ruby_cms 0.2.1.1 → 1.0.0

data/lib/generators/ruby_cms/templates/db/migrate/20260525140000_create_media_assets.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+class CreateMediaAssets < ActiveRecord::Migration[8.1]
+  def change
+    create_table :media_assets, if_not_exists: true do |t|
+      t.string  :name,        null: false
+      t.string  :folder,      null: false, default: "general"
+      t.string  :kind,        null: false
+      t.string  :mime_type
+      t.integer :size_kb, default: 0
+      t.integer :width
+      t.integer :height
+      t.references :uploaded_by, foreign_key: { to_table: :users }, type: :bigint
+      t.jsonb   :tags, default: []
+      t.string  :tone
+      t.integer :used_count, default: 0
+      t.timestamps
+    end
+
+    add_index :media_assets, :folder, if_not_exists: true
+    add_index :media_assets, :kind, if_not_exists: true
+    add_index :media_assets, :created_at, if_not_exists: true
+    add_index :media_assets, :tags, using: :gin, if_not_exists: true
+  end
+end

data/lib/generators/ruby_cms/templates/db/migrate/20260525150000_create_invitations.rb

@@ -0,0 +1,22 @@
+class CreateInvitations < ActiveRecord::Migration[8.1]
+  def change
+    create_table :invitations, if_not_exists: true do |t|
+      t.string   :email,        null: false
+      t.string   :token,        null: false
+      t.boolean  :admin,        null: false, default: false
+      t.integer  :invited_by_id
+      t.datetime :expires_at, null: false
+      t.datetime :accepted_at
+      t.datetime :revoked_at
+      t.datetime :last_sent_at
+
+      t.timestamps
+    end
+
+    add_index :invitations, :token, unique: true, if_not_exists: true
+    add_index :invitations, :email, if_not_exists: true
+    add_index :invitations, :expires_at, if_not_exists: true
+    add_index :invitations, :accepted_at, if_not_exists: true
+    add_index :invitations, :invited_by_id, if_not_exists: true
+  end
+end

data/lib/generators/ruby_cms/templates/db/migrate/20260525160000_create_command_runs.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+class CreateCommandRuns < ActiveRecord::Migration[8.1]
+  def change
+    create_table :command_runs, if_not_exists: true do |t|
+      t.string  :command_key,  null: false
+      t.string  :status,       null: false, default: "ok"
+      t.integer :duration_ms,  null: false, default: 0
+      t.text    :output
+      t.text    :error_message
+      t.jsonb   :params_used, null: false, default: {}
+      t.references :ran_by, foreign_key: { to_table: :users }, type: :bigint
+      t.string :ran_by_label
+      t.datetime :started_at, null: false
+      t.timestamps
+    end
+
+    add_index :command_runs, :command_key, if_not_exists: true
+    add_index :command_runs, :started_at, if_not_exists: true
+    add_index :command_runs, %i[command_key started_at], if_not_exists: true
+  end
+end

data/lib/generators/ruby_cms/templates/db/migrate/20260525190000_add_state_to_visitor_errors.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+class AddStateToVisitorErrors < ActiveRecord::Migration[8.0]
+  def up
+    return unless table_exists?(:visitor_errors)
+    return if column_exists?(:visitor_errors, :state)
+
+    add_column :visitor_errors, :state, :string, default: "open", null: false
+    add_index  :visitor_errors, :state, if_not_exists: true
+    execute <<~SQL.squish
+      UPDATE visitor_errors
+      SET state = CASE WHEN resolved = TRUE THEN 'resolved' ELSE 'open' END
+    SQL
+  end
+
+  def down
+    remove_index  :visitor_errors, :state, if_exists: true
+    remove_column :visitor_errors, :state, if_exists: true
+  end
+end

data/lib/generators/ruby_cms/templates/db/migrate/20260527165017_add_discarded_at_to_visitor_errors.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+class AddDiscardedAtToVisitorErrors < ActiveRecord::Migration[8.1]
+  def change
+    return unless table_exists?(:visitor_errors)
+
+    add_column :visitor_errors, :discarded_at, :datetime unless column_exists?(:visitor_errors, :discarded_at)
+    add_index :visitor_errors, :discarded_at, if_not_exists: true
+  end
+end

data/lib/generators/ruby_cms/templates/db/migrate/20260527165728_add_discarded_at_to_cms_tables.rb

@@ -0,0 +1,12 @@
+class AddDiscardedAtToCmsTables < ActiveRecord::Migration[8.1]
+  def change
+    %i[content_blocks media_assets redirects].each do |t|
+      next unless table_exists?(t)
+
+      unless column_exists?(t, :discarded_at)
+        add_column t, :discarded_at, :datetime
+        add_index  t, :discarded_at, if_not_exists: true
+      end
+    end
+  end
+end

data/lib/generators/ruby_cms/templates/db/migrate/20260605151935_create_passkey_credentials.rb

@@ -0,0 +1,15 @@
+class CreatePasskeyCredentials < ActiveRecord::Migration[8.1]
+  def change
+    create_table :passkey_credentials, if_not_exists: true do |t|
+      t.references :user, null: false, foreign_key: true
+      t.string :external_id, null: false
+      t.string :public_key, null: false
+      t.bigint :sign_count, null: false, default: 0
+      t.string :nickname
+      t.string :transports          # comma-joined, e.g. "internal,hybrid" — for nicer UI labels
+      t.datetime :last_used_at
+      t.timestamps
+    end
+    add_index :passkey_credentials, :external_id, unique: true, if_not_exists: true
+  end
+end

data/lib/generators/ruby_cms/templates/db/migrate/20260605151936_add_webauthn_id_to_users.rb

@@ -0,0 +1,22 @@
+class AddWebauthnIdToUsers < ActiveRecord::Migration[8.0]
+  # Add nullable, backfill every existing user with a stable handle, THEN enforce
+  # NOT NULL + unique. WebAuthn requires every user to have a permanent id.
+  def up
+    return if column_exists?(:users, :webauthn_id)
+
+    add_column :users, :webauthn_id, :string
+
+    User.reset_column_information
+    User.where(webauthn_id: nil).find_each do |user|
+      user.update_columns(webauthn_id: SecureRandom.base64(32))
+    end
+
+    change_column_null :users, :webauthn_id, false
+    add_index :users, :webauthn_id, unique: true, if_not_exists: true
+  end
+
+  def down
+    remove_index :users, :webauthn_id, if_exists: true
+    remove_column :users, :webauthn_id, if_exists: true
+  end
+end

data/lib/generators/ruby_cms/templates/db/migrate/20260606000001_add_authenticated_at_to_sessions.rb

@@ -0,0 +1,14 @@
+class AddAuthenticatedAtToSessions < ActiveRecord::Migration[8.0]
+  # Sudo mode (passkey management) records when each session last confirmed
+  # credentials. Nullable: existing sessions simply aren't "recently authenticated"
+  # until the user signs in again.
+  def up
+    return if column_exists?(:sessions, :authenticated_at)
+
+    add_column :sessions, :authenticated_at, :datetime
+  end
+
+  def down
+    remove_column :sessions, :authenticated_at, if_exists: true
+  end
+end

data/lib/generators/ruby_cms/templates/helpers/admin/admin_page_helper.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+module Admin
+  module AdminPageHelper
+    def admin_table_content(id: "admin_table_content", **attrs, &)
+      render RubyUI::AdminTableContent.new(id:, **attrs, &)
+    end
+  end
+end

data/lib/generators/ruby_cms/templates/helpers/admin/dashboard_helper.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+module Admin
+  module DashboardHelper
+    def render_dashboard_block(block)
+      locals = block[:locals] || {}
+      if block[:partial].present?
+        render partial: block[:partial], locals: locals
+      elsif block[:render].respond_to?(:call)
+        block[:render].call(self, locals)
+      else
+        ""
+      end
+    end
+  end
+end

data/lib/generators/ruby_cms/templates/helpers/admin/media_assets_helper.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module Admin
+  module MediaAssetsHelper
+    # SVG icons used in media asset thumbnails. Returns SafeBuffer.
+    # Static markup — no user input — safe to mark as html_safe.
+    def media_asset_icon(kind, size: 28)
+      svg = case kind.to_s
+      when "image"
+              %(<svg fill="none" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" width="#{size}" height="#{size}"><path stroke-linecap="round" stroke-linejoin="round" d="M4 16l4.586-4.586a2 2 0 012.828 0L16 16m-2-2l1.586-1.586a2 2 0 012.828 0L20 14M4 6a2 2 0 012-2h12a2 2 0 012 2v12a2 2 0 01-2 2H6a2 2 0 01-2-2V6z"/><circle cx="9" cy="9" r="1.5" fill="currentColor" stroke="none"/></svg>)
+      when "video"
+              %(<svg fill="none" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" width="#{size}" height="#{size}"><path stroke-linecap="round" stroke-linejoin="round" d="M14.752 11.168l-3.197-2.132A1 1 0 0010 9.87v4.263a1 1 0 001.555.832l3.197-2.132a1 1 0 000-1.664z"/><circle cx="12" cy="12" r="9"/></svg>)
+      else
+              %(<svg fill="none" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" width="#{size}" height="#{size}"><path stroke-linecap="round" stroke-linejoin="round" d="M12 6.253v13m0-13C10.832 5.477 9.246 5 7.5 5S4.168 5.477 3 6.253v13C4.168 18.477 5.754 18 7.5 18s3.332.477 4.5 1.253m0-13C13.168 5.477 14.754 5 16.5 5c1.747 0 3.332.477 4.5 1.253v13C19.832 18.477 18.247 18 16.5 18c-1.746 0-3.332.477-4.5 1.253"/></svg>)
+      end
+      sanitize(svg, tags: %w[svg path circle], attributes: %w[fill viewBox stroke-width stroke width height stroke-linecap stroke-linejoin d cx cy r])
+    end
+
+    def media_asset_check_icon(size: 12)
+      svg = %(<svg fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" width="#{size}" height="#{size}"><path stroke-linecap="round" stroke-linejoin="round" d="M5 13l4 4L19 7"/></svg>)
+      sanitize(svg, tags: %w[svg path], attributes: %w[fill viewBox stroke-width stroke width height stroke-linecap stroke-linejoin d])
+    end
+
+    def media_chip_icon(kind)
+      svg = case kind.to_s
+      when "folder"
+              %(<svg fill="none" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" d="M3 7a2 2 0 012-2h4l2 2h8a2 2 0 012 2v8a2 2 0 01-2 2H5a2 2 0 01-2-2V7z"/></svg>)
+      when "layers"
+              %(<svg fill="none" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" d="M4 6h16M4 12h16M4 18h16"/></svg>)
+      when "search"
+              %(<svg fill="none" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-4.35-4.35M11 19a8 8 0 100-16 8 8 0 000 16z"/></svg>)
+      else
+              ""
+      end
+      sanitize(svg, tags: %w[svg path], attributes: %w[fill viewBox stroke-width stroke stroke-linecap stroke-linejoin d])
+    end
+  end
+end

data/lib/generators/ruby_cms/templates/helpers/admin/relative_time_helper.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module Admin
+  # Compact "5m ago" style. Mirrors the design's relTime() format.
+  module RelativeTimeHelper
+    SECONDS_IN = {
+      minute: 60,
+      hour: 3_600,
+      day: 86_400,
+      month: 2_592_000,
+      year: 31_536_000
+    }.freeze
+
+    # rel_time(Time.current) => "12s geleden"
+    def rel_time(time, now: Time.current, ago: nil)
+      return "" if time.blank?
+
+      diff = (now - time).to_i
+      base = rel_time_base(diff)
+      ago_label = ago || t("admin.pages.common.ago", default: "geleden")
+      "#{base} #{ago_label}"
+    end
+
+    private
+
+    def rel_time_base(diff)
+      case diff
+      when 0..59             then "#{diff}s"
+      when 60..3599          then "#{diff / SECONDS_IN[:minute]}m"
+      when 3600..86_399      then "#{diff / SECONDS_IN[:hour]}h"
+      when 86_400..2_591_999 then "#{diff / SECONDS_IN[:day]}d"
+      when 2_592_000..31_535_999 then "#{diff / SECONDS_IN[:month]}mo"
+      else "#{diff / SECONDS_IN[:year]}y"
+      end
+    end
+  end
+end

data/lib/generators/ruby_cms/templates/helpers/admin/ui_helper.rb

@@ -0,0 +1,48 @@
+# frozen_string_literal: true
+
+module Admin
+  # Shared visual helpers for admin views.
+  #
+  # - admin_crumbs("Audit log")              => [{label: "Admin", url: "/admin"}, {label: "Audit log"}]
+  # - admin_crumbs("Settings", "Permissions")
+  # - badge_classes(:success)                => "bg-green-50 text-green-700 border-green-100"
+  # - badge_dot_classes(:danger)             => "bg-red-500"
+  module UiHelper
+    BADGE_PALETTE = {
+      neutral: { bg: "bg-[#faf8f3]", text: "text-[#57534e]", border: "border-[#e9e4d4]", dot: "bg-[#a8a29e]" },
+      blue: { bg: "bg-blue-50", text: "text-blue-700", border: "border-blue-100", dot: "bg-blue-500" },
+      green: { bg: "bg-green-50",  text: "text-green-700",  border: "border-green-100",  dot: "bg-green-600" },
+      amber: { bg: "bg-amber-50",  text: "text-amber-700",  border: "border-amber-100",  dot: "bg-amber-500" },
+      red: { bg: "bg-red-50", text: "text-red-700", border: "border-red-100", dot: "bg-red-500" },
+      purple: { bg: "bg-purple-50", text: "text-purple-700", border: "border-purple-100", dot: "bg-purple-500" },
+      success: { bg: "bg-green-50", text: "text-green-700", border: "border-green-100", dot: "bg-green-600" },
+      danger: { bg: "bg-red-50", text: "text-red-700", border: "border-red-100", dot: "bg-red-500" },
+      warn: { bg: "bg-amber-50", text: "text-amber-700", border: "border-amber-100", dot: "bg-amber-500" }
+    }.freeze
+
+    def admin_crumbs(*labels)
+      root_label = t("ruby_cms.admin.breadcrumb.admin", default: "Admin")
+      [ { label: root_label, url: admin_root_path } ] + labels.compact.map { |l| { label: l } }
+    end
+
+    # Returns "bg-X-50 text-X-700 border-X-100" classes for a Tailwind pill.
+    def badge_classes(tone = :neutral)
+      palette = BADGE_PALETTE[tone.to_sym] || BADGE_PALETTE[:neutral]
+      "#{palette[:bg]} #{palette[:text]} #{palette[:border]}"
+    end
+
+    # Returns just the dot bg class (for inline status dots inside pills).
+    def badge_dot_classes(tone = :neutral)
+      (BADGE_PALETTE[tone.to_sym] || BADGE_PALETTE[:neutral])[:dot]
+    end
+
+    # Convenience: render a small dot+label pill.
+    def status_pill(tone, label, dot: true)
+      classes = "inline-flex items-center gap-1.5 px-2 py-0.5 rounded-full text-[11px] font-medium border whitespace-nowrap #{badge_classes(tone)}"
+      content_tag(:span, class: classes) do
+        concat content_tag(:span, "", class: "w-1.5 h-1.5 rounded-full #{badge_dot_classes(tone)}") if dot
+        concat label
+      end
+    end
+  end
+end

data/lib/generators/ruby_cms/templates/helpers/cms_application_helpers.rb

@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+module CmsApplicationHelpers
+  include ContentBlocksHelper
+
+  # Resolve a route helper that may belong to an optional (uninstalled) module.
+  # Returns the path, or nil when the route helper is not defined — so core chrome
+  # can link to optional screens without crashing when those modules are absent.
+  def cms_path(helper_name, *args)
+    return nil unless respond_to?(helper_name)
+
+    public_send(helper_name, *args)
+  end
+
+  def ruby_cms_locale_display_name(locale)
+    key = "ruby_cms.admin.locales.#{locale}"
+    t(key, default: locale.to_s)
+  end
+
+  def ruby_cms_user_display(user)
+    return "—" if user.blank?
+
+    %i[email_address email username name].each do |attr|
+      return user.public_send(attr) if user.respond_to?(attr) && user.public_send(attr).present?
+    end
+    user.respond_to?(:id) ? "User ##{user.id}" : user.to_s
+  end
+
+  def ruby_cms_nav_entries
+    RubyCms.visible_nav_registry(
+      view_context: self,
+      user: (current_user_cms if respond_to?(:current_user_cms))
+    )
+  end
+
+  def ruby_cms_nav_sidebar_rows(section: :main)
+    RubyCms.visible_nav_sidebar_rows(
+      section: section,
+      view_context: self,
+      user: (current_user_cms if respond_to?(:current_user_cms))
+    )
+  end
+
+  # Locales offered in the admin UI — configurable via Settings, intersected with
+  # the app's available locales. Used by the topbar language toggle.
+  def cms_available_locales
+    configured = Array(RubyCms::Settings.get(:available_locales, default: I18n.available_locales.map(&:to_s)))
+    locales = configured.map { |l| l.to_s.to_sym } & I18n.available_locales
+    locales.presence || I18n.available_locales
+  end
+
+  def cms_maintenance_active?
+    ActiveModel::Type::Boolean.new.cast(RubyCms::Settings.get(:maintenance_mode, default: false))
+  end
+
+  def cms_maintenance_message
+    RubyCms::Settings.get(:maintenance_message, default: "").to_s
+  end
+
+  def ruby_cms_safe_svg_fragment(fragment)
+    sanitize(
+      fragment.to_s,
+      tags: %w[svg path g circle rect line polygon polyline ellipse],
+      attributes: %w[
+        fill stroke stroke-linecap stroke-linejoin stroke-width d
+        class viewBox cx cy r x y points x1 y1 x2 y2 aria-hidden aria-label focusable
+      ]
+    )
+  end
+end