flask-construct-ui 0.11.5__tar.gz → 0.11.7__tar.gz

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: flask-construct-ui
-Version: 0.11.5
+Version: 0.11.7
 Summary: A UI toolkit for Flask with CRUD and component features.
 Author-email: Olof Tjerngren <olof@tjerngren.net>
 License-Expression: LGPL-3.0-or-later

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/__init__.py

@@ -10,6 +10,7 @@ from .base import edit_action as edit_action
 from .base import datasource as datasource
 from .base import livesource as livesource
 from .base import gridsource as gridsource
+from .navigation import fragment as fragment
 from .base import SSE_DONE as SSE_DONE
 
 # Component-based pages and the component library. Exposed at the package root

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/app_hooks.py

@@ -239,7 +239,7 @@ def install_template_helpers(construct, app):
 
 
 def register_features_blueprint(construct):
-    """Register ``construct_features``: the search, notifications and menu fragments."""
+    """Register ``construct_features``: the search, notifications, menu and footer fragments."""
     # The features blueprint is registered unconditionally because the menu
     # fragment route cannot be conditional: providers are normally added
     # after init_app (`fcu = FlaskConstructUI(app)` first, decorators
@@ -256,10 +256,12 @@ def register_features_blueprint(construct):
     search_url = "/search"
     notifications_url = "/notifications"
     menu_url = "/menu"
+    footer_url = "/footer"
     if construct.enforce_trailing_slash:
         search_url += "/"
         notifications_url += "/"
         menu_url += "/"
+        footer_url += "/"
 
     route_kwargs = {}
     if construct.strict_slashes is not None:
@@ -301,5 +303,16 @@ def register_features_blueprint(construct):
             construct=construct,
         )
 
+    @features_bp.route(footer_url, **route_kwargs)
+    def footer_fragment():
+        # Just the #fcu-footer-content element that up-poll reloads. Always
+        # rendered, even empty: a poll response lacking its target is an
+        # Unpoly error, and an empty element lets the text come back later.
+        return render_template(
+            "style/_footer.html",
+            construct=construct,
+            footer_fragment=True,
+        )
+
     construct.app.register_blueprint(features_bp)
     construct._blueprint_names.add("construct_features")

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/auth.py

@@ -177,8 +177,8 @@ class AuthProvider:
         """Where to send the reader once they are logged in again, or None.
 
         Delegates to :func:`flask_construct_ui.resume.return_target`: a GET is
-        its own target, anything else falls back to the page it was submitted
-        from. Override to apply a policy of your own — every redirect the
+        its own target, anything else — and a GET to a fragment endpoint —
+        falls back to the page it was made from. Override to apply a policy of your own — every redirect the
         library builds for an interrupted request goes through here.
         """
         return return_target()

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/base.py

@@ -36,6 +36,7 @@ from .components import (
 )
 from .language import Translator, set_language_from_browser
 from .menu import MENU_STAMP_HEADER as MENU_STAMP_HEADER, MenuMixin
+from .navigation import fragment
 from .urls import apply_trailing_slash as apply_trailing_slash
 
 logger = logging.getLogger("flask_construct_ui")
@@ -426,7 +427,7 @@ class ComponentPageBase(PageBase):
                 return controller.handle_json(row_id)
 
             view.__name__ = f"grid_{'row' if with_row else 'rows'}_{sname}"
-            return view
+            return fragment(view)
 
         def make_form_view(sname):
             def view():
@@ -503,7 +504,7 @@ class ComponentPageBase(PageBase):
                     return "", 204
 
                 poll_view.__name__ = f"live_poll_{sname}"
-                return poll_view
+                return fragment(poll_view)
 
             def make_sse_view(m, sname):
                 def sse_view():
@@ -534,7 +535,7 @@ class ComponentPageBase(PageBase):
                     )
 
                 sse_view.__name__ = f"live_sse_{sname}"
-                return sse_view
+                return fragment(sse_view)
 
             poll_url = f"/live/{source_name}/poll"
             sse_url = f"/live/{source_name}/sse"
@@ -677,6 +678,7 @@ class ComponentPageBase(PageBase):
         self._set_active_tabs(root_component)
         return self.render_component(root_component)
 
+    @fragment
     @expose("/_part/<string:component_id>/<int:part_index>")
     def get_part(self, component_id: str, part_index: int):
 
@@ -816,7 +818,8 @@ class FlaskConstructUI(MenuMixin):
         url=None,
         static_url_path=None,
         title=None,
-        footer=None,
+        footer="footer-built-with",
+        footer_poll=None,
         index_view_class=None,
         theme=None,
         design=None,
@@ -892,7 +895,11 @@ class FlaskConstructUI(MenuMixin):
         else:
             self.url = "/"
         self.title = title
-        self.footer = footer or "Built with Construct UI"
+        # See footer_content. Any falsy value (None, "", False) drops the
+        # footer; the default is an l10n key, so it translates like the rest.
+        self.footer = footer
+        # Seconds between Unpoly reloads of the footer content; see footer_poll.
+        self._footer_poll = footer_poll
         self.templatefolder = path.join(path.dirname(__file__), "templates")
 
         if index_view_class is not None:
@@ -1166,6 +1173,56 @@ class FlaskConstructUI(MenuMixin):
     def t(self, msg_id, args=None):
         return self.app.l10n.t(msg_id, args)
 
+    @property
+    def footer_content(self):
+        """The footer to render on full pages, or None for no footer at all.
+
+        ``footer`` (the constructor argument, also settable as ``fcu.footer``)
+        is one of
+
+        * a **string** -- an l10n key or plain text, passed through ``t()``
+          and escaped. The default, ``"footer-built-with"``, reads "Built with
+          Construct UI";
+        * a ``markupsafe.Markup`` -- trusted HTML, emitted as-is (links,
+          icons, several lines);
+        * a **callable** taking no arguments and returning either of the above
+          (or None). It runs per request, inside the request context, so it can
+          use ``url_for``, ``current_user`` or the date;
+        * anything **falsy** (``None``, ``""``, ``False``) -- no footer: the
+          ``<footer>`` element itself is omitted, not left empty.
+
+        For markup beyond one fragment, override ``{% block footer %}`` in the
+        app's ``structure/base.html``; an empty override also removes it.
+        """
+        footer = self.footer
+        if callable(footer):
+            footer = footer()
+        if not footer:
+            return None
+        if isinstance(footer, Markup):
+            return footer
+        return self.t(str(footer))
+
+    @property
+    def footer_url(self):
+        """URL of the footer fragment endpoint (for Unpoly polling)."""
+        return apply_trailing_slash(self.url.rstrip("/") + "/_construct/footer", self)
+
+    @property
+    def footer_poll(self):
+        """Interval in ms for polling the footer content, or None.
+
+        ``footer_poll=<seconds>`` on the constructor keeps a live footer fresh:
+        the footer lives outside ``#main-content``, so in-app navigation never
+        re-renders it, and a callable ``footer`` would otherwise only update on
+        a full page load. Off when no footer is configured -- there is nothing
+        to refresh -- and it only covers ``footer_content``: an app that
+        overrides ``{% block footer %}`` drops the polled element with it.
+        """
+        if self._footer_poll is None or not self.footer:
+            return None
+        return int(self._footer_poll * 1000)
+
     @property
     def notices(self):
         if self._notifications is not None:

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/components/calendar.py

@@ -3,20 +3,26 @@
 from __future__ import annotations
 
 import calendar
-import locale
 from dataclasses import dataclass, field
 from datetime import date, datetime
 from typing import Any, Dict, List, Optional
 
-from flask import g
 from markupsafe import Markup
 
-from flask_construct_ui.language import LOCALE_MAPPING
-
 from ..sanitize import sanitize_html
 from .core import Component, _t, jinja_env
 
 
+_DAY_KEYS = ("mon", "tue", "wed", "thu", "fri", "sat", "sun")
+
+
+def _name(key, default):
+    """A translated day/month name, or ``default`` (the C-locale English name)
+    when the active language's catalogue has no such key."""
+    value = _t(key, default=default)
+    return default if value == key else value
+
+
 @dataclass
 class CalendarComponent(Component):
     datasource: Optional[str] = None
@@ -28,10 +34,13 @@ class CalendarComponent(Component):
         return "calendar"
 
     def render(self) -> str:
-        if self.start_day.lower() == "sunday":
-            calendar.setfirstweekday(calendar.SUNDAY)
-        else:
-            calendar.setfirstweekday(calendar.MONDAY)
+        # A local Calendar, not calendar.setfirstweekday(): that one (like
+        # locale.setlocale) is process-global, so concurrent requests on a
+        # threaded server would see each other's settings.
+        first = (
+            calendar.SUNDAY if self.start_day.lower() == "sunday" else calendar.MONDAY
+        )
+        cal = calendar.Calendar(first)
 
         if self.data:
             first_date = self.data[0].get("date")
@@ -43,27 +52,13 @@ class CalendarComponent(Component):
         else:
             today = date.today()
             year, month = today.year, today.month
-        lang = getattr(g, "language", None)
-        target_locale = LOCALE_MAPPING.get(lang)
-        day_names = calendar.weekheader(3).split()
-        month_name = calendar.month_name[month]
-        if target_locale:
-            original_locale = locale.getlocale(locale.LC_TIME)
-            try:
-                locale.setlocale(locale.LC_TIME, target_locale)
-                # Re-fetch names with the new locale
-                day_names = calendar.weekheader(3).split()
-                month_name = calendar.month_name[month]
-            except locale.Error:
-                # If locale is not installed on the system, it will fail.
-                # We just fall back to the default names.
-                pass
-
-            finally:
-                # Always restore the original locale
-                locale.setlocale(locale.LC_TIME, original_locale)
-
-        month_calendar = calendar.monthcalendar(year, month)
+
+        day_names = [
+            _name(f"calendar-day-{_DAY_KEYS[d]}", calendar.day_abbr[d])
+            for d in cal.iterweekdays()
+        ]
+        month_name = _name(f"calendar-month-{month}", calendar.month_name[month])
+        month_calendar = cal.monthdayscalendar(year, month)
 
         # Cell content may come from a @datasource carrying user data, and the
         # API allows HTML snippets — sanitize before the template marks it safe.

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/crud.py

@@ -19,7 +19,7 @@ from .crud_forms import (
     parse_form_data,
 )
 from .forms import FormData, validate_form_data
-from .navigation import resolve_next
+from .navigation import fragment, resolve_next
 from .pagination import RELATED_SEARCH_LIMIT, get_pagination
 from .base import PageBase, expose
 from .rcrud import RelatedCrudTab as RelatedCrudTab
@@ -341,6 +341,7 @@ class CrudPageBase(PageBase):
             **kwargs,
         )
 
+    @fragment
     @expose("/search/<field_name>")
     def search_related(self, field_name):
         ds = self.dataclass()
@@ -359,6 +360,7 @@ class CrudPageBase(PageBase):
             field_name=field_name,
         )
 
+    @fragment
     @expose("/search-many/<field_name>")
     def search_many_related(self, field_name):
         ds = self.dataclass()

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/data_sqlalchemy.py

@@ -52,11 +52,16 @@ class DataSQLAlchemy(DataBase):
             val_str = str(member.value).lower()
             wrapper_str = str(ftype.ValueWrapper(member.name, member.value)).lower()
             if op == "like":
-                pattern = value.replace("%", ".*").replace("_", ".")
+                # Only the SQL wildcards are operators; everything else the
+                # user typed is literal (an unescaped "(" was a 500).
+                pattern = "".join(
+                    ".*" if ch == "%" else "." if ch == "_" else re.escape(ch)
+                    for ch in value
+                )
                 if (
-                    re.match(f"^{pattern}$", name, re.IGNORECASE)
-                    or re.match(f"^{pattern}$", val_str, re.IGNORECASE)
-                    or re.match(f"^{pattern}$", wrapper_str, re.IGNORECASE)
+                    re.fullmatch(pattern, name, re.IGNORECASE)
+                    or re.fullmatch(pattern, val_str, re.IGNORECASE)
+                    or re.fullmatch(pattern, wrapper_str, re.IGNORECASE)
                 ):
                     matched.append(member)
             else:
@@ -330,18 +335,26 @@ class DataSQLAlchemy(DataBase):
 
                         sub_rec = list_class_ds.model(**sub_kwargs)
                         getattr(rec, ftype.list_field).append(sub_rec)
+                # Sub-row ids come from the form, so resolve them against
+                # this record's own collection — never a bare read(), which
+                # would reach any other parent's rows. Unknown ids are ignored.
+                owned = {}
+                if "delete" in actions or "update" in actions:
+                    list_pk = ftype.list_class()._primary_key
+                    owned = {
+                        str(getattr(item, list_pk)): item
+                        for item in getattr(rec, ftype.list_field)
+                    }
                 if "delete" in actions:
-                    list_class_ds = ftype.list_class()
                     for item_id_to_delete in actions["delete"]:
-                        item_to_delete = list_class_ds.read(item_id_to_delete)
+                        item_to_delete = owned.get(str(item_id_to_delete))
                         if item_to_delete:
                             self.session.delete(item_to_delete)
 
                 if "update" in actions:
-                    list_class_ds = ftype.list_class()
                     for item_to_update_data in actions["update"]:
                         item_id_to_update = item_to_update_data.pop("id")
-                        item_to_update = list_class_ds.read(item_id_to_update)
+                        item_to_update = owned.get(str(item_id_to_update))
                         if item_to_update:
                             for sub_key, sub_value in item_to_update_data.items():
                                 setattr(item_to_update, sub_key, sub_value)

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/l10n/en/main.flt

@@ -60,6 +60,7 @@ nav-skip-to-content = Skip to content
 nav-main = Main navigation
 nav-sidebar = Sidebar
 nav-user-tools = User tools
+footer-built-with = Built with Construct UI
 nav-search = Search
 nav-search-no-results = No results for "{$query}".
 nav-notifications = Notifications
@@ -72,6 +73,25 @@ live-resume = Resume updates
 live-reload = Reload for the latest
 
 calendar-has-events = Has events
+calendar-day-mon = Mon
+calendar-day-tue = Tue
+calendar-day-wed = Wed
+calendar-day-thu = Thu
+calendar-day-fri = Fri
+calendar-day-sat = Sat
+calendar-day-sun = Sun
+calendar-month-1 = January
+calendar-month-2 = February
+calendar-month-3 = March
+calendar-month-4 = April
+calendar-month-5 = May
+calendar-month-6 = June
+calendar-month-7 = July
+calendar-month-8 = August
+calendar-month-9 = September
+calendar-month-10 = October
+calendar-month-11 = November
+calendar-month-12 = December
 
 chart-label = Chart
 chart-unsupported-type = Unsupported chart type

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/l10n/sv/main.flt

@@ -61,6 +61,7 @@ nav-skip-to-content = Hoppa till innehåll
 nav-main = Huvudnavigering
 nav-sidebar = Sidopanel
 nav-user-tools = Användarverktyg
+footer-built-with = Byggd med Construct UI
 nav-search = Sök
 nav-search-no-results = Inga resultat för "{$query}".
 nav-notifications = Notifieringar
@@ -73,6 +74,25 @@ live-resume = Återuppta uppdateringar
 live-reload = Ladda om för senaste
 
 calendar-has-events = Har händelser
+calendar-day-mon = mån
+calendar-day-tue = tis
+calendar-day-wed = ons
+calendar-day-thu = tor
+calendar-day-fri = fre
+calendar-day-sat = lör
+calendar-day-sun = sön
+calendar-month-1 = januari
+calendar-month-2 = februari
+calendar-month-3 = mars
+calendar-month-4 = april
+calendar-month-5 = maj
+calendar-month-6 = juni
+calendar-month-7 = juli
+calendar-month-8 = augusti
+calendar-month-9 = september
+calendar-month-10 = oktober
+calendar-month-11 = november
+calendar-month-12 = december
 
 chart-label = Diagram
 chart-unsupported-type = Diagramtypen stöds inte

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/navigation.py

@@ -38,8 +38,12 @@ RECORD_TARGET = ":record"
 #: OIDC authorize route out of ``next`` — a route can be perfectly legitimate
 #: to *request* and still be nonsense to *land on*.
 #:
+#: Per-page fragment routes (a CRUD page's related-search dropdowns, a
+#: component page's parts and live polls) have one endpoint per page, so they
+#: cannot be listed here; their view functions carry :func:`fragment` instead.
 #: Apps list their own fragment routes (anything driven by ``up-poll`` or
-#: reloaded through ``up-source``) in ``CONSTRUCT_FRAGMENT_ENDPOINTS``.
+#: reloaded through ``up-source``) in ``CONSTRUCT_FRAGMENT_ENDPOINTS``, or mark
+#: the view with ``@fragment``.
 FRAGMENT_ENDPOINTS = frozenset(
     {
         "construct_features.menu_fragment",
@@ -49,6 +53,22 @@ FRAGMENT_ENDPOINTS = frozenset(
 )
 
 
+#: Attribute :func:`fragment` sets on a view function.
+FRAGMENT_ATTR = "_construct_fragment"
+
+
+def fragment(view):
+    """Mark ``view`` as answering with a bare fragment, never a whole page.
+
+    The per-view spelling of :data:`FRAGMENT_ENDPOINTS`, for routes whose
+    endpoint name is not known up front — every ``CrudPageBase`` gets its own
+    ``<endpoint>.search_related``, and RCRUD forwards it again under the
+    parent's blueprint. Order relative to ``@expose`` does not matter.
+    """
+    setattr(view, FRAGMENT_ATTR, True)
+    return view
+
+
 def fragment_endpoints():
     """Every endpoint that must not be landed on: built-ins plus the app's."""
     extra = current_app.config.get("CONSTRUCT_FRAGMENT_ENDPOINTS") or ()
@@ -69,9 +89,8 @@ def is_fragment_target(url=None):
     there".
     """
     try:
-        endpoints = fragment_endpoints()
         if url is None:
-            return request.endpoint in endpoints
+            return _is_fragment_endpoint(request.endpoint)
         path = urlparse(url).path
         adapter = current_app.url_map.bind(request.host)
         try:
@@ -81,11 +100,19 @@ def is_fragment_target(url=None):
             # to the same view, so follow it rather than reporting the URL as
             # harmless because it was spelled without the slash.
             endpoint, _ = adapter.match(urlparse(redirect.new_url).path, method="GET")
-        return endpoint in endpoints
+        return _is_fragment_endpoint(endpoint)
     except Exception:
         return False
 
 
+def _is_fragment_endpoint(endpoint):
+    """True when ``endpoint`` is listed as a fragment or its view is marked."""
+    if endpoint in fragment_endpoints():
+        return True
+    view = current_app.view_functions.get(endpoint)
+    return bool(getattr(view, FRAGMENT_ATTR, False))
+
+
 def is_safe_next(url):
     """True when ``url`` is a safe, app-relative redirect target."""
     if not url or not url.startswith("/"):

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/rcrud.py

@@ -22,7 +22,7 @@ from .crud_forms import (
 )
 from .data import DataBase
 from .forms import FormData, validate_form_data
-from .navigation import resolve_next
+from .navigation import FRAGMENT_ATTR, resolve_next
 from .pagination import get_pagination
 
 
@@ -246,6 +246,25 @@ class RelatedCrudTab:
                 rct=rct,
             )
 
+        def _read_child(id, child_id):
+            """The child record, or ``None`` if it is missing *or belongs to
+            another parent*. ``child_id`` comes from the URL, so without this a
+            user allowed on parent A could open, edit (and so re-parent) or
+            delete parent B's children. A mismatch reads as not-found so the
+            response doesn't reveal that the id exists elsewhere."""
+            ds = child_dataclass()
+            rec = ds.read(child_id)
+            if rec is None:
+                return ds, None
+            owner = (
+                rec.get(filter_field)
+                if isinstance(rec, dict)
+                else getattr(rec, filter_field, None)
+            )
+            if owner is None or str(owner) != str(id):
+                return ds, None
+            return ds, rec
+
         def list_view(id):
             ds = child_dataclass()
             page, per_page, limit = get_pagination(
@@ -418,8 +437,7 @@ class RelatedCrudTab:
         )
 
         def edit_view(id, child_id):
-            ds = child_dataclass()
-            rec = ds.read(child_id)
+            ds, rec = _read_child(id, child_id)
             if rec is None:
                 flash("crud-error-not-found", "danger")
                 return redirect(url_for(f"{parent_view.endpoint}.{list_ep}", id=id))
@@ -525,8 +543,7 @@ class RelatedCrudTab:
         )
 
         def view_view(id, child_id):
-            ds = child_dataclass()
-            rec = ds.read(child_id)
+            ds, rec = _read_child(id, child_id)
             if rec is None:
                 flash("crud-error-not-found", "danger")
                 return redirect(url_for(f"{parent_view.endpoint}.{list_ep}", id=id))
@@ -571,11 +588,10 @@ class RelatedCrudTab:
         )
 
         def delete_view(id, child_id):
-            ds = child_dataclass()
             back = redirect(
                 resolve_next(url_for(f"{parent_view.endpoint}.{list_ep}", id=id))
             )
-            row = ds.read(child_id)
+            ds, row = _read_child(id, child_id)
             if row is None:
                 flash("crud-error-not-found", "danger")
                 return back
@@ -632,6 +648,12 @@ class RelatedCrudTab:
                     for p in prefix_params:
                         kwargs.pop(p, None)
                     if child_id_kwarg in kwargs:
+                        # Same parent check as the built-in member routes.
+                        if _read_child(id, kwargs[child_id_kwarg])[1] is None:
+                            flash("crud-error-not-found", "danger")
+                            return redirect(
+                                url_for(f"{parent_view.endpoint}.{list_ep}", id=id)
+                            )
                         kwargs["id"] = kwargs.pop(child_id_kwarg)
                     child._rcrud_context = {
                         "parent_endpoint": parent_view.endpoint,
@@ -643,6 +665,10 @@ class RelatedCrudTab:
                     return getattr(child, method_name)(**kwargs)
 
                 exposed_view.__name__ = ep_name
+                # A forwarded fragment (the child's related-search dropdown)
+                # is still a fragment under the parent's blueprint.
+                if getattr(getattr(child_cls, method_name), FRAGMENT_ATTR, False):
+                    setattr(exposed_view, FRAGMENT_ATTR, True)
                 return exposed_view
 
             for url, name, methods in child_cls._curls:

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/resume.py

@@ -107,17 +107,23 @@ def return_target() -> str | None:
     ``next`` parameter uses (:func:`~flask_construct_ui.navigation.is_safe_next`).
 
     Either way the target must be somewhere a reader can actually *be*. A
-    fragment endpoint (the sidebar nav, the notifications dropdown) is a
-    guarded route like any other, so a logged-out request to one would
-    otherwise name itself here and the login round trip would end with a bare
-    ``<nav>`` filling the window — see
-    :func:`~flask_construct_ui.navigation.is_fragment_target`.
+    fragment endpoint (the sidebar nav, a related-search dropdown) is a
+    guarded route like any other, so a logged-out GET to one would otherwise
+    name itself here and the login round trip would end with the bare
+    fragment filling the window — see
+    :func:`~flask_construct_ui.navigation.is_fragment_target`. A fragment is
+    requested *from* a page, though, so it takes the referer branch too: the
+    reader comes back to the form that held the dropdown, not to the fragment
+    and not to the site root.
     """
-    if request.method in SAFE_METHODS:
-        if is_fragment_target():
-            return None
+    if request.method in SAFE_METHODS and not is_fragment_target():
         target = request.full_path.rstrip("?") or "/"
         return target if is_safe_next(target) else None
+    return _referer_target()
+
+
+def _referer_target() -> str | None:
+    """The same-host page this request was made from, if it is a landing page."""
     parsed = urlparse(request.referrer or "")
     if not parsed.path or (parsed.netloc and parsed.netloc != request.host):
         return None

{flask_construct_ui-0.11.5 → flask_construct_ui-0.11.7}/flask_construct_ui/static/css/whitelabel.css

@@ -400,6 +400,18 @@ a:hover {
   text-decoration: none;
 }
 
+/* App-owned slot between the brand and the actions (`{% block navbar_start %}`).
+   It takes the free width, so its content starts next to the brand; an app
+   wanting it centred adds `justify-content: center` on this class. */
+.fcu-navbar__start {
+  flex: 1 1 auto;
+  min-width: 0;
+  display: flex;
+  align-items: center;
+  gap: var(--fcu-gap);
+  margin: 0 var(--fcu-gap);
+}
+
 /* Right-hand navbar action group: search, notifications, user menu — all on
    one row, vertically centered. */
 .fcu-navbar__actions {
@@ -1597,6 +1609,14 @@ fieldset.fcu-form-section__body {
     flex-wrap: wrap;
   }
 
+  .fcu-navbar__start {
+    /* Its own full-width row between the brand and the actions, still in DOM
+       order, rather than squeezing between them. */
+    flex-basis: 100%;
+    flex-wrap: wrap;
+    margin: 0;
+  }
+
   .fcu-navbar__brand {
     /* A long app title is one unbreakable flex item otherwise, and it sets the
        floor for the whole page width. */