recourse 8.0.0 → 8.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9fa259fe4854972da8f5269d6d63c00851e061bd0cd6d490db9caa31ca38be22
-  data.tar.gz: 6671b757de11387812c82d201476e65389110398fce8d1f3afe7dce1f1fd46a2
+  metadata.gz: 0b91067feabacd9f9f715400c5362b40040ed2658cab10377dbf2ca2c935697e
+  data.tar.gz: ef680fd9ad956b89360d7b88e80b14fc8dd7d72ed4424bab2d53e8d57e4563bf
 SHA512:
-  metadata.gz: 004ce92287a95a326b937a33ee04737753546d46eae1f6dbcb2cb2a41480e1f8e3caca92f2f18fb5dfb9f2a76d9face21adfc4e00443ae1e2a354e74d76d2b20
-  data.tar.gz: ca43947c8aae99999a3f0332d737e31d229f6f0934315fddf7393e39650c13e5e9e4681a1cba4219e6cb9f683a363cbe6caea8e3c253b0ee2be3c50969b01655
+  metadata.gz: 2555d8a1633195677280425138efce99f86996a81f15b3b5989c7a5a22ce86df2cbee1b8ef0ed7ab1fecdb7cba99cd3fe0be3f3e94e65945d0b8acba684d16d2
+  data.tar.gz: fc1f4f6410f9ac3d26c8de7b6f013309a43270f725be8c2b75a292b16ab747b852a52016a602869467a543256eee33bcbb2d1c997b7c08bdfac941be26322bac

data/CHANGELOG.md

@@ -7,6 +7,24 @@ For more information about changelogs, check [Keep a Changelog](http://keepachan
 
 ## [Unreleased]
 
+## 8.1.0 - 2026-10-14
+
+* [FEATURE] The layout links the Bootstrap Icons it draws with
+
+  Every icon on these pages is named in Bootstrap Icons, but no stylesheet carried the
+  font, so a host had to link it from a `recourses/head` partial or see blank buttons. The
+  layout now links `Recourse.icons`, jsDelivr's copy of Bootstrap Icons 1.13.1 by default;
+  a host serving the font itself points the setting at its copy, or sets it to `nil`.
+
+## 8.0.1 - 2026-10-14
+
+* [FIX] Guard the screens with `prepend_before_action`, not `before_action`
+
+  Since 8.0.0 a record's pages look it up through `recourse_relation` before any
+  `before_action` of the host's runs, so a relation reading who is signed in -- an admin's
+  own chats -- found nobody and raised. The README, the guides and the comments now say
+  `prepend_before_action :authenticate!`, which runs the guard first.
+
 ## 8.0.0 - 2026-10-14
 
 * [BREAKING] A record's own pages find it among the rows `recourse_relation` lists
@@ -320,9 +338,9 @@ For more information about changelogs, check [Keep a Changelog](http://keepachan
 
 ## 5.6.1 - 2026-09-18
 
-* [Change] The pinned bundle is `houseaccount@0.14.2`
+* [Change] The pinned design bundle is 0.14.2
 
-  A conversation reads at the house's own size wherever it is drawn, a bubble inside a flow
+  A conversation reads at the design bundle's own size wherever it is drawn, a bubble inside a flow
   is read from its start, and a focus ring is no longer painted over by the link below it.
   These pages compact their body type for tables dense with figures, which is what made the
   first of those visible here.
@@ -374,7 +392,7 @@ For more information about changelogs, check [Keep a Changelog](http://keepachan
   breadcrumb over such a page raised instead of reading. It asks whether what it found
   answers `model_name`, the way `known_icon` beside it already does.
 
-* [Feature] `Recourse.assets` says where the house bundle is served from
+* [Feature] `Recourse.assets` says where the design bundle is served from
 
   The stylesheet, the script and the palettes were three URLs carrying one pinned version,
   moved together by hand every release — the 5.5.0 entry below says as much. They are one
@@ -382,11 +400,11 @@ For more information about changelogs, check [Keep a Changelog](http://keepachan
   from, and jsdelivr's copy of the published package stays the default.
 
   A host that sets `Recourse.assets = ''` serves the bundle itself, out of the
-  `houseaccount` gem mounted by path: its engine answers `/css`, `/js` and `/theme` from
+  design gem mounted by path: its engine answers `/css`, `/js` and `/theme` from
   its own `public/`. That is how a stylesheet or a controller gets tried on a real page
   before the version carrying it is published, which is what this release needed.
 
-* [Change] The pinned bundle is `houseaccount@0.14.0`
+* [Change] The pinned design bundle is 0.14.0
 
   What carries the `sortable` controller the feature above names, and the two rules beside
   it: the grip's cursor, and the tint on the space a dragged row will land in.
@@ -407,7 +425,7 @@ For more information about changelogs, check [Keep a Changelog](http://keepachan
   glyphs point either way with either ordering. Both draw from the bundle this release
   pins, whose subset carries `sort-up` beside the `sort-down` it already held.
 
-* [Change] The pinned bundle is `houseaccount@0.13.0`
+* [Change] The pinned design bundle is 0.13.0
 
   Two releases at once, since the pin was still at 0.11.0 while 0.12.0 came and went. It is
   what carries the ascending sort glyph, so the fix above needs it; it also brings a card
@@ -506,11 +524,11 @@ For more information about changelogs, check [Keep a Changelog](http://keepachan
 
 ## 5.0.0 - 2026-09-14
 
-* [Breaking change] Every page is styled and scripted by `https://design.houseaccount.com`, and nothing is served by the gem
+* [Breaking change] Every page is styled and scripted by the design site, and nothing is served by the gem
 
   The vendored Bootstrap, its icons and fonts, Stimulus, the sixteen controllers, the nine
   palettes and the layout's own stylesheet have moved to the `design` repo, which publishes
-  them at `/v<version>/css/houseaccount.css`, `/v<version>/js/houseaccount.js` and
+  them at `/v<version>/css/<bundle>.css`, `/v<version>/js/<bundle>.js` and
   `/v<version>/theme/<name>.css` on that origin, kept forever per version. The layout links
   the first two at a pinned version, and `Recourse::THEMES_PATH` names the third at the
   same one; a fix there reaches these pages when the pin moves, and not before. The
@@ -518,8 +536,8 @@ For more information about changelogs, check [Keep a Changelog](http://keepachan
 
   A host needs that origin reachable from its readers' browsers. A host with a Content
   Security Policy allows it for `style-src`, `script-src` and `font-src`. A host on the
-  `houseaccount` gem serves the same paths itself, but this gem still links the site: it
-  never names that gem.
+  design gem serves the same paths itself, but this gem still links the site: it never names
+  that gem.
 
 * [Breaking change] A combobox is a `<select>`, and a filter submits one value per pick
 

data/README.md

@@ -20,10 +20,10 @@ gem 'recourse', '~> 8.0'
 `~> 8.0` follows Semantic Versioning: `bundle update` takes every 8.x and never a
 breaking change. Rails 8.1 and Ruby 3.2 are the minimum; the pages need Turbo, which
 `turbo-rails` brings, and nothing else in the host. Everything a page is styled and
-scripted by — Bootstrap 6, its icons, Turbo, Stimulus and the controllers behind these
-screens — is `bh`, which this gem depends on and whose engine serves them at `/bh/`, so a
-host without an asset pipeline gets the same screens and nothing is fetched across a
-network.
+scripted by — Bootstrap 6, Turbo, Stimulus and the controllers behind these screens — is
+`bh`, which this gem depends on and whose engine serves them at `/bh/`, so a host without
+an asset pipeline gets the same screens. The icons are Bootstrap Icons, whose font the
+layout links from `Recourse.icons`: jsDelivr's copy unless a host names its own, or `nil`.
 
 ## Step 1. Edit your routes
 
@@ -168,13 +168,18 @@ which the host defines to put behavior above every screen at once:
 
 ```ruby
 class RecoursesController < Recourse::BaseController
-  before_action :authenticate!
+  prepend_before_action :authenticate!
 end
 ```
 
+`prepend_before_action`, so the guard runs before the gem's own: a record's pages look
+it up through `recourse_relation`, and a relation that reads who is signed in finds
+nobody yet if the guard comes after.
+
 A controller the app already defines is left alone, and one line of it is usually
 enough: `recourse_relation` puts a scope of your own behind a table the gem draws
-whole, and behind the pages of each record in it, and `find_resource` finds a singular record the parent names no association for.
+whole, and behind the pages of each record in it, and `find_resource` finds a singular
+record the parent names no association for.
 
 ## Step 5. Enjoy the extras
 

data/app/controllers/recourse/base_controller.rb

@@ -1,7 +1,7 @@
 module Recourse
   # Everything a recoursed screen does, in a class of its own so a host can put
   # its own behavior above it — `class RecoursesController < Recourse::BaseController`
-  # with a `before_action :authenticate!` guards every screen the gem serves.
+  # with a `prepend_before_action :authenticate!` guards every screen the gem serves.
   class BaseController < ApplicationController
     include Pagy::Method, Positioned, AttachmentResolution, AttachmentWriting,
             Landing, Paging, ListResolution, ParameterResolution, ParentNaming,

data/app/controllers/recourses_controller.rb

@@ -1,6 +1,6 @@
 # The superclass every recoursed controller gets, and what puts its templates
 # under `recourses/`. A host defines this class itself — its `app/controllers`
-# comes first — to put a `before_action` of its own above every screen.
+# comes first — to put a `prepend_before_action` of its own above every screen.
 class RecoursesController < Recourse::BaseController
   # Empty on purpose: the behavior is the base class, so a host redefining this
   # one loses none of it.

data/app/views/layouts/recourses.html.erb

@@ -18,10 +18,12 @@
     <%= yield :head %>
 
     <%# Everything the page is styled by: Bootstrap 6 and bh's rules for this gem's
-        markup, served by bh's own engine. `Recourse.assets` is where, and a host
-        serving those files from somewhere else says so there. -%>
+        markup, served by bh's own engine, and the Bootstrap Icons every icon here is
+        named in. `Recourse.assets` and `Recourse.icons` are where, and a host serving
+        those files from somewhere else says so there. -%>
     <link rel='stylesheet' href='<%= Recourse.asset 'css/bh.css' %>'>
-    <%# The one thing these screens set that the house's stylesheet does not: system faces
+    <%= tag.link rel: 'stylesheet', href: Recourse.icons if Recourse.icons %>
+    <%# The one thing these screens set that bh's stylesheet does not: system faces
         at a compact size, for pages dense with figures. 14px as rem, so a browser's own
         text-size setting still scales it. After the stylesheet, since both are `:root`. -%>
     <style>

data/lib/recourse/assets.rb

@@ -9,9 +9,14 @@ module Recourse
     # A host serving those files from somewhere else — a CDN, a bundle of its own that
     # carries bh's layer — points this at it, and that is the whole of what it writes.
     attr_accessor :assets
+
+    # The stylesheet of Bootstrap Icons, whose names every icon on these pages is drawn by.
+    # A host serving the font itself points this at its own copy, or sets it to nil.
+    attr_accessor :icons
   end
 
   @assets = Bh::Engine::PREFIX.chomp '/'
+  @icons = 'https://cdn.jsdelivr.net/npm/bootstrap-icons@1.13.1/font/bootstrap-icons.min.css'
 
   # One file of the design layer.
   def self.asset(path) = "#{assets}/#{path}"

data/lib/recourse/version.rb

@@ -1,4 +1,4 @@
 module Recourse
   # Version of the gem, read by the gemspec and by hosts checking compatibility.
-  VERSION = '8.0.0'
+  VERSION = '8.1.0'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: recourse
 version: !ruby/object:Gem::Version
-  version: 8.0.0
+  version: 8.1.0
 platform: ruby
 authors:
 - claudiob