rails_i18n_onair 1.0.0 → 1.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c3d0ff96fc79cf5fa34e5ebaa6ab26728790eb92549fe5c62944f959e9447356
-  data.tar.gz: 5b7069cca340ba202525d2cd64c1bc76c3adfdecd355cd5f7f070e0aadd80fbe
+  metadata.gz: 19ed757e0ff55cdfe24a433b697f40fae925c5f9ab9984fc87eea890ac327ef7
+  data.tar.gz: ef2239c23a898371ac91c9b3533e24586b30ec5e016a21b4ce8d652ed387a5c5
 SHA512:
-  metadata.gz: 86bb02b3cfaea5bafd61f9f23be2554b7eb041dc5e5788d94ae5bf259f05da5452e9b2622f272c83a70faa69e315cce21f1bb28a573a155b84eca784e00f7c98
-  data.tar.gz: b5a9b6319ef11ff267a3b0cd21a72e54375f1850d4d1c86b3368201905fd616238df515a1dbb27db4d77e0749c39a36342eecd3f23c09ae1970b3a28632d3007
+  metadata.gz: 802199a2fb927aa52641ff15d69dd789397442c0619e32f0f23f0d86cf2e3ae042157059ada79d208cf1c953d110c4e4777717a0378d56e37b2efc129d395ce5
+  data.tar.gz: 6cd4f39bfc3eaa1cd47bb4aff0dea64dbd5e302486d15c7bc8fdb0a1ce24b953acd0230607ef94ae3934dd4fe7404ec2ee634a5aee6df8fd628062f6c96b99a5

data/CHANGELOG.md

@@ -0,0 +1,95 @@
+# Changelog
+
+All notable changes to this project are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [1.0.4] - 2026-07-26
+
+## [1.0.3] - 2026-07-26
+
+### Fixed
+
+- **Wrapped translations no longer leak markup into plain-text contexts.** Editable
+  wrappers that landed in HTML attribute values (`placeholder:`, `title:`,
+  `aria-label:`) or inside `<title>`, `<textarea>`, `<script>`, `<style>` and
+  `<option>` are stripped back to the translated text, instead of rendering the
+  `<span>` as literal characters.
+- **Translations used as interpolation values stay plain.**
+  `t("greeting", name: t("app_name"))` previously escaped the inner wrapper into the
+  visible text of the outer translation; the inner wrapping is now removed before
+  interpolation, and `data-i18n-vars` records the clean value.
+- **Editing a pluralized key no longer destroys the plural hash.** For
+  `t("items", count: 5)` the editor now targets the plural form that produced the
+  rendered text (`items.other`) rather than the parent key. Saves that would replace a
+  nested branch with a string are rejected with an explanatory message.
+- **Scoped keys resolve to their full path.** `t(:title, scope: [:users, :index])`
+  now saves to `users.index.title` instead of `title`.
+- Hash and array results from `t()` are returned untouched instead of being coerced
+  into a wrapped string.
+- Live UI saves are written to the file that already defines the key
+  (`devise.en.yml`, `models/en.yml`, …), falling back to the base `<locale>.yml` for
+  new keys, instead of always writing to `<locale>.yml`.
+- Dashboard file edits preserve non-string YAML scalars; integers, floats and
+  booleans are no longer written back as quoted strings.
+- The Live UI API responds with JSON `401` instead of an HTML login redirect when the
+  session has expired, so the editor can report it rather than failing to parse the
+  response.
+- Saving a translation updates every occurrence of that key on the page, not only the
+  element that was clicked.
+- The translations migration matches the documented schema (`jsonb` with a GIN index).
+
+### Added
+
+- Locale files are discovered recursively and may be named `<language>.yml`,
+  `<prefix>.<language>.yml` (`devise.en.yml`) or live in subdirectories
+  (`models/en.yml`). Imports deep-merge every file belonging to a language instead of
+  letting the last file win, and sync comparison accounts for keys defined in any of
+  a locale's files.
+- Dashboard sign-in is throttled: 10 failed attempts per username and IP pair lock
+  further attempts for 15 minutes (requires a real `Rails.cache` store).
+- The session identifier is rotated on successful sign-in to prevent session fixation,
+  while preserving the host application's session data.
+- Live UI verifies that the signed-in translator still exists, so deleting a
+  translator revokes access. The signed session remains the primary credential: when
+  the model cannot be reached at all, the session is trusted rather than disabling
+  Live UI.
+
+### Changed
+
+- Locale file access is confined to the configured locale directory; path traversal
+  and non-locale filenames are rejected.
+- Saving a translation reloads only the affected locale instead of clearing every
+  locale from the cache, and cache invalidation falls back to explicit key deletion on
+  stores without `delete_matched` (for example memcached).
+- The Live UI middleware skips compressed and streamed responses, and closes the
+  original response body.
+- Dropped the unused `bootstrap` and `rails-i18n` runtime dependencies; Bootstrap is
+  loaded from a CDN by the dashboard layouts.
+
+## [1.0.0] - 2026-03-15
+
+### Added
+
+- **Dashboard** mounted as a Rails engine at `/i18n`, with translator authentication.
+  Browse translations by language (database mode) or by file (file mode), edit
+  key/value pairs in a table UI, and download every locale as a ZIP archive.
+- **Live UI** in-page editing: a floating toolbar and popover editor for translated
+  text, covering view helpers, form submit buttons, and controller-level translations
+  such as flash messages.
+- **Two storage modes** — YAML files, or PostgreSQL JSONB behind a chained I18n
+  backend with Rails-cache, request-level and in-memory caching.
+- **Locale sync** — compare two locales and copy missing keys between them.
+- **Import tasks** for loading existing YAML files into database mode.
+- **Install generator** that creates the initializer, installs migrations, mounts the
+  engine and creates the first translator account.
+- Edit mode persists across page navigations via `localStorage`, and callers can opt
+  out per key with `t("some.key", i18n_onair: false)`.
+
+[Unreleased]: https://github.com/tarqmamdouh/rails-i18n-onair/compare/v1.0.4...HEAD
+[1.0.4]: https://github.com/tarqmamdouh/rails-i18n-onair/compare/v1.0.3...v1.0.4
+[1.0.3]: https://github.com/tarqmamdouh/rails-i18n-onair/compare/v1.0.0...v1.0.3
+[1.0.0]: https://github.com/tarqmamdouh/rails-i18n-onair/releases/tag/v1.0.0

data/README.md

@@ -558,6 +558,29 @@ bundle exec rspec
 
 The test suite uses SQLite in-memory — no PostgreSQL needed locally. For a production-parity test of the JSONB features, set `DATABASE_URL` to a Postgres instance before running specs.
 
+The Gemfile resolves different dependency sets per Ruby version, because Rails 8 and the current `sqlite3`, `minitest` and `nokogiri` releases all require Ruby >= 3.2 while the gem itself still supports 2.7.2:
+
+| Ruby | Resolves to |
+| --- | --- |
+| >= 3.2 | Rails 8.x, sqlite3 2.x |
+| 3.0 – 3.1 | Rails 7.0, sqlite3 1.x |
+| 2.7 | Rails 7.0, sqlite3 < 1.7 |
+
+The suite passes on all of these. `Gemfile.lock` is not checked in, so run `bundle install` after switching Ruby versions.
+
+### Releasing
+
+```bash
+bin/release patch            # 1.0.2 -> 1.0.3
+bin/release minor            # 1.0.2 -> 1.1.0
+bin/release 1.2.3            # explicit version
+bin/release patch --dry-run  # run the checks, change nothing
+```
+
+The script runs the preflight checks (clean tree, on `main`, tag not already taken, RSpec green), bumps `lib/rails_i18n_onair/version.rb`, moves the CHANGELOG's `Unreleased` entries into a dated section, then commits, tags and pushes.
+
+It stops there: publishing is handled by `.github/workflows/gem-push.yml`, which builds the gem and pushes it to GitHub Packages and RubyGems when a `v*` tag lands. Bumping the version before tagging is the part that must not be skipped — RubyGems rejects a re-push of an existing version, so a tag placed without a version bump fails at the publish step.
+
 ---
 
 ## Contributing

data/app/controllers/rails_i18n_onair/api/live_translations_controller.rb

@@ -16,6 +16,7 @@ module RailsI18nOnair
         # (DB stores data as { "en" => { "user" => { "name" => "..." } } })
         full_key = "#{locale}.#{key}"
 
+        @save_error = nil
         success = if RailsI18nOnair.configuration.database_mode?
                     update_database_translation(locale, full_key, value)
                   else
@@ -25,12 +26,20 @@ module RailsI18nOnair
         if success
           render json: { status: "ok", key: key, locale: locale, value: value }
         else
-          render json: { error: "Failed to save translation" }, status: :unprocessable_entity
+          render json: { error: @save_error || "Failed to save translation" }, status: :unprocessable_entity
         end
       end
 
       private
 
+      # Unauthenticated API calls get JSON 401 instead of a login redirect —
+      # the Live UI script can then show a "session expired" message.
+      def authenticate_translator!
+        return if current_translator
+
+        render json: { error: "Session expired — please sign in again" }, status: :unauthorized
+      end
+
       # Strip region/variant from locale: "en_FRA" → "en", "pt-BR" → "pt"
       # Translation files use language-only keys (en.yml, fr.yml, etc.)
       def normalize_locale(locale)
@@ -47,13 +56,18 @@ module RailsI18nOnair
         record = RailsI18nOnair::Translation.load_locale(locale)
         return false unless record
 
-        record.set_translation(full_key, value)
+        existing = record.get_translation(full_key)
+        if existing.is_a?(Hash)
+          @save_error = "\"#{params[:key]}\" holds nested translations — edit a specific subkey instead"
+          return false
+        end
 
-        # Bust cache so the new value is served immediately
-        if I18n.backend.respond_to?(:reload!)
-          I18n.backend.reload!
+        unless record.set_translation(full_key, value)
+          @save_error = "Key path conflicts with an existing translation"
+          return false
         end
 
+        reload_translations(locale)
         true
       rescue StandardError => e
         Rails.logger&.error "RailsI18nOnair LiveUI: DB save failed — #{e.message}"
@@ -62,26 +76,70 @@ module RailsI18nOnair
 
       def update_file_translation(locale, _full_key, value)
         key_path = params[:key]
+        keys = [locale, *key_path.split(".")].map(&:to_s)
         file_manager = RailsI18nOnair::FileManager.new
-        filename = "#{locale}.yml"
+
+        # Update the file that already defines this key (devise.en.yml,
+        # models/en.yml, …); fall back to the base <locale>.yml.
+        filename = locate_file_for_key(file_manager, locale, keys) || "#{locale}.yml"
         content  = file_manager.read_file(filename)
         return false unless content
 
         data = YAML.safe_load(content, permitted_classes: [Symbol], aliases: true) || {}
         data = {} unless data.is_a?(Hash)
 
+        existing = keys.reduce(data) { |h, k| h.is_a?(Hash) ? h[k] : nil }
+        if existing.is_a?(Hash)
+          @save_error = "\"#{key_path}\" holds nested translations — edit a specific subkey instead"
+          return false
+        end
+
         # Navigate to the correct nested key and update the value
-        keys = [locale, *key_path.split(".")].map(&:to_s)
-        last = keys.pop
-        node = keys.reduce(data) { |h, k| h.is_a?(Hash) ? (h[k] ||= {}) : break }
-        return false unless node.is_a?(Hash)
+        parent_keys = keys[0..-2]
+        node = parent_keys.reduce(data) { |h, k| h.is_a?(Hash) ? (h[k] ||= {}) : break }
+        unless node.is_a?(Hash)
+          @save_error = "Key path conflicts with an existing translation"
+          return false
+        end
 
-        node[last] = value
-        file_manager.write_file(filename, data.to_yaml)
+        node[keys.last] = value
+        return false unless file_manager.write_file(filename, data.to_yaml)
+
+        reload_translations(locale)
+        true
       rescue StandardError => e
         Rails.logger&.error "RailsI18nOnair LiveUI: file save failed — #{e.message}"
         false
       end
+
+      # Reload only the affected locale when the backend supports it
+      # (DatabaseBackend#reload_locale); otherwise fall back to a full reload
+      # so file-mode edits become visible without an app restart.
+      def reload_translations(locale)
+        backend  = I18n.backend
+        backends = backend.respond_to?(:backends) ? backend.backends : [backend]
+        targeted = backends.find { |b| b.respond_to?(:reload_locale) }
+
+        if targeted
+          targeted.reload_locale(locale)
+        elsif backend.respond_to?(:reload!)
+          backend.reload!
+        end
+      rescue StandardError => e
+        Rails.logger.warn "RailsI18nOnair LiveUI: cache reload failed — #{e.message}"
+      end
+
+      def locate_file_for_key(file_manager, locale, keys)
+        file_manager.files_for_language(locale).find { |file|
+          content = file_manager.read_file(file[:filename])
+          next false unless content
+
+          data = YAML.safe_load(content, permitted_classes: [Symbol], aliases: true) rescue nil
+          next false unless data.is_a?(Hash)
+
+          !keys.reduce(data) { |h, k| h.is_a?(Hash) ? h[k] : nil }.nil?
+        }&.dig(:filename)
+      end
     end
   end
 end

data/app/controllers/rails_i18n_onair/dashboard_controller.rb

@@ -11,13 +11,12 @@ module RailsI18nOnair
           recent_updates: RailsI18nOnair::Translation.order(updated_at: :desc).limit(5)
         }
       else
-        locale_path = Rails.root.join(RailsI18nOnair.configuration.locale_files_path)
-        yaml_files = Dir.glob("#{locale_path}/**/*.yml")
+        locale_files = RailsI18nOnair::FileManager.new.list_files
 
         @statistics = {
           locale_files_path: RailsI18nOnair.configuration.locale_files_path,
-          file_count: yaml_files.count,
-          files: yaml_files.map { |f| File.basename(f) }.sort,
+          file_count: locale_files.count,
+          files: locale_files,
           mode: :file
         }
       end

data/app/controllers/rails_i18n_onair/locale_files_controller.rb

@@ -35,8 +35,11 @@ module RailsI18nOnair
 
       filename = "#{params[:locale]}.yml"
 
-      # Convert nested form params back to hash
-      translations_hash = reconstruct_hash_from_params(params[:translations] || {})
+      # Convert nested form params back to a hash, restoring the scalar types
+      # (integers, booleans, floats) the original YAML used — form fields
+      # arrive as strings.
+      original = @file_info[:content] ? (YAML.safe_load(@file_info[:content], permitted_classes: [Symbol], aliases: true) rescue nil) : nil
+      translations_hash = reconstruct_hash_from_params(params[:translations] || {}, original)
 
       # Validate that we have data
       if translations_hash.empty?
@@ -49,9 +52,6 @@ module RailsI18nOnair
       # Convert to YAML with proper formatting
       new_content = translations_hash.to_yaml
 
-      # Log for debugging (remove in production)
-      Rails.logger.info "Saving translations: #{translations_hash.inspect}"
-
       if @file_manager.write_file(filename, new_content)
         redirect_to locale_file_path(locale: params[:locale]), notice: "File updated successfully"
       else
@@ -76,7 +76,8 @@ module RailsI18nOnair
       if result[:errors].empty?
         redirect_to locale_files_path, notice: "Successfully imported #{result[:imported]} file(s) to database"
       else
-        redirect_to locale_files_path, alert: "Import completed with errors: #{result[:errors].join(', ')}"
+        messages = result[:errors].map { |e| "#{e[:language]}: #{e[:error]}" }.join(", ")
+        redirect_to locale_files_path, alert: "Import completed with errors: #{messages}"
       end
     end
 
@@ -98,20 +99,44 @@ module RailsI18nOnair
       @file_info = @file_manager.get_file_info(filename)
     end
 
-    def reconstruct_hash_from_params(params_hash)
+    def reconstruct_hash_from_params(params_hash, original = nil)
       # Rails nested params come as ActionController::Parameters or Hash
       # Convert to regular hash recursively
       result = {}
 
       params_hash.each do |key, value|
+        original_value = original.is_a?(Hash) ? (original[key] || original[key.to_s] || original[key.to_sym]) : nil
+
         if value.is_a?(ActionController::Parameters) || value.is_a?(Hash)
-          result[key] = reconstruct_hash_from_params(value)
+          result[key] = reconstruct_hash_from_params(value, original_value)
         else
-          result[key] = value
+          result[key] = coerce_scalar(value, original_value)
         end
       end
 
       result
     end
+
+    # Form fields arrive as strings — restore the original YAML scalar type
+    # (integer, float, boolean) when the value still parses to that type.
+    def coerce_scalar(new_value, original_value)
+      return new_value if original_value.nil? || original_value.is_a?(String) || !new_value.is_a?(String)
+
+      parsed = begin
+        YAML.safe_load(new_value)
+      rescue StandardError
+        new_value
+      end
+
+      same_type = parsed.class == original_value.class ||
+                  (parsed.is_a?(Numeric) && original_value.is_a?(Numeric)) ||
+                  (boolean?(parsed) && boolean?(original_value))
+
+      same_type ? parsed : new_value
+    end
+
+    def boolean?(value)
+      value.is_a?(TrueClass) || value.is_a?(FalseClass)
+    end
   end
 end

data/app/controllers/rails_i18n_onair/sessions_controller.rb

@@ -4,6 +4,9 @@ module RailsI18nOnair
 
     layout "rails_i18n_onair/authentication"
 
+    MAX_LOGIN_ATTEMPTS = 10
+    LOCKOUT_DURATION   = 15.minutes
+
     before_action :redirect_if_authenticated, only: [:new, :create]
 
     def new
@@ -11,12 +14,23 @@ module RailsI18nOnair
     end
 
     def create
+      if login_throttled?
+        flash.now[:alert] = "Too many failed attempts — try again in a few minutes"
+        render :new, status: :too_many_requests
+        return
+      end
+
       translator = RailsI18nOnair::Translator.find_by(username: params[:username])
 
       if translator&.authenticate(params[:password])
+        clear_failed_logins
+        # Rotate the session id on sign-in (prevents session fixation) while
+        # keeping the host app's session data intact
+        request.session_options[:renew] = true
         session[:translator_id] = translator.id
         redirect_to main_app.rails_i18n_onair_path, notice: "Signed in successfully"
       else
+        register_failed_login
         flash.now[:alert] = "Invalid username or password"
         render :new, status: :unprocessable_entity
       end
@@ -34,5 +48,30 @@ module RailsI18nOnair
         redirect_to main_app.rails_i18n_onair_path
       end
     end
+
+    # Cache-backed failure counter per username+IP. With a null cache store
+    # (default in development) throttling is a no-op.
+    def login_throttled?
+      Rails.cache.read(login_throttle_key).to_i >= MAX_LOGIN_ATTEMPTS
+    rescue StandardError
+      false
+    end
+
+    def register_failed_login
+      attempts = Rails.cache.read(login_throttle_key).to_i + 1
+      Rails.cache.write(login_throttle_key, attempts, expires_in: LOCKOUT_DURATION)
+    rescue StandardError
+      nil
+    end
+
+    def clear_failed_logins
+      Rails.cache.delete(login_throttle_key)
+    rescue StandardError
+      nil
+    end
+
+    def login_throttle_key
+      "i18n_onair:login_attempts:#{params[:username].to_s.downcase}:#{request.remote_ip}"
+    end
   end
 end

data/app/controllers/rails_i18n_onair/sync_controller.rb

@@ -51,7 +51,7 @@ module RailsI18nOnair
         RailsI18nOnair::Translation.pluck(:language).sort
       else
         file_manager = RailsI18nOnair::FileManager.new
-        file_manager.list_files.map { |f| f[:language] }.sort
+        file_manager.list_files.map { |f| f[:language] }.uniq.sort
       end
     end
   end

data/app/helpers/rails_i18n_onair/application_helper.rb

@@ -18,6 +18,12 @@ module RailsI18nOnair
       File.basename(filename, ".yml").upcase
     end
 
+    # Route identifier for a locale file: the relative filename minus .yml
+    # ("en", "devise.en"). Only valid for editable (top-level) files.
+    def locale_file_param(file_info)
+      file_info[:filename].to_s.sub(/\.yml\z/, "")
+    end
+
     def render_yaml_tree(hash, level = 0)
       return "" unless hash.is_a?(Hash)
 

data/app/models/rails_i18n_onair/translation.rb

@@ -25,7 +25,8 @@ module RailsI18nOnair
         exists?(language: locale.to_s)
       end
 
-      # Get specific translation key using JSONB query (leverages GIN index)
+      # Get a specific translation key. Loads the locale row (unique index on
+      # :language) and walks the JSONB document in Ruby.
       def lookup_key(locale, key_path)
         translation_record = find_by(language: locale.to_s)
         return nil unless translation_record
@@ -56,11 +57,19 @@ module RailsI18nOnair
       keys.reduce(translation) { |hash, key| hash&.dig(key) || hash&.dig(key.to_sym) }
     end
 
-    # Set a translation value by key path
+    # Set a translation value by key path.
+    # Returns false when an intermediate node is not a Hash (the path passes
+    # through a leaf value) instead of raising.
     def set_translation(key_path, value)
       keys = key_path.split(".")
       last_key = keys.pop
-      hash = keys.reduce(translation) { |h, key| h[key] ||= {} }
+      hash = keys.reduce(translation) do |h, key|
+        return false unless h.is_a?(Hash)
+
+        h[key] ||= {}
+      end
+      return false unless hash.is_a?(Hash)
+
       hash[last_key] = value
       save
     end

data/app/views/rails_i18n_onair/dashboard/_file_mode.html.erb

@@ -38,19 +38,22 @@
       <div class="card-body">
         <% if statistics[:files].any? %>
           <ul class="list-group list-group-flush">
-            <% statistics[:files].each do |filename| %>
+            <% statistics[:files].each do |file| %>
               <li class="list-group-item d-flex justify-content-between align-items-center">
-                <span><i class="bi bi-file-earmark-code me-2"></i><%= filename %></span>
-                <div class="btn-group btn-group-sm" role="group">
-                  <%= link_to locale_file_path(locale: filename.sub('.yml', '')), class: "btn btn-outline-info" do %>
-                    <i class="bi bi-eye"></i> View
-                  <% end %>
-                  <%= link_to edit_locale_file_path(locale: filename.sub('.yml', '')), class: "btn btn-outline-primary" do %>
-                    <i class="bi bi-pencil"></i> Edit
-                  <% end %>
-                </div>
+                <span><i class="bi bi-file-earmark-code me-2"></i><%= file[:filename] %></span>
+                <% if file[:editable] %>
+                  <div class="btn-group btn-group-sm" role="group">
+                    <%= link_to locale_file_path(locale: locale_file_param(file)), class: "btn btn-outline-info" do %>
+                      <i class="bi bi-eye"></i> View
+                    <% end %>
+                    <%= link_to edit_locale_file_path(locale: locale_file_param(file)), class: "btn btn-outline-primary" do %>
+                      <i class="bi bi-pencil"></i> Edit
+                    <% end %>
+                  </div>
+                <% else %>
+                  <small class="text-muted">Edit via file system</small>
+                <% end %>
               </li>
-              
             <% end %>
           </ul>
         <% else %>

data/app/views/rails_i18n_onair/locale_files/edit.html.erb

@@ -4,7 +4,7 @@
     <button type="submit" form="translation-form" class="btn btn-success me-2">
       <i class="bi bi-check-circle me-1"></i> Save Changes
     </button>
-    <%= link_to locale_file_path(locale: @file_info[:language]), class: "btn btn-outline-secondary" do %>
+    <%= link_to locale_file_path(locale: locale_file_param(@file_info)), class: "btn btn-outline-secondary" do %>
       <i class="bi bi-x-circle"></i> Cancel
     <% end %>
   </div>
@@ -20,8 +20,8 @@
         </button>
       </div>
       <div class="card-body">
-        <%= form_with url: locale_file_path(locale: @file_info[:language]), method: :patch, local: true, id: "translation-form" do |f| %>
-          <%= hidden_field_tag :locale, @file_info[:language] %>
+        <%= form_with url: locale_file_path(locale: locale_file_param(@file_info)), method: :patch, local: true, id: "translation-form" do |f| %>
+          <%= hidden_field_tag :locale, locale_file_param(@file_info) %>
           <%= hidden_field_tag :form_submitted, "true" %>
 
           <div class="table-responsive">
@@ -51,7 +51,7 @@
 =begin%>
  <div class="d-grid gap-2 d-md-flex justify-content-md-end mt-4 pt-3 border-top">
             <%= submit_tag "Save Changes", class: "btn btn-success btn-lg", id: "save-btn" %>
-            <%= link_to "Cancel", locale_file_path(locale: @file_info[:language]), class: "btn btn-outline-secondary btn-lg" %>
+            <%= link_to "Cancel", locale_file_path(locale: locale_file_param(@file_info)), class: "btn btn-outline-secondary btn-lg" %>
           </div> 
 <%
 =end%>

data/app/views/rails_i18n_onair/locale_files/index.html.erb

@@ -46,14 +46,18 @@
                   </small>
                 </td>
                 <td>
-                  <div class="btn-group btn-group-sm" role="group">
-                    <%= link_to locale_file_path(locale: file[:language]), class: "btn btn-outline-info" do %>
-                      <i class="bi bi-eye"></i> View
-                    <% end %>
-                    <%= link_to edit_locale_file_path(locale: file[:language]), class: "btn btn-outline-primary" do %>
-                      <i class="bi bi-pencil"></i> Edit
-                    <% end %>
-                  </div>
+                  <% if file[:editable] %>
+                    <div class="btn-group btn-group-sm" role="group">
+                      <%= link_to locale_file_path(locale: locale_file_param(file)), class: "btn btn-outline-info" do %>
+                        <i class="bi bi-eye"></i> View
+                      <% end %>
+                      <%= link_to edit_locale_file_path(locale: locale_file_param(file)), class: "btn btn-outline-primary" do %>
+                        <i class="bi bi-pencil"></i> Edit
+                      <% end %>
+                    </div>
+                  <% else %>
+                    <small class="text-muted">Edit via file system</small>
+                  <% end %>
                 </td>
               </tr>
             <% end %>

data/app/views/rails_i18n_onair/locale_files/show.html.erb

@@ -1,7 +1,7 @@
 <div class="d-flex justify-content-between align-items-center mb-4">
   <h3><i class="bi bi-file-earmark-code"></i> <%= @file_info[:filename] %></h3>
   <div>
-    <%= link_to edit_locale_file_path(locale: @file_info[:language]), class: "btn btn-primary me-2" do %>
+    <%= link_to edit_locale_file_path(locale: locale_file_param(@file_info)), class: "btn btn-primary me-2" do %>
       <i class="bi bi-pencil"></i> Edit
     <% end %>
     <%= link_to locale_files_path, class: "btn btn-outline-secondary" do %>

data/config/routes.rb

@@ -11,7 +11,10 @@ RailsI18nOnair::Engine.routes.draw do
   resources :translations, only: [:index, :show, :new, :create, :edit, :update, :destroy]
 
   # File mode: Locale file management
-  resources :locale_files, only: [:index, :show, :edit, :update], param: :locale do
+  # The constraint lets dotted identifiers (devise.en) through — the default
+  # segment pattern would otherwise treat ".en" as a format.
+  resources :locale_files, only: [:index, :show, :edit, :update], param: :locale,
+                           constraints: { locale: /[^\/]+/ }, format: false do
     collection do
       post :sync
       post :reload

data/db/migrate/create_translations.rb

@@ -2,11 +2,12 @@ class CreateTranslations < ActiveRecord::Migration[6.0]
   def change
     create_table :rails_i18n_onair_translations do |t|
       t.string :language, null: false
-      t.json :translation, null: false, default: {}
+      t.jsonb :translation, null: false, default: {}
 
       t.timestamps
     end
 
     add_index :rails_i18n_onair_translations, :language, unique: true
+    add_index :rails_i18n_onair_translations, :translation, using: :gin
   end
 end

data/lib/rails_i18n_onair/backend.rb

@@ -53,9 +53,7 @@ module RailsI18nOnair
           @translations = {}
         end
 
-        if defined?(Rails) && Rails.cache
-          Rails.cache.delete_matched("i18n_onair:*")
-        end
+        clear_rails_cache
 
         if options[:warm_up] != false && defined?(I18n)
           load_locale(I18n.default_locale)
@@ -161,6 +159,23 @@ module RailsI18nOnair
 
     private
 
+    # Not all cache stores support delete_matched (memcached raises
+    # NotImplementedError) — fall back to deleting the known keys.
+    def clear_rails_cache
+      return unless defined?(Rails) && Rails.cache
+
+      begin
+        Rails.cache.delete_matched("i18n_onair:*")
+      rescue NotImplementedError
+        Rails.cache.delete("i18n_onair:available_locales")
+        fetch_available_locales.each do |locale|
+          Rails.cache.delete("i18n_onair:locale:#{locale}")
+        end
+      end
+    rescue StandardError
+      nil
+    end
+
     def fetch_available_locales
       if defined?(RailsI18nOnair::Translation)
         RailsI18nOnair::Translation.pluck(:language).map(&:to_sym)