RubyGems - rhales - Versions diffs - 0.3.0 → 0.5.3 - Mend

rhales 0.3.0 → 0.5.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (116) hide show

checksums.yaml +4 -4
data/.github/renovate.json5 +52 -0
data/.github/workflows/ci.yml +123 -0
data/.github/workflows/claude-code-review.yml +69 -0
data/.github/workflows/claude.yml +49 -0
data/.github/workflows/code-smells.yml +146 -0
data/.github/workflows/ruby-lint.yml +78 -0
data/.github/workflows/yardoc.yml +126 -0
data/.gitignore +55 -0
data/.pr_agent.toml +63 -0
data/.pre-commit-config.yaml +89 -0
data/.prettierignore +8 -0
data/.prettierrc +38 -0
data/.reek.yml +98 -0
data/.rubocop.yml +428 -0
data/.serena/.gitignore +3 -0
data/.yardopts +56 -0
data/CHANGELOG.md +44 -0
data/CLAUDE.md +1 -2
data/Gemfile +29 -0
data/Gemfile.lock +189 -0
data/README.md +706 -589
data/Rakefile +46 -0
data/debug_context.rb +25 -0
data/demo/rhales-roda-demo/.gitignore +7 -0
data/demo/rhales-roda-demo/Gemfile +32 -0
data/demo/rhales-roda-demo/Gemfile.lock +151 -0
data/demo/rhales-roda-demo/MAIL.md +405 -0
data/demo/rhales-roda-demo/README.md +376 -0
data/demo/rhales-roda-demo/RODA-TEMPLATE-ENGINES.md +192 -0
data/demo/rhales-roda-demo/Rakefile +49 -0
data/demo/rhales-roda-demo/app.rb +325 -0
data/demo/rhales-roda-demo/bin/rackup +26 -0
data/demo/rhales-roda-demo/config.ru +13 -0
data/demo/rhales-roda-demo/db/migrate/001_create_rodauth_tables.rb +266 -0
data/demo/rhales-roda-demo/db/migrate/002_create_rodauth_password_tables.rb +79 -0
data/demo/rhales-roda-demo/db/migrate/003_add_admin_account.rb +68 -0
data/demo/rhales-roda-demo/templates/change_login.rue +31 -0
data/demo/rhales-roda-demo/templates/change_password.rue +36 -0
data/demo/rhales-roda-demo/templates/close_account.rue +31 -0
data/demo/rhales-roda-demo/templates/create_account.rue +40 -0
data/demo/rhales-roda-demo/templates/dashboard.rue +150 -0
data/demo/rhales-roda-demo/templates/home.rue +78 -0
data/demo/rhales-roda-demo/templates/layouts/main.rue +168 -0
data/demo/rhales-roda-demo/templates/login.rue +65 -0
data/demo/rhales-roda-demo/templates/logout.rue +25 -0
data/demo/rhales-roda-demo/templates/reset_password.rue +26 -0
data/demo/rhales-roda-demo/templates/verify_account.rue +27 -0
data/demo/rhales-roda-demo/test_full_output.rb +27 -0
data/demo/rhales-roda-demo/test_simple.rb +24 -0
data/docs/.gitignore +9 -0
data/docs/architecture/data-flow.md +499 -0
data/examples/dashboard-with-charts.rue +271 -0
data/examples/form-with-validation.rue +180 -0
data/examples/simple-page.rue +61 -0
data/examples/vue.rue +136 -0
data/generate-json-schemas.ts +158 -0
data/json_schemer_migration_summary.md +172 -0
data/lib/rhales/adapters/base_auth.rb +2 -0
data/lib/rhales/adapters/base_request.rb +2 -0
data/lib/rhales/adapters/base_session.rb +2 -0
data/lib/rhales/adapters.rb +7 -0
data/lib/rhales/configuration.rb +161 -1
data/lib/rhales/core/context.rb +354 -0
data/lib/rhales/{rue_document.rb → core/rue_document.rb} +59 -43
data/lib/rhales/{template_engine.rb → core/template_engine.rb} +80 -33
data/lib/rhales/core/view.rb +529 -0
data/lib/rhales/{view_composition.rb → core/view_composition.rb} +81 -9
data/lib/rhales/core.rb +9 -0
data/lib/rhales/errors/hydration_collision_error.rb +2 -0
data/lib/rhales/errors.rb +2 -0
data/lib/rhales/hydration/earliest_injection_detector.rb +153 -0
data/lib/rhales/hydration/hydration_data_aggregator.rb +487 -0
data/lib/rhales/hydration/hydration_endpoint.rb +215 -0
data/lib/rhales/hydration/hydration_injector.rb +175 -0
data/lib/rhales/{hydration_registry.rb → hydration/hydration_registry.rb} +2 -0
data/lib/rhales/hydration/hydrator.rb +102 -0
data/lib/rhales/hydration/link_based_injection_detector.rb +195 -0
data/lib/rhales/hydration/mount_point_detector.rb +109 -0
data/lib/rhales/hydration/safe_injection_validator.rb +103 -0
data/lib/rhales/hydration.rb +13 -0
data/lib/rhales/{refinements → integrations/refinements}/require_refinements.rb +7 -13
data/lib/rhales/{tilt.rb → integrations/tilt.rb} +26 -18
data/lib/rhales/integrations.rb +6 -0
data/lib/rhales/middleware/json_responder.rb +191 -0
data/lib/rhales/middleware/schema_validator.rb +300 -0
data/lib/rhales/middleware.rb +6 -0
data/lib/rhales/parsers/handlebars_parser.rb +2 -0
data/lib/rhales/parsers/rue_format_parser.rb +55 -36
data/lib/rhales/parsers.rb +9 -0
data/lib/rhales/{csp.rb → security/csp.rb} +27 -3
data/lib/rhales/utils/json_serializer.rb +114 -0
data/lib/rhales/utils/logging_helpers.rb +75 -0
data/lib/rhales/utils/schema_extractor.rb +132 -0
data/lib/rhales/utils/schema_generator.rb +194 -0
data/lib/rhales/utils.rb +40 -0
data/lib/rhales/version.rb +5 -1
data/lib/rhales.rb +47 -19
data/lib/tasks/rhales_schema.rake +197 -0
data/package.json +10 -0
data/pnpm-lock.yaml +345 -0
data/pnpm-workspace.yaml +2 -0
data/proofs/error_handling.rb +79 -0
data/proofs/expanded_object_inheritance.rb +82 -0
data/proofs/partial_context_scoping_fix.rb +168 -0
data/proofs/ui_context_partial_inheritance.rb +236 -0
data/rhales.gemspec +14 -6
data/schema_vs_data_comparison.md +254 -0
data/test_direct_access.rb +36 -0
metadata +142 -18
data/CLAUDE.locale.txt +0 -7
data/lib/rhales/context.rb +0 -240
data/lib/rhales/hydration_data_aggregator.rb +0 -220
data/lib/rhales/hydrator.rb +0 -141
data/lib/rhales/parsers/handlebars-grammar-review.txt +0 -39
data/lib/rhales/view.rb +0 -412

data/schema_vs_data_comparison.md ADDED Viewed

@@ -0,0 +1,254 @@
+# Schema vs Data Section Comparison for Onetime Secret Migration
+## Executive Summary
+✅ **Schema sections are ready for Onetime Secret migration**
+The test demonstrates that `<schema>` sections provide **direct JSON serialization** without template interpolation, which is exactly what's needed for Vue SPA mount points.
+## Key Findings
+### 1. Data Flow with Schema Sections
+**Backend (Ruby):**
+```ruby
+view.render('vue_spa_mount',
+  ui: { theme: 'dark', locale: 'en' },
+  authentication: { authenticated: true, custid: 'cust_12345' },
+  user: { email: 'test@example.com', account_since: 1640000000 },
+  # ... more props
+)
+```
+**Template (.rue file):**
+```xml
+<schema lang="js-zod" window="__ONETIME_STATE__">
+const schema = z.object({
+  ui: z.object({
+    theme: z.string(),
+    locale: z.string()
+  }),
+  authentication: z.object({
+    authenticated: z.boolean(),
+    custid: z.string().nullable()
+  }),
+  # ... more schema definitions
+});
+</schema>
+<template>
+<!DOCTYPE html>
+<html>
+  <body>
+    <div id="app"><router-view></router-view></div>
+  </body>
+</html>
+</template>
+```
+**Rendered Output:**
+```html
+<script id="rsfc-data-..." type="application/json" data-window="__ONETIME_STATE__">
+{"ui":{"theme":"dark","locale":"en"},"authentication":{"authenticated":true,"custid":"cust_12345"},"user":{"email":"test@example.com","account_since":1640000000},...}
+</script>
+<script nonce="..." data-hydration-target="__ONETIME_STATE__">
+window['__ONETIME_STATE__'] = JSON.parse(dataScript.textContent);
+</script>
+```
+### 2. Critical Differences: Schema vs Data Sections
+| Feature | Data Section (deprecated) | Schema Section (current) |
+|---------|--------------------------|-------------------------|
+| **Backend Props** | Can pass any values, uses interpolation | Must pass fully-resolved values |
+| **Template Syntax** | `{"user": "{{user.name}}"}` | Props serialized directly |
+| **Interpolation** | Yes - `{{var}}` evaluated | No - props → JSON directly |
+| **Type Safety** | No | Yes (via Zod schema) |
+| **JSON Output** | After interpolation | Direct serialization |
+### 3. What This Means for Onetime Secret
+**Current System (data section):**
+```ruby
+# VuePoint passes pre-serialized JSON
+locals = {
+  'ui' => UiSerializer.serialize(...).to_json,  # ❌ Already JSON string
+  'authentication' => {...}.to_json              # ❌ Already JSON string
+}
+```
+```xml
+<data window="__ONETIME_STATE__">
+{
+  "ui": {{{ui}}},              # ❌ Triple braces for raw output
+  "authentication": {{{authentication}}}
+}
+</data>
+```
+**New System (schema section):**
+```ruby
+# VuePoint passes Ruby hashes
+locals = {
+  'ui' => UiSerializer.serialize(...),  # ✅ Just the hash
+  'authentication' => {...}              # ✅ Just the hash
+}
+```
+```xml
+<schema lang="js-zod" window="__ONETIME_STATE__">
+const schema = z.object({
+  ui: z.object({ theme: z.string(), locale: z.string() }),
+  authentication: z.object({ authenticated: z.boolean(), custid: z.string().nullable() })
+});
+</schema>
+```
+### 4. Implementation Code Path
+From `lib/rhales/hydration_data_aggregator.rb:50-90`:
+```ruby
+def process_schema_section(parser)
+  window_attr = parser.schema_window || 'data'
+  # CRITICAL: Direct serialization of props (no template interpolation)
+  processed_data = @context.props
+  # ... merge logic ...
+  @merged_data[window_attr] = processed_data
+end
+```
+The key insight: **Schema sections skip the template interpolation step entirely** and serialize `@context.props` directly to JSON.
+### 5. Tested Scenarios
+✅ Complex nested objects (ui, authentication, user, etc.)
+✅ Nil/null values (nullable schema fields)
+✅ Boolean values (true/false preserved)
+✅ Numbers (integers preserved)
+✅ Strings with template-like syntax (not interpolated)
+✅ Custom window attribute (`__ONETIME_STATE__`)
+✅ CSP nonce integration (`{{app.nonce}}` in template)
+✅ Dark mode inline script (before hydration)
+✅ Vue SPA mount point (`<div id="app">`)
+### 6. Migration Checklist for Onetime Secret
+- [ ] Remove `.to_json` calls in VuePoint class
+- [ ] Pass Ruby hashes as locals (not JSON strings)
+- [ ] Convert `<data>` section to `<schema>` section
+- [ ] Remove triple-braces `{{{var}}}` (not needed with schema)
+- [ ] Define Zod schema matching serializer structure
+- [ ] Test with all 6 serializers (Config, Auth, Domain, I18n, Messages, System)
+- [ ] Verify `window.__ONETIME_STATE__` structure is identical
+- [ ] Verify Vue.js initializes correctly with new hydration
+### 7. Benefits of Schema Sections
+1. **Simpler Backend Code**: No need to pre-serialize to JSON
+2. **Type Safety**: Zod schema catches mismatches at build time
+3. **Validation**: Runtime validation with middleware (optional)
+4. **Cleaner Templates**: No template interpolation confusion
+5. **JSON Schema Generation**: Can generate TypeScript types
+6. **Better Performance**: One serialization pass (not two)
+## Example Migration
+**Before (current Onetime Secret):**
+```ruby
+# apps/web/core/views.rb
+class VuePoint < BaseView
+  def render(template_name)
+    @serialized_data = run_serializers(@view_vars, i18n)
+    locals = {}
+    @serialized_data.each do |key, value|
+      locals[key] = value.to_json  # Pre-serialize everything
+    end
+    super(template_name, locals: locals)
+  end
+end
+```
+```xml
+<!-- index.html.erb -->
+<data window="__ONETIME_STATE__">
+{
+  "ui": {{{ui}}},
+  "authentication": {{{authentication}}},
+  "custid": "{{{custid}}}",
+  ...
+}
+</data>
+```
+**After (with Rhales schema):**
+```ruby
+# apps/web/core/views.rb
+class VuePoint
+  def render(template_name)
+    @serialized_data = run_serializers(@view_vars, i18n)
+    # Pass hashes directly - no .to_json needed
+    view = Rhales::View.new(@req)
+    view.render(template_name, @serialized_data)
+  end
+end
+```
+```xml
+<!-- index.rue -->
+<schema lang="js-zod" window="__ONETIME_STATE__">
+const schema = z.object({
+  ui: z.object({
+    theme: z.string(),
+    locale: z.string()
+  }),
+  authentication: z.object({
+    authenticated: z.boolean(),
+    custid: z.string().nullable()
+  }),
+  // ... define all 40+ fields from serializers
+});
+</schema>
+<template>
+<!DOCTYPE html>
+<html lang="{{locale}}" class="light">
+<head>
+  <script nonce="{{app.nonce}}" language="javascript" type="text/javascript">
+    // Dark mode script
+  </script>
+</head>
+<body>
+  <div id="app"><router-view></router-view></div>
+</body>
+</html>
+</template>
+```
+## Conclusion
+Schema sections are **production-ready** for the Onetime Secret migration. The test demonstrates:
+1. Direct JSON serialization without interpolation
+2. Correct handling of complex nested structures
+3. Proper nil/null value handling
+4. CSP nonce integration
+5. Custom window variables
+6. Vue SPA mount point compatibility
+The migration simplifies backend code by eliminating pre-serialization and provides type safety through Zod schemas.
+## Next Steps
+1. Create full Zod schema definition for all 40+ Onetime Secret fields
+2. Refactor VuePoint to pass hashes instead of JSON strings
+3. Convert index.html.erb to index.rue with schema section
+4. Run integration tests to verify `window.__ONETIME_STATE__` structure
+5. Test Vue.js initialization with new hydration format
+6. Deploy to staging for validation

data/test_direct_access.rb ADDED Viewed

@@ -0,0 +1,36 @@
+#!/usr/bin/env ruby
+# Simple test to verify direct access works
+require_relative 'lib/rhales'
+# Create a test configuration
+config = Rhales::Configuration.new do |conf|
+  conf.template_paths = [File.join(__dir__, 'spec/fixtures/templates')]
+end
+# Create a view with test props
+view = Rhales::View.new(
+  nil, nil, nil, 'en',
+  client: { 'greeting' => 'Hello World', 'user' => { 'name' => 'John Doe' } },
+  config: config
+)
+# Render the template
+result = view.render('test_direct_access')
+puts "=== Rendered Output ==="
+puts result
+puts "======================="
+# Check if direct access worked
+if result.include?('Direct: Hello World')
+  puts "✅ Direct access to 'message' works"
+else
+  puts "❌ Direct access to 'message' failed"
+end
+if result.include?('User: John Doe')
+  puts "✅ Direct access to 'userName' works"
+else
+  puts "❌ Direct access to 'userName' failed"
+end

metadata CHANGED Viewed

@@ -1,14 +1,56 @@
 --- !ruby/object:Gem::Specification
 name: rhales
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.5.3
 platform: ruby
 authors:
 - delano
 bindir: exe
 cert_chain: []
-date: 2025-07-09 00:00:00.000000000 Z
-dependencies: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: json_schemer
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
+- !ruby/object:Gem::Dependency
+  name: logger
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: tilt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2'
 description: |
   Rhales is a framework for building server-rendered components with
   client-side data hydration using .rue files called RSFCs (Ruby
@@ -23,33 +65,115 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- CLAUDE.locale.txt
+- ".github/renovate.json5"
+- ".github/workflows/ci.yml"
+- ".github/workflows/claude-code-review.yml"
+- ".github/workflows/claude.yml"
+- ".github/workflows/code-smells.yml"
+- ".github/workflows/ruby-lint.yml"
+- ".github/workflows/yardoc.yml"
+- ".gitignore"
+- ".pr_agent.toml"
+- ".pre-commit-config.yaml"
+- ".prettierignore"
+- ".prettierrc"
+- ".reek.yml"
+- ".rubocop.yml"
+- ".serena/.gitignore"
+- ".yardopts"
+- CHANGELOG.md
 - CLAUDE.md
+- Gemfile
+- Gemfile.lock
 - LICENSE.txt
 - README.md
+- Rakefile
+- debug_context.rb
+- demo/rhales-roda-demo/.gitignore
+- demo/rhales-roda-demo/Gemfile
+- demo/rhales-roda-demo/Gemfile.lock
+- demo/rhales-roda-demo/MAIL.md
+- demo/rhales-roda-demo/README.md
+- demo/rhales-roda-demo/RODA-TEMPLATE-ENGINES.md
+- demo/rhales-roda-demo/Rakefile
+- demo/rhales-roda-demo/app.rb
+- demo/rhales-roda-demo/bin/rackup
+- demo/rhales-roda-demo/config.ru
+- demo/rhales-roda-demo/db/migrate/001_create_rodauth_tables.rb
+- demo/rhales-roda-demo/db/migrate/002_create_rodauth_password_tables.rb
+- demo/rhales-roda-demo/db/migrate/003_add_admin_account.rb
+- demo/rhales-roda-demo/templates/change_login.rue
+- demo/rhales-roda-demo/templates/change_password.rue
+- demo/rhales-roda-demo/templates/close_account.rue
+- demo/rhales-roda-demo/templates/create_account.rue
+- demo/rhales-roda-demo/templates/dashboard.rue
+- demo/rhales-roda-demo/templates/home.rue
+- demo/rhales-roda-demo/templates/layouts/main.rue
+- demo/rhales-roda-demo/templates/login.rue
+- demo/rhales-roda-demo/templates/logout.rue
+- demo/rhales-roda-demo/templates/reset_password.rue
+- demo/rhales-roda-demo/templates/verify_account.rue
+- demo/rhales-roda-demo/test_full_output.rb
+- demo/rhales-roda-demo/test_simple.rb
+- docs/.gitignore
+- docs/architecture/data-flow.md
+- examples/dashboard-with-charts.rue
+- examples/form-with-validation.rue
+- examples/simple-page.rue
+- examples/vue.rue
+- generate-json-schemas.ts
+- json_schemer_migration_summary.md
 - lib/rhales.rb
+- lib/rhales/adapters.rb
 - lib/rhales/adapters/base_auth.rb
 - lib/rhales/adapters/base_request.rb
 - lib/rhales/adapters/base_session.rb
 - lib/rhales/configuration.rb
-- lib/rhales/context.rb
-- lib/rhales/csp.rb
+- lib/rhales/core.rb
+- lib/rhales/core/context.rb
+- lib/rhales/core/rue_document.rb
+- lib/rhales/core/template_engine.rb
+- lib/rhales/core/view.rb
+- lib/rhales/core/view_composition.rb
 - lib/rhales/errors.rb
 - lib/rhales/errors/hydration_collision_error.rb
-- lib/rhales/hydration_data_aggregator.rb
-- lib/rhales/hydration_registry.rb
-- lib/rhales/hydrator.rb
-- lib/rhales/parsers/handlebars-grammar-review.txt
+- lib/rhales/hydration.rb
+- lib/rhales/hydration/earliest_injection_detector.rb
+- lib/rhales/hydration/hydration_data_aggregator.rb
+- lib/rhales/hydration/hydration_endpoint.rb
+- lib/rhales/hydration/hydration_injector.rb
+- lib/rhales/hydration/hydration_registry.rb
+- lib/rhales/hydration/hydrator.rb
+- lib/rhales/hydration/link_based_injection_detector.rb
+- lib/rhales/hydration/mount_point_detector.rb
+- lib/rhales/hydration/safe_injection_validator.rb
+- lib/rhales/integrations.rb
+- lib/rhales/integrations/refinements/require_refinements.rb
+- lib/rhales/integrations/tilt.rb
+- lib/rhales/middleware.rb
+- lib/rhales/middleware/json_responder.rb
+- lib/rhales/middleware/schema_validator.rb
+- lib/rhales/parsers.rb
 - lib/rhales/parsers/handlebars_parser.rb
 - lib/rhales/parsers/rue_format_parser.rb
-- lib/rhales/refinements/require_refinements.rb
-- lib/rhales/rue_document.rb
-- lib/rhales/template_engine.rb
-- lib/rhales/tilt.rb
+- lib/rhales/security/csp.rb
+- lib/rhales/utils.rb
+- lib/rhales/utils/json_serializer.rb
+- lib/rhales/utils/logging_helpers.rb
+- lib/rhales/utils/schema_extractor.rb
+- lib/rhales/utils/schema_generator.rb
 - lib/rhales/version.rb
-- lib/rhales/view.rb
-- lib/rhales/view_composition.rb
+- lib/tasks/rhales_schema.rake
+- package.json
+- pnpm-lock.yaml
+- pnpm-workspace.yaml
+- proofs/error_handling.rb
+- proofs/expanded_object_inheritance.rb
+- proofs/partial_context_scoping_fix.rb
+- proofs/ui_context_partial_inheritance.rb
 - rhales.gemspec
+- schema_vs_data_comparison.md
+- test_direct_access.rb
 homepage: https://github.com/onetimesecret/rhales
 licenses:
 - MIT
@@ -65,14 +189,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.4.0
+      version: 3.3.4
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.2
+rubygems_version: 3.7.2
 specification_version: 4
 summary: Rhales - Server-rendered components with client-side hydration (RSFCs)
 test_files: []

data/CLAUDE.locale.txt DELETED Viewed

@@ -1,7 +0,0 @@
-Our own private local claude notes. Not read by claude or checked in.
-https://claudelog.com/mechanics/plan-mode
-https://handlebars-lang.github.io/spec/#sec-handlebars-specification-statements
-https://github.com/jeremyevans/rodauth/tree/588b865cf70c7f327f0f24a4e277dfe787a6674f/doc
-https://docs.anthropic.com/en/docs/claude-code/hooks#subagentstop
-https://www.anthropic.com/engineering/claude-code-best-practices