recourse 7.10.0 → 7.11.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a5ba4a5b982928c2ee9ea80e400a2d95c9b59102224902787ea3b3d6b9f4c9a8
-  data.tar.gz: 0d44134228230f5a15f4bc7545df435407518a074ae34299605d90294a93a4bd
+  metadata.gz: 5d5b8233bcbb5c24c4df425ab9c5a43f5db42baf5f5801b29ec118ce792871bc
+  data.tar.gz: 7c5a0bd68a7d5c22d752b2a8fdb2667d0291b6d6bbfbc376218cb5186fa5a2ed
 SHA512:
-  metadata.gz: 7db938770e4ecf06d930a89b965cc9790b2596b6c889be4f0a77cb0fff553739978408c22706da03abb4209964b17f6875b3c6703335e0bc9744d70c213768a1
-  data.tar.gz: b6a11dad45cae5cac88c42890b8551fd2f8a6c527c554672e7fe07221af251c1dbb1b59b35facc89b3c802ff57e1aec6ae01878d49e6424fe2b8d8b772eb85a2
+  metadata.gz: 67e9c27e1c7489a189e9a001b1c3d191f68ef480555a06f701d68d561bbc8c97f66de6eb307939e6c1bb980fc7afd5ec1b9195f48289e28cc3450e0148de8e59
+  data.tar.gz: b0415018f1b632c3da2d61e1a77e8b96aafced9fcdbac997a4cb316821f30311805f7ed2e91e6e93d2a270ccbffae119394835f93d072becf9395f18aa159147

data/CHANGELOG.md

@@ -7,6 +7,33 @@ For more information about changelogs, check [Keep a Changelog](http://keepachan
 
 ## [Unreleased]
 
+## 7.11.1 - 2026-09-26
+
+* [FIX] A tooltip in the sidebar's foot closes when its icon is clicked
+
+  Needs bh 6.10.1, which closes an icon's tooltip on a click on it or on its button. The moon
+  and the sun swap places on a click, and the tooltip of the one that went was left open and
+  put in the page's corner.
+
+* [FIX] The moon and the sun say `Dark` and `Light`
+
+  The words the phone shows beside them, and no longer `Dark theme` and `Light theme`. The
+  `recourse.dark_theme` and `recourse.light_theme` words 7.10.0 added are gone: a host that
+  translated them translates `recourse.darken` and `recourse.lighten`, which are the same words.
+
+## 7.11.0 - 2026-09-26
+
+* [FEATURE] A host can say which pages are the same for everybody, and they are sent to be kept
+
+  `Recourse.public_pages = -> { !signed_in? }` runs in the controller for every request. A GET
+  it approves is sent `Cache-Control: public` with `max-age`, `s-maxage`, `stale-while-revalidate`
+  and `stale-if-error` (`Recourse.public_cache` sets the seconds), and `Vary: Turbo-Frame`. It is
+  drawn once for everybody, so none of what the reader's own browser tells the server is in
+  it: not their zone, not their page size, not their density (the layout widens the page in
+  the browser instead), no form token and no way out. `Recourse.public_version = -> { … }` gives
+  such a page an ETag, so a CDN or a browser asks whether it stands and is told `304`. A frame's
+  request is never public: the same address answers a page.
+
 ## 7.10.0 - 2026-09-26
 
 * [FEATURE] The sidebar's foot says what each icon does

data/app/controllers/concerns/recourse/paging.rb

@@ -8,7 +8,12 @@ module Recourse
     # a stranger can write, and an unchecked one is `?limit=100000` by another route.
     # Which is also why pagy's `max_limit` stays unset: the query string is still not
     # asked, and this is the one thing that is.
+    #
+    # A page drawn once for everybody has the first size, whatever this reader chose: the
+    # switch under the table redraws the table alone, which is not that page.
     def recourse_limit
+      return Recourse::LIMITS.first if public_page?
+
       limit = cookies[Recourse::LIMIT_STORAGE].to_i
 
       Recourse::LIMITS.include?(limit) ? limit : Recourse::LIMITS.first

data/app/controllers/concerns/recourse/public_caching.rb

@@ -0,0 +1,45 @@
+module Recourse
+  # A page the host says is the same for everybody is sent for everybody to keep: a CDN
+  # in front of the host serves it for a day, and asks the host only when it must.
+  module PublicCaching
+    extend ActiveSupport::Concern
+
+    included do
+      before_action :cache_for_everybody
+      helper_method :public_page?
+    end
+
+  private
+
+    # Whether this page is drawn once for everybody. Only a read: a page that changes
+    # something is nobody else's, and a frame's request is answered with the frame alone,
+    # which the same address answers with a whole page. Asked once per request, since the
+    # host's answer may be a query and the layout, the zone and the paging all ask.
+    def public_page?
+      return @public_page if defined? @public_page
+
+      @public_page = Recourse.public_pages.present? && (request.get? || request.head?) &&
+                     !turbo_frame_request? && instance_exec(&Recourse.public_pages)
+    end
+
+    def cache_for_everybody
+      return unless public_page?
+
+      response.cache_control.merge! public_cache_control
+      response.headers['Vary'] = [response.headers['Vary'], 'Turbo-Frame'].compact_blank.join ', '
+      version = Recourse.public_version
+      fresh_when etag: instance_exec(&version) if version
+    end
+
+    # `s-maxage` is the CDN's alone: the reader's browser keeps the page for `max-age`.
+    def public_cache_control
+      keep = Recourse.public_cache
+
+      {
+        public: true, max_age: keep[:max_age], extras: ["s-maxage=#{keep[:shared_max_age]}"],
+        stale_while_revalidate: keep[:stale_while_revalidate],
+        stale_if_error: keep[:stale_if_error],
+      }
+    end
+  end
+end

data/app/controllers/concerns/recourse/zoning.rb

@@ -20,7 +20,11 @@ module Recourse
     # Nil where the browser has not said, or said something no zone answers to — and
     # `Time.zone = nil` falls back to the host's own setting, so an absent cookie and a
     # forged one both leave the page exactly as it is drawn today.
+    # And nil for a page drawn once for everybody, whose times are the host's own: this
+    # reader's zone is no business of the next reader's page.
     def recourse_zone
+      return if public_page?
+
       name = cookies[Recourse::ZONE_STORAGE]
 
       ActiveSupport::TimeZone[name] if name.present?

data/app/controllers/recourse/base_controller.rb

@@ -5,8 +5,8 @@ module Recourse
   class BaseController < ApplicationController
     include Pagy::Method, Positioned, AttachmentResolution, AttachmentWriting,
             Landing, Paging, ListResolution, ParameterResolution, ParentNaming,
-            ParentResolution, ReferenceResolution, ResourceResolution, Retrieving,
-            Weeks, Zoning
+            ParentResolution, PublicCaching, ReferenceResolution, ResourceResolution,
+            Retrieving, Weeks, Zoning
 
     helper Helpers
 

data/app/views/layouts/recourses.html.erb

@@ -11,7 +11,8 @@
         never has to be remembered here. -%>
     <meta name='turbo-refresh-method' content='morph'>
     <meta name='turbo-refresh-scroll' content='preserve'>
-    <%= csrf_meta_tags %>
+    <%# No token on a page everybody is shown: the next reader would submit this one's. -%>
+    <%= csrf_meta_tags unless public_page? %>
     <%= csp_meta_tag %>
 
     <%= yield :head %>
@@ -52,6 +53,9 @@
       own: every screen the gem draws is one to read against their clock. -%>
   <body class='<%= class_names 'recourse-shell', 'recourse-expanded': expanded? %>'
         data-controller='timezone' data-timezone-storage-value='<%= Recourse::ZONE_STORAGE %>'>
+    <%# What the reader's browser says, put back before anything is painted, on a page the
+        server drew for everybody: the words beside the sidebar's icons. -%>
+    <%= render 'recourses/density' if public_page? %>
     <%# First in the page, since a phone reads it first: the row of icons at the top,
         above the trail. From 768px the layout's grid seats it beside the content instead,
         under the navbar, whatever order it was written in. -%>

data/app/views/recourses/_density.html.erb

@@ -0,0 +1,10 @@
+<%# The density a reader chose last time, back before the page is painted, as the server was
+    not told: a page drawn once for everybody is compact, and this widens it. Classic and
+    inline for the reason the scheme is: a module runs after the first paint. -%>
+<script>
+  (function () {
+    if (/(?:^|; )<%= Recourse::DENSITY_STORAGE %>=expanded(?:;|$)/.test(document.cookie)) {
+      document.body.classList.add('recourse-expanded')
+    }
+  })()
+</script>

data/app/views/recourses/_sidebar.html.erb

@@ -41,11 +41,11 @@
       <%= tag.button type: 'button', class: 'nav-link border-0 bg-transparent',
                      data: scheme_data do %>
         <span class='recourse-scheme-light'>
-          <%= tag.i class: 'bi bi-moon-fill', data: tooltip_data(t('recourse.dark_theme'), placement: 'right') %>
+          <%= tag.i class: 'bi bi-moon-fill', data: tooltip_data(t('recourse.darken'), placement: 'right') %>
           <span class='recourse-foot-word'><%= t 'recourse.darken' %></span>
         </span>
         <span class='recourse-scheme-dark'>
-          <%= tag.i class: 'bi bi-sun-fill', data: tooltip_data(t('recourse.light_theme'), placement: 'right') %>
+          <%= tag.i class: 'bi bi-sun-fill', data: tooltip_data(t('recourse.lighten'), placement: 'right') %>
           <span class='recourse-foot-word'><%= t 'recourse.lighten' %></span>
         </span>
       <% end %>
@@ -60,7 +60,9 @@
         <span class='recourse-foot-word'><%= t 'recourse.enter' %></span>
       <% end %>
     <% end %>
-    <% if exit? %>
+    <%# Nobody in particular is signed in on a page drawn once for everybody, and the button
+        carries a token that is theirs alone. -%>
+    <% if exit? && !public_page? %>
       <%= button_to exit_path, method: :delete, class: 'nav-link border-0 bg-transparent',
                     form: { data: { turbo: false } } do %>
         <%= tag.i class: 'bi bi-box-arrow-right', data: tooltip_data(exit_tooltip, placement: 'right') %>

data/config/locales/recourse.en.yml

@@ -47,7 +47,6 @@ en:
     create: Create
     created: "%{record} was created."
     created_error: "%{model} could not be created."
-    dark_theme: Dark theme
     darken: Dark
     delete: Delete %{model}
     deleted: "%{model} was deleted."
@@ -70,7 +69,6 @@ en:
     items:
       one: 1 item
       other: "%{count} items"
-    light_theme: Light theme
     lighten: Light
     missing_model: You declared `recourses :%{name}` in your routes file, but this app
       has no %{model} model.

data/lib/recourse/helpers/densities.rb

@@ -5,8 +5,9 @@ module Recourse
     private
 
       # Whether the reader asked for the words: the cookie the arrows write, read back so
-      # the page arrives expanded rather than compact and then widened by a script.
-      def expanded? = cookies[Recourse::DENSITY_STORAGE] == 'expanded'
+      # the page arrives expanded rather than compact and then widened by a script. Not on a
+      # page drawn once for everybody, which the layout's own script widens in the browser.
+      def expanded? = !public_page? && cookies[Recourse::DENSITY_STORAGE] == 'expanded'
 
       # What the arrows need to switch: the class they toggle and the cookie they write.
       def density_data

data/lib/recourse/public_caches.rb

@@ -0,0 +1,36 @@
+# Reopened for what a host says about the pages a shared cache may keep for everybody.
+module Recourse
+  # How long each keeper may hold a page a host called cacheable: the reader's browser
+  # (`max_age`), a CDN in front of the host (`shared_max_age`), and for how long past
+  # that either may show an old page while a new one is fetched (`stale_while_revalidate`)
+  # or when the host does not answer (`stale_if_error`). In seconds.
+  PUBLIC_CACHE = {
+    max_age: 300, shared_max_age: 86_400, stale_while_revalidate: 86_400, stale_if_error: 604_800,
+  }.freeze
+
+  class << self
+    # A Proc answering, for one request, whether its page is the same for everybody: run
+    # in the controller, so `request` and whatever the host knows of who is reading are
+    # there to ask. Nil, as it is until a host says, keeps every page private to the
+    # reader, as before. A page it approves is sent with `public` cache headers, and is
+    # drawn with none of what a reader's own browser tells the server — their zone, their
+    # page size, their density, a form's token — since that page will be shown to others.
+    attr_accessor :public_pages
+
+    # A Proc answering what a public page's ETag is made of, in the controller: whatever
+    # changes when the page would, and nothing that changes when it would not. A browser or
+    # a CDN then asks whether it still stands and is told `304`, which costs a
+    # `SELECT` and no render. Nil sends no ETag of the gem's own.
+    attr_accessor :public_version
+
+    # The numbers PUBLIC_CACHE holds, or a host's own where it has said.
+    attr_writer :public_cache
+
+    # @return [Hash{Symbol => Integer}] the seconds each keeper keeps a public page for.
+    def public_cache = PUBLIC_CACHE.merge(@public_cache || {})
+  end
+
+  @public_pages = nil
+  @public_version = nil
+  @public_cache = nil
+end

data/lib/recourse/version.rb

@@ -1,4 +1,4 @@
 module Recourse
   # Version of the gem, read by the gemspec and by hosts checking compatibility.
-  VERSION = '7.10.0'
+  VERSION = '7.11.1'
 end

data/lib/recourse.rb

@@ -25,6 +25,7 @@ require_relative 'recourse/maps'
 require_relative 'recourse/orders'
 require_relative 'recourse/positions'
 require_relative 'recourse/positioning'
+require_relative 'recourse/public_caches'
 require_relative 'recourse/writes'
 require_relative 'recourse/zones'
 require_relative 'recourse/positionable'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: recourse
 version: !ruby/object:Gem::Version
-  version: 7.10.0
+  version: 7.11.1
 platform: ruby
 authors:
 - claudiob
@@ -43,14 +43,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '6.10'
+        version: 6.10.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '6.10'
+        version: 6.10.1
 - !ruby/object:Gem::Dependency
   name: pagy
   requirement: !ruby/object:Gem::Requirement
@@ -144,6 +144,7 @@ files:
 - app/controllers/concerns/recourse/parent_naming.rb
 - app/controllers/concerns/recourse/parent_resolution.rb
 - app/controllers/concerns/recourse/positioned.rb
+- app/controllers/concerns/recourse/public_caching.rb
 - app/controllers/concerns/recourse/reference_resolution.rb
 - app/controllers/concerns/recourse/resource_resolution.rb
 - app/controllers/concerns/recourse/retrieving.rb
@@ -159,6 +160,7 @@ files:
 - app/views/recourses/_card.html.erb
 - app/views/recourses/_color.html.erb
 - app/views/recourses/_combobox.html.erb
+- app/views/recourses/_density.html.erb
 - app/views/recourses/_fields.html.erb
 - app/views/recourses/_footer.html.erb
 - app/views/recourses/_form.html.erb
@@ -254,6 +256,7 @@ files:
 - lib/recourse/positionable.rb
 - lib/recourse/positioning.rb
 - lib/recourse/positions.rb
+- lib/recourse/public_caches.rb
 - lib/recourse/recoursive.rb
 - lib/recourse/registry.rb
 - lib/recourse/routes.rb