCUMENT.deep_dup if raw.blank?
+
+      JSON.parse(raw)
+    rescue JSON::ParserError
+      Post::EMPTY_DOCUMENT.deep_dup
+    end
+  end
+end

data/app/controllers/pressroom/tags_controller.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+module Pressroom
+  class TagsController < ApplicationController
+    before_action :set_tag, only: %i[edit update destroy]
+
+    def index
+      @tags = Tag.left_joins(:taggings)
+                 .group(:id)
+                 .select("pressroom_tags.*, COUNT(pressroom_taggings.id) AS posts_count")
+                 .order(:name)
+    end
+
+    def edit; end
+
+    def update
+      if @tag.update(tag_params)
+        redirect_to tags_path, notice: t("pressroom.tags.updated")
+      else
+        render :edit, status: 422
+      end
+    end
+
+    def destroy
+      @tag.destroy!
+      redirect_to tags_path, notice: t("pressroom.tags.destroyed")
+    end
+
+    private
+
+    def set_tag
+      @tag = Tag.find(params[:id])
+    end
+
+    def tag_params
+      params.require(:tag).permit(:name, :slug)
+    end
+  end
+end

data/app/controllers/pressroom/uploads_controller.rb

@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+
+module Pressroom
+  # Upload endpoint for @editorjs/image.
+  #
+  # Answers the tool's contract: { success: 1, file: { url: ... } } on
+  # success, { success: 0, message: ... } on refusal.
+  class UploadsController < ApplicationController
+    def create
+      return head :not_found unless Pressroom.active_storage?
+
+      file = params[:image]
+      return head :bad_request if file.blank?
+
+      error = rejection_reason(file)
+      return refuse(error) if error
+
+      blob = ActiveStorage::Blob.create_and_upload!(
+        io: file.tempfile,
+        filename: file.original_filename,
+        content_type: file.content_type
+      )
+
+      render json: { success: 1, file: { url: blob_url(blob) } }
+    rescue StandardError => e
+      Rails.logger.warn("pressroom: upload failed: #{e.message}")
+      refuse("upload failed")
+    end
+
+    private
+
+    def rejection_reason(file)
+      unless Pressroom.config.image_content_types.include?(file.content_type)
+        return "#{file.content_type} is not an allowed image type"
+      end
+
+      return "file is too large" if file.size > Pressroom.config.max_image_bytes
+
+      nil
+    end
+
+    def refuse(message)
+      render json: { success: 0, message: message }, status: 422
+    end
+
+    # Built through the host's routes: ActiveStorage lives in the main
+    # application, not in this engine.
+    def blob_url(blob)
+      Rails.application.routes.url_helpers.rails_blob_path(blob, only_path: true)
+    end
+  end
+end

data/app/helpers/pressroom/application_helper.rb

@@ -0,0 +1,4 @@
+module Pressroom
+  module ApplicationHelper
+  end
+end

data/app/helpers/pressroom/blocks_helper.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Pressroom
+  # Public API for host applications: renders a stored document.
+  #
+  #   <%= render_blocks @post %>
+  module BlocksHelper
+    def render_blocks(source)
+      document = source.respond_to?(:content) ? source.content : source
+      Pressroom.renderer.render(document, self)
+    end
+  end
+end

data/app/jobs/pressroom/application_job.rb

@@ -0,0 +1,4 @@
+module Pressroom
+  class ApplicationJob < ActiveJob::Base
+  end
+end

data/app/mailers/pressroom/application_mailer.rb

@@ -0,0 +1,6 @@
+module Pressroom
+  class ApplicationMailer < ActionMailer::Base
+    default from: "from@example.com"
+    layout "mailer"
+  end
+end

data/app/models/concerns/pressroom/authorable.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Pressroom
+  # Attaches the configurable author association.
+  #
+  # The author class is the host application's, so it may not be configured
+  # at all. Declaring belongs_to with a blank class_name in that case leaves
+  # a landmine: the association resolves lazily and blows up with a
+  # NoMethodError from deep inside ActiveRecord the first time anything
+  # touches post.author.
+  module Authorable
+    extend ActiveSupport::Concern
+
+    included do
+      if Pressroom.config.author_class.present?
+        belongs_to :author, class_name: Pressroom.config.author_class, optional: true
+      else
+        define_method(:author) { nil }
+        define_method(:author=) { |_record| nil }
+      end
+    end
+  end
+end

data/app/models/concerns/pressroom/sluggable.rb

@@ -0,0 +1,66 @@
+# frozen_string_literal: true
+
+module Pressroom
+  # Slug generation that survives non-Latin titles.
+  #
+  # ActiveSupport's parameterize drops Cyrillic entirely, so a Russian
+  # title would otherwise yield an empty slug. Transliteration runs first,
+  # through a configurable hook, using the rules the gem carries for :ru
+  # and :uk.
+  module Sluggable
+    extend ActiveSupport::Concern
+
+    FALLBACK_SLUG = "post"
+
+    included do
+      before_validation :assign_slug
+      validates :slug, presence: true, uniqueness: true
+    end
+
+    class_methods do
+      def slugify(string)
+        locale = Pressroom.config.transliteration_locale || I18n.locale
+        latin = Pressroom.config.transliterator.call(string.to_s, locale)
+
+        latin.downcase
+             .gsub(/[^a-z0-9]+/, "-")
+             .gsub(/\A-+|-+\z/, "")
+      end
+    end
+
+    private
+
+    # The source column for the slug. Models including this concern override
+    # it if they are not titled.
+    def slug_source
+      title
+    end
+
+    def assign_slug
+      return if slug.present?
+
+      base = self.class.slugify(slug_source)
+      base = FALLBACK_SLUG if base.empty?
+
+      self.slug = unique_slug(base)
+    end
+
+    def unique_slug(base)
+      candidate = base
+      suffix = 1
+
+      while slug_taken?(candidate)
+        suffix += 1
+        candidate = "#{base}-#{suffix}"
+      end
+
+      candidate
+    end
+
+    def slug_taken?(candidate)
+      scope = self.class.where(slug: candidate)
+      scope = scope.where.not(id: id) if persisted?
+      scope.exists?
+    end
+  end
+end

data/app/models/pressroom/application_record.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+module Pressroom
+  class ApplicationRecord < ActiveRecord::Base
+    self.abstract_class = true
+  end
+end

data/app/models/pressroom/category.rb

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+module Pressroom
+  class Category < ApplicationRecord
+    include Pressroom::Sluggable
+
+    self.table_name = "pressroom_categories"
+
+    belongs_to :parent, class_name: "Pressroom::Category", optional: true
+    has_many :children, class_name: "Pressroom::Category", foreign_key: :parent_id,
+             dependent: :nullify, inverse_of: :parent
+    has_many :posts, class_name: "Pressroom::Post", dependent: :nullify,
+             inverse_of: :category
+
+    validates :name, presence: true
+    validate :parent_is_not_a_cycle
+
+    scope :roots, -> { where(parent_id: nil) }
+
+    # Nearest ancestor first, root last.
+    def ancestors
+      result = []
+      node = parent
+
+      while node && !result.include?(node)
+        result << node
+        node = node.parent
+      end
+
+      result
+    end
+
+    def depth
+      ancestors.size
+    end
+
+    private
+
+    def slug_source
+      name
+    end
+
+    def parent_is_not_a_cycle
+      return if parent_id.nil?
+
+      if parent_id == id
+        errors.add(:parent_id, "cannot be the category itself")
+        return
+      end
+
+      errors.add(:parent_id, "would create a cycle") if parent&.ancestors&.include?(self)
+    end
+  end
+end