rails_error_dashboard 0.6.1 → 0.6.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8730984999d2ab508eeefe889bfd320e54cb9395c6baacbe87fef1a3aa20de7a
-  data.tar.gz: 6a301193d907d990418f6a74b83ee36a54caeac1b05dc57a75ea24213e9b7f7c
+  metadata.gz: 938ab24cad38b8b20bc0dd0f2a1eb6e5c9e46a4634fb97e2c01b3487221c9fc3
+  data.tar.gz: 6e053a3f8c41e3c3f75f95ab1f9bd8908e9bcea4c473e2d1d3a0c11b7bdf0bdb
 SHA512:
-  metadata.gz: af05b90ebe19d1b90adb82b7e8d3a4cd57faf695327c3a51c2d36ced221d1951265e4d88d77e4ddb843c465582fe14d6911141e3f081b2de76ca3037a4e637f0
-  data.tar.gz: add93453ac6ebee6a3f320fc336fe30c81a952f58fc30b3b8554c410071586da7d9c25da1d886c5976b4ade28cc6504c5b355509a29dcf5025aa8b502d1fff65
+  metadata.gz: 2b84b4a4f917863e7577e253f2324100a06b6fef6f33d56cef211f28a4f1dc4688932f618489f19924baa8aa065135cfcaeffb2c7431f15bea898d3e334395b7
+  data.tar.gz: 4149d8da317c77751e04db12b46f02924fe46e1a420075232e3fa7c96f12218166249596b33a55f1790e696b5fca3580cd5da62d38a39585e356660a702a518c

data/app/controllers/rails_error_dashboard/errors_controller.rb

@@ -60,8 +60,11 @@ module RailsErrorDashboard
       # Use Query to get filtered errors
       errors_query = Queries::ErrorsList.call(filter_params)
 
-      # Paginate with Pagy
-      @pagy, @errors = pagy(:offset, errors_query, limit: params[:per_page] || 25)
+      # Paginate with Pagy. raise_range_error makes pagy 43.x raise Pagy::RangeError
+      # on out-of-range pages (e.g. ?page=999999) so application_controller.rb's
+      # rescue_from can redirect to a valid page. Without this, pagy 43.x silently
+      # returns an empty result and users see "All clear!" instead of their data.
+      @pagy, @errors = pagy(:offset, errors_query, limit: params[:per_page] || 25, raise_range_error: true)
 
       # Get dashboard stats using Query (pass application filter)
       @stats = Queries::DashboardStats.call(application_id: @current_application_id)
@@ -237,7 +240,7 @@ module RailsErrorDashboard
           resolution_comment: params[:resolution_comment]
         )
       when "mute"
-        Commands::BatchMuteErrors.call(error_ids, muted_by: params[:muted_by])
+        Commands::BatchMuteErrors.call(error_ids, muted_by: params[:muted_by], reason: params[:reason])
       when "unmute"
         Commands::BatchUnmuteErrors.call(error_ids)
       when "delete"

data/app/helpers/rails_error_dashboard/application_helper.rb

@@ -1,5 +1,32 @@
 module RailsErrorDashboard
   module ApplicationHelper
+    # Returns the host app's CSP nonce (if any) so inline <script> tags pass strict CSP.
+    # Falls back to nil when the host has no CSP configured — in that case the script tag
+    # works without a nonce attribute. Strict CSPs (script-src 'self' 'nonce-...') require
+    # this; without it the script is blocked.
+    def red_csp_nonce
+      return nil unless respond_to?(:content_security_policy_nonce)
+      content_security_policy_nonce
+    rescue StandardError
+      nil
+    end
+
+    # Wraps an inline <script> block with the host app's CSP nonce when available.
+    # Use everywhere we have <script>...</script> in our views so they pass strict CSP.
+    #
+    #   <%= red_javascript_tag do %>
+    #     console.log('hi');
+    #   <% end %>
+    def red_javascript_tag(&block)
+      nonce = red_csp_nonce
+      content = capture(&block)
+      if nonce
+        content_tag(:script, content.html_safe, nonce: nonce)
+      else
+        content_tag(:script, content.html_safe)
+      end
+    end
+
     # Returns Bootstrap color class for error severity
     # Uses Catppuccin Mocha colors in dark theme via CSS variables
     # @param severity [Symbol] The severity level (:critical, :high, :medium, :low, :info)

data/app/views/layouts/rails_error_dashboard.html.erb

@@ -39,7 +39,7 @@
     <% end %>
 
     <!-- Early theme detection (prevents flash of wrong theme) -->
-    <script>
+    <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
     (function(){
       var t = localStorage.getItem('red-theme');
       if (t === 'dark' || (!t && window.matchMedia && matchMedia('(prefers-color-scheme: dark)').matches)) {
@@ -880,6 +880,12 @@ main { animation: contentFadeIn 0.15s ease; }
 details { background: var(--surface-primary); border: 1px solid var(--border-primary); border-radius: var(--radius-md); }
 summary { padding: var(--space-3) var(--space-4); cursor: pointer; font-weight: 500; color: var(--text-primary); background: var(--surface-hover); }
 details[open] summary { border-bottom: 1px solid var(--border-primary); }
+
+/* Error row hover (replaces inline onmouseenter/onmouseleave) */
+tr[data-red-row-href] { transition: background 0.1s ease; }
+tr[data-red-row-href]:hover { background: var(--surface-hover); }
+tr[data-red-row-href] .sev-bar { transition: opacity 0.1s ease; }
+tr[data-red-row-href]:hover .sev-bar { opacity: 1 !important; }
     </style>
   </head>
 
@@ -957,7 +963,7 @@ details[open] summary { border-bottom: 1px solid var(--border-primary); }
 
           <% if health_items.any? %>
             <div style="margin-bottom: var(--space-2);" id="navHealthSection">
-              <button class="red-sidebar-section-label" onclick="toggleNavSection('navHealthItems')">
+              <button type="button" class="red-sidebar-section-label" data-red-action="toggle-nav-section" data-red-target="navHealthItems">
                 Health
                 <i class="bi bi-chevron-down" style="font-size: 10px;" id="navHealthChevron"></i>
               </button>
@@ -988,7 +994,7 @@ details[open] summary { border-bottom: 1px solid var(--border-primary); }
 
           <% if diag_items.any? %>
             <div style="margin-bottom: var(--space-2);" id="navDiagSection">
-              <button class="red-sidebar-section-label" onclick="toggleNavSection('navDiagItems')">
+              <button type="button" class="red-sidebar-section-label" data-red-action="toggle-nav-section" data-red-target="navDiagItems">
                 Diagnostics
                 <i class="bi bi-chevron-down" style="font-size: 10px;" id="navDiagChevron"></i>
               </button>
@@ -1006,7 +1012,7 @@ details[open] summary { border-bottom: 1px solid var(--border-primary); }
 
           <!-- INSIGHTS section -->
           <div style="margin-bottom: var(--space-2);" id="navInsightsSection">
-            <button class="red-sidebar-section-label" onclick="toggleNavSection('navInsightsItems')">
+            <button type="button" class="red-sidebar-section-label" data-red-action="toggle-nav-section" data-red-target="navInsightsItems">
               Insights
               <i class="bi bi-chevron-down" style="font-size: 10px;" id="navInsightsChevron"></i>
             </button>
@@ -1120,9 +1126,9 @@ details[open] summary { border-bottom: 1px solid var(--border-primary); }
                 Set <code>ERROR_DASHBOARD_USER</code> and <code>ERROR_DASHBOARD_PASSWORD</code> environment variables,
                 or configure <code>authenticate_with</code> in your initializer.
               </div>
-              <button type="button" onclick="this.parentElement.style.display='none'; try { sessionStorage.setItem('red_dismiss_creds_warning','1') } catch(e) {}" style="background: none; border: none; cursor: pointer; color: var(--text-secondary); font-size: 18px; padding: 0 4px; flex-shrink: 0; line-height: 1;" title="Dismiss for this session">&times;</button>
+              <button type="button" data-red-action="dismiss-creds-warning" style="background: none; border: none; cursor: pointer; color: var(--text-secondary); font-size: 18px; padding: 0 4px; flex-shrink: 0; line-height: 1;" title="Dismiss for this session">&times;</button>
             </div>
-            <script>try { if (sessionStorage.getItem('red_dismiss_creds_warning') === '1') { document.getElementById('security-warning').style.display = 'none'; } } catch(e) {}</script>
+            <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>try { if (sessionStorage.getItem('red_dismiss_creds_warning') === '1') { document.getElementById('security-warning').style.display = 'none'; } } catch(e) {}</script>
           <% end %>
           <%= yield %>
         </main>
@@ -1211,7 +1217,7 @@ details[open] summary { border-bottom: 1px solid var(--border-primary); }
     <script src="https://cdn.jsdelivr.net/npm/@hotwired/stimulus@3.2.2/dist/stimulus.umd.js"></script>
 
     <!-- Loading State Controller -->
-    <script>
+    <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
 (function() {
   'use strict';
   if (typeof Stimulus === 'undefined') return;
@@ -1290,7 +1296,7 @@ details[open] summary { border-bottom: 1px solid var(--border-primary); }
     </script>
 
     <!-- Syntax Highlighting -->
-    <script>
+    <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
 (function() {
   'use strict';
   if (typeof hljs === 'undefined') return;
@@ -1334,7 +1340,7 @@ details[open] summary { border-bottom: 1px solid var(--border-primary); }
     </script>
 
     <!-- Theme Toggle + Chart Theme -->
-    <script>
+    <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
 document.addEventListener('DOMContentLoaded', function() {
   var themeToggle = document.getElementById('themeToggle');
   var themeIcon = document.getElementById('themeIcon');
@@ -1421,7 +1427,7 @@ document.addEventListener('DOMContentLoaded', function() {
     </script>
 
     <!-- Utilities (tooltips, clipboard, time conversion, keyboard shortcuts) -->
-    <script>
+    <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
 document.addEventListener('DOMContentLoaded', function() {
 
   // Tooltips
@@ -1591,11 +1597,114 @@ document.addEventListener('DOMContentLoaded', function() {
       window.location.href = '<%= analytics_errors_path %>';
     }
   });
+
+  // ==========================================================================
+  // Delegated event handlers for [data-red-action]
+  // Replaces inline event handlers (which strict CSP blocks).
+  // ==========================================================================
+  function findActionEl(target) {
+    var el = target;
+    while (el && el !== document.body) {
+      if (el.dataset && el.dataset.redAction) return el;
+      el = el.parentElement;
+    }
+    return null;
+  }
+
+  document.addEventListener('click', function(e) {
+    // Row navigation: <tr data-red-row-href="/path"> — clicking anywhere on the row
+    // navigates, except when clicking inside a checkbox cell or interactive elements.
+    var rowEl = e.target.closest && e.target.closest('[data-red-row-href]');
+    if (rowEl && !e.defaultPrevented) {
+      var inIgnore = e.target.closest('input, button, a, label, [data-red-stop]');
+      if (!inIgnore) {
+        window.location = rowEl.dataset.redRowHref;
+        return;
+      }
+    }
+
+    var actionEl = findActionEl(e.target);
+    if (!actionEl) return;
+    var action = actionEl.dataset.redAction;
+
+    switch (action) {
+      case 'navigate':
+        if (actionEl.dataset.redHref) {
+          window.location = actionEl.dataset.redHref;
+        }
+        break;
+      case 'copy':
+        if (typeof window.copyToClipboard === 'function') {
+          var text = actionEl.dataset.redCopyText;
+          if (text == null && actionEl.dataset.redCopyFrom) {
+            text = actionEl.dataset[actionEl.dataset.redCopyFrom];
+          }
+          window.copyToClipboard(text || '', actionEl);
+        }
+        break;
+      case 'copy-markdown':
+        if (typeof window.copyToClipboard === 'function') {
+          var md = (actionEl.dataset.markdown || '').replace(/\\(.)/g, function(m, c) {
+            return c === 'n' ? '\n' : c;
+          });
+          window.copyToClipboard(md, actionEl);
+        }
+        break;
+      case 'download-json':
+        if (typeof window.downloadErrorJSON === 'function') {
+          // Provide currentTarget pointing at the button so the handler can show feedback.
+          window.downloadErrorJSON({ currentTarget: actionEl });
+        }
+        break;
+      case 'switch-tab':
+        if (typeof window.switchTab === 'function' && actionEl.dataset.redTab) {
+          window.switchTab(actionEl.dataset.redTab);
+        }
+        break;
+      case 'toggle-display':
+        var tgtSel = actionEl.dataset.redTarget;
+        if (tgtSel) {
+          var tgt = document.querySelector(tgtSel);
+          if (tgt) {
+            var openDisplay = actionEl.dataset.redDisplay || 'block';
+            tgt.style.display = (tgt.style.display === 'none' || tgt.style.display === '') ? openDisplay : 'none';
+          }
+        }
+        break;
+      case 'toggle-next':
+        var nextEl = actionEl.nextElementSibling;
+        if (nextEl) {
+          var isHidden = nextEl.style.display === 'none' || nextEl.style.display === '';
+          nextEl.style.display = isHidden ? (actionEl.dataset.redDisplay || 'block') : 'none';
+          var chev = actionEl.querySelector('.chev');
+          if (chev) {
+            chev.className = isHidden ? 'bi bi-chevron-up chev' : 'bi bi-chevron-down chev';
+          }
+        }
+        break;
+      case 'dismiss-creds-warning':
+        if (actionEl.parentElement) actionEl.parentElement.style.display = 'none';
+        try { sessionStorage.setItem('red_dismiss_creds_warning', '1'); } catch (err) {}
+        break;
+      case 'toggle-nav-section':
+        if (typeof window.toggleNavSection === 'function' && actionEl.dataset.redTarget) {
+          window.toggleNavSection(actionEl.dataset.redTarget);
+        }
+        break;
+      case 'confirm-submit':
+        var msg = actionEl.dataset.redConfirmMessage || 'Are you sure?';
+        if (!window.confirm(msg)) {
+          e.preventDefault();
+          e.stopPropagation();
+        }
+        break;
+    }
+  });
 });
     </script>
 
     <!-- Sidebar Toggle + Nav Section Toggle -->
-    <script>
+    <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
 document.addEventListener('DOMContentLoaded', function() {
   var sidebarToggle = document.getElementById('sidebarToggle');
   var sidebar = document.getElementById('sidebar');
@@ -1622,7 +1731,7 @@ document.addEventListener('DOMContentLoaded', function() {
 });
 
 // Nav section collapse/expand
-function toggleNavSection(itemsId) {
+window.toggleNavSection = function(itemsId) {
   var items = document.getElementById(itemsId);
   var chevron = document.getElementById(itemsId.replace('Items', 'Chevron'));
   if (items) {
@@ -1631,7 +1740,7 @@ function toggleNavSection(itemsId) {
     if (chevron) chevron.className = hidden ? 'bi bi-chevron-down' : 'bi bi-chevron-right';
     localStorage.setItem('red_nav_' + itemsId, hidden ? 'open' : 'closed');
   }
-}
+};
 
 // Restore nav section states
 document.addEventListener('DOMContentLoaded', function() {
@@ -1648,7 +1757,7 @@ document.addEventListener('DOMContentLoaded', function() {
     </script>
 
     <!-- Flash Messages -->
-    <script>
+    <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
       <% if defined?(flash) && flash.present? %>
         <% if flash[:notice] %>
           showToast('<%= j flash[:notice] %>', 'success');

data/app/views/rails_error_dashboard/errors/_error_info.html.erb

@@ -13,7 +13,7 @@
                 </span>
               <% end %>
             </h5>
-            <button class="btn btn-sm btn-outline-light" onclick="copyToClipboard('<%= j error.error_type %>', this)" title="Copy error type">
+            <button type="button" class="btn btn-sm btn-outline-light" data-red-action="copy" data-red-copy-text="<%= j error.error_type %>" title="Copy error type">
               <i class="bi bi-clipboard"></i>
             </button>
           </div>
@@ -21,7 +21,7 @@
         <div class="card-body">
           <div class="d-flex justify-content-between align-items-center mb-3">
             <h6 class="text-muted mb-0">Error Message:</h6>
-            <button class="btn btn-sm btn-outline-secondary" onclick="copyToClipboard('<%= j error.message %>', this)" title="Copy error message">
+            <button type="button" class="btn btn-sm btn-outline-secondary" data-red-action="copy" data-red-copy-text="<%= j error.message %>" title="Copy error message">
               <i class="bi bi-clipboard"></i> Copy
             </button>
           </div>
@@ -95,7 +95,7 @@
               <% end %>
             </h6>
             <% if error.backtrace.present? %>
-              <button class="btn btn-sm btn-outline-secondary" onclick="copyToClipboard(`<%= j error.backtrace %>`, this)" title="Copy full backtrace">
+              <button type="button" class="btn btn-sm btn-outline-secondary" data-red-action="copy" data-red-copy-text="<%= j error.backtrace %>" title="Copy full backtrace">
                 <i class="bi bi-clipboard"></i> Copy Full Backtrace
               </button>
             <% end %>

data/app/views/rails_error_dashboard/errors/_error_row.html.erb

@@ -1,13 +1,11 @@
 <tr id="error_<%= error.id %>"
-    onclick="window.location='<%= error_path(error, **app_context) %>'"
-    style="border-bottom: 1px solid var(--border-primary); cursor: pointer; transition: background 0.1s ease;"
-    onmouseenter="this.style.background='var(--surface-hover)'; this.querySelector('.sev-bar').style.opacity='1';"
-    onmouseleave="this.style.background='transparent'; this.querySelector('.sev-bar').style.opacity='0';">
-  <td style="padding: var(--space-3) var(--space-4); text-align: center; position: relative;" onclick="event.stopPropagation(); var cb = this.querySelector('input'); cb.checked = !cb.checked; cb.dispatchEvent(new Event('change'));">
-    <span class="sev-bar" style="position: absolute; left: 0; top: 0; bottom: 0; width: 3px; background: <%= severity_color_var(error.severity) %>; opacity: 0; transition: opacity 0.1s ease; border-radius: 0 2px 2px 0;"></span>
-    <input type="checkbox" class="error-checkbox form-check-input" value="<%= error.id %>" data-error-id="<%= error.id %>" onclick="event.stopPropagation();" style="accent-color: var(--accent);">
+    data-red-row-href="<%= error_path(error, **app_context) %>"
+    style="border-bottom: 1px solid var(--border-primary); cursor: pointer;">
+  <td style="padding: var(--space-3) var(--space-4); text-align: center; position: relative;" data-red-stop>
+    <span class="sev-bar" style="position: absolute; left: 0; top: 0; bottom: 0; width: 3px; background: <%= severity_color_var(error.severity) %>; opacity: 0; border-radius: 0 2px 2px 0;"></span>
+    <input type="checkbox" class="error-checkbox form-check-input" value="<%= error.id %>" data-error-id="<%= error.id %>" data-red-stop style="accent-color: var(--accent);">
   </td>
-  <td style="padding: var(--space-3) var(--space-4);" onclick="window.location='<%= error_path(error, **app_context) %>'">
+  <td style="padding: var(--space-3) var(--space-4);">
     <div style="display: flex; align-items: center; gap: 8px;">
       <span class="badge bg-<%= severity_color(error.severity) %>" style="display: inline-flex; align-items: center; gap: 4px;">
         <span style="width: 6px; height: 6px; border-radius: 50%; background: currentColor;"></span>
@@ -24,7 +22,7 @@
       </div>
     </div>
   </td>
-  <td style="padding: var(--space-3) var(--space-4);" onclick="window.location='<%= error_path(error, **app_context) %>'">
+  <td style="padding: var(--space-3) var(--space-4);">
     <%
       # Use the model's status field if it has a meaningful workflow status
       raw_status = error.respond_to?(:status) ? error.status : nil
@@ -58,26 +56,26 @@
       <i class="bi bi-arrow-counterclockwise" style="color: var(--status-warning); margin-left: 4px; font-size: 12px;" title="Reopened"></i>
     <% end %>
   </td>
-  <td style="padding: var(--space-3) var(--space-4); text-align: right; font-weight: 600; font-variant-numeric: tabular-nums; color: var(--text-primary);" onclick="window.location='<%= error_path(error, **app_context) %>'">
+  <td style="padding: var(--space-3) var(--space-4); text-align: right; font-weight: 600; font-variant-numeric: tabular-nums; color: var(--text-primary);">
     <%= error.occurrence_count.to_s(:delimited) rescue error.occurrence_count %>
   </td>
-  <td style="padding: var(--space-3) var(--space-4); text-align: right; font-variant-numeric: tabular-nums; color: var(--text-secondary);" onclick="window.location='<%= error_path(error, **app_context) %>'">
+  <td style="padding: var(--space-3) var(--space-4); text-align: right; font-variant-numeric: tabular-nums; color: var(--text-secondary);">
     <% if error.user_id %>
       <%= error.user_id %>
     <% else %>
       <span style="color: var(--text-tertiary);">&mdash;</span>
     <% end %>
   </td>
-  <td style="padding: var(--space-3) var(--space-4); text-align: right; color: var(--text-tertiary); font-size: 12px;" onclick="window.location='<%= error_path(error, **app_context) %>'">
+  <td style="padding: var(--space-3) var(--space-4); text-align: right; color: var(--text-tertiary); font-size: 12px;">
     <%= local_time_ago(error.last_seen_at) %>
   </td>
   <% if local_assigns[:show_application] %>
-    <td style="padding: var(--space-3) var(--space-4); font-size: 12px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap;" title="<%= error.application&.name || 'Unknown' %>" onclick="window.location='<%= error_path(error, **app_context) %>'">
+    <td style="padding: var(--space-3) var(--space-4); font-size: 12px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap;" title="<%= error.application&.name || 'Unknown' %>">
       <span class="badge bg-info"><%= error.application&.name || 'Unknown' %></span>
     </td>
   <% end %>
   <% if local_assigns[:show_platform] %>
-    <td style="padding: var(--space-3) var(--space-4); font-size: 12px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap;" title="<%= error.platform || 'API' %>" onclick="window.location='<%= error_path(error, **app_context) %>'">
+    <td style="padding: var(--space-3) var(--space-4); font-size: 12px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap;" title="<%= error.platform || 'API' %>">
       <% if error.platform == 'iOS' %>
         <span class="badge badge-ios"><i class="bi bi-apple"></i> iOS</span>
       <% elsif error.platform == 'Android' %>

data/app/views/rails_error_dashboard/errors/_issue_section.html.erb

@@ -112,7 +112,7 @@
   </div>
 
   <% if flash[:new_issue_url].present? %>
-    <script>
+    <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
       (function() {
         window.open('<%= j flash[:new_issue_url] %>', '_blank');
       })();

data/app/views/rails_error_dashboard/errors/_request_context.html.erb

@@ -84,17 +84,17 @@
                 <th>Replay Request:</th>
                 <td>
                   <% if curl_cmd.present? %>
-                    <button class="btn btn-sm btn-outline-primary me-2"
-                            onclick="copyToClipboard(this.dataset.curl, this)"
-                            data-curl="<%= h curl_cmd %>"
+                    <button type="button" class="btn btn-sm btn-outline-primary me-2"
+                            data-red-action="copy"
+                            data-red-copy-text="<%= h curl_cmd %>"
                             title="Copy curl command to clipboard">
                       <i class="bi bi-terminal"></i> Copy as curl
                     </button>
                   <% end %>
                   <% if rspec_cmd.present? %>
-                    <button class="btn btn-sm btn-outline-success"
-                            onclick="copyToClipboard(this.dataset.curl, this)"
-                            data-curl="<%= h rspec_cmd %>"
+                    <button type="button" class="btn btn-sm btn-outline-success"
+                            data-red-action="copy"
+                            data-red-copy-text="<%= h rspec_cmd %>"
                             title="Copy RSpec request spec to clipboard">
                       <i class="bi bi-code-slash"></i> Copy as RSpec
                     </button>

data/app/views/rails_error_dashboard/errors/_show_scripts.html.erb

@@ -1,5 +1,5 @@
-<script>
-  function downloadErrorJSON(event) {
+<script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
+  window.downloadErrorJSON = function(event) {
     const errorData = {
       id: <%= raw error.id.to_json %>,
       error_type: <%= raw error.error_type.to_json %>,
@@ -52,7 +52,7 @@
       button.classList.remove('btn-success');
       button.classList.add('btn-outline-secondary');
     }, 2000);
-  }
+  };
 
   // Section Navigation — pill bar with scroll spy
   document.addEventListener('DOMContentLoaded', function() {

data/app/views/rails_error_dashboard/errors/_sidebar_metadata.html.erb

@@ -526,7 +526,7 @@
             <small class="metadata-label d-block mb-1">Error ID</small>
             <div class="d-flex align-items-center gap-2">
               <code><%= error.id %></code>
-              <button class="btn btn-sm btn-outline-secondary" onclick="copyToClipboard('<%= error.id %>', this)" title="Copy error ID">
+              <button type="button" class="btn btn-sm btn-outline-secondary" data-red-action="copy" data-red-copy-text="<%= error.id %>" title="Copy error ID">
                 <i class="bi bi-clipboard"></i>
               </button>
             </div>

data/app/views/rails_error_dashboard/errors/_user_errors_table.html.erb

@@ -61,7 +61,7 @@
             </td>
           <% end %>
           <td>
-            <%= link_to "View Errors", errors_path(user_id: user_data[:user_id]), class: "btn btn-sm btn-outline-primary" %>
+            <%= link_to "View Errors", errors_path(user_id: user_data[:user_id], unresolved: '0'), class: "btn btn-sm btn-outline-primary" %>
           </td>
         </tr>
       <% end %>

data/app/views/rails_error_dashboard/errors/analytics.html.erb

@@ -1,6 +1,6 @@
 <% content_for :page_title, "Analytics" %>
 
-<script>
+<script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
   // Dynamic chart colors based on theme
   window.getChartColors = function() {
     const isDark = document.documentElement.getAttribute('data-theme') === 'dark';
@@ -67,7 +67,7 @@
     </div>
     <div class="card-body">
       <div id="errors-over-time-chart"></div>
-      <script>
+      <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
         document.addEventListener('DOMContentLoaded', function() {
           const colors = window.getChartColors();
           new Chartkick.LineChart("errors-over-time-chart", <%= raw @errors_over_time.to_json %>, {
@@ -112,7 +112,7 @@
           </div>
           <div class="card-body">
             <div id="errors-by-platform-chart"></div>
-            <script>
+            <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
               document.addEventListener('DOMContentLoaded', function() {
                 const colors = window.getChartColors();
                 // Distinct, accessible colors for 5 platforms with good contrast
@@ -148,7 +148,7 @@
             <div class="d-flex gap-2 flex-wrap">
               <small class="text-muted me-2">Quick Links:</small>
               <% @errors_by_platform.keys.each do |platform| %>
-                <%= link_to platform, errors_path(platform: platform), class: "btn btn-sm btn-outline-secondary" %>
+                <%= link_to platform, errors_path(platform: platform, unresolved: '0'), class: "btn btn-sm btn-outline-secondary" %>
               <% end %>
             </div>
           </div>
@@ -166,7 +166,7 @@
         </div>
         <div class="card-body">
           <div id="errors-by-type-chart"></div>
-          <script>
+          <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
             document.addEventListener('DOMContentLoaded', function() {
               const colors = window.getChartColors();
               new Chartkick.BarChart("errors-by-type-chart", <%= raw @errors_by_type.to_json %>, {
@@ -208,7 +208,7 @@
         </div>
         <div class="card-body">
           <div id="errors-by-hour-chart"></div>
-          <script>
+          <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
             document.addEventListener('DOMContentLoaded', function() {
               const colors = window.getChartColors();
               new Chartkick.ColumnChart("errors-by-hour-chart", <%= raw @errors_by_hour.to_json %>, {
@@ -304,7 +304,7 @@
                       </div>
                     </td>
                     <td>
-                      <%= link_to "View Errors", errors_path(error_type: error_type), class: "btn btn-sm btn-outline-primary" %>
+                      <%= link_to "View Errors", errors_path(error_type: error_type, unresolved: '0'), class: "btn btn-sm btn-outline-primary" %>
                     </td>
                   </tr>
                 <% end %>
@@ -410,7 +410,7 @@
           </div>
           <div class="card-body">
             <div id="errors-by-version-chart"></div>
-            <script>
+            <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
               document.addEventListener('DOMContentLoaded', function() {
                 const versionData = <%= raw @errors_by_version.transform_values { |v| v[:count] }.to_json %>;
                 const colors = window.getChartColors();
@@ -549,7 +549,7 @@
           <div class="mt-4">
             <h6 class="text-muted mb-3">MTTR by Platform</h6>
             <div id="mttr-by-platform-chart"></div>
-            <script>
+            <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
               document.addEventListener('DOMContentLoaded', function() {
                 const colors = window.getChartColors();
                 new Chartkick.BarChart("mttr-by-platform-chart",
@@ -587,7 +587,7 @@
                       </td>
                       <td><strong><%= hours %> hours</strong></td>
                       <td>
-                        <%= link_to "View", errors_path(severity: severity), class: "btn btn-sm btn-outline-primary" %>
+                        <%= link_to "View", errors_path(severity: severity, unresolved: '0'), class: "btn btn-sm btn-outline-primary" %>
                       </td>
                     </tr>
                   <% end %>
@@ -602,7 +602,7 @@
           <div class="mt-4">
             <h6 class="text-muted mb-3">MTTR Trend (Weekly)</h6>
             <div id="mttr-trend-chart"></div>
-            <script>
+            <script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
               document.addEventListener('DOMContentLoaded', function() {
                 const colors = window.getChartColors();
                 new Chartkick.LineChart("mttr-trend-chart",

data/app/views/rails_error_dashboard/errors/correlation.html.erb

@@ -105,7 +105,7 @@
                     <% end %>
                   </td>
                   <td>
-                    <%= link_to "View", errors_path(search: release[:version]), class: "btn btn-sm btn-outline-primary" %>
+                    <%= link_to "View", errors_path(search: release[:version], unresolved: '0'), class: "btn btn-sm btn-outline-primary" %>
                   </td>
                 </tr>
               <% end %>

data/app/views/rails_error_dashboard/errors/index.html.erb

@@ -86,11 +86,11 @@
           current_status = params[:status]
           is_unresolved_only = params[:unresolved] != "false" && params[:unresolved] != "0"
         %>
-        <%= link_to errors_path(app_context), class: "btn filter-pill #{current_status.blank? && !is_unresolved_only ? 'active btn-primary' : 'btn-outline-primary'}", style: "text-decoration: none;" do %>All<% end %>
+        <%= link_to errors_path(app_context.merge(unresolved: '0')), class: "btn filter-pill #{current_status.blank? && !is_unresolved_only ? 'active btn-primary' : 'btn-outline-primary'}", style: "text-decoration: none;" do %>All<% end %>
         <%= link_to errors_path(app_context.merge(unresolved: '1')), class: "btn filter-pill #{is_unresolved_only && current_status.blank? ? 'active btn-primary' : 'btn-outline-primary'}", style: "text-decoration: none;" do %>Unresolved <span style="font-size: 11px; opacity: 0.7;"><%= @stats[:unresolved] %></span><% end %>
         <%= link_to errors_path(app_context.merge(status: 'resolved', unresolved: '0')), class: "btn filter-pill #{current_status == 'resolved' ? 'active btn-primary' : 'btn-outline-primary'}", style: "text-decoration: none;" do %>Resolved<% end %>
-        <%= link_to errors_path(app_context.merge(assigned_to: '__assigned__')), class: "btn filter-pill #{params[:assigned_to] == '__assigned__' ? 'active btn-primary' : 'btn-outline-primary'}", style: "text-decoration: none;" do %>Assigned<% end %>
-        <%= link_to errors_path(app_context.merge(reopened: 'true')), class: "btn filter-pill #{params[:reopened] == 'true' ? 'active btn-primary' : 'btn-outline-primary'}", style: "text-decoration: none;" do %>Reopened<% end %>
+        <%= link_to errors_path(app_context.merge(assigned_to: '__assigned__', unresolved: '0')), class: "btn filter-pill #{params[:assigned_to] == '__assigned__' ? 'active btn-primary' : 'btn-outline-primary'}", style: "text-decoration: none;" do %>Assigned<% end %>
+        <%= link_to errors_path(app_context.merge(reopened: 'true', unresolved: '0')), class: "btn filter-pill #{params[:reopened] == 'true' ? 'active btn-primary' : 'btn-outline-primary'}", style: "text-decoration: none;" do %>Reopened<% end %>
       </div>
 
       <div style="width: 1px; height: 24px; background: var(--border-primary);"></div>
@@ -106,7 +106,7 @@
 
       <!-- Advanced filters toggle -->
       <div style="width: 1px; height: 24px; background: var(--border-primary);"></div>
-      <button type="button" onclick="document.getElementById('advanced-filters').style.display = document.getElementById('advanced-filters').style.display === 'none' ? 'flex' : 'none'" class="filter-pill" style="border: none;">
+      <button type="button" data-red-action="toggle-display" data-red-target="#advanced-filters" data-red-display="flex" class="filter-pill" style="border: none;">
         <i class="bi bi-sliders"></i> More filters
       </button>
     </div>
@@ -194,6 +194,23 @@
   <!-- Error Table -->
   <div class="card" style="overflow: hidden;">
     <% if @errors.any? %>
+      <!-- Batch action toolbar (shown when one or more errors are selected). Sits above the table
+           so it doesn't disrupt the table's column widths the way a colspan thead row does. -->
+      <div id="batch-toolbar" style="display: none; padding: var(--space-3) var(--space-4); border-bottom: 1px solid var(--border-primary); background: var(--surface-secondary);">
+        <%= form_with url: batch_action_errors_path, method: :post, id: "batch-form", style: "display: flex; gap: 8px; align-items: center; flex-wrap: wrap;" do |f| %>
+          <% if params[:application_id].present? %>
+            <%= hidden_field_tag :application_id, params[:application_id] %>
+          <% end %>
+          <input type="checkbox" id="select-all-batch" class="form-check-input" style="accent-color: var(--accent); margin: 0;" checked>
+          <span id="selected-count" style="font-size: 13px; font-weight: 600; color: var(--text-primary); margin-right: var(--space-2);"></span>
+          <%= button_tag type: "submit", name: "action_type", value: "resolve", class: "btn btn-sm", style: "padding: 4px 12px; font-size: 12px;" do %>
+            <i class="bi bi-check-circle"></i> Resolve
+          <% end %>
+          <%= button_tag type: "submit", name: "action_type", value: "delete", class: "btn btn-sm", style: "padding: 4px 12px; font-size: 12px; color: var(--status-critical);", data: { confirm: "Are you sure you want to delete the selected errors?" } do %>
+            <i class="bi bi-trash"></i> Delete
+          <% end %>
+        <% end %>
+      </div>
       <div data-loading-target="content">
         <div style="overflow-x: auto;">
         <table class="table table-hover" style="margin-bottom: 0; width: 100%; table-layout: fixed;">
@@ -214,25 +231,6 @@
                 <th style="padding: var(--space-3) var(--space-4); width: 100px;">Platform</th>
               <% end %>
             </tr>
-            <tr id="thead-batch" style="display: none; border-bottom: 1px solid var(--border-primary); background: var(--surface-secondary);">
-              <th style="width: 40px; padding: var(--space-3) var(--space-4); text-align: center;">
-                <input type="checkbox" id="select-all-batch" class="form-check-input" style="accent-color: var(--accent);" checked>
-              </th>
-              <th colspan="99" style="padding: var(--space-3) var(--space-4);">
-                <%= form_with url: batch_action_errors_path, method: :post, id: "batch-form", style: "display: flex; gap: 8px; align-items: center;" do |f| %>
-                  <% if params[:application_id].present? %>
-                    <%= hidden_field_tag :application_id, params[:application_id] %>
-                  <% end %>
-                  <span id="selected-count" style="font-size: 13px; font-weight: 600; color: var(--text-primary);"></span>
-                  <%= button_tag type: "submit", name: "action_type", value: "resolve", class: "btn btn-sm", style: "padding: 4px 12px; font-size: 12px;" do %>
-                    <i class="bi bi-check-circle"></i> Resolve
-                  <% end %>
-                  <%= button_tag type: "submit", name: "action_type", value: "delete", class: "btn btn-sm", style: "padding: 4px 12px; font-size: 12px; color: var(--status-critical);", data: { confirm: "Are you sure you want to delete the selected errors?" } do %>
-                    <i class="bi bi-trash"></i> Delete
-                  <% end %>
-                <% end %>
-              </th>
-            </tr>
           </thead>
           <tbody id="error_list">
             <% @errors.each do |error| %>
@@ -276,12 +274,11 @@
   </div>
 </div>
 
-<script>
+<%= red_javascript_tag do %>
 document.addEventListener('DOMContentLoaded', function() {
   var selectAllCheckbox = document.getElementById('select-all');
   var selectAllBatchCheckbox = document.getElementById('select-all-batch');
-  var theadColumns = document.getElementById('thead-columns');
-  var theadBatch = document.getElementById('thead-batch');
+  var batchToolbar = document.getElementById('batch-toolbar');
   var selectedCountSpan = document.getElementById('selected-count');
   var batchForm = document.getElementById('batch-form');
 
@@ -297,14 +294,14 @@ document.addEventListener('DOMContentLoaded', function() {
     var someChecked = Array.from(boxes).some(function(cb) { return cb.checked; });
 
     if (count > 0) {
-      theadColumns.style.display = 'none';
-      theadBatch.style.display = '';
-      selectedCountSpan.textContent = count + ' selected';
-      selectAllBatchCheckbox.checked = allChecked;
-      selectAllBatchCheckbox.indeterminate = someChecked && !allChecked;
+      if (batchToolbar) batchToolbar.style.display = '';
+      if (selectedCountSpan) selectedCountSpan.textContent = count + ' selected';
+      if (selectAllBatchCheckbox) {
+        selectAllBatchCheckbox.checked = allChecked;
+        selectAllBatchCheckbox.indeterminate = someChecked && !allChecked;
+      }
     } else {
-      theadColumns.style.display = '';
-      theadBatch.style.display = 'none';
+      if (batchToolbar) batchToolbar.style.display = 'none';
     }
 
     if (selectAllCheckbox) {
@@ -394,4 +391,4 @@ document.addEventListener('DOMContentLoaded', function() {
     });
   }
 });
-</script>
+<% end %>

data/app/views/rails_error_dashboard/errors/platform_comparison.html.erb

@@ -88,7 +88,7 @@
               </div>
             </div>
             <div class="card-footer border-top">
-              <%= link_to "View #{platform} Errors", errors_path(platform: platform), class: "btn btn-sm btn-outline-primary w-100" %>
+              <%= link_to "View #{platform} Errors", errors_path(platform: platform, unresolved: '0'), class: "btn btn-sm btn-outline-primary w-100" %>
             </div>
           </div>
         </div>
@@ -290,7 +290,7 @@
   <% end %>
 </div>
 
-<script>
+<script<%= " nonce=\"#{red_csp_nonce}\"".html_safe if red_csp_nonce %>>
   // Platform color mapping - consistent with analytics page
   const platformColorMap = {
     'api': '#2563EB',           // Blue

data/app/views/rails_error_dashboard/errors/settings.html.erb

@@ -181,7 +181,7 @@
   <!-- Dynamically render setting groups -->
   <% setting_groups.each do |group_name, group_config| %>
     <div class="card" style="margin-bottom: var(--space-4);">
-      <button onclick="var b = this.nextElementSibling; b.style.display = b.style.display === 'none' ? 'block' : 'none'; var chev = this.querySelector('.chev'); if(chev) chev.className = b.style.display === 'none' ? 'bi bi-chevron-down chev' : 'bi bi-chevron-up chev';" style="display: flex; align-items: center; justify-content: space-between; width: 100%; padding: var(--space-4) var(--space-6); background: none; border: none; cursor: pointer; border-bottom: 1px solid var(--border-primary);">
+      <button type="button" data-red-action="toggle-next" data-red-display="block" style="display: flex; align-items: center; justify-content: space-between; width: 100%; padding: var(--space-4) var(--space-6); background: none; border: none; cursor: pointer; border-bottom: 1px solid var(--border-primary);">
         <span style="font-size: 14px; font-weight: 600; color: var(--text-primary);"><i class="<%= group_config[:icon] %>" style="margin-right: 6px;"></i> <%= group_name %></span>
         <div style="display: flex; align-items: center; gap: 8px;">
           <span style="font-size: 11px; color: var(--text-tertiary);"><%= group_config[:settings].size %> options</span>
@@ -270,7 +270,7 @@
         The test error is clearly marked and safe to resolve or delete.
       </p>
       <%= form_tag test_error_errors_path(application_id: @current_application_id.presence), method: :post, style: "display: inline;" do %>
-        <button type="submit" class="btn btn-outline" onclick="return confirm('This will create a test error and send notifications to all configured channels. Continue?')">
+        <button type="submit" class="btn btn-outline" data-red-action="confirm-submit" data-red-confirm-message="This will create a test error and send notifications to all configured channels. Continue?">
           <i class="bi bi-send" style="margin-right: 4px;"></i> Send Test Error
         </button>
       <% end %>

data/app/views/rails_error_dashboard/errors/show.html.erb

@@ -77,10 +77,10 @@
       <button type="button" class="btn" data-bs-toggle="modal" data-bs-target="#assignModal" id="hero-assign-btn">
         Assign
       </button>
-      <button type="button" class="btn" onclick="copyToClipboard(this.dataset.markdown.replace(/\\(.)/g, function(m,c){return c==='n'?'\n':c}), this)" data-markdown="<%= j @error_markdown %>">
+      <button type="button" class="btn" data-red-action="copy-markdown" data-markdown="<%= j @error_markdown %>">
         <i class="bi bi-clipboard" style="margin-right: 4px;"></i>Copy for LLM
       </button>
-      <button type="button" class="btn" onclick="downloadErrorJSON(event)" title="Export JSON">
+      <button type="button" class="btn" data-red-action="download-json" title="Export JSON">
         <i class="bi bi-download"></i>
       </button>
     </div>
@@ -92,17 +92,17 @@
     <div>
       <!-- Tab bar -->
       <div style="display: flex; gap: 0; border-bottom: 1px solid var(--border-primary); margin-bottom: var(--space-4);">
-        <button onclick="switchTab('details')" class="red-tab active" id="tab-details" style="padding: 10px 16px; font-size: 13px; font-weight: 600; color: var(--accent); background: none; border: none; border-bottom: 2px solid var(--accent); margin-bottom: -1px; cursor: pointer;">
+        <button type="button" data-red-action="switch-tab" data-red-tab="details" class="red-tab active" id="tab-details" style="padding: 10px 16px; font-size: 13px; font-weight: 600; color: var(--accent); background: none; border: none; border-bottom: 2px solid var(--accent); margin-bottom: -1px; cursor: pointer;">
           <i class="bi bi-code-slash" style="margin-right: 6px;"></i>Details
         </button>
-        <button onclick="switchTab('context')" class="red-tab" id="tab-context" style="padding: 10px 16px; font-size: 13px; font-weight: 400; color: var(--text-secondary); background: none; border: none; border-bottom: 2px solid transparent; margin-bottom: -1px; cursor: pointer;">
+        <button type="button" data-red-action="switch-tab" data-red-tab="context" class="red-tab" id="tab-context" style="padding: 10px 16px; font-size: 13px; font-weight: 400; color: var(--text-secondary); background: none; border: none; border-bottom: 2px solid transparent; margin-bottom: -1px; cursor: pointer;">
           <i class="bi bi-layers" style="margin-right: 6px;"></i>Context
         </button>
-        <button onclick="switchTab('history')" class="red-tab" id="tab-history" style="padding: 10px 16px; font-size: 13px; font-weight: 400; color: var(--text-secondary); background: none; border: none; border-bottom: 2px solid transparent; margin-bottom: -1px; cursor: pointer;">
+        <button type="button" data-red-action="switch-tab" data-red-tab="history" class="red-tab" id="tab-history" style="padding: 10px 16px; font-size: 13px; font-weight: 400; color: var(--text-secondary); background: none; border: none; border-bottom: 2px solid transparent; margin-bottom: -1px; cursor: pointer;">
           <i class="bi bi-clock-history" style="margin-right: 6px;"></i>History
         </button>
         <% if RailsErrorDashboard.configuration.enable_issue_tracking %>
-          <button onclick="switchTab('issues')" class="red-tab" id="tab-issues" style="padding: 10px 16px; font-size: 13px; font-weight: 400; color: var(--text-secondary); background: none; border: none; border-bottom: 2px solid transparent; margin-bottom: -1px; cursor: pointer;">
+          <button type="button" data-red-action="switch-tab" data-red-tab="issues" class="red-tab" id="tab-issues" style="padding: 10px 16px; font-size: 13px; font-weight: 400; color: var(--text-secondary); background: none; border: none; border-bottom: 2px solid transparent; margin-bottom: -1px; cursor: pointer;">
             <i class="bi bi-github" style="margin-right: 6px;"></i>Issues
           </button>
         <% end %>
@@ -203,15 +203,15 @@
           <span style="font-size: 13px; font-weight: 600;">Quick Actions</span>
         </div>
         <div style="padding: var(--space-3) var(--space-5); display: flex; flex-direction: column; gap: var(--space-2);">
-          <%= link_to errors_path(app_context.merge(error_type: @error.error_type)), class: "btn btn-sm" do %>
+          <%= link_to errors_path(app_context.merge(error_type: @error.error_type, unresolved: '0')), class: "btn btn-sm" do %>
             <i class="bi bi-filter"></i> View Similar Errors
           <% end %>
           <% if @error.user_id %>
-            <%= link_to errors_path(app_context.merge(user_id: @error.user_id)), class: "btn btn-sm" do %>
+            <%= link_to errors_path(app_context.merge(user_id: @error.user_id, unresolved: '0')), class: "btn btn-sm" do %>
               <i class="bi bi-person"></i> View User's Errors
             <% end %>
           <% end %>
-          <%= link_to errors_path(app_context.merge(platform: @error.platform)), class: "btn btn-sm" do %>
+          <%= link_to errors_path(app_context.merge(platform: @error.platform, unresolved: '0')), class: "btn btn-sm" do %>
             <i class="bi bi-phone"></i> View <%= @error.platform %> Errors
           <% end %>
           <%= link_to analytics_errors_path(app_context), class: "btn btn-sm" do %>
@@ -225,8 +225,8 @@
 
 <%= render "modals", error: @error %>
 
-<script>
-function switchTab(tabId) {
+<%= red_javascript_tag do %>
+window.switchTab = function(tabId) {
   // Deactivate all tabs
   document.querySelectorAll('.red-tab').forEach(function(el) {
     el.style.color = 'var(--text-secondary)';
@@ -243,5 +243,5 @@ function switchTab(tabId) {
   // Scroll to selected panel
   var panel = document.getElementById('panel-' + tabId);
   if (panel) { panel.scrollIntoView({ behavior: 'smooth', block: 'start' }); }
-}
-</script>
+};
+<% end %>

data/db/migrate/20260503000001_backfill_resolved_status.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+# Backfill `status` column for errors that were bulk-resolved before v0.6.3.
+#
+# Versions 0.6.0 through 0.6.2 had a bug in BatchResolveErrors that set
+# `resolved: true` and `resolved_at` but skipped the `status` column. The
+# errors-index "Resolved" filter pill queries `where(status: 'resolved')`,
+# so bulk-resolved errors silently disappeared from that view even though
+# they were marked resolved.
+#
+# This migration is idempotent: it only updates rows that are out-of-sync
+# (resolved but not status='resolved'). Running it twice is a no-op.
+#
+# See: https://github.com/AnjanJ/rails_error_dashboard
+class BackfillResolvedStatus < ActiveRecord::Migration[7.0]
+  def up
+    return unless table_exists?(:rails_error_dashboard_error_logs)
+    return unless column_exists?(:rails_error_dashboard_error_logs, :status)
+    return unless column_exists?(:rails_error_dashboard_error_logs, :resolved)
+
+    # Use ActiveRecord update_all so the count is portable across adapters
+    # (PostgreSQL, MySQL, SQLite all return the affected row count).
+    table = ActiveRecord::Base.connection.quote_table_name("rails_error_dashboard_error_logs")
+    klass = Class.new(ActiveRecord::Base) { self.table_name = "rails_error_dashboard_error_logs" }
+    updated = klass.where(resolved: true).where("status IS NULL OR status != ?", "resolved")
+                   .update_all(status: "resolved")
+
+    say "Backfilled status='resolved' on #{updated} error log(s) that were bulk-resolved on v0.6.0–v0.6.2."
+  end
+
+  def down
+    # No-op: we cannot reliably distinguish errors that were bulk-resolved
+    # before the fix from errors that are legitimately resolved now. Leaving
+    # status='resolved' is the safe choice on rollback.
+  end
+end

data/lib/rails_error_dashboard/commands/batch_mute_errors.rb

@@ -4,13 +4,14 @@ module RailsErrorDashboard
   module Commands
     # Command: Mute multiple errors at once
     class BatchMuteErrors
-      def self.call(error_ids, muted_by: nil)
-        new(error_ids, muted_by).call
+      def self.call(error_ids, muted_by: nil, reason: nil)
+        new(error_ids, muted_by, reason).call
       end
 
-      def initialize(error_ids, muted_by = nil)
+      def initialize(error_ids, muted_by = nil, reason = nil)
         @error_ids = Array(error_ids).compact
         @muted_by = muted_by
+        @reason = reason
       end
 
       def call
@@ -27,7 +28,8 @@ module RailsErrorDashboard
             error.update!(
               muted: true,
               muted_at: Time.current,
-              muted_by: @muted_by
+              muted_by: @muted_by,
+              muted_reason: @reason
             )
             muted_count += 1
             muted_errors << error

data/lib/rails_error_dashboard/commands/batch_resolve_errors.rb

@@ -31,7 +31,8 @@ module RailsErrorDashboard
               resolved: true,
               resolved_at: Time.current,
               resolved_by_name: @resolved_by_name,
-              resolution_comment: @resolution_comment
+              resolution_comment: @resolution_comment,
+              status: "resolved"
             )
             resolved_count += 1
             resolved_errors << error

data/lib/rails_error_dashboard/version.rb

@@ -1,3 +1,3 @@
 module RailsErrorDashboard
-  VERSION = "0.6.1"
+  VERSION = "0.6.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rails_error_dashboard
 version: !ruby/object:Gem::Version
-  version: 0.6.1
+  version: 0.6.3
 platform: ruby
 authors:
 - Anjan Jagirdar
@@ -355,6 +355,7 @@ files:
 - db/migrate/20260323000001_add_muted_to_error_logs.rb
 - db/migrate/20260325000001_fix_swallowed_exceptions_index_for_mysql.rb
 - db/migrate/20260326000001_add_issue_tracking_to_error_logs.rb
+- db/migrate/20260503000001_backfill_resolved_status.rb
 - lib/generators/rails_error_dashboard/install/install_generator.rb
 - lib/generators/rails_error_dashboard/install/templates/README
 - lib/generators/rails_error_dashboard/install/templates/initializer.rb
@@ -497,7 +498,7 @@ metadata:
   funding_uri: https://github.com/sponsors/AnjanJ
 post_install_message: |
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-    RED (Rails Error Dashboard) v0.6.1
+    RED (Rails Error Dashboard) v0.6.3
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 
   First install: