trek 2.1.0 → 2.3.0

data/app/models/concerns/trek/users/validations.rb

@@ -6,7 +6,7 @@ module Trek
       included do
         validates :password,
           length: { minimum: 8 },
-          if: -> { new_record? || changes[:crypted_password] },
+          if: -> { new_record? || password_digest_changed? },
           allow_blank: true
         validates :email,
           presence: true,

data/app/models/prosemirror.rb

@@ -10,9 +10,12 @@ class Prosemirror
   def format_content(parsed_content)
     return if parsed_content.blank?
 
-    content = renderer.render(parsed_content)
+    # GlobalIDs must be resolved to URLs before rendering: the renderer's
+    # sanitizer strips href attributes with unknown protocols, so a gid://
+    # link would lose its href entirely.
+    content = ProsemirrorToHtml::GlobalIdToLinksFormatter.new(parsed_content.to_json).to_s
+    content = renderer.render(JSON.parse(content))
     content = ProsemirrorToHtml::RemoveEmptyParagraphsFormatter.new(content).to_s
-    content = ProsemirrorToHtml::GlobalIdToLinksFormatter.new(content).to_s
     # rubocop:disable Rails/OutputSafety
     content.html_safe
     # rubocop:enable Rails/OutputSafety

data/app/uploaders/audio_uploader.rb

@@ -0,0 +1,11 @@
+class AudioUploader < Shrine
+  plugin :determine_mime_type
+  plugin :validation_helpers
+  # The admin's sound field accepts files up to 200 MB (`Trek::Form::SoundFieldComponent`), above
+  # the 20 MB the Shrine initializer allows images.
+  plugin :upload_endpoint, url: true, max_size: 200.megabytes
+
+  Attacher.validate do
+    validate_mime_type %w[audio/mpeg audio/mp4 audio/aac audio/ogg audio/wav audio/x-wav audio/webm audio/flac]
+  end
+end

data/app/uploaders/record_image_uploader.rb

@@ -1,3 +1,6 @@
 class RecordImageUploader < ImageUploader
   plugin :activerecord
+  # Keeps a file attached during a save that reloads the record (closure_tree reorders siblings
+  # that way) pending, so it is still promoted out of the cache storage on commit.
+  plugin Trek::SavedAttachmentsReload
 end

data/app/views/trek/panels/images/_form.html.slim

@@ -24,7 +24,7 @@ h1.c-trek--layout-panel-title = t(".title")
   = render Trek::Form::ActionsComponent.new do |c|
     ruby:
       c.with_button(
-        data: { action: "trek--layout#closePanel" },
+        data: { action: "trek--layout#closeStackedPanel" },
         text: t("admin.actions.cancel"),
       )
 

data/app/views/trek/panels/images/create.turbo_stream.slim

@@ -1,6 +1,6 @@
 - if @object.valid?
-  = turbo_stream.append("trek--layout-panel")
-    div(data-trek--layout-target="panelCloser")
+  = turbo_stream.append("trek--layout-stacked-panel")
+    div(data-trek--layout-target="stackedPanelCloser")
 
   = turbo_stream.append(@object.turbo_frame_id)
     div(
@@ -15,5 +15,5 @@
         text=@object.text
       )
 - else
-  = turbo_stream.update("trek--layout-panel")
+  = turbo_stream.update("trek--layout-stacked-panel")
     = render "form"

data/app/views/trek/panels/images/new.html.slim

@@ -1,2 +1,2 @@
-= turbo_frame_tag("trek--layout-panel")
+= turbo_frame_tag("trek--layout-stacked-panel")
   = render "form"

data/app/views/trek/panels/links/_form.html.slim

@@ -28,7 +28,7 @@ h1.c-trek--layout-panel-title = t(".title")
   = render Trek::Form::ActionsComponent.new do |c|
     ruby:
       c.with_button(
-        data: { action: "trek--layout#closePanel" },
+        data: { action: "trek--layout#closeStackedPanel" },
         text: t("admin.actions.cancel"),
       )
 

data/app/views/trek/panels/links/create.turbo_stream.slim

@@ -1,6 +1,6 @@
 - if @object.valid?
-  = turbo_stream.append("trek--layout-panel")
-    div(data-trek--layout-target="panelCloser")
+  = turbo_stream.append("trek--layout-stacked-panel")
+    div(data-trek--layout-target="stackedPanelCloser")
 
   = turbo_stream.append(@object.turbo_frame_id)
     div(
@@ -8,5 +8,5 @@
       data-params=@object.to_json
     )
 - else
-  = turbo_stream.update("trek--layout-panel")
+  = turbo_stream.update("trek--layout-stacked-panel")
     = render "form"

data/app/views/trek/panels/links/new.html.slim

@@ -1,2 +1,2 @@
-= turbo_frame_tag("trek--layout-panel")
+= turbo_frame_tag("trek--layout-stacked-panel")
   = render "form"

data/app/views/trek/panels/prompts/_form.html.slim

@@ -26,7 +26,7 @@ h1.c-trek--layout-panel-title = t(".title")
   = render Trek::Form::ActionsComponent.new do |c|
     ruby:
       c.with_button(
-        data: { action: "trek--layout#closePanel" },
+        data: { action: "trek--layout#closeStackedPanel" },
         text: t("admin.actions.cancel"),
       )
 

data/app/views/trek/panels/prompts/create.turbo_stream.slim

@@ -1,6 +1,6 @@
 - if @object.valid?
-  = turbo_stream.append("trek--layout-panel")
-    div(data-trek--layout-target="panelCloser")
+  = turbo_stream.append("trek--layout-stacked-panel")
+    div(data-trek--layout-target="stackedPanelCloser")
 
   = turbo_stream.append(@object.turbo_frame_id)
     div(
@@ -14,5 +14,5 @@
         title=@object.title
       )
 - else
-  = turbo_stream.update("trek--layout-panel")
+  = turbo_stream.update("trek--layout-stacked-panel")
     = render "form"

data/app/views/trek/panels/prompts/new.html.slim

@@ -1,2 +1,2 @@
-= turbo_frame_tag("trek--layout-panel")
+= turbo_frame_tag("trek--layout-stacked-panel")
   = render "form"

data/config/locales/trek.en.yml

@@ -69,8 +69,8 @@ en:
           self: the same tab
       prompt:
         targets:
-          blank: un nouvel onglet
-          self: le même onglet
+          blank: a new tab
+          self: the same tab
     contents: Contents
     dashboard: Dashboard
     dashboards:
@@ -264,3 +264,4 @@ en:
   notices:
     authentication_needed: Please log in
     rate_limited: Too many attempts, please try again later
+    unauthorized: You are not allowed to do that

data/config/locales/trek.fr.yml

@@ -273,3 +273,4 @@ fr:
   notices:
     authentication_needed: Veuillez vous connecter
     rate_limited: Trop de tentatives, veuillez réessayer plus tard
+    unauthorized: Vous n'êtes pas autorisé·e à faire cela

data/docs/customize.md

@@ -27,7 +27,21 @@ Replace Trek's favicon with your own:
 Trek's UI components accept options where it matters:
 
 - **`Trek::Form::ActionsComponent`** — pick an `aspect` and add your own `classnames` to restyle form action bars.
-- **`Trek::DialogComponent`** — set the `title` and the buttons of modal dialogs.
+- **`Trek::DialogComponent`** — set the `title` and the buttons of modal dialogs. The confirm dialog wired to `data-turbo-confirm` can also be customized per action from the confirming element's data attributes, with the delete wording as fallback:
+
+```slim
+= render Trek::ButtonComponent.new(
+  text: "Run the prize draw",
+  to: admin_event_draw_path(event), method: :post,
+  data: {
+    turbo_confirm: "Run the prize draw now? Winners will be picked and emails sent.",
+    turbo_confirm_title: "Prize draw",
+    turbo_confirm_button: "Run the draw",
+    turbo_confirm_color: "grass",
+  },
+)
+```
+
 - **`Trek::Form::ContentEditorComponent`** — toggle the `nodes`, `blocks` and `floating` options to slim down the editor where full rich text isn't needed:
 
 ```ruby
@@ -62,9 +76,11 @@ Each scaffolded resource gets its own policy in `app/policies/admin`. Adjust the
 
 Trek's admin supports light, dark and auto themes, selectable per user. The design tokens are based on [Radix colors](https://www.radix-ui.com/colors); override the CSS custom properties in your own stylesheet to adapt the palette.
 
+The auto theme follows the system setting (`prefers-color-scheme`). The `autoDarkTheme` plugin in the generated `postcss.config.js` copies every rule targeting `.dark-theme` into a `@media (prefers-color-scheme: dark)` block, with `.auto-theme` in its place, so dark overrides in your own stylesheets (`.dark-theme { --accent-9: … }`, `.dark-theme .card { … }`) apply to the auto theme too.
+
 ## Dependencies configuration
 
-The installer configures Shrine, Postmark, Sorcery, ActionPolicy, Mobility and friends with sensible defaults — through initializers generated **in your app**. You can edit them at any time:
+The installer configures Shrine, Postmark, ActionPolicy, Mobility and friends with sensible defaults — through initializers generated **in your app**. You can edit them at any time:
 
 - `config/initializers/shrine.rb` — storage backends, upload limits
 - `config/credentials.yml.enc` — Postmark API token (`EDITOR="code --wait" bin/rails credentials:edit`)

data/docs/deploy.md

@@ -20,14 +20,19 @@ Generate the Scalingo files (an `Aptfile` and a `Procfile` with the web process
 rails g trek:install:scalingo
 ```
 
-Then configure the Scalingo app's environment, pinning the buildpack to a release tag:
+Then configure the Scalingo app's environment, pinning the buildpack to a release through its archive:
 
 ```sh
-scalingo --app <app> env-set BUILDPACK_URL=https://github.com/etaminstudio/trek-buildpack#v0.1.0
+scalingo --app <app> env-set BUILDPACK_URL=https://github.com/etaminstudio/trek-buildpack/archive/refs/tags/v0.1.0.tar.gz
 scalingo --app <app> env-set 'DATABASE_URL=$SCALINGO_POSTGRESQL_URL'
 scalingo --app <app> env-set RAILS_MASTER_KEY=$(cat config/master.key)
 ```
 
+> Pin through the archive, not a `#tag` suffix: Scalingo reads `#ref` on `BUILDPACK_URL` as a **branch**, so
+> `…/trek-buildpack#v0.1.0` asks for a branch named `v0.1.0`, which does not exist, and the build fails with
+> `fail to download and extract the custom buildpack: Invalid status code: 404 Not Found`. The `.tar.gz` form above is
+> downloaded as is and stays pinned to the release.
+
 Make sure `config/database.yml` reads `DATABASE_URL` in production — the section `rails new` generates targets a local socket with a password variable instead:
 
 ```yml

data/docs/getting-started.md

@@ -68,7 +68,7 @@ The installer will:
 - create the `Fragment` model and include Trek's concerns
 - create the relevant policies
 - generate and run the relevant migrations
-- set up authentication (Sorcery), authorization (ActionPolicy), uploads (Shrine), emails (Postmark), i18n, linting, CI and more
+- set up authentication (`has_secure_password` with database-backed sessions), authorization (ActionPolicy), uploads (Shrine), emails (Postmark), i18n, linting, CI and more
 
 ### Configure Postmark (optional)
 

data/docs/index.md

@@ -32,7 +32,7 @@ features:
     details: Content and admin UI translations powered by Mobility and i18n-tasks, with optional automatic translation via DeepL.
   - icon: 🔐
     title: Roles & policies built in
-    details: Sorcery authentication and ActionPolicy authorization with admin, editor, user, reader and guest roles, enforced across every panel.
+    details: Authentication on Rails' own has_secure_password and ActionPolicy authorization with admin, editor, user, reader and guest roles, enforced across every panel.
   - icon: 🧩
     title: Hotwire-native UI
     details: ViewComponents, Stimulus and Turbo under the hood, with light & dark themes, Radix colors and a customizable design system.

data/docs/reference/components.md

@@ -22,6 +22,21 @@ The main building blocks, all in the `Trek::` namespace:
 | `HeadingComponent` | headings |
 | `GateComponent` | authorization-based visibility gate |
 | `IconComponent` | SVG [icon](/reference/icons) renderer |
+| `Dashboard::SectionComponent` / `Dashboard::TileComponent` | dashboard sections of shortcut tiles |
+
+## Dashboard tiles
+
+A tile is a link by default. With `method:`, it issues another HTTP method through Turbo (as a `data-turbo-method` link), so a tile can create a record in one click rather than open a form; `data:` adds attributes to the link, such as a confirmation:
+
+```ruby
+s.with_tile(
+  text: "New weekly draft",
+  icon: "trek/add",
+  href: [:draft_current_week, :admin, :newsletters],
+  method: :post,
+  data: { turbo_confirm: "Create this week's draft?" }
+)
+```
 
 ## Form components
 

data/docs/reference/concerns/phonable.md

@@ -13,11 +13,37 @@ end
 
 For each declared attribute:
 
-- a validation (`phone: { possible: true, allow_blank: true }`)
+- a validation (`phone: { possible: true, allow_blank: true }`, see [Strictness](#strictness))
 - normalization to E.164 international format on save
 - `formatted_{attr}` — national format (`"01 23 45 67 89"`)
 - `{attr}_with_country_code` — E.164 (`"+33123456789"`)
 
+## Strictness
+
+`strictness:` picks how hard Phonelib looks at a number. It applies to every attribute of the call.
+
+| value | what is accepted |
+| --- | --- |
+| `:possible` (default) | the digits **could** form a number for the country — right length and shape |
+| `:valid` | the digits fall in a range the regulator has actually **assigned** |
+
+```ruby
+class Organization < ApplicationRecord
+  include Trek::Phonable
+  phonable_attributes :phone, strictness: :valid
+end
+```
+
+The gap between the two is worth knowing before leaving the default in place. With
+`Phonelib.default_country = "FR"`, `"0012345678"` is *possible*: under `:possible` it is accepted and
+normalized to `"+12345678"` — the stray leading zero read as an international prefix, the number
+silently rehomed to country code +1, and the original input gone, since normalization happens on
+save. Under `:valid` the same input is rejected and the person is asked to correct it.
+
+`:possible` is the right default for a number stored as a way to reach someone, where a false
+rejection is worse than a number that never gets dialled. Choose `:valid` when the application
+intends to actually call or text what it collects.
+
 ## Usage
 
 ```ruby

data/docs/reference/environment-variables.md

@@ -4,6 +4,8 @@
 | --- | --- |
 | `ADMIN_EMAIL` / `ADMIN_PASSWORD` | credentials used by [`trek:admin:user`](/reference/generators/admin-user) |
 | `POSTMARK_API_TOKEN` | Postmark email delivery (auto-injected into credentials by the [installer](/reference/generators/install)) |
+| `APPSIGNAL_PUSH_API_KEY` | AppSignal error tracking and performance monitoring (auto-injected into credentials by the [installer](/reference/generators/install)) |
+| `APPSIGNAL_APP_ENV` | environment name reported to AppSignal (optional, defaults to `RAILS_ENV`) |
 | `DEEPL_AUTH_KEY` | automatic locale translation in the [scaffold generator](/reference/generators/scaffold) |
 | `FEATURE_STORAGE` | `local` (development) or `s3` (production) |
 | `S3_BUCKET`, `S3_REGION`, `S3_ENDPOINT`, `S3_ACCESS_KEY_ID`, `S3_SECRET_ACCESS_KEY`, `S3_BASE_URL` | S3 storage configuration for [uploads](/reference/uploaders) |

data/docs/reference/forms.md

@@ -13,6 +13,8 @@ Trek ships `Trek::FormBuilder`, an extension of [`ViewComponent::Form`](https://
 
 Each helper renders the matching component from the [`Trek::Form` namespace](/reference/components#form-components).
 
+Standard helpers are styled too: a plain `f.file_field` inside an `f.group` gets its native `::file-selector-button` styled like a narrow `Trek::ButtonComponent` (following the current `data-accent-color`), keeping the browser's built-in "file chosen" feedback with no JS — handy for one-off uploads like a spreadsheet import.
+
 ```slim
 = form_with model: [:admin, @book] do |f|
   = f.group :title

data/docs/reference/generators/install.md

@@ -21,7 +21,7 @@ The installer orchestrates dedicated sub-generators, all under the `trek:install
 
 | Area | What gets set up |
 | --- | --- |
-| Authentication | Sorcery, the `UserSession` form model, login/logout & password reset panels |
+| Authentication | bcrypt and `has_secure_password` on `User`, the `UserSession` model (one per signed-in browser, found through a signed `session_id` cookie), the `Trek::Authentication` controller concern, login/logout & password reset panels |
 | Authorization | ActionPolicy and the base policies |
 | Models | `User`, `Page`, `PagePath`, `PageVersion`, `Fragment`, `MenuNode`, `ExternalLink`, `Current` — with migrations |
 | Attachments | Shrine configuration and the uploaders |
@@ -32,6 +32,8 @@ The installer orchestrates dedicated sub-generators, all under the `trek:install
 | Tooling | esbuild, PostCSS, EditorConfig, Procfiles, Makefile, health check endpoint |
 | Linting | Standard, ESLint, Stylelint, Prettier, Slim Lint, Lefthook git hooks |
 | Security | Brakeman, bundler-audit, ruby_audit |
+| Monitoring | AppSignal error tracking and performance monitoring — `config/appsignal.rb`, the push API key in the credentials, and the `AppsignalContext` concern tagging transactions per area and user |
+| Specs | RSpec, and specs for the models Trek installs (`trek:install:model_specs`): `spec/models/page_spec.rb` and `spec/models/user_spec.rb`, with their test data as [Oaken](https://github.com/kaspth/oaken) seed scripts — defaults in `db/seeds/setup/`, scenarios in `db/seeds/test/cases/` loaded with `seed "cases/…"`. They check Trek's behaviour in your app — slugs and paths, user validations and roles — so a customization that breaks it fails your suite; edit or remove the ones you deliberately change. Trek's own suite runs the same files |
 | N+1 detection | Prosopite (development/test), scanning every request — see [Controllers › N+1 detection](/reference/controllers#n-1-detection) |
 | CI | GitLab CI configuration |
 | Deployment | Scalingo files (`trek:install:scalingo`, run on demand) — see [Deploying to Scalingo](/deploy) |
@@ -41,4 +43,5 @@ The installer orchestrates dedicated sub-generators, all under the `trek:install
 Define these **before** running the installer to have them injected automatically:
 
 - `POSTMARK_API_TOKEN` — injected into the Rails credentials for email delivery
+- `APPSIGNAL_PUSH_API_KEY` — injected into the Rails credentials for error tracking and performance monitoring
 - `DEEPL_AUTH_KEY` — enables automatic locale translation in the [scaffold generator](/reference/generators/scaffold)

data/docs/reference/icons.md

@@ -6,6 +6,6 @@ Trek bundles ~40 SVG icons, rendered with `Trek::IconComponent`:
 render Trek::IconComponent.new(:search)
 ```
 
-Available keys include: `add`, `arrow-bar-left`, `arrow-bar-right`, `bold`, `check`, `chevron-left`, `chevron-right`, `chevron-double`, `close`, `cursor`, `danger`, `download`, `eraser`, `eye`, `grid`, `hr`, `italic`, `layout`, `link`, `list`, `logout`, `paragraph`, `pic`, `profile`, `quotation`, `rating`, `redo`, `undo`, `search`…
+Available keys include: `add`, `arrow-bar-left`, `arrow-bar-right`, `bold`, `check`, `chevron-left`, `chevron-right`, `chevron-double`, `close`, `cursor`, `danger`, `download`, `eraser`, `external`, `eye`, `grid`, `hr`, `italic`, `layout`, `link`, `list`, `logout`, `paragraph`, `pic`, `profile`, `quotation`, `rating`, `redo`, `undo`, `search`…
 
 [MenuNode](/reference/models/menu-node) records can reference an icon via their `icon_key` to display it in the admin sidebar.

data/docs/reference/models/tag.md

@@ -12,7 +12,7 @@ The taxonomy models, installed by the [taxonomies generator](/reference/generato
 | `position` | integer | ordering within the category |
 | `taggings_count` | integer | counter cache |
 
-- `belongs_to :category`, `has_many :taggings`, `has_many :taggables, through: :taggings`
+- `belongs_to :category`, `has_many :taggings`, and `taggables`, the tagged records of any model
 - Scopes: `ordered`, `in_category(key)`, `in_categories(keys)`
 
 ## TagCategory

data/docs/reference/models/user.md

@@ -1,6 +1,6 @@
 # User
 
-The host application's `User` model, into which Trek injects authentication (Sorcery), roles, theme & locale preferences and the invitation workflow.
+The host application's `User` model, into which Trek injects authentication (`has_secure_password` and database-backed sessions), roles, theme & locale preferences and the invitation workflow.
 
 ## Columns added by Trek
 
@@ -10,8 +10,10 @@ The host application's `User` model, into which Trek injects authentication (Sor
 | `role` | integer | enum, default `guest` |
 | `theme` | integer | enum, default `auto` |
 | `locale` | string | admin UI language |
+| `password_digest` | string | `has_secure_password` (bcrypt), required |
+| `last_activity_at` | datetime | updated after each signed-in admin request |
 
-Plus the Sorcery authentication columns (`email`, `crypted_password`, reset tokens…).
+When the app has no `User` model yet, Trek creates the `users` table with its `email` column. Signed-in browsers are `UserSession` records (`user_agent`, `ip_address`) in a `user_sessions` table, found through a signed `session_id` cookie. Password reset (15 minutes) and invitation (1 week) links carry tokens from `generates_token_for`, so no column stores them.
 
 ## Roles
 

data/docs/reference/uploaders.md

@@ -5,15 +5,40 @@ File uploads are handled by [Shrine](https://shrinerb.com), with Uppy on the fro
 - `ImageUploader` — base image uploader
 - `RecordImageUploader` — attach an image to any record: `include RecordImageUploader::Attachment(:image)`
 - `ModelImageUploader` — model-level image uploader (used by content editor images)
+- `AudioUploader` — sounds for `f.sound_field` (MP3, AAC/M4A, Ogg, WAV, WebM, FLAC): `include AudioUploader::Attachment(:audio)` on a record with an `audio_data` jsonb column
 
 ## Storage
 
 Configured per environment in the generated Shrine initializer (`config/initializers/shrine.rb`):
 
-| Environment | Storage |
-| --- | --- |
-| production | S3 (via the [`S3_*` ENV variables](/reference/environment-variables)) |
-| development | local filesystem (`public/uploads/`) |
-| test | in-memory |
+| Environment | Storage                                                               |
+| ----------- | --------------------------------------------------------------------- |
+| production  | S3 (via the [`S3_*` ENV variables](/reference/environment-variables)) |
+| development | local filesystem (`public/uploads/`)                                  |
+| test        | in-memory                                                             |
 
-Image processing uses libvips, blurhash placeholders are generated for progressive loading, and direct uploads go through the Shrine `upload_endpoint` (20 MB max).
+Image processing uses libvips, blurhash placeholders are generated for progressive loading, and direct uploads go through the Shrine `upload_endpoint`: `POST /admin/upload/image` (20 MB max) and `POST /admin/upload/audio` (200 MB max), handled by the generated `Admin::UploadsController`. The endpoint only checks the size; each uploader validates the file type when it is attached to a record.
+
+## Attachments and records reloaded mid-save
+
+`RecordImageUploader` loads `Trek::SavedAttachmentsReload` on top of Shrine's `activerecord` plugin:
+
+```ruby
+class RecordImageUploader < ImageUploader
+  plugin :activerecord
+  plugin Trek::SavedAttachmentsReload
+end
+```
+
+Shrine resets every attacher when a record is reloaded, which is right for an explicit reload but loses a pending attachment when something reloads the record _during_ the save — closure_tree does exactly that in its `after_save` callback when it reorders the siblings of a numerically ordered tree, as the generated `Page` is. The file would then never be promoted out of the `cache` storage. The plugin keeps, across such a reload, the attachers whose file was saved with the record; an attachment assigned but not saved is still discarded.
+
+## Files left in the cache storage
+
+An uploaded file first lands in the temporary `cache` storage, and is promoted to the permanent `store` after the record is committed. A record whose promotion was skipped keeps pointing to the cache, and its file breaks as soon as the cache is cleaned up. To find those records, for every model and attachment, and promote the ones whose file still exists:
+
+```bash
+DRY_RUN=1 bin/rails trek:attachments:promote_cached # only lists them
+bin/rails trek:attachments:promote_cached
+```
+
+Each line gives the status (`promoted`, `promotable` on a dry run, `missing` when the cached file is gone, `changed` when the record changed meanwhile), the record and attachment, and the file id. Missing files have to be uploaded again.

data/docs/what-is-trek.md

@@ -10,7 +10,7 @@ Trek ships as a Rails engine (a gem plus an NPM package) that integrates into yo
 - **Pages** — hierarchical, translatable pages with version history, SEO metadata and stable, redirect-aware URL paths.
 - **Fragments** — reusable chunks of content (a footer text, a hero tagline…) editable from the admin and usable anywhere in your views.
 - **A rich text editor** — based on [Tiptap](https://tiptap.dev), with image uploads (Uppy), link insertion and content stored as structured ProseMirror JSON.
-- **Authentication & authorization** — [Sorcery](https://github.com/Sorcery/sorcery)-based sign in, password resets, invitations, and [ActionPolicy](https://actionpolicy.evilmartians.io) policies with `admin`, `editor`, `user`, `reader` and `guest` roles.
+- **Authentication & authorization** — sign in built on Rails' [`has_secure_password`](https://api.rubyonrails.org/classes/ActiveModel/SecurePassword/ClassMethods.html) with database-backed sessions, password resets, invitations, and [ActionPolicy](https://actionpolicy.evilmartians.io) policies with `admin`, `editor`, `user`, `reader` and `guest` roles.
 - **Internationalization** — content translations with [Mobility](https://github.com/shioyama/mobility), locale management with [i18n-tasks](https://github.com/glebm/i18n-tasks), and optional automatic translation through DeepL.
 - **File uploads** — [Shrine](https://shrinerb.com)-backed attachments with S3 or local storage, image processing via libvips, and blurhash placeholders.
 - **Generators** — an installer that sets up everything above, and a scaffold generator that creates a full admin panel for any model in one command.

data/lib/generators/trek/install/admin/routes_generator.rb

@@ -14,7 +14,13 @@ module Trek
           end
 
           def upload_image
-            route 'post "upload", to: "uploads#image", namespace: :admin'
+            # The endpoint `Trek::Form::ImageFieldComponent` uploads to: /admin/upload/image
+            route 'post "upload/image", to: "uploads#image"', namespace: :admin
+          end
+
+          def upload_audio
+            # The endpoint `Trek::Form::SoundFieldComponent` uploads to: /admin/upload/audio
+            route 'post "upload/audio", to: "uploads#audio"', namespace: :admin
           end
 
           def lookbook

data/lib/generators/trek/install/appsignal_generator.rb

@@ -0,0 +1,102 @@
+require "rails/generators/actions"
+require "generators/trek/helpers"
+
+module Trek
+  module Generators
+    module Install
+      class AppsignalGenerator < Rails::Generators::Base
+        include Trek::Generators::Helpers
+
+        desc "Install AppSignal (error tracking and performance monitoring)."
+
+        source_root File.expand_path("../templates", __dir__)
+
+        def add_gem
+          return if in_gemfile?("appsignal")
+
+          gem "appsignal", comment: "Error tracking and performance monitoring [https://appsignal.com]"
+          bundle_install
+        end
+
+        # Like Postmark's API token: the secret lives in the Rails credentials, not in
+        # config/appsignal.rb (where `appsignal install` would write it in plain text).
+        def inject_appsignal_to_credentials
+          return if credentials_encrypted_file.read&.include?("appsignal:")
+
+          inject_into_credentials(
+            <<~YAML
+              appsignal:
+                push_api_key: #{ENV.fetch("APPSIGNAL_PUSH_API_KEY", "")}
+            YAML
+          )
+        end
+
+        def create_config
+          template "config/appsignal.rb", "config/appsignal.rb"
+        end
+
+        def add_app_env_to_env_example
+          return unless File.exist?(".env.example")
+          return if File.read(".env.example").include?("APPSIGNAL_APP_ENV")
+
+          append_to_file ".env.example", "APPSIGNAL_APP_ENV=\n"
+        end
+
+        # A broken initializer or a missing credential raises before Rails can report
+        # anything — the error reporter does not exist yet — so the boot is wrapped.
+        def report_boot_errors
+          return unless File.exist?("config.ru")
+          return if File.read("config.ru").include?("Appsignal.send_error")
+
+          gsub_file "config.ru",
+            %r{^require_relative ["']config/environment["']\n},
+            boot_error_reporting
+        end
+
+        def create_context_concern
+          copy_file "controllers/concerns/appsignal_context.rb",
+            "app/controllers/concerns/appsignal_context.rb"
+        end
+
+        def include_context_in_application_controller
+          return if File.read("app/controllers/application_controller.rb").include?("AppsignalContext")
+
+          inject_into_class "app/controllers/application_controller.rb",
+            "ApplicationController",
+            "  include AppsignalContext\n"
+          run "rubocop --autocorrect app/controllers/application_controller.rb", abort_on_failure: true
+        end
+
+        def include_context_in_trek_controllers
+          copy_file "initializers/appsignal_context.rb",
+            "config/initializers/appsignal_context.rb"
+        end
+
+        def final_instructions
+          say ""
+          say "AppSignal is configured for production. Check the setup with:"
+          say ""
+          say "    bundle exec appsignal diagnose"
+          say ""
+        end
+
+        private
+
+        def boot_error_reporting
+          <<~RUBY
+            begin
+              require_relative "config/environment"
+            rescue Exception => error # rubocop:disable Lint/RescueException
+              # Errors raised while booting (a broken initializer, a missing credential)
+              # happen before the Rails error reporter exists — report them directly.
+              # The gem itself is loaded by Bundler.require, so a failure earlier than
+              # that (config/boot.rb, the Gemfile) has no Appsignal to report with.
+              Appsignal.send_error(error) if defined?(Appsignal)
+              raise
+            end
+          RUBY
+        end
+      end
+    end
+  end
+end

data/lib/generators/trek/install/model_specs_generator.rb

@@ -0,0 +1,64 @@
+require "rails/generators/actions"
+require "generators/trek/helpers"
+
+module Trek
+  module Generators
+    module Install
+      class ModelSpecsGenerator < Rails::Generators::Base
+        include Trek::Generators::Helpers
+
+        desc "Add specs for the models Trek installs (Page, User…), with their Oaken seeds."
+
+        source_root File.expand_path("../templates", __dir__)
+
+        # In every group: `db/seeds.rb` calls Oaken, and `db:seed` runs in every environment.
+        def add_gem
+          return if in_gemfile?("oaken")
+
+          gem "oaken", "~> 1.0"
+          bundle_install
+        end
+
+        def load_oaken_in_seeds
+          seeds = File.join(destination_root, "db/seeds.rb")
+          return if File.exist?(seeds) && File.read(seeds).include?("Oaken.seed")
+
+          create_file "db/seeds.rb" unless File.exist?(seeds)
+          append_to_file "db/seeds.rb", <<~RUBY
+
+            # Oaken (https://github.com/kaspth/oaken) loads db/seeds/setup (defaults and helpers) first.
+            # Pass directories to seed them too, e.g. `Oaken.seed :data`; specs load their own cases with
+            # `seed "cases/…"`.
+            Oaken.seed
+          RUBY
+        end
+
+        def load_oaken_in_specs
+          rails_helper = File.join(destination_root, "spec/rails_helper.rb")
+          return unless File.exist?(rails_helper)
+          return if File.read(rails_helper).include?("oaken/rspec_setup")
+
+          # After rspec-rails, which Oaken's setup configures (transactional examples, seeding the
+          # database before the suite).
+          inject_into_file "spec/rails_helper.rb",
+            "require \"oaken/rspec_setup\"\n",
+            after: %r{^require ["']rspec/rails["'].*\n}
+        end
+
+        # Every file under the templates' db/seeds, spec/models and spec/requests is installed, so a new
+        # template needs no change here.
+        def copy_seeds
+          directory "db/seeds", "db/seeds"
+        end
+
+        def copy_specs
+          directory "spec/models", "spec/models"
+          directory "spec/requests", "spec/requests"
+          directory "spec/fixtures", "spec/fixtures"
+          # The tag policies' specs come with them, from `trek:taxonomies`.
+          directory "spec/policies", "spec/policies", exclude_pattern: /tag(_category)?_policy_spec/
+        end
+      end
+    end
+  end
+end