railspress-engine 0.1.2 → 1.2.0

data/app/assets/stylesheets/railspress/admin/variables.css

@@ -0,0 +1,58 @@
+/*
+ * RailsPress Admin - CSS Variables
+ * Design tokens for the admin interface
+ */
+
+:root {
+  /* Typography */
+  --rp-font-display: 'Source Serif 4', Georgia, serif;
+  --rp-font-body: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+  --rp-font-mono: 'SF Mono', Consolas, monospace;
+
+  /* Colors - Warm Neutrals */
+  --rp-sidebar-bg: #1a1d21;
+  --rp-sidebar-hover: #2a2e33;
+  --rp-sidebar-text: #a8adb3;
+  --rp-sidebar-text-active: #ffffff;
+
+  --rp-bg: #f8f7f5;
+  --rp-bg-elevated: #ffffff;
+  --rp-border: #e5e2dc;
+  --rp-border-light: #f0ede8;
+
+  --rp-text: #2c2a27;
+  --rp-text-muted: #6b6860;
+  --rp-text-light: #9a958c;
+
+  /* Accents */
+  --rp-primary: #3d5a80;
+  --rp-primary-hover: #2c4a6e;
+  --rp-primary-light: #e8eef4;
+
+  --rp-success: #4a7c59;
+  --rp-success-light: #e8f2eb;
+
+  --rp-danger: #a63d40;
+  --rp-danger-light: #f9ebeb;
+
+  --rp-info-light: #f0f7fb;
+
+  /* Spacing */
+  --rp-space-xs: 0.25rem;
+  --rp-space-sm: 0.5rem;
+  --rp-space-md: 1rem;
+  --rp-space-lg: 1.5rem;
+  --rp-space-xl: 2rem;
+  --rp-space-2xl: 3rem;
+
+  /* Sizing */
+  --rp-sidebar-width: 240px;
+  --rp-sidebar-width-collapsed: 64px;
+  --rp-header-height: 56px;
+  --rp-radius: 6px;
+
+  /* Shadows - Enhanced for depth */
+  --rp-shadow-sm: 0 1px 3px rgba(44, 42, 39, 0.06), 0 1px 2px rgba(44, 42, 39, 0.04);
+  --rp-shadow-md: 0 4px 16px rgba(44, 42, 39, 0.1), 0 2px 4px rgba(44, 42, 39, 0.06);
+  --rp-shadow-lg: 0 8px 24px rgba(44, 42, 39, 0.12), 0 4px 8px rgba(44, 42, 39, 0.08);
+}

data/app/assets/stylesheets/railspress/application.css

@@ -1,15 +1,46 @@
 /*
- * This is a manifest file that'll be compiled into application.css, which will include all the files
- * listed below.
- *
- * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
- * or any plugin's vendor/assets/stylesheets directory can be referenced here using a relative path.
- *
- * You're free to add application-wide styles to this file and they'll appear at the bottom of the
- * compiled file so the styles you add here take precedence over styles defined in any other CSS/SCSS
- * files in this directory. Styles in this file should be added after the last require_* statement.
- * It is generally better to create a new file per style scope.
- *
- *= require_tree .
- *= require_self
+* RailsPress Admin Styles
+* Manifest file - loads all admin stylesheets in order
+*
+*= require ./admin/variables
+*= require ./admin/base
+*= require ./admin/layout
+*= require ./admin/page
+*= require ./admin/cards
+*= require ./admin/stats
+*= require ./admin/tables
+*= require ./admin/filters
+*= require ./admin/forms
+*= require ./admin/buttons
+*= require ./admin/badges
+*= require ./admin/lists
+*= require ./admin/flash
+*= require ./admin/utilities
+*= require ./admin/responsive
+*= require ./admin/components/lexxy
+*= require ./admin/components/imports
+*= require ./admin/components/exports
+*/
+/*
+ * RailsPress Admin Styles
  */
+
+@import url("admin/variables.css");
+@import url("admin/base.css");
+@import url("admin/layout.css");
+@import url("admin/page.css");
+@import url("admin/cards.css");
+@import url("admin/stats.css");
+@import url("admin/tables.css");
+@import url("admin/filters.css");
+@import url("admin/forms.css");
+@import url("admin/buttons.css");
+@import url("admin/badges.css");
+@import url("admin/lists.css");
+@import url("admin/flash.css");
+@import url("admin/utilities.css");
+@import url("admin/responsive.css");
+@import url("admin/components/lexxy.css");
+@import url("admin/components/imports.css");
+@import url("admin/components/exports.css");
+@import url("admin/components/focal_point.css");

data/app/controllers/railspress/admin/base_controller.rb

@@ -1,9 +1,12 @@
 module Railspress
   module Admin
     class BaseController < ActionController::Base
+      protect_from_forgery with: :exception
+
       layout "railspress/admin"
+      helper Railspress::AdminHelper
 
-      helper_method :current_author, :available_authors, :authors_enabled?, :header_images_enabled?
+      helper_method :current_author, :available_authors, :authors_enabled?, :post_images_enabled?
 
       # Authentication hook - to be configured later
       # before_action :authenticate_admin!
@@ -18,8 +21,8 @@ module Railspress
         Railspress.authors_enabled?
       end
 
-      def header_images_enabled?
-        Railspress.header_images_enabled?
+      def post_images_enabled?
+        Railspress.post_images_enabled?
       end
 
       def current_author

data/app/controllers/railspress/admin/categories_controller.rb

@@ -1,7 +1,7 @@
 module Railspress
   module Admin
     class CategoriesController < BaseController
-      before_action :set_category, only: [:edit, :update, :destroy]
+      before_action :set_category, only: [ :edit, :update, :destroy ]
 
       def index
         @categories = Category.ordered

data/app/controllers/railspress/admin/cms_transfers_controller.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+module Railspress
+  module Admin
+    class CmsTransfersController < BaseController
+      def show
+        load_content_summary
+      end
+
+      def export
+        result = ContentExportService.new.call
+
+        send_data result.zip_data,
+                  filename: result.filename,
+                  type: "application/zip",
+                  disposition: "attachment"
+      end
+
+      def import
+        if params[:file].blank?
+          redirect_to admin_cms_transfer_path, alert: "Please select a ZIP file to import."
+          return
+        end
+
+        @result = ContentImportService.new(params[:file]).call
+        load_content_summary
+
+        if @result.errors.any?
+          flash.now[:alert] = "Import completed with #{@result.errors.size} error(s)."
+        else
+          flash.now[:notice] = "Import successful! #{@result.total_processed} items processed."
+        end
+
+        render :show
+      rescue ArgumentError => e
+        redirect_to admin_cms_transfer_path, alert: e.message
+      end
+
+      private
+
+      def load_content_summary
+        @groups = ContentGroup.active.includes(:content_elements).order(:name)
+        @group_count = @groups.size
+        @element_count = ContentElement.active.count
+        @image_count = ContentElement.active.image.count
+      end
+    end
+  end
+end

data/app/controllers/railspress/admin/content_element_versions_controller.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Railspress
+  module Admin
+    class ContentElementVersionsController < BaseController
+      def show
+        @version = ContentElementVersion.find(params[:id])
+        @content_element = @version.content_element
+      end
+    end
+  end
+end

data/app/controllers/railspress/admin/content_elements_controller.rb

@@ -0,0 +1,143 @@
+# frozen_string_literal: true
+
+module Railspress
+  module Admin
+    class ContentElementsController < BaseController
+      before_action :set_content_element, only: [ :show, :edit, :update, :destroy, :inline, :image_editor ]
+
+      def index
+        scope = ContentElement.active
+        scope = scope.where(content_group_id: params[:content_group_id]) if params[:content_group_id].present?
+        @content_elements = scope.includes(:content_group)
+                                 .order(created_at: :desc)
+        @content_groups = ContentGroup.active.order(:name)
+      end
+
+      def show
+        @versions = @content_element.versions.limit(10)
+      end
+
+      def new
+        @content_element = ContentElement.new
+        @content_groups = ContentGroup.active.order(:name)
+        @content_element.content_group_id = params[:content_group_id] if params[:content_group_id].present?
+      end
+
+      def create
+        @content_element = ContentElement.new(content_element_params)
+        @content_element.author_id = current_author&.id if authors_enabled?
+
+        if @content_element.save
+          redirect_to admin_content_element_path(@content_element), notice: "Content element '#{@content_element.name}' created."
+        else
+          @content_groups = ContentGroup.active.order(:name)
+          render :new, status: :unprocessable_entity
+        end
+      end
+
+      def edit
+        @content_groups = ContentGroup.active.order(:name)
+      end
+
+      def update
+        if @content_element.update(content_element_params)
+          Railspress::CmsHelper.clear_cache if defined?(Railspress::CmsHelper)
+
+          if request.headers["Turbo-Frame"].present?
+            form_frame_id = params[:form_frame_id].presence || "cms_inline_editor_form_#{@content_element.id}"
+            display_frame_id = params[:display_frame_id].presence
+
+            streams = []
+            streams << turbo_stream.replace(
+              form_frame_id,
+              partial: "railspress/admin/content_elements/inline_form_frame",
+              locals: { content_element: @content_element, form_frame_id: form_frame_id, display_frame_id: display_frame_id }
+            )
+            if display_frame_id
+              streams << turbo_stream.replace(
+                display_frame_id,
+                helpers.cms_element_display_frame(@content_element, display_frame_id)
+              )
+            end
+            render turbo_stream: streams
+          else
+            redirect_to admin_content_element_path(@content_element), notice: "Content element '#{@content_element.name}' updated."
+          end
+        else
+          @content_groups = ContentGroup.active.order(:name)
+
+          if request.headers["Turbo-Frame"].present?
+            form_frame_id = params[:form_frame_id].presence || "cms_inline_editor_form_#{@content_element.id}"
+            display_frame_id = params[:display_frame_id].presence
+
+            render turbo_stream: turbo_stream.replace(
+              form_frame_id,
+              partial: "railspress/admin/content_elements/inline_form_frame",
+              locals: { content_element: @content_element, form_frame_id: form_frame_id, display_frame_id: display_frame_id }
+            ), status: :unprocessable_entity
+          else
+            render :edit, status: :unprocessable_entity
+          end
+        end
+      end
+
+      def destroy
+        if @content_element.soft_delete
+          redirect_to admin_content_elements_path,
+            notice: "Content element '#{@content_element.name}' deleted."
+        else
+          redirect_to admin_content_elements_path,
+            alert: "Cannot delete '#{@content_element.name}' — it is a required element. To delete it, first unmark it as required."
+        end
+      end
+
+      def inline
+        if request.headers["Turbo-Frame"].present?
+          render partial: "railspress/admin/content_elements/inline_form_frame",
+                 locals: {
+                   content_element: @content_element,
+                   form_frame_id: params[:form_frame_id],
+                   display_frame_id: params[:display_frame_id]
+                 }
+        else
+          redirect_to edit_admin_content_element_path(@content_element)
+        end
+      end
+
+      def image_editor
+        if params[:compact] == "true"
+          render partial: "railspress/admin/shared/image_section_compact",
+                 locals: {
+                   record: @content_element,
+                   attachment_name: :image,
+                   label: "Element Image",
+                   editor_url: image_editor_admin_content_element_path(@content_element)
+                 }
+        else
+          focal_point = @content_element.image_focal_point
+          focal_point.save! if focal_point.new_record?
+
+          render partial: "railspress/admin/shared/image_section_editor",
+                 locals: {
+                   record: @content_element,
+                   attachment_name: :image,
+                   contexts: Railspress.image_contexts
+                 }
+        end
+      end
+
+      private
+
+      def set_content_element
+        @content_element = ContentElement.active.find(params[:id])
+      rescue ActiveRecord::RecordNotFound
+        redirect_to admin_content_elements_path, alert: "Content element not found."
+      end
+
+      def content_element_params
+        params.require(:content_element).permit(:name, :content_group_id, :content_type, :position, :text_content, :image, :required, :image_hint,
+                                               image_focal_point_attributes: [ :id, :focal_x, :focal_y ])
+      end
+    end
+  end
+end

data/app/controllers/railspress/admin/content_groups_controller.rb

@@ -0,0 +1,69 @@
+# frozen_string_literal: true
+
+module Railspress
+  module Admin
+    class ContentGroupsController < BaseController
+      before_action :set_content_group, only: [ :show, :edit, :update, :destroy ]
+
+      def index
+        @content_groups = ContentGroup.active
+                                      .includes(:content_elements)
+                                      .order(created_at: :desc)
+      end
+
+      def show
+        @content_elements = @content_group.content_elements
+                                          .active
+                                          .ordered
+      end
+
+      def new
+        @content_group = ContentGroup.new
+      end
+
+      def create
+        @content_group = ContentGroup.new(content_group_params)
+        @content_group.author_id = current_author&.id if authors_enabled?
+
+        if @content_group.save
+          redirect_to admin_content_group_path(@content_group), notice: "Content group '#{@content_group.name}' created."
+        else
+          render :new, status: :unprocessable_entity
+        end
+      end
+
+      def edit
+      end
+
+      def update
+        if @content_group.update(content_group_params)
+          redirect_to admin_content_group_path(@content_group), notice: "Content group '#{@content_group.name}' updated."
+        else
+          render :edit, status: :unprocessable_entity
+        end
+      end
+
+      def destroy
+        if @content_group.soft_delete
+          redirect_to admin_content_groups_path,
+            notice: "Content group '#{@content_group.name}' deleted."
+        else
+          redirect_to admin_content_group_path(@content_group),
+            alert: "Cannot delete '#{@content_group.name}' — it contains required content elements."
+        end
+      end
+
+      private
+
+      def set_content_group
+        @content_group = ContentGroup.active.find(params[:id])
+      rescue ActiveRecord::RecordNotFound
+        redirect_to admin_content_groups_path, alert: "Content group not found."
+      end
+
+      def content_group_params
+        params.require(:content_group).permit(:name, :description)
+      end
+    end
+  end
+end

data/app/controllers/railspress/admin/dashboard_controller.rb

@@ -6,6 +6,12 @@ module Railspress
         @categories_count = Category.count
         @tags_count = Tag.count
         @recent_posts = Post.ordered.limit(5)
+
+        if Railspress.cms_enabled?
+          @content_groups_count = ContentGroup.active.count
+          @content_elements_count = ContentElement.active.count
+          @recent_content_elements = ContentElement.active.includes(:content_group).order(updated_at: :desc).limit(5)
+        end
       end
     end
   end

data/app/controllers/railspress/admin/entities_controller.rb

@@ -0,0 +1,157 @@
+# frozen_string_literal: true
+
+module Railspress
+  module Admin
+    class EntitiesController < BaseController
+      before_action :set_entity_config
+      before_action :set_record, only: [ :show, :edit, :update, :destroy, :image_editor ]
+
+      def index
+        @records = entity_class.order(created_at: :desc)
+      end
+
+      def show
+      end
+
+      def new
+        @record = entity_class.new
+      end
+
+      def create
+        @record = entity_class.new(entity_params)
+
+        if @record.save
+          redirect_to entity_index_path, notice: "#{entity_config.singular_label} created."
+        else
+          render :new, status: :unprocessable_entity
+        end
+      end
+
+      def edit
+      end
+
+      def update
+        purge_removed_attachments
+        if @record.update(entity_params)
+          redirect_to entity_index_path, notice: "#{entity_config.singular_label} updated."
+        else
+          render :edit, status: :unprocessable_entity
+        end
+      end
+
+      def destroy
+        @record.destroy
+        redirect_to entity_index_path, notice: "#{entity_config.singular_label} deleted."
+      end
+
+      # GET /admin/entities/:entity_type/:id/image_editor/:attachment
+      # Returns the expanded image editor in a Turbo Frame
+      # Pass ?compact=true to get the compact view (for Cancel)
+      def image_editor
+        allowed = entity_config.fields
+          .select { |_, f| [ :attachment, :attachments, :focal_point_image ].include?(f[:type]) }
+          .keys.map(&:to_s)
+        unless allowed.include?(params[:attachment])
+          raise ActionController::RoutingError, "Invalid attachment"
+        end
+        @attachment_name = params[:attachment].to_sym
+
+        if params[:compact] == "true"
+          render partial: "railspress/admin/shared/image_section_compact",
+                 locals: {
+                   record: @record,
+                   attachment_name: @attachment_name,
+                   label: entity_config.singular_label
+                 }
+        else
+          # Ensure focal point is persisted before editing
+          focal_point = @record.send("#{@attachment_name}_focal_point")
+          focal_point.save! if focal_point.new_record?
+
+          render partial: "railspress/admin/shared/image_section_editor",
+                 locals: {
+                   record: @record,
+                   attachment_name: @attachment_name,
+                   contexts: Railspress.image_contexts
+                 }
+        end
+      end
+
+      private
+
+      def set_entity_config
+        @entity_config = Railspress.entity_for(params[:entity_type])
+        raise ActionController::RoutingError, "Entity not found: #{params[:entity_type]}" unless @entity_config
+      end
+
+      def entity_config
+        @entity_config
+      end
+      helper_method :entity_config
+
+      def entity_class
+        entity_config.model_class
+      end
+      helper_method :entity_class
+
+      def set_record
+        @record = entity_class.find(params[:id])
+      end
+
+      def entity_params
+        permitted = []
+        entity_config.fields.each do |name, field|
+          case field[:type]
+          when :attachments
+            permitted << { name => [] }
+          when :list, :lines
+            # Permit virtual attribute for HTML form input
+            permitted << "#{name}_list"
+            # Also permit direct array for API/agent access
+            permitted << { name => [] }
+          else
+            permitted << name
+          end
+        end
+        params.require(entity_config.param_key).permit(*permitted)
+      end
+
+      def purge_removed_attachments
+        entity_config.fields.each do |name, field|
+          next unless [ :attachment, :attachments ].include?(field[:type])
+
+          remove_key = "remove_#{name}"
+          remove_ids = params.dig(entity_config.param_key, remove_key)
+          next if remove_ids.blank?
+
+          if field[:type] == :attachments
+            @record.public_send(name).where(id: remove_ids).each(&:purge)
+          else
+            @record.public_send(name).purge if remove_ids == "1"
+          end
+        end
+      end
+
+      # Route helpers for views
+      def entity_index_path
+        railspress.admin_entity_index_path(entity_type: entity_config.route_key)
+      end
+      helper_method :entity_index_path
+
+      def entity_show_path(record)
+        railspress.admin_entity_path(entity_type: entity_config.route_key, id: record.id)
+      end
+      helper_method :entity_show_path
+
+      def entity_new_path
+        railspress.admin_new_entity_path(entity_type: entity_config.route_key)
+      end
+      helper_method :entity_new_path
+
+      def entity_edit_path(record)
+        railspress.admin_edit_entity_path(entity_type: entity_config.route_key, id: record.id)
+      end
+      helper_method :entity_edit_path
+    end
+  end
+end

data/app/controllers/railspress/admin/exports_controller.rb

@@ -0,0 +1,55 @@
+module Railspress
+  module Admin
+    class ExportsController < BaseController
+      before_action :validate_export_type, only: [ :show ]
+      before_action :set_export, only: [ :download ]
+
+      def show
+        @export_type = params[:type]
+        @back_path = { "posts" => admin_posts_path }[@export_type]
+        @recent_exports = Export.by_type(@export_type).recent
+        @post_count = Post.count
+      end
+
+      def create
+        export = Export.create!(
+          export_type: export_params[:export_type],
+          status: "pending"
+        )
+
+        ExportPostsJob.perform_later(export.id)
+
+        redirect_to typed_admin_exports_path(type: export_params[:export_type]),
+                    notice: "Export started. You'll be able to download the file once processing completes."
+      end
+
+      def download
+        if @export.file.attached?
+          send_data @export.file.download,
+                    filename: @export.filename,
+                    type: "application/zip",
+                    disposition: "attachment"
+        else
+          redirect_to typed_admin_exports_path(type: @export.export_type),
+                      alert: "Export file not available."
+        end
+      end
+
+      private
+
+      def validate_export_type
+        unless Export::EXPORT_TYPES.include?(params[:type])
+          redirect_to admin_root_path, alert: "Invalid export type."
+        end
+      end
+
+      def set_export
+        @export = Export.find(params[:id])
+      end
+
+      def export_params
+        params.require(:export).permit(:export_type)
+      end
+    end
+  end
+end