rails_onboarding 0.8.14 → 0.8.15

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 92019b01af432fe5d1e17c6f116c224d6123f15aeda35798193a3d2a6eb46b3d
-  data.tar.gz: ddb5d7f350286ab8512626eae34967b524dfa5284547794b801ca4d1b11fdcbc
+  metadata.gz: df859b74947576d40a44a8a6ce1e37ceb1c9b92297875ac06faa3926f19489cc
+  data.tar.gz: 360a0d59bece71c30df19f549bea51cba322b7d0abf0e657d2e77d8b4b9e9d3b
 SHA512:
-  metadata.gz: da8ba6db11ce280647bee31ad9a718f63cb251d420d2c65d86412363db586d8d16d9c09c95e0ddd128b72bb3cbdd3903f7559391dc271339e6db32451f40405c
-  data.tar.gz: ef5428f53020a250d118eb58316ec24dffaa06cc0e364d91fe40bf23c78f97ca56ec7ae15b928e93be7e2e3dfb4d093d2ccd3e8e6957d118df775e7285f27b6f
+  metadata.gz: 0fce05257f5c3f4af31cd191dc961ea151e2b753988758e53315e9914f6db67d4d22f1759ae81562b60b8bbe177a2cd3b59ddeb0f840f42ff46b0834f32b63fe
+  data.tar.gz: 83404bc6ac100510474a792a1ff245dbb09f53166df47325117b4f3551cacdeca9bf60dc54550d6c07794c8f371a93f9c2779dc1c48d6d1ffae01d0c4a9ef16e

data/app/assets/stylesheets/rails_onboarding/flash_messages.css

@@ -8,6 +8,9 @@
   max-width: 500px;
   width: 100%;
   pointer-events: none;
+  /* Outside .onboarding-container, which is where the engine sets its font, so it would otherwise
+     take the browser's serif default. */
+  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
 }
 
 .onboarding-flash {
@@ -29,25 +32,46 @@
   box-shadow: 0 6px 16px rgba(0, 0, 0, 0.2);
 }
 
-/* Flash types */
+/* Each message is an open <dialog> (see shared/_flash), so it closes without JavaScript. Undo
+   what the browser gives a dialog - centred, absolutely placed, bordered all round - leaving the
+   coloured left border from the type rules below. */
+dialog.onboarding-flash {
+  inset: auto;
+  margin: 0 0 12px;
+  width: auto;
+  max-width: none;
+  max-height: none;
+  border-top: 0;
+  border-right: 0;
+  border-bottom: 0;
+}
+
+/* The close form is only there for method="dialog"; its button is the flex item. */
+.onboarding-flash form {
+  display: contents;
+}
+
+/* Flash types. Each pair is at least 4.5:1 (WCAG AA): white on the 500-weight greens, ambers and
+   reds these used was 2-4:1, unreadable on amber in particular. Amber keeps its colour and takes
+   dark text instead. */
 .flash-notice,
 .flash-success {
-  background-color: #10b981;
+  background-color: #047857;
   color: white;
-  border-left: 4px solid #059669;
+  border-left: 4px solid #065f46;
 }
 
 .flash-alert,
 .flash-warning {
   background-color: #f59e0b;
-  color: white;
-  border-left: 4px solid #d97706;
+  color: #451a03;
+  border-left: 4px solid #b45309;
 }
 
 .flash-error {
-  background-color: #ef4444;
+  background-color: #b91c1c;
   color: white;
-  border-left: 4px solid #dc2626;
+  border-left: 4px solid #7f1d1d;
 }
 
 .flash-info {
@@ -152,6 +176,9 @@
     right: 10px;
     left: 10px;
     max-width: none;
+    /* Not 100%: with both left and right set, a width overrides right, and the message ran 10px
+       off the screen. */
+    width: auto;
   }
 
   .onboarding-flash {

data/app/models/concerns/rails_onboarding/onboardable.rb

@@ -730,8 +730,18 @@ module RailsOnboarding
       { onboarding_replay_started_at: nil, onboarding_replay_steps: [] }
     end
 
+    # column_names queries the database like the rest, so it takes the same
+    # guard -- but purely for symmetry: this one cannot actually be reached
+    # with the table missing. It is an instance method, and ActiveRecord cannot
+    # instantiate a model whose table is absent (`new` raises while building
+    # attribute types), so the guard can never fire. Kept so every column query
+    # in this file reads the same way, and it costs nothing: table_exists?
+    # reads the schema cache.
     def onboarding_column?(name)
-      self.class.respond_to?(:column_names) && self.class.column_names.include?(name)
+      return false unless self.class.respond_to?(:column_names)
+      return false unless RailsOnboarding::SchemaGuard.columns_queryable?(self.class)
+
+      self.class.column_names.include?(name)
     end
 
     def persist_and_track!(attributes = nil)

data/app/views/layouts/rails_onboarding/application.html.erb

@@ -51,6 +51,11 @@
 </head>
 <body>
 
+<%# Without this, a message on the way to onboarding was lost: a host's redirect_to with an alert,
+    the engine's own redirect_to onboarding_path, alert:, and the Turbo Stream errors, which replace
+    #flash-messages and found nothing to replace. Fixed-position, so it sits over the page. %>
+<%= render "rails_onboarding/shared/flash" %>
+
 <%# .onboarding-container/.onboarding-content provide the page-level
     min-height/centering/responsive padding that the stylesheets (see
     application.css and mobile.css) already define for every onboarding

data/app/views/rails_onboarding/shared/_flash.html.erb

@@ -1,25 +1,26 @@
-<div id="flash-messages" class="flash-container">
-  <% if defined?(notice) && notice %>
-    <div class="onboarding-flash flash-notice" role="alert">
-      <span class="flash-icon">✓</span>
-      <span class="flash-message"><%= notice %></span>
-      <button class="flash-close" onclick="this.parentElement.remove()" aria-label="Dismiss">×</button>
-    </div>
-  <% end %>
+<%# The flash, on every page of the engine layout, and the target the onboarding controller's
+    Turbo Stream errors replace (#flash-messages). Each message comes from a local when one is
+    given - those streams pass the message they want shown - and from the flash otherwise.
 
-  <% if defined?(alert) && alert %>
-    <div class="onboarding-flash flash-alert" role="alert">
-      <span class="flash-icon">⚠</span>
-      <span class="flash-message"><%= alert %></span>
-      <button class="flash-close" onclick="this.parentElement.remove()" aria-label="Dismiss">×</button>
-    </div>
-  <% end %>
-
-  <% if defined?(error) && error %>
-    <div class="onboarding-flash flash-error" role="alert">
-      <span class="flash-icon">✕</span>
-      <span class="flash-message"><%= error %></span>
-      <button class="flash-close" onclick="this.parentElement.remove()" aria-label="Dismiss">×</button>
-    </div>
+    Each message is an open <dialog> closed by a form with method="dialog", which the browser
+    handles itself: no JavaScript, so nothing for a strict Content Security Policy to refuse. The
+    close buttons were onclick= attributes, which such a policy blocks without a word. Turbo
+    leaves method="dialog" forms alone. %>
+<% messages = {
+     notice: local_assigns.fetch(:notice) { flash[:notice] },
+     alert: local_assigns.fetch(:alert) { flash[:alert] },
+     error: local_assigns.fetch(:error) { flash[:error] }
+   } %>
+<% icons = { notice: "✓", alert: "⚠", error: "✕" } %>
+<div id="flash-messages" class="flash-container">
+  <% messages.each do |type, message| %>
+    <% next if message.blank? %>
+    <dialog open class="onboarding-flash flash-<%= type %>">
+      <span class="flash-icon" aria-hidden="true"><%= icons[type] %></span>
+      <span class="flash-message" role="alert"><%= message %></span>
+      <form method="dialog">
+        <button class="flash-close" aria-label="Dismiss">×</button>
+      </form>
+    </dialog>
   <% end %>
 </div>

data/lib/rails_onboarding/version.rb

@@ -1,3 +1,3 @@
 module RailsOnboarding
-  VERSION = "0.8.14"
+  VERSION = "0.8.15"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rails_onboarding
 version: !ruby/object:Gem::Version
-  version: 0.8.14
+  version: 0.8.15
 platform: ruby
 authors:
 - David Lewis
@@ -283,7 +283,7 @@ licenses:
 metadata:
   allowed_push_host: https://rubygems.org
   homepage_uri: https://github.com/bunnahabhain/rails_onboarding
-  source_code_uri: https://github.com/bunnahabhain/rails_onboarding/tree/v0.8.14
+  source_code_uri: https://github.com/bunnahabhain/rails_onboarding/tree/v0.8.15
   changelog_uri: https://github.com/bunnahabhain/rails_onboarding/blob/master/docs/CHANGELOG.md
 rdoc_options: []
 require_paths:
@@ -299,7 +299,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.19
+rubygems_version: 4.0.22
 specification_version: 4
 summary: Flexible onboarding engine for Rails applications
 test_files: []