From e14bada114c57dbf6d55df324881be02fa4c2d33 Mon Sep 17 00:00:00 2001 From: Wild Karl-Heinz Date: Mon, 28 Sep 2026 20:09:06 +0200 Subject: [PATCH] Add Rails backend: accounts via magic link, server documents, sharing The app becomes a Rails 8 application; the Vue frontend moves to app/frontend and is served through vite_rails. - Without an account documents stay in the browser (IndexedDB). Sign-in is by magic link or the 6-digit code from the same mail; afterwards local documents can be uploaded into the account. - Server documents (/d/) with versioned saves and a single-editor lock per browser tab; others see them read-only and follow by polling. - Sharing via link (works without an account) and via e-mail invitation, roles viewer/editor; the owner manages links and people. - Store gains a read-only mode that blocks all content changes. - Solid Queue, Cache and Cable share the one PostgreSQL database. Co-Authored-By: Claude Opus 5.5 --- .gitignore | 22 + .ruby-version | 1 + Gemfile | 46 + Gemfile.lock | 315 +++++++ Procfile.dev | 2 + README.md | 41 +- Rakefile | 6 + app/controllers/api/auth_controller.rb | 37 + app/controllers/api/base_controller.rb | 28 + .../api/document_locks_controller.rb | 29 + app/controllers/api/documents_controller.rb | 87 ++ app/controllers/api/joins_controller.rb | 17 + app/controllers/api/me_controller.rb | 16 + app/controllers/api/shares_controller.rb | 74 ++ app/controllers/application_controller.rb | 6 + app/controllers/auth_controller.rb | 22 + app/controllers/concerns/.keep | 0 app/controllers/concerns/authentication.rb | 43 + app/controllers/spa_controller.rb | 9 + {src => app/frontend}/App.vue | 0 .../frontend}/components/AppToolbar.vue | 117 ++- .../frontend}/components/BaseModal.vue | 0 .../frontend}/components/ButtonView.vue | 0 .../frontend}/components/CanvasObject.vue | 0 .../frontend}/components/ChartView.vue | 0 .../frontend}/components/CodeReference.vue | 0 .../frontend}/components/ContextMenu.vue | 0 .../components/CustomFunctionsModal.vue | 0 .../components/DependencyGraphView.vue | 0 app/frontend/components/DocumentsModal.vue | 322 +++++++ .../frontend}/components/FormulaBar.vue | 3 +- .../frontend}/components/FormulaSuggest.vue | 0 app/frontend/components/LoginModal.vue | 160 ++++ .../frontend}/components/MacrosModal.vue | 0 .../frontend}/components/NamedRangesModal.vue | 0 .../frontend}/components/SettingsPanel.vue | 0 app/frontend/components/ShareModal.vue | 310 +++++++ .../frontend}/components/SheetCanvas.vue | 0 .../frontend}/components/SheetTabs.vue | 0 .../frontend}/components/StatusBar.vue | 0 .../frontend}/components/TableGrid.vue | 4 + {src => app/frontend}/components/TextBox.vue | 0 {src => app/frontend}/components/TheLogo.vue | 0 .../frontend}/components/ToolbarIcon.vue | 0 app/frontend/components/UploadModal.vue | 93 ++ .../composables/useFormulaAutocomplete.ts | 0 .../composables/useKeyboardPointMode.ts | 0 {src => app/frontend}/composables/useTheme.ts | 0 .../frontend}/composables/useToasts.ts | 0 {src => app/frontend}/config/brand.ts | 0 .../data/__tests__/codeReference.spec.ts | 0 {src => app/frontend}/data/codeReference.ts | 0 {src => app/frontend}/data/seed.ts | 0 {src => app/frontend}/engine/README.md | 0 .../engine/__tests__/dateFunctions.spec.ts | 0 .../frontend}/engine/__tests__/dates.spec.ts | 0 .../engine/__tests__/evaluator.spec.ts | 0 .../engine/__tests__/functions.spec.ts | 0 .../frontend}/engine/__tests__/graph.spec.ts | 0 .../frontend}/engine/__tests__/lexer.spec.ts | 0 .../frontend}/engine/__tests__/macros.spec.ts | 0 .../frontend}/engine/__tests__/parser.spec.ts | 0 .../frontend}/engine/__tests__/refs.spec.ts | 0 .../engine/__tests__/userFunctions.spec.ts | 0 .../engine/__tests__/workbook.spec.ts | 0 {src => app/frontend}/engine/dates.ts | 0 {src => app/frontend}/engine/evaluator.ts | 0 {src => app/frontend}/engine/functions.ts | 0 {src => app/frontend}/engine/graph.ts | 0 {src => app/frontend}/engine/index.ts | 0 {src => app/frontend}/engine/lexer.ts | 0 {src => app/frontend}/engine/parser.ts | 0 {src => app/frontend}/engine/refs.ts | 0 {src => app/frontend}/engine/types.ts | 0 {src => app/frontend}/engine/userFunctions.ts | 0 {src => app/frontend}/engine/workbook.ts | 0 .../frontend/entrypoints/application.ts | 6 +- {src => app/frontend}/env.d.ts | 0 .../frontend}/io/__tests__/library.spec.ts | 0 .../frontend}/io/__tests__/num.spec.ts | 0 .../frontend}/io/__tests__/roundtrip.spec.ts | 0 app/frontend/io/api.ts | 116 +++ {src => app/frontend}/io/csv.ts | 0 {src => app/frontend}/io/download.ts | 0 {src => app/frontend}/io/json.ts | 0 {src => app/frontend}/io/library.ts | 0 {src => app/frontend}/io/num.ts | 0 {src => app/frontend}/io/operations.ts | 0 {src => app/frontend}/io/xlsx.ts | 0 {src => app/frontend}/numolus-logo.svg | 0 .../store/__tests__/document.spec.ts | 0 .../frontend}/store/__tests__/format.spec.ts | 0 {src => app/frontend}/store/document.ts | 53 +- {src => app/frontend}/store/format.ts | 0 app/frontend/store/library.ts | 852 ++++++++++++++++++ app/frontend/store/session.ts | 36 + {src => app/frontend}/store/types.ts | 0 {src => app/frontend}/styles/main.css | 0 app/helpers/application_helper.rb | 2 + app/jobs/application_job.rb | 7 + app/mailers/application_mailer.rb | 4 + app/mailers/auth_mailer.rb | 15 + app/models/application_record.rb | 3 + app/models/concerns/.keep | 0 app/models/current.rb | 4 + app/models/document.rb | 84 ++ app/models/document_membership.rb | 25 + app/models/magic_link.rb | 88 ++ app/models/session.rb | 4 + app/models/share_link.rb | 27 + app/models/user.rb | 28 + app/views/auth/invalid.html.erb | 3 + app/views/auth/show.html.erb | 11 + app/views/auth_mailer/invitation.html.erb | 4 + app/views/auth_mailer/invitation.text.erb | 7 + app/views/auth_mailer/magic_link.html.erb | 5 + app/views/auth_mailer/magic_link.text.erb | 9 + app/views/layouts/auth.html.erb | 30 + app/views/layouts/mailer.html.erb | 13 + app/views/layouts/mailer.text.erb | 1 + app/views/pwa/manifest.json.erb | 22 + app/views/pwa/service-worker.js | 26 + index.html => app/views/spa/show.html.erb | 7 +- bin/brakeman | 7 + bin/bundler-audit | 6 + bin/ci | 6 + bin/dev | 9 + bin/jobs | 6 + bin/rails | 4 + bin/rake | 4 + bin/setup | 36 + bin/vite | 27 + config.ru | 6 + config/application.rb | 42 + config/boot.rb | 4 + config/bundler-audit.yml | 5 + config/cable.yml | 16 + config/cache.yml | 15 + config/ci.rb | 21 + config/credentials.yml.enc | 1 + config/database.yml | 67 ++ config/environment.rb | 5 + config/environments/development.rb | 72 ++ config/environments/production.rb | 88 ++ config/environments/test.rb | 50 + .../initializers/content_security_policy.rb | 38 + .../initializers/filter_parameter_logging.rb | 8 + config/initializers/inflections.rb | 16 + config/locales/en.yml | 31 + config/puma.rb | 42 + config/queue.yml | 18 + config/recurring.yml | 15 + config/routes.rb | 33 + config/vite.json | 17 + .../20260928120000_create_core_tables.rb | 71 ++ ...0260928120100_create_solid_queue_tables.rb | 164 ++++ ...0260928120200_create_solid_cache_tables.rb | 16 + ...0260928120300_create_solid_cable_tables.rb | 14 + db/schema.rb | 291 ++++++ db/seeds.rb | 9 + docs/konzept-teilen-und-zusammenarbeit.md | 17 + eslint.config.js | 2 +- lib/tasks/.keep | 0 log/.keep | 0 package-lock.json | 585 +++++++++--- package.json | 10 +- public/400.html | 135 +++ public/404.html | 135 +++ public/406-unsupported-browser.html | 135 +++ public/422.html | 135 +++ public/500.html | 135 +++ public/icon.png | Bin 0 -> 4166 bytes public/icon.svg | 3 + public/robots.txt | 1 + script/.keep | 0 src/components/DocumentsModal.vue | 211 ----- src/store/library.ts | 341 ------- test/integration/.keep | 0 test/integration/auth_flow_test.rb | 52 ++ test/integration/documents_api_test.rb | 111 +++ test/integration/shares_api_test.rb | 55 ++ test/models/.keep | 0 test/models/document_test.rb | 63 ++ test/models/magic_link_test.rb | 49 + test/test_helper.rb | 32 + tmp/.keep | 0 tmp/pids/.keep | 0 tsconfig.json | 2 +- vendor/.keep | 0 vite.config.ts | 8 +- 190 files changed, 6077 insertions(+), 722 deletions(-) create mode 100644 .ruby-version create mode 100644 Gemfile create mode 100644 Gemfile.lock create mode 100644 Procfile.dev create mode 100644 Rakefile create mode 100644 app/controllers/api/auth_controller.rb create mode 100644 app/controllers/api/base_controller.rb create mode 100644 app/controllers/api/document_locks_controller.rb create mode 100644 app/controllers/api/documents_controller.rb create mode 100644 app/controllers/api/joins_controller.rb create mode 100644 app/controllers/api/me_controller.rb create mode 100644 app/controllers/api/shares_controller.rb create mode 100644 app/controllers/application_controller.rb create mode 100644 app/controllers/auth_controller.rb create mode 100644 app/controllers/concerns/.keep create mode 100644 app/controllers/concerns/authentication.rb create mode 100644 app/controllers/spa_controller.rb rename {src => app/frontend}/App.vue (100%) rename {src => app/frontend}/components/AppToolbar.vue (87%) rename {src => app/frontend}/components/BaseModal.vue (100%) rename {src => app/frontend}/components/ButtonView.vue (100%) rename {src => app/frontend}/components/CanvasObject.vue (100%) rename {src => app/frontend}/components/ChartView.vue (100%) rename {src => app/frontend}/components/CodeReference.vue (100%) rename {src => app/frontend}/components/ContextMenu.vue (100%) rename {src => app/frontend}/components/CustomFunctionsModal.vue (100%) rename {src => app/frontend}/components/DependencyGraphView.vue (100%) create mode 100644 app/frontend/components/DocumentsModal.vue rename {src => app/frontend}/components/FormulaBar.vue (99%) rename {src => app/frontend}/components/FormulaSuggest.vue (100%) create mode 100644 app/frontend/components/LoginModal.vue rename {src => app/frontend}/components/MacrosModal.vue (100%) rename {src => app/frontend}/components/NamedRangesModal.vue (100%) rename {src => app/frontend}/components/SettingsPanel.vue (100%) create mode 100644 app/frontend/components/ShareModal.vue rename {src => app/frontend}/components/SheetCanvas.vue (100%) rename {src => app/frontend}/components/SheetTabs.vue (100%) rename {src => app/frontend}/components/StatusBar.vue (100%) rename {src => app/frontend}/components/TableGrid.vue (99%) rename {src => app/frontend}/components/TextBox.vue (100%) rename {src => app/frontend}/components/TheLogo.vue (100%) rename {src => app/frontend}/components/ToolbarIcon.vue (100%) create mode 100644 app/frontend/components/UploadModal.vue rename {src => app/frontend}/composables/useFormulaAutocomplete.ts (100%) rename {src => app/frontend}/composables/useKeyboardPointMode.ts (100%) rename {src => app/frontend}/composables/useTheme.ts (100%) rename {src => app/frontend}/composables/useToasts.ts (100%) rename {src => app/frontend}/config/brand.ts (100%) rename {src => app/frontend}/data/__tests__/codeReference.spec.ts (100%) rename {src => app/frontend}/data/codeReference.ts (100%) rename {src => app/frontend}/data/seed.ts (100%) rename {src => app/frontend}/engine/README.md (100%) rename {src => app/frontend}/engine/__tests__/dateFunctions.spec.ts (100%) rename {src => app/frontend}/engine/__tests__/dates.spec.ts (100%) rename {src => app/frontend}/engine/__tests__/evaluator.spec.ts (100%) rename {src => app/frontend}/engine/__tests__/functions.spec.ts (100%) rename {src => app/frontend}/engine/__tests__/graph.spec.ts (100%) rename {src => app/frontend}/engine/__tests__/lexer.spec.ts (100%) rename {src => app/frontend}/engine/__tests__/macros.spec.ts (100%) rename {src => app/frontend}/engine/__tests__/parser.spec.ts (100%) rename {src => app/frontend}/engine/__tests__/refs.spec.ts (100%) rename {src => app/frontend}/engine/__tests__/userFunctions.spec.ts (100%) rename {src => app/frontend}/engine/__tests__/workbook.spec.ts (100%) rename {src => app/frontend}/engine/dates.ts (100%) rename {src => app/frontend}/engine/evaluator.ts (100%) rename {src => app/frontend}/engine/functions.ts (100%) rename {src => app/frontend}/engine/graph.ts (100%) rename {src => app/frontend}/engine/index.ts (100%) rename {src => app/frontend}/engine/lexer.ts (100%) rename {src => app/frontend}/engine/parser.ts (100%) rename {src => app/frontend}/engine/refs.ts (100%) rename {src => app/frontend}/engine/types.ts (100%) rename {src => app/frontend}/engine/userFunctions.ts (100%) rename {src => app/frontend}/engine/workbook.ts (100%) rename src/main.ts => app/frontend/entrypoints/application.ts (67%) rename {src => app/frontend}/env.d.ts (100%) rename {src => app/frontend}/io/__tests__/library.spec.ts (100%) rename {src => app/frontend}/io/__tests__/num.spec.ts (100%) rename {src => app/frontend}/io/__tests__/roundtrip.spec.ts (100%) create mode 100644 app/frontend/io/api.ts rename {src => app/frontend}/io/csv.ts (100%) rename {src => app/frontend}/io/download.ts (100%) rename {src => app/frontend}/io/json.ts (100%) rename {src => app/frontend}/io/library.ts (100%) rename {src => app/frontend}/io/num.ts (100%) rename {src => app/frontend}/io/operations.ts (100%) rename {src => app/frontend}/io/xlsx.ts (100%) rename {src => app/frontend}/numolus-logo.svg (100%) rename {src => app/frontend}/store/__tests__/document.spec.ts (100%) rename {src => app/frontend}/store/__tests__/format.spec.ts (100%) rename {src => app/frontend}/store/document.ts (97%) rename {src => app/frontend}/store/format.ts (100%) create mode 100644 app/frontend/store/library.ts create mode 100644 app/frontend/store/session.ts rename {src => app/frontend}/store/types.ts (100%) rename {src => app/frontend}/styles/main.css (100%) create mode 100644 app/helpers/application_helper.rb create mode 100644 app/jobs/application_job.rb create mode 100644 app/mailers/application_mailer.rb create mode 100644 app/mailers/auth_mailer.rb create mode 100644 app/models/application_record.rb create mode 100644 app/models/concerns/.keep create mode 100644 app/models/current.rb create mode 100644 app/models/document.rb create mode 100644 app/models/document_membership.rb create mode 100644 app/models/magic_link.rb create mode 100644 app/models/session.rb create mode 100644 app/models/share_link.rb create mode 100644 app/models/user.rb create mode 100644 app/views/auth/invalid.html.erb create mode 100644 app/views/auth/show.html.erb create mode 100644 app/views/auth_mailer/invitation.html.erb create mode 100644 app/views/auth_mailer/invitation.text.erb create mode 100644 app/views/auth_mailer/magic_link.html.erb create mode 100644 app/views/auth_mailer/magic_link.text.erb create mode 100644 app/views/layouts/auth.html.erb create mode 100644 app/views/layouts/mailer.html.erb create mode 100644 app/views/layouts/mailer.text.erb create mode 100644 app/views/pwa/manifest.json.erb create mode 100644 app/views/pwa/service-worker.js rename index.html => app/views/spa/show.html.erb (90%) create mode 100755 bin/brakeman create mode 100755 bin/bundler-audit create mode 100755 bin/ci create mode 100755 bin/dev create mode 100755 bin/jobs create mode 100755 bin/rails create mode 100755 bin/rake create mode 100755 bin/setup create mode 100755 bin/vite create mode 100644 config.ru create mode 100644 config/application.rb create mode 100644 config/boot.rb create mode 100644 config/bundler-audit.yml create mode 100644 config/cable.yml create mode 100644 config/cache.yml create mode 100644 config/ci.rb create mode 100644 config/credentials.yml.enc create mode 100644 config/database.yml create mode 100644 config/environment.rb create mode 100644 config/environments/development.rb create mode 100644 config/environments/production.rb create mode 100644 config/environments/test.rb create mode 100644 config/initializers/content_security_policy.rb create mode 100644 config/initializers/filter_parameter_logging.rb create mode 100644 config/initializers/inflections.rb create mode 100644 config/locales/en.yml create mode 100644 config/puma.rb create mode 100644 config/queue.yml create mode 100644 config/recurring.yml create mode 100644 config/routes.rb create mode 100644 config/vite.json create mode 100644 db/migrate/20260928120000_create_core_tables.rb create mode 100644 db/migrate/20260928120100_create_solid_queue_tables.rb create mode 100644 db/migrate/20260928120200_create_solid_cache_tables.rb create mode 100644 db/migrate/20260928120300_create_solid_cable_tables.rb create mode 100644 db/schema.rb create mode 100644 db/seeds.rb create mode 100644 lib/tasks/.keep create mode 100644 log/.keep create mode 100644 public/400.html create mode 100644 public/404.html create mode 100644 public/406-unsupported-browser.html create mode 100644 public/422.html create mode 100644 public/500.html create mode 100644 public/icon.png create mode 100644 public/icon.svg create mode 100644 public/robots.txt create mode 100644 script/.keep delete mode 100644 src/components/DocumentsModal.vue delete mode 100644 src/store/library.ts create mode 100644 test/integration/.keep create mode 100644 test/integration/auth_flow_test.rb create mode 100644 test/integration/documents_api_test.rb create mode 100644 test/integration/shares_api_test.rb create mode 100644 test/models/.keep create mode 100644 test/models/document_test.rb create mode 100644 test/models/magic_link_test.rb create mode 100644 test/test_helper.rb create mode 100644 tmp/.keep create mode 100644 tmp/pids/.keep create mode 100644 vendor/.keep diff --git a/.gitignore b/.gitignore index b43c151..50e7110 100644 --- a/.gitignore +++ b/.gitignore @@ -5,3 +5,25 @@ coverage .DS_Store .vscode/* !.vscode/extensions.json + +# Vite Ruby +/public/vite* +node_modules +# Vite uses dotenv and suggests to ignore local-only env files. See +# https://vite.dev/guide/env-and-mode.html#env-files +*.local + +# Rails +/.bundle +/log/* +/tmp/* +!/log/.keep +!/tmp/.keep +!/tmp/pids/ +/tmp/pids/* +!/tmp/pids/.keep +/storage/* +!/storage/.keep +/config/master.key +/.env* +/vendor/gems diff --git a/.ruby-version b/.ruby-version new file mode 100644 index 0000000..61a52c9 --- /dev/null +++ b/.ruby-version @@ -0,0 +1 @@ +ruby-3.4.9 diff --git a/Gemfile b/Gemfile new file mode 100644 index 0000000..c0aaf7a --- /dev/null +++ b/Gemfile @@ -0,0 +1,46 @@ +source "https://rubygems.org" + +# Bundle edge Rails instead: gem "rails", github: "rails/rails", branch: "main" +gem "rails", "~> 8.1.3", ">= 8.1.3.1" +# Use postgresql as the database for Active Record +gem "pg", "~> 1.1" +# Use the Puma web server [https://github.com/puma/puma] +gem "puma", ">= 5.0" + +# Use Active Model has_secure_password [https://guides.rubyonrails.org/active_model_basics.html#securepassword] +# gem "bcrypt", "~> 3.1.7" + +# Windows does not include zoneinfo files, so bundle the tzinfo-data gem +gem "tzinfo-data", platforms: %i[ windows jruby ] + +# Use the database-backed adapters for Rails.cache, Active Job, and Action Cable +gem "solid_cache" +gem "solid_queue" +gem "solid_cable" + +# Reduces boot times through caching; required in config/boot.rb +gem "bootsnap", require: false + +group :development, :test do + # See https://guides.rubyonrails.org/debugging_rails_applications.html#debugging-with-the-debug-gem + gem "debug", platforms: %i[ mri windows ], require: "debug/prelude" + + # Audits gems for known security defects (use config/bundler-audit.yml to ignore issues) + gem "bundler-audit", require: false + + # Static analysis for security vulnerabilities [https://brakemanscanner.org/] + gem "brakeman", require: false +end + +group :development do + # Use console on exceptions pages [https://github.com/rails/web-console] + gem "web-console" +end + +# Vite as the frontend build, integrated into Rails [https://vite-ruby.netlify.app] +gem "vite_rails" + +group :development do + # Mails open in the browser at /letter_opener instead of being sent + gem "letter_opener_web" +end diff --git a/Gemfile.lock b/Gemfile.lock new file mode 100644 index 0000000..803ef80 --- /dev/null +++ b/Gemfile.lock @@ -0,0 +1,315 @@ +GEM + remote: https://rubygems.org/ + specs: + action_text-trix (2.1.19) + railties + actioncable (8.1.4) + actionpack (= 8.1.4) + activesupport (= 8.1.4) + nio4r (~> 2.0) + websocket-driver (>= 0.6.1) + zeitwerk (~> 2.6) + actionmailbox (8.1.4) + actionpack (= 8.1.4) + activejob (= 8.1.4) + activerecord (= 8.1.4) + activestorage (= 8.1.4) + activesupport (= 8.1.4) + mail (>= 2.8.0) + actionmailer (8.1.4) + actionpack (= 8.1.4) + actionview (= 8.1.4) + activejob (= 8.1.4) + activesupport (= 8.1.4) + mail (>= 2.8.0) + rails-dom-testing (~> 2.2) + actionpack (8.1.4) + actionview (= 8.1.4) + activesupport (= 8.1.4) + nokogiri (>= 1.8.5) + rack (>= 2.2.4) + rack-session (>= 1.0.1) + rack-test (>= 0.6.3) + rails-dom-testing (~> 2.2) + rails-html-sanitizer (~> 1.6) + useragent (~> 0.16) + actiontext (8.1.4) + action_text-trix (~> 2.1.15) + actionpack (= 8.1.4) + activerecord (= 8.1.4) + activestorage (= 8.1.4) + activesupport (= 8.1.4) + globalid (>= 0.6.0) + nokogiri (>= 1.8.5) + actionview (8.1.4) + activesupport (= 8.1.4) + builder (~> 3.1) + erubi (~> 1.11) + rails-dom-testing (~> 2.2) + rails-html-sanitizer (~> 1.6) + activejob (8.1.4) + activesupport (= 8.1.4) + globalid (>= 0.3.6) + activemodel (8.1.4) + activesupport (= 8.1.4) + activerecord (8.1.4) + activemodel (= 8.1.4) + activesupport (= 8.1.4) + timeout (>= 0.4.0) + activestorage (8.1.4) + actionpack (= 8.1.4) + activejob (= 8.1.4) + activerecord (= 8.1.4) + activesupport (= 8.1.4) + marcel (~> 1.0) + activesupport (8.1.4) + base64 + bigdecimal + concurrent-ruby (~> 1.0, >= 1.3.1) + connection_pool (>= 2.2.5) + drb + i18n (>= 1.6, < 2) + json + logger (>= 1.4.2) + minitest (>= 5.1) + securerandom (>= 0.3) + tzinfo (~> 2.0, >= 2.0.5) + uri (>= 0.13.1) + addressable (2.9.0) + public_suffix (>= 2.0.2, < 8.0) + base64 (0.3.0) + bigdecimal (4.1.3) + bindex (0.8.1) + bootsnap (1.26.0) + msgpack (~> 1.5) + brakeman (8.0.6) + racc + builder (3.3.0) + bundler-audit (0.9.3) + bundler (>= 1.2.0) + thor (~> 1.0) + childprocess (5.1.0) + logger (~> 1.5) + concurrent-ruby (1.3.8) + connection_pool (3.0.2) + crass (1.0.7) + date (3.5.1) + debug (1.11.1) + irb (~> 1.10) + reline (>= 0.3.8) + drb (2.2.3) + dry-cli (1.4.1) + erb (6.0.7) + erubi (1.13.1) + et-orbi (1.4.2) + tzinfo + fugit (1.14.0) + et-orbi (~> 1.4) + raabro (~> 1.4) + globalid (1.4.0) + activesupport (>= 6.1) + i18n (1.15.2) + concurrent-ruby (~> 1.0) + io-console (0.9.4) + irb (1.18.0) + pp (>= 0.6.0) + prism (>= 1.3.0) + rdoc (>= 4.0.0) + reline (>= 0.4.2) + json (3.0.2) + launchy (3.1.1) + addressable (~> 2.8) + childprocess (~> 5.0) + logger (~> 1.6) + letter_opener (1.10.0) + launchy (>= 2.2, < 4) + letter_opener_web (3.0.0) + actionmailer (>= 6.1) + letter_opener (~> 1.9) + railties (>= 6.1) + rexml + logger (1.7.0) + loofah (2.25.2) + crass (~> 1.0.2) + nokogiri (>= 1.12.0) + mail (2.9.1) + logger + mini_mime (>= 0.1.1) + net-imap + net-pop + net-smtp + marcel (1.2.1) + mini_mime (1.1.5) + minitest (6.0.6) + drb (~> 2.0) + prism (~> 1.5) + msgpack (1.8.5) + mutex_m (0.3.0) + net-imap (0.6.7) + date + net-protocol + net-pop (0.1.2) + net-protocol + net-protocol (0.4.0) + timeout + net-smtp (0.5.1) + net-protocol + nio4r (2.7.5) + nokogiri (1.19.4-aarch64-linux-gnu) + racc (~> 1.4) + nokogiri (1.19.4-aarch64-linux-musl) + racc (~> 1.4) + nokogiri (1.19.4-arm-linux-gnu) + racc (~> 1.4) + nokogiri (1.19.4-arm-linux-musl) + racc (~> 1.4) + nokogiri (1.19.4-arm64-darwin) + racc (~> 1.4) + nokogiri (1.19.4-x86_64-darwin) + racc (~> 1.4) + nokogiri (1.19.4-x86_64-linux-gnu) + racc (~> 1.4) + nokogiri (1.19.4-x86_64-linux-musl) + racc (~> 1.4) + pg (1.6.3) + pg (1.6.3-aarch64-linux) + pg (1.6.3-aarch64-linux-musl) + pg (1.6.3-arm64-darwin) + pg (1.6.3-x86_64-darwin) + pg (1.6.3-x86_64-linux) + pg (1.6.3-x86_64-linux-musl) + pp (0.6.4) + prettyprint + prettyprint (0.2.0) + prism (1.9.0) + public_suffix (7.0.5) + puma (8.0.2) + nio4r (~> 2.0) + raabro (1.5.0) + racc (1.8.1) + rack (3.2.7) + rack-proxy (2.0.1) + rack (>= 2.0, < 4) + rack-session (2.1.2) + base64 (>= 0.1.0) + rack (>= 3.0.0) + rack-test (2.2.0) + rack (>= 1.3) + rackup (2.3.1) + rack (>= 3) + rails (8.1.4) + actioncable (= 8.1.4) + actionmailbox (= 8.1.4) + actionmailer (= 8.1.4) + actionpack (= 8.1.4) + actiontext (= 8.1.4) + actionview (= 8.1.4) + activejob (= 8.1.4) + activemodel (= 8.1.4) + activerecord (= 8.1.4) + activestorage (= 8.1.4) + activesupport (= 8.1.4) + bundler (>= 1.15.0) + railties (= 8.1.4) + rails-dom-testing (2.3.0) + activesupport (>= 5.0.0) + minitest + nokogiri (>= 1.6) + rails-html-sanitizer (1.7.1) + loofah (~> 2.25, >= 2.25.2) + nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0) + railties (8.1.4) + actionpack (= 8.1.4) + activesupport (= 8.1.4) + irb (~> 1.13) + rackup (>= 1.0.0) + rake (>= 12.2) + thor (~> 1.0, >= 1.2.2) + tsort (>= 0.2) + zeitwerk (~> 2.6) + rake (13.4.2) + rbs (4.2.0) + logger + prism (>= 1.6.0) + tsort + rdoc (8.0.0) + erb + prism (>= 1.6.0) + rbs (>= 4.0.0) + tsort + reline (0.7.0) + io-console (~> 0.5) + rexml (3.4.4) + securerandom (0.4.1) + solid_cable (4.1.0) + actioncable (>= 7.2) + activejob (>= 7.2) + activerecord (>= 7.2) + railties (>= 7.2) + solid_cache (1.0.10) + activejob (>= 7.2) + activerecord (>= 7.2) + railties (>= 7.2) + solid_queue (1.7.0) + activejob (>= 7.1) + activerecord (>= 7.1) + concurrent-ruby (>= 1.3.1) + fugit (~> 1.11) + railties (>= 7.1) + thor (>= 1.3.1) + thor (1.5.0) + timeout (0.6.1) + tsort (0.2.0) + tzinfo (2.0.6) + concurrent-ruby (~> 1.0) + uri (1.1.1) + useragent (0.16.11) + vite_rails (3.11.1) + railties (>= 5.1, < 9) + vite_ruby (~> 3.0, >= 3.2.2) + vite_ruby (3.11.0) + dry-cli (>= 0.7, < 2) + logger (~> 1.6) + mutex_m + rack-proxy (>= 0.6.1) + zeitwerk (~> 2.2) + web-console (4.3.0) + actionview (>= 8.0.0) + bindex (>= 0.4.0) + railties (>= 8.0.0) + websocket-driver (0.8.2) + base64 + websocket-extensions (>= 0.1.0) + websocket-extensions (0.1.5) + zeitwerk (2.8.3) + +PLATFORMS + aarch64-linux + aarch64-linux-gnu + aarch64-linux-musl + arm-linux-gnu + arm-linux-musl + arm64-darwin + x86_64-darwin + x86_64-linux + x86_64-linux-gnu + x86_64-linux-musl + +DEPENDENCIES + bootsnap + brakeman + bundler-audit + debug + letter_opener_web + pg (~> 1.1) + puma (>= 5.0) + rails (~> 8.1.3, >= 8.1.3.1) + solid_cable + solid_cache + solid_queue + tzinfo-data + vite_rails + web-console + +BUNDLED WITH + 2.6.9 diff --git a/Procfile.dev b/Procfile.dev new file mode 100644 index 0000000..25b701e --- /dev/null +++ b/Procfile.dev @@ -0,0 +1,2 @@ +web: bin/rails server -p 3000 +vite: bin/vite dev diff --git a/README.md b/README.md index db092f6..ad2214a 100644 --- a/README.md +++ b/README.md @@ -4,21 +4,34 @@ Eine browserbasierte Tabellenkalkulation nach dem Vorbild von **Apple Numbers**. 1. **Handwerk** — eine von Grund auf selbst geschriebene, schlanke Formel-Engine (Tokenizer, Parser, AST, Abhängigkeitsgraph, Neuberechnung, Zirkelbezug- - Erkennung). Dokumentiert in [`src/engine/README.md`](src/engine/README.md). + Erkennung). Dokumentiert in [`app/frontend/engine/README.md`](app/frontend/engine/README.md). 2. **Produkt** — eine polierte, Numbers-nahe Oberfläche: jedes Blatt ist eine **freie Fläche (Canvas)**, auf die man beliebig viele **Tabellen- und Diagramm-Objekte** setzt, verschiebt, skaliert und befüllt. ```bash -npm install -npm run dev # Vite-Devserver -npm run test # Vitest-Suite (Engine + Store + IO), 570 Tests -npm run build # Typecheck + Produktionsbuild +bin/setup # Gems, npm-Pakete, Datenbank (PostgreSQL) anlegen +bin/dev # Rails (Port 3000) + Vite-Devserver mit HMR (Port 3036) +npm run test # Vitest-Suite (Engine + Store + IO) +bin/rails test # Server-Tests (Models, API, Anmeldung, Teilen) +npm run build # Typecheck + Produktionsbuild nach public/vite npm run lint # ESLint (flat config) ``` -Alles läuft **rein clientseitig** — kein Server, keine Netzwerk-Requests. Datei- -I/O über File API und Blob-URLs. +Die App ist eine **Rails-8-Anwendung** mit dem Vue-Frontend unter +[`app/frontend/`](app/frontend/) (eingebunden über `vite_rails`). Ohne Konto +bleibt alles **im Browser** (IndexedDB). Mit Konto (Anmeldung per Magic Link, +kein Passwort) liegen Dokumente auf dem Server und lassen sich teilen – per +Link oder per Einladung, mit den Rollen „ansehen“ und „bearbeiten“. Solange +es keine Live-Zusammenarbeit gibt, bearbeitet immer nur ein Browser-Tab ein +Server-Dokument; alle anderen sehen es schreibgeschützt und folgen den +Änderungen. Details: [`docs/konzept-teilen-und-zusammenarbeit.md`](docs/konzept-teilen-und-zusammenarbeit.md). + +Mails landen in der Entwicklung nicht im Postfach, sondern unter +. Produktion braucht `SMTP_ADDRESS`, +`SMTP_USER_NAME`, `SMTP_PASSWORD`, `NUMOLUS_MAIL_FROM`, `NUMOLUS_HOST` und +`NUMOLUS_DATABASE_PASSWORD`; Solid Queue, Cache und Cable liegen in derselben +Datenbank wie die Daten. --- @@ -268,7 +281,7 @@ eingebauter Funktionsname: `=MARGE(Umsatz!B2; Umsatz!C2)`. sich automatisch umschreiben ließe, nur ihren Aufruf-Namen. - Ein Aufruf wird **beim Parsen der aufrufenden Zelle in ihre AST eingesetzt** (Inlining, keine Laufzeit-Closures) — siehe - [`src/engine/userFunctions.ts`](src/engine/userFunctions.ts) und die + [`app/frontend/engine/userFunctions.ts`](app/frontend/engine/userFunctions.ts) und die Architektur-Tabelle unten. Dadurch braucht Evaluator/Graph keine Änderung, und auch Zellen, die *nur* im Funktionskörper referenziert werden (nicht im Aufruf), lösen bei Änderung korrekt eine Neuberechnung aus. @@ -336,7 +349,7 @@ berechenbar ist. Eine `FOR`-Schleife über insgesamt mehr als 10.000 Zellen Funktion, deren Ausführung endet, ohne dass `RETURN` je gefeuert hat, ebenso — das Formular warnt davor zusätzlich schon **beim Speichern**, wenn nicht erkennbar jeder Codepfad ein `RETURN` erreicht. Details: -[`src/engine/README.md`](src/engine/README.md)s „Schleifen"-Abschnitt. +[`app/frontend/engine/README.md`](app/frontend/engine/README.md)s „Schleifen"-Abschnitt. #### SUMIF/COUNTIF/AVERAGEIF nachbauen @@ -644,7 +657,7 @@ unabhängig von der Locale), **Zell-Textfarbe**, ### Einstellungen (⚙, links neben dem Titel) Ein Zahnrad neben der Überschrift öffnet eine linke Inspector-Schublade -([`SettingsPanel.vue`](src/components/SettingsPanel.vue)), die die Fläche zur +([`SettingsPanel.vue`](app/frontend/components/SettingsPanel.vue)), die die Fläche zur Seite schiebt (auf schmalen Viewports überlagert sie). Sie bündelt alle wichtigen Punkte: @@ -1034,7 +1047,7 @@ Fehlercode nötig). ## Architektur der Engine-Module -Framework-agnostisches ES-Modul unter [`src/engine/`](src/engine/) — **keine** +Framework-agnostisches ES-Modul unter [`app/frontend/engine/`](app/frontend/engine/) — **keine** Formel-/Spreadsheet-Library. Kennt kein Vue, kein DOM. Die adressierbare Einheit ist eine **Tabelle**; der Abhängigkeitsgraph läuft dokumentweit über alle Tabellen aller Blätter. @@ -1054,7 +1067,7 @@ Tabellen aller Blätter. `graph.topoOrder()` → Zyklus-Zellen `#CIRC`, Rest topologisch auswerten, nicht betroffene Zellen behalten ihren Wert. -**Anbindung an Vue.** [`src/store/document.ts`](src/store/document.ts) ist das +**Anbindung an Vue.** [`app/frontend/store/document.ts`](app/frontend/store/document.ts) ist das „eigene `reactive()`-Modul": es hält eine `Workbook`-Instanz und einen `recalcTick`-Ref. Die UI liest `store.cellValue(...)`, das `recalcTick` berührt — nach jeder Neuberechnung wird der Tick erhöht, jede Formelzelle re-rendert also @@ -1123,7 +1136,7 @@ Blatt **„Analyse"** mit drei Tabellen-Objekten (**Umsatz**, **Kosten**, **Übersicht**) und einem **Diagramm** (Umsatz je Region), plus ein leeres Blatt **„Blatt 2"**. „Übersicht" demonstriert tabellenübergreifende Bezüge und die vier Grundrechenarten: `Übersicht!B2 = =SUM(Umsatz!B2:E2)`, `D2 = =B2-C2`, -`E2 = =D2/B2*100`. Siehe [`src/data/seed.ts`](src/data/seed.ts). +`E2 = =D2/B2*100`. Siehe [`app/frontend/data/seed.ts`](app/frontend/data/seed.ts). > **Hinweis zur Aufgabenstellung:** Die Akzeptanzliste nennt „Übersicht!B2 = > 6070". Die explizit angegebene Nord-Zeile ergibt jedoch @@ -1498,7 +1511,7 @@ Grundrechenarten: `Übersicht!B2 = =SUM(Umsatz!B2:E2)`, `D2 = =B2-C2`, ## Projektstruktur ``` -src/ +app/frontend/ engine/ # Formel-Engine (Eigenbau) + Unit-Tests store/ # reaktiver Dokument-Store (v2 Canvas-Modell), Formatierung io/ # csv / json (Eigenbau, inkl. v1→v2), num (ZIP via fflate, lazy), xlsx (SheetJS, lazy) diff --git a/Rakefile b/Rakefile new file mode 100644 index 0000000..9a5ea73 --- /dev/null +++ b/Rakefile @@ -0,0 +1,6 @@ +# Add your own tasks in files placed in lib/tasks ending in .rake, +# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake. + +require_relative "config/application" + +Rails.application.load_tasks diff --git a/app/controllers/api/auth_controller.rb b/app/controllers/api/auth_controller.rb new file mode 100644 index 0000000..a4c9856 --- /dev/null +++ b/app/controllers/api/auth_controller.rb @@ -0,0 +1,37 @@ +module Api + class AuthController < BaseController + rate_limit to: 20, within: 1.hour, only: :magic_link, with: -> { too_many } + rate_limit to: 30, within: 15.minutes, only: :code, with: -> { too_many } + + # POST /api/auth/magic_link { email, return_to } + # Always the same answer, so it can't be used to find out who has an account. + def magic_link + email = params.require(:email).to_s + unless MagicLink.throttled?(email) + link = MagicLink.issue!(email:, return_to: params[:return_to]) + AuthMailer.magic_link(link, link.token, link.code).deliver_later + end + render json: { ok: true } + rescue ActiveRecord::RecordInvalid + render json: { error: "invalid_email" }, status: :unprocessable_entity + end + + # POST /api/auth/code { email, code } -- the 6-digit code from the mail + def code + link = MagicLink.find_by_code(params.require(:email), params.require(:code)) + return render(json: { error: "invalid_code" }, status: :unprocessable_entity) unless link + start_session_for(link.redeem!) + render json: { user: Current.user.as_json, redirect: link.destination } + end + + # DELETE /api/auth/session + def logout + terminate_session + render json: { ok: true } + end + + private + + def too_many = render(json: { error: "rate_limited" }, status: :too_many_requests) + end +end diff --git a/app/controllers/api/base_controller.rb b/app/controllers/api/base_controller.rb new file mode 100644 index 0000000..cf8b088 --- /dev/null +++ b/app/controllers/api/base_controller.rb @@ -0,0 +1,28 @@ +module Api + class BaseController < ApplicationController + # the app sends the CSRF token from the page's meta tag as X-CSRF-Token + protect_from_forgery with: :exception + + rescue_from ActiveRecord::RecordNotFound do + render json: { error: "not_found" }, status: :not_found + end + rescue_from ActiveRecord::RecordInvalid do |e| + render json: { error: "invalid", messages: e.record.errors.full_messages }, status: :unprocessable_entity + end + rescue_from ActionController::InvalidAuthenticityToken do + render json: { error: "csrf" }, status: :unprocessable_entity + end + + private + + # a share link token, for visitors (with or without account) who got the link + def share_token = request.headers["X-Share-Token"].presence + + # identifies the lock holder: one browser tab + def client_id = request.headers["X-Client-Id"].to_s[0, 64].presence || "anon" + + def lock_holder = "#{Current.user&.id || 'anon'}:#{client_id}" + + def holder_name = Current.user&.name || "Jemand mit dem Link" + end +end diff --git a/app/controllers/api/document_locks_controller.rb b/app/controllers/api/document_locks_controller.rb new file mode 100644 index 0000000..cad98e1 --- /dev/null +++ b/app/controllers/api/document_locks_controller.rb @@ -0,0 +1,29 @@ +module Api + # The edit lock of a server document: one browser tab edits at a time, + # everyone else sees the document read-only until the lock is released or + # expires (Document::LOCK_TTL without a heartbeat). + class DocumentLocksController < BaseController + before_action :load_document + + # POST /api/documents/:id/lock -- take or refresh (heartbeat) + def create + return render(json: { lock: { mine: false, holder_name: nil } }) unless Document.role_at_least?(@role, :editor) + mine = @doc.acquire_lock!(lock_holder, holder_name) + render json: { lock: { mine:, holder_name: (@doc.lock_holder_name unless mine) } } + end + + # DELETE /api/documents/:id/lock + def destroy + @doc.release_lock!(lock_holder) + head :no_content + end + + private + + def load_document + @doc = Document.find(params[:document_id]) + @role = @doc.role_for(user: Current.user, token: share_token) + raise ActiveRecord::RecordNotFound unless @role + end + end +end diff --git a/app/controllers/api/documents_controller.rb b/app/controllers/api/documents_controller.rb new file mode 100644 index 0000000..ebf5ade --- /dev/null +++ b/app/controllers/api/documents_controller.rb @@ -0,0 +1,87 @@ +module Api + # Server documents. Listing and creating need an account; reading and + # writing a single document also work with just a share link token. + class DocumentsController < BaseController + before_action :require_authentication, only: %i[index create] + before_action :load_document, except: %i[index create] + + # GET /api/documents -- owned + shared with me + def index + user = Current.user + memberships = user.document_memberships.index_by(&:document_id) + docs = user.accessible_documents.includes(:owner, :updated_by).order(content_updated_at: :desc) + render json: { + documents: docs.map { |d| d.meta_json(role: d.owner_id == user.id ? :owner : memberships[d.id]&.role) } + } + end + + # POST /api/documents { title, content } -- also used to upload a local document + def create + doc = Current.user.owned_documents.create!( + title: params.require(:title), content: content_param, updated_by: Current.user + ) + render json: { document: doc.meta_json(role: :owner) }, status: :created + end + + # GET /api/documents/:id[?known_version=n] + # With known_version: just the metadata when nothing changed since. + def show + touch_membership + meta = @doc.meta_json(role: @role).merge(lock: @doc.lock_info(lock_holder)) + if params[:known_version].present? && params[:known_version].to_i == @doc.version + render json: { document: meta, unchanged: true } + else + render json: { document: meta.merge(content: @doc.content) } + end + end + + # PATCH /api/documents/:id { title } and/or { content, base_version } + def update + return forbidden unless Document.role_at_least?(@role, :editor) + if params.key?(:content) + return render(json: { error: "locked", holder_name: @doc.lock_holder_name }, status: :locked) if @doc.locked_by_other?(lock_holder) + @doc.with_lock do + if params.require(:base_version).to_i != @doc.version + return render(json: { error: "conflict", version: @doc.version }, status: :conflict) + end + @doc.update!(content: content_param, version: @doc.version + 1, + content_updated_at: Time.current, updated_by: Current.user) + end + end + @doc.update!(title: params[:title]) if params[:title].present? + render json: { document: @doc.meta_json(role: @role) } + end + + # DELETE /api/documents/:id -- the owner deletes it; anyone else leaves it + def destroy + if @role == :owner + @doc.destroy! + elsif Current.user + @doc.document_memberships.where(user: Current.user).delete_all + else + return forbidden + end + head :no_content + end + + private + + def load_document + @doc = Document.find(params[:id]) + @role = @doc.role_for(user: Current.user, token: share_token) + raise ActiveRecord::RecordNotFound unless @role # 404, not 403: don't confirm it exists + end + + def content_param + c = params.require(:content) + c.is_a?(String) ? c : c.to_unsafe_h.to_json + end + + def touch_membership + return unless Current.user + @doc.document_memberships.where(user: Current.user).update_all(last_opened_at: Time.current) + end + + def forbidden = render(json: { error: "forbidden" }, status: :forbidden) + end +end diff --git a/app/controllers/api/joins_controller.rb b/app/controllers/api/joins_controller.rb new file mode 100644 index 0000000..c730cd9 --- /dev/null +++ b/app/controllers/api/joins_controller.rb @@ -0,0 +1,17 @@ +module Api + # POST /api/documents/:document_id/join { token } + # Redeems a share link. Signed in: the document is added to the account + # (a membership). Not signed in: only answers what the token grants -- the + # browser keeps the token and sends it along (X-Share-Token). + class JoinsController < BaseController + def create + doc = Document.find(params[:document_id]) + link = doc.share_links.active.find_by(token: params.require(:token)) + raise ActiveRecord::RecordNotFound unless link + if Current.user + DocumentMembership.grant!(document: doc, user: Current.user, role: link.role, source: :link, share_link: link) + end + render json: { document: doc.meta_json(role: doc.role_for(user: Current.user, token: link.token)) } + end + end +end diff --git a/app/controllers/api/me_controller.rb b/app/controllers/api/me_controller.rb new file mode 100644 index 0000000..ba75ef7 --- /dev/null +++ b/app/controllers/api/me_controller.rb @@ -0,0 +1,16 @@ +module Api + class MeController < BaseController + before_action :require_authentication, only: :update + + # GET /api/me + def show + render json: { user: Current.user&.as_json } + end + + # PATCH /api/me { display_name } + def update + Current.user.update!(params.permit(:display_name)) + render json: { user: Current.user.as_json } + end + end +end diff --git a/app/controllers/api/shares_controller.rb b/app/controllers/api/shares_controller.rb new file mode 100644 index 0000000..8eda64a --- /dev/null +++ b/app/controllers/api/shares_controller.rb @@ -0,0 +1,74 @@ +module Api + # Everything about who has access to a document. Owner only. + class SharesController < BaseController + before_action :require_authentication + before_action :load_owned_document + + # GET /api/documents/:document_id/share + def show + render json: share_json + end + + # POST /api/documents/:document_id/share/links { role } + # One active link per role: creating one replaces (revokes) the previous. + def create_link + role = params.require(:role) + return render(json: { error: "invalid_role" }, status: :unprocessable_entity) unless ShareLink.roles.key?(role) + @doc.transaction do + @doc.share_links.active.where(role:).find_each(&:revoke!) + @doc.share_links.create!(role:, created_by: Current.user) + end + render json: share_json + end + + # DELETE /api/documents/:document_id/share/links/:id + def revoke_link + @doc.share_links.active.find(params[:id]).revoke! + render json: share_json + end + + # POST /api/documents/:document_id/share/invitations { email, role } + def invite + role = params.require(:role) + return render(json: { error: "invalid_role" }, status: :unprocessable_entity) unless MagicLink.roles.key?(role) + link = MagicLink.issue!(email: params.require(:email), purpose: :invitation, document: @doc, role:, invited_by: Current.user) + if link.email == Current.user.email + link.destroy! + return render(json: { error: "self_invite" }, status: :unprocessable_entity) + end + AuthMailer.invitation(link, link.token).deliver_later + render json: share_json + end + + # PATCH /api/documents/:document_id/share/members/:user_id { role } + def update_member + m = @doc.document_memberships.find_by!(user_id: params[:user_id]) + m.update!(role: params.require(:role)) + render json: share_json + end + + # DELETE /api/documents/:document_id/share/members/:user_id + def remove_member + @doc.document_memberships.where(user_id: params[:user_id]).delete_all + render json: share_json + end + + private + + def load_owned_document + @doc = Current.user.owned_documents.find(params[:document_id]) + end + + def share_json + { + links: @doc.share_links.active.order(:created_at).map(&:as_json), + members: @doc.document_memberships.includes(:user).order(:created_at).map do |m| + { user_id: m.user_id, name: m.user.name, email: m.user.email, role: m.role, source: m.source } + end, + invitations: MagicLink.usable.invitation.where(document: @doc).order(:created_at).map do |i| + { email: i.email, role: i.role, expires_at: i.expires_at.iso8601 } + end + } + end + end +end diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb new file mode 100644 index 0000000..e4ba7a2 --- /dev/null +++ b/app/controllers/application_controller.rb @@ -0,0 +1,6 @@ +class ApplicationController < ActionController::Base + include Authentication + + # Only allow modern browsers supporting webp images, web push, badges, import maps, CSS nesting, and CSS :has. + allow_browser versions: :modern +end diff --git a/app/controllers/auth_controller.rb b/app/controllers/auth_controller.rb new file mode 100644 index 0000000..b426fdb --- /dev/null +++ b/app/controllers/auth_controller.rb @@ -0,0 +1,22 @@ +# The page behind the link in a sign-in / invitation mail. Opening the link +# (GET) only shows a button; the sign-in happens on POST. Mail scanners +# fetch links on their own and would otherwise use up the one-time token. +class AuthController < ApplicationController + layout "auth" + rate_limit to: 30, within: 15.minutes, only: :create + + def show + @token = params[:token].to_s + @link = MagicLink.find_by_token(@token) + render :invalid, status: :not_found unless @link + end + + def create + link = MagicLink.find_by_token(params[:token]) + return render(:invalid, status: :not_found) unless link + start_session_for(link.redeem!) + redirect_to link.destination + rescue ActiveRecord::RecordNotFound + render :invalid, status: :not_found + end +end diff --git a/app/controllers/concerns/.keep b/app/controllers/concerns/.keep new file mode 100644 index 0000000..e69de29 diff --git a/app/controllers/concerns/authentication.rb b/app/controllers/concerns/authentication.rb new file mode 100644 index 0000000..b5b104f --- /dev/null +++ b/app/controllers/concerns/authentication.rb @@ -0,0 +1,43 @@ +# Cookie session (signed session id), resumed on every request. Everything +# is usable without signing in; controllers call `require_authentication` +# where an account is needed. +module Authentication + extend ActiveSupport::Concern + + included do + before_action :resume_session + helper_method :signed_in? + end + + private + + def signed_in? = Current.user.present? + + def resume_session + Current.session = Session.find_by(id: cookies.signed[:session_id]) if cookies.signed[:session_id] + touch_session if Current.session + end + + def touch_session + s = Current.session + return if s.last_active_at && s.last_active_at > 1.hour.ago + s.update_columns(last_active_at: Time.current) + s.user.update_columns(last_seen_at: Time.current) + end + + def require_authentication + render json: { error: "unauthenticated" }, status: :unauthorized unless signed_in? + end + + def start_session_for(user) + reset_session + Current.session = user.sessions.create!(user_agent: request.user_agent, ip_address: request.remote_ip, last_active_at: Time.current) + cookies.signed.permanent[:session_id] = { value: Current.session.id, httponly: true, same_site: :lax, secure: Rails.env.production? } + end + + def terminate_session + Current.session&.destroy + Current.session = nil + cookies.delete(:session_id) + end +end diff --git a/app/controllers/spa_controller.rb b/app/controllers/spa_controller.rb new file mode 100644 index 0000000..6d5a6f5 --- /dev/null +++ b/app/controllers/spa_controller.rb @@ -0,0 +1,9 @@ +# Serves the Vue app for every client-side route (/, /d/). The signed-in +# user is embedded so the app knows it before its first render. +class SpaController < ApplicationController + layout false + + def show + @boot = { user: Current.user&.as_json } + end +end diff --git a/src/App.vue b/app/frontend/App.vue similarity index 100% rename from src/App.vue rename to app/frontend/App.vue diff --git a/src/components/AppToolbar.vue b/app/frontend/components/AppToolbar.vue similarity index 87% rename from src/components/AppToolbar.vue rename to app/frontend/components/AppToolbar.vue index 99d5f17..5945b9f 100644 --- a/src/components/AppToolbar.vue +++ b/app/frontend/components/AppToolbar.vue @@ -8,7 +8,11 @@ import CustomFunctionsModal from './CustomFunctionsModal.vue'; import NamedRangesModal from './NamedRangesModal.vue'; import MacrosModal from './MacrosModal.vue'; import DocumentsModal from './DocumentsModal.vue'; +import LoginModal from './LoginModal.vue'; +import ShareModal from './ShareModal.vue'; +import UploadModal from './UploadModal.vue'; import { useLibrary } from '../store/library'; +import { useSession } from '../store/session'; import { parseDocument } from '../io/json'; import TheLogo from './TheLogo.vue'; import ToolbarIcon, { type ToolbarIconName } from './ToolbarIcon.vue'; @@ -32,6 +36,7 @@ import type { Delimiter } from '../io/csv'; const store = useDocument(); const library = useLibrary(); +const session = useSession(); const { mode: themeMode, cycle: cycleTheme } = useTheme(); const toasts = useToasts(); @@ -110,15 +115,48 @@ const functionsOpen = ref(false); const namedRangesOpen = ref(false); const macrosOpen = ref(false); const documentsOpen = ref(false); +const shareOpen = ref(false); +const uploadOpen = ref(false); +const loginOpen = ref(false); +const loginReason = ref(); +const accountMenuOpen = ref(false); + +function openLogin(reason?: string) { + loginReason.value = reason; + documentsOpen.value = false; + shareOpen.value = false; + loginOpen.value = true; +} + +// after signing in: offer once (per account, per browser) to move this +// browser's documents into the account +onMounted(() => { + const user = session.state.user; + if (!user || !library.state.docs.length) return; + const key = `numolus:upload-asked:${user.id}`; + try { + if (localStorage.getItem(key)) return; + localStorage.setItem(key, '1'); + } catch { + return; + } + uploadOpen.value = true; +}); + +const statusNote = computed(() => { + if (library.state.syncState === 'offline') return 'Offline – wird später gespeichert'; + if (library.state.syncState === 'saving') return 'Speichert …'; + return ''; +}); // ---- document title (inline rename) ------------------------------------ const titleDraft = ref(library.currentTitle.value); watch(library.currentTitle, (t) => (titleDraft.value = t)); function commitTitle() { - const id = library.state.currentId; + const ref = library.state.current; const t = titleDraft.value.trim(); - if (!id || !t) titleDraft.value = library.currentTitle.value; - else if (t !== library.currentTitle.value) void library.rename(id, t); + if (!ref || !t) titleDraft.value = library.currentTitle.value; + else if (t !== library.currentTitle.value) void library.rename(ref, t); } const busy = ref(false); const fileInput = ref(null); @@ -323,6 +361,7 @@ async function onSample() { title="Dokumentname (klicken zum Umbenennen)" aria-label="Dokumentname" :size="Math.max(8, Math.min(28, titleDraft.length + 1))" + :readonly="library.currentRole.value === 'viewer'" @keydown.enter.prevent="($event.target as HTMLInputElement).blur()" @keydown.esc.prevent="titleDraft = library.currentTitle.value; ($event.target as HTMLInputElement).blur()" @blur="commitTitle()" @@ -400,8 +439,15 @@ async function onSample() { + + {{ library.state.lockedBy ? `${library.state.lockedBy} bearbeitet` : 'Nur Lesen' }} + + {{ statusNote }} +
+ +
    @@ -430,6 +476,26 @@ async function onSample() { +
    + + +
      +
    • {{ session.state.user?.email }}
      • +
      • +
    • +
      • +
    +
    + Verarbeite … @@ -507,7 +573,14 @@ async function onSample() { - + + + + @@ -661,6 +734,42 @@ async function onSample() { .btn-link:hover { color: var(--accent); } +.ro-badge, +.status-note { + font-size: 12px; + white-space: nowrap; +} +.ro-badge { + padding: 3px 9px; + border-radius: 999px; + background: var(--accent-weak); + color: var(--accent); + font-weight: 600; + cursor: help; +} +.status-note { + color: var(--text-dim); +} +.account { + display: inline-flex; + align-items: center; + gap: 6px; +} +.avatar { + display: inline-grid; + place-items: center; + width: 20px; + height: 20px; + border-radius: 50%; + color: #fff; + font-size: 11px; + font-weight: 700; +} +.menu-note { + padding: 6px 12px; + font-size: 12px; + color: var(--text-dim); +} .doc-title { min-width: 0; max-width: 240px; diff --git a/src/components/BaseModal.vue b/app/frontend/components/BaseModal.vue similarity index 100% rename from src/components/BaseModal.vue rename to app/frontend/components/BaseModal.vue diff --git a/src/components/ButtonView.vue b/app/frontend/components/ButtonView.vue similarity index 100% rename from src/components/ButtonView.vue rename to app/frontend/components/ButtonView.vue diff --git a/src/components/CanvasObject.vue b/app/frontend/components/CanvasObject.vue similarity index 100% rename from src/components/CanvasObject.vue rename to app/frontend/components/CanvasObject.vue diff --git a/src/components/ChartView.vue b/app/frontend/components/ChartView.vue similarity index 100% rename from src/components/ChartView.vue rename to app/frontend/components/ChartView.vue diff --git a/src/components/CodeReference.vue b/app/frontend/components/CodeReference.vue similarity index 100% rename from src/components/CodeReference.vue rename to app/frontend/components/CodeReference.vue diff --git a/src/components/ContextMenu.vue b/app/frontend/components/ContextMenu.vue similarity index 100% rename from src/components/ContextMenu.vue rename to app/frontend/components/ContextMenu.vue diff --git a/src/components/CustomFunctionsModal.vue b/app/frontend/components/CustomFunctionsModal.vue similarity index 100% rename from src/components/CustomFunctionsModal.vue rename to app/frontend/components/CustomFunctionsModal.vue diff --git a/src/components/DependencyGraphView.vue b/app/frontend/components/DependencyGraphView.vue similarity index 100% rename from src/components/DependencyGraphView.vue rename to app/frontend/components/DependencyGraphView.vue diff --git a/app/frontend/components/DocumentsModal.vue b/app/frontend/components/DocumentsModal.vue new file mode 100644 index 0000000..3e423e8 --- /dev/null +++ b/app/frontend/components/DocumentsModal.vue @@ -0,0 +1,322 @@ + + + + + diff --git a/src/components/FormulaBar.vue b/app/frontend/components/FormulaBar.vue similarity index 99% rename from src/components/FormulaBar.vue rename to app/frontend/components/FormulaBar.vue index 2d2afa7..c6ff33c 100644 --- a/src/components/FormulaBar.vue +++ b/app/frontend/components/FormulaBar.vue @@ -272,7 +272,8 @@ function onKeydown(e: KeyboardEvent) { class="formula-input" spellcheck="false" rows="1" - placeholder="Wert oder =Formel" + :placeholder="store.ui.readOnly ? 'Nur Lesen' : 'Wert oder =Formel'" + :readonly="!!store.ui.readOnly" title="Ziehen an der unteren Kante, um mehr Zeilen zu zeigen" @focus="onFocus" @blur="onBlur" diff --git a/src/components/FormulaSuggest.vue b/app/frontend/components/FormulaSuggest.vue similarity index 100% rename from src/components/FormulaSuggest.vue rename to app/frontend/components/FormulaSuggest.vue diff --git a/app/frontend/components/LoginModal.vue b/app/frontend/components/LoginModal.vue new file mode 100644 index 0000000..e38d184 --- /dev/null +++ b/app/frontend/components/LoginModal.vue @@ -0,0 +1,160 @@ + + + + + diff --git a/src/components/MacrosModal.vue b/app/frontend/components/MacrosModal.vue similarity index 100% rename from src/components/MacrosModal.vue rename to app/frontend/components/MacrosModal.vue diff --git a/src/components/NamedRangesModal.vue b/app/frontend/components/NamedRangesModal.vue similarity index 100% rename from src/components/NamedRangesModal.vue rename to app/frontend/components/NamedRangesModal.vue diff --git a/src/components/SettingsPanel.vue b/app/frontend/components/SettingsPanel.vue similarity index 100% rename from src/components/SettingsPanel.vue rename to app/frontend/components/SettingsPanel.vue diff --git a/app/frontend/components/ShareModal.vue b/app/frontend/components/ShareModal.vue new file mode 100644 index 0000000..ebb2135 --- /dev/null +++ b/app/frontend/components/ShareModal.vue @@ -0,0 +1,310 @@ + + + + + diff --git a/src/components/SheetCanvas.vue b/app/frontend/components/SheetCanvas.vue similarity index 100% rename from src/components/SheetCanvas.vue rename to app/frontend/components/SheetCanvas.vue diff --git a/src/components/SheetTabs.vue b/app/frontend/components/SheetTabs.vue similarity index 100% rename from src/components/SheetTabs.vue rename to app/frontend/components/SheetTabs.vue diff --git a/src/components/StatusBar.vue b/app/frontend/components/StatusBar.vue similarity index 100% rename from src/components/StatusBar.vue rename to app/frontend/components/StatusBar.vue diff --git a/src/components/TableGrid.vue b/app/frontend/components/TableGrid.vue similarity index 99% rename from src/components/TableGrid.vue rename to app/frontend/components/TableGrid.vue index c03b1d3..ef22255 100644 --- a/src/components/TableGrid.vue +++ b/app/frontend/components/TableGrid.vue @@ -911,6 +911,10 @@ function formulaEditorHandle() { } function beginEdit(c: number, r: number, initial?: string) { + if (store.ui.readOnly) { + store.setCellInput(props.tableId, c, r, ''); // no-op, only tells the user why + return; + } editing.value = { col: c, row: r }; editValue.value = initial ?? store.cellInput(props.tableId, c, r); keyboardPoint.reset(); diff --git a/src/components/TextBox.vue b/app/frontend/components/TextBox.vue similarity index 100% rename from src/components/TextBox.vue rename to app/frontend/components/TextBox.vue diff --git a/src/components/TheLogo.vue b/app/frontend/components/TheLogo.vue similarity index 100% rename from src/components/TheLogo.vue rename to app/frontend/components/TheLogo.vue diff --git a/src/components/ToolbarIcon.vue b/app/frontend/components/ToolbarIcon.vue similarity index 100% rename from src/components/ToolbarIcon.vue rename to app/frontend/components/ToolbarIcon.vue diff --git a/app/frontend/components/UploadModal.vue b/app/frontend/components/UploadModal.vue new file mode 100644 index 0000000..01df148 --- /dev/null +++ b/app/frontend/components/UploadModal.vue @@ -0,0 +1,93 @@ + + + + + diff --git a/src/composables/useFormulaAutocomplete.ts b/app/frontend/composables/useFormulaAutocomplete.ts similarity index 100% rename from src/composables/useFormulaAutocomplete.ts rename to app/frontend/composables/useFormulaAutocomplete.ts diff --git a/src/composables/useKeyboardPointMode.ts b/app/frontend/composables/useKeyboardPointMode.ts similarity index 100% rename from src/composables/useKeyboardPointMode.ts rename to app/frontend/composables/useKeyboardPointMode.ts diff --git a/src/composables/useTheme.ts b/app/frontend/composables/useTheme.ts similarity index 100% rename from src/composables/useTheme.ts rename to app/frontend/composables/useTheme.ts diff --git a/src/composables/useToasts.ts b/app/frontend/composables/useToasts.ts similarity index 100% rename from src/composables/useToasts.ts rename to app/frontend/composables/useToasts.ts diff --git a/src/config/brand.ts b/app/frontend/config/brand.ts similarity index 100% rename from src/config/brand.ts rename to app/frontend/config/brand.ts diff --git a/src/data/__tests__/codeReference.spec.ts b/app/frontend/data/__tests__/codeReference.spec.ts similarity index 100% rename from src/data/__tests__/codeReference.spec.ts rename to app/frontend/data/__tests__/codeReference.spec.ts diff --git a/src/data/codeReference.ts b/app/frontend/data/codeReference.ts similarity index 100% rename from src/data/codeReference.ts rename to app/frontend/data/codeReference.ts diff --git a/src/data/seed.ts b/app/frontend/data/seed.ts similarity index 100% rename from src/data/seed.ts rename to app/frontend/data/seed.ts diff --git a/src/engine/README.md b/app/frontend/engine/README.md similarity index 100% rename from src/engine/README.md rename to app/frontend/engine/README.md diff --git a/src/engine/__tests__/dateFunctions.spec.ts b/app/frontend/engine/__tests__/dateFunctions.spec.ts similarity index 100% rename from src/engine/__tests__/dateFunctions.spec.ts rename to app/frontend/engine/__tests__/dateFunctions.spec.ts diff --git a/src/engine/__tests__/dates.spec.ts b/app/frontend/engine/__tests__/dates.spec.ts similarity index 100% rename from src/engine/__tests__/dates.spec.ts rename to app/frontend/engine/__tests__/dates.spec.ts diff --git a/src/engine/__tests__/evaluator.spec.ts b/app/frontend/engine/__tests__/evaluator.spec.ts similarity index 100% rename from src/engine/__tests__/evaluator.spec.ts rename to app/frontend/engine/__tests__/evaluator.spec.ts diff --git a/src/engine/__tests__/functions.spec.ts b/app/frontend/engine/__tests__/functions.spec.ts similarity index 100% rename from src/engine/__tests__/functions.spec.ts rename to app/frontend/engine/__tests__/functions.spec.ts diff --git a/src/engine/__tests__/graph.spec.ts b/app/frontend/engine/__tests__/graph.spec.ts similarity index 100% rename from src/engine/__tests__/graph.spec.ts rename to app/frontend/engine/__tests__/graph.spec.ts diff --git a/src/engine/__tests__/lexer.spec.ts b/app/frontend/engine/__tests__/lexer.spec.ts similarity index 100% rename from src/engine/__tests__/lexer.spec.ts rename to app/frontend/engine/__tests__/lexer.spec.ts diff --git a/src/engine/__tests__/macros.spec.ts b/app/frontend/engine/__tests__/macros.spec.ts similarity index 100% rename from src/engine/__tests__/macros.spec.ts rename to app/frontend/engine/__tests__/macros.spec.ts diff --git a/src/engine/__tests__/parser.spec.ts b/app/frontend/engine/__tests__/parser.spec.ts similarity index 100% rename from src/engine/__tests__/parser.spec.ts rename to app/frontend/engine/__tests__/parser.spec.ts diff --git a/src/engine/__tests__/refs.spec.ts b/app/frontend/engine/__tests__/refs.spec.ts similarity index 100% rename from src/engine/__tests__/refs.spec.ts rename to app/frontend/engine/__tests__/refs.spec.ts diff --git a/src/engine/__tests__/userFunctions.spec.ts b/app/frontend/engine/__tests__/userFunctions.spec.ts similarity index 100% rename from src/engine/__tests__/userFunctions.spec.ts rename to app/frontend/engine/__tests__/userFunctions.spec.ts diff --git a/src/engine/__tests__/workbook.spec.ts b/app/frontend/engine/__tests__/workbook.spec.ts similarity index 100% rename from src/engine/__tests__/workbook.spec.ts rename to app/frontend/engine/__tests__/workbook.spec.ts diff --git a/src/engine/dates.ts b/app/frontend/engine/dates.ts similarity index 100% rename from src/engine/dates.ts rename to app/frontend/engine/dates.ts diff --git a/src/engine/evaluator.ts b/app/frontend/engine/evaluator.ts similarity index 100% rename from src/engine/evaluator.ts rename to app/frontend/engine/evaluator.ts diff --git a/src/engine/functions.ts b/app/frontend/engine/functions.ts similarity index 100% rename from src/engine/functions.ts rename to app/frontend/engine/functions.ts diff --git a/src/engine/graph.ts b/app/frontend/engine/graph.ts similarity index 100% rename from src/engine/graph.ts rename to app/frontend/engine/graph.ts diff --git a/src/engine/index.ts b/app/frontend/engine/index.ts similarity index 100% rename from src/engine/index.ts rename to app/frontend/engine/index.ts diff --git a/src/engine/lexer.ts b/app/frontend/engine/lexer.ts similarity index 100% rename from src/engine/lexer.ts rename to app/frontend/engine/lexer.ts diff --git a/src/engine/parser.ts b/app/frontend/engine/parser.ts similarity index 100% rename from src/engine/parser.ts rename to app/frontend/engine/parser.ts diff --git a/src/engine/refs.ts b/app/frontend/engine/refs.ts similarity index 100% rename from src/engine/refs.ts rename to app/frontend/engine/refs.ts diff --git a/src/engine/types.ts b/app/frontend/engine/types.ts similarity index 100% rename from src/engine/types.ts rename to app/frontend/engine/types.ts diff --git a/src/engine/userFunctions.ts b/app/frontend/engine/userFunctions.ts similarity index 100% rename from src/engine/userFunctions.ts rename to app/frontend/engine/userFunctions.ts diff --git a/src/engine/workbook.ts b/app/frontend/engine/workbook.ts similarity index 100% rename from src/engine/workbook.ts rename to app/frontend/engine/workbook.ts diff --git a/src/main.ts b/app/frontend/entrypoints/application.ts similarity index 67% rename from src/main.ts rename to app/frontend/entrypoints/application.ts index 851849b..fce776b 100644 --- a/src/main.ts +++ b/app/frontend/entrypoints/application.ts @@ -1,7 +1,7 @@ import { createApp } from 'vue'; -import App from './App.vue'; -import { useLibrary } from './store/library'; -import './styles/main.css'; +import App from '../App.vue'; +import { useLibrary } from '../store/library'; +import '../styles/main.css'; // open the document (from IndexedDB) before the first render, so the app // never flashes an empty document first diff --git a/src/env.d.ts b/app/frontend/env.d.ts similarity index 100% rename from src/env.d.ts rename to app/frontend/env.d.ts diff --git a/src/io/__tests__/library.spec.ts b/app/frontend/io/__tests__/library.spec.ts similarity index 100% rename from src/io/__tests__/library.spec.ts rename to app/frontend/io/__tests__/library.spec.ts diff --git a/src/io/__tests__/num.spec.ts b/app/frontend/io/__tests__/num.spec.ts similarity index 100% rename from src/io/__tests__/num.spec.ts rename to app/frontend/io/__tests__/num.spec.ts diff --git a/src/io/__tests__/roundtrip.spec.ts b/app/frontend/io/__tests__/roundtrip.spec.ts similarity index 100% rename from src/io/__tests__/roundtrip.spec.ts rename to app/frontend/io/__tests__/roundtrip.spec.ts diff --git a/app/frontend/io/api.ts b/app/frontend/io/api.ts new file mode 100644 index 0000000..ba0b81d --- /dev/null +++ b/app/frontend/io/api.ts @@ -0,0 +1,116 @@ +/** + * The numolus server API (Rails, /api). JSON in and out, the session cookie + * for the signed-in user, the CSRF token from the page's meta tag, and two + * per-request extras: X-Client-Id (this browser tab, the edit-lock holder) + * and X-Share-Token (a share link's token, for access via link). + */ + +export class ApiError extends Error { + constructor( + public status: number, + public body: Record, + ) { + super(ApiError.describe(status, body)); + } + static describe(status: number, body: Record): string { + if (status === 0) return 'Keine Verbindung zum Server.'; + if (status === 401) return 'Nicht angemeldet.'; + if (status === 404) return 'Nicht gefunden oder kein Zugriff.'; + if (status === 429) return 'Zu viele Versuche – bitte später noch einmal.'; + const msgs = body.messages; + if (Array.isArray(msgs) && msgs.length) return msgs.join(', '); + return `Serverfehler (${status}).`; + } +} + +export type Role = 'owner' | 'editor' | 'viewer'; + +export interface User { + id: number; + email: string; + name: string; + display_name: string | null; + color: string; +} + +export interface ServerDocMeta { + id: string; + title: string; + version: number; + role: Role; + owner_name: string; + updated_at: string; + updated_by_name: string | null; +} + +export interface ServerDoc extends ServerDocMeta { + content?: string; + lock?: { locked_by_other: boolean; holder_name: string | null }; +} + +export interface ShareInfo { + links: { id: number; role: 'viewer' | 'editor'; token: string; created_at: string }[]; + members: { user_id: number; name: string; email: string; role: 'viewer' | 'editor'; source: 'invite' | 'link' }[]; + invitations: { email: string; role: 'viewer' | 'editor'; expires_at: string }[]; +} + +/** One id per browser tab, kept across reloads of that tab. */ +export const clientId: string = (() => { + const key = 'numolus:client-id'; + try { + const existing = sessionStorage.getItem(key); + if (existing) return existing; + const id = Math.random().toString(36).slice(2) + Date.now().toString(36); + sessionStorage.setItem(key, id); + return id; + } catch { + return Math.random().toString(36).slice(2); + } +})(); + +function csrfToken(): string { + return document.querySelector('meta[name="csrf-token"]')?.content ?? ''; +} + +interface RequestOpts { + body?: unknown; + shareToken?: string | null; + /** survives the page being closed (small bodies only, < 64 KB) */ + keepalive?: boolean; +} + +export async function api>(method: string, path: string, opts: RequestOpts = {}): Promise { + const headers: Record = { + Accept: 'application/json', + 'X-CSRF-Token': csrfToken(), + 'X-Client-Id': clientId, + }; + if (opts.body !== undefined) headers['Content-Type'] = 'application/json'; + if (opts.shareToken) headers['X-Share-Token'] = opts.shareToken; + let res: Response; + try { + res = await fetch(`/api${path}`, { + method, + headers, + body: opts.body === undefined ? undefined : JSON.stringify(opts.body), + credentials: 'same-origin', + keepalive: opts.keepalive, + }); + } catch { + throw new ApiError(0, {}); + } + if (res.status === 204) return {} as T; + const body = (await res.json().catch(() => ({}))) as Record; + if (!res.ok) throw new ApiError(res.status, body); + return body as T; +} + +/** Data the server put into the page (see app/views/spa/show.html.erb). */ +export function bootData(): { user: User | null } { + try { + const el = document.getElementById('numolus-boot'); + return el ? JSON.parse(el.textContent || '{}') : { user: null }; + } catch { + return { user: null }; + } +} diff --git a/src/io/csv.ts b/app/frontend/io/csv.ts similarity index 100% rename from src/io/csv.ts rename to app/frontend/io/csv.ts diff --git a/src/io/download.ts b/app/frontend/io/download.ts similarity index 100% rename from src/io/download.ts rename to app/frontend/io/download.ts diff --git a/src/io/json.ts b/app/frontend/io/json.ts similarity index 100% rename from src/io/json.ts rename to app/frontend/io/json.ts diff --git a/src/io/library.ts b/app/frontend/io/library.ts similarity index 100% rename from src/io/library.ts rename to app/frontend/io/library.ts diff --git a/src/io/num.ts b/app/frontend/io/num.ts similarity index 100% rename from src/io/num.ts rename to app/frontend/io/num.ts diff --git a/src/io/operations.ts b/app/frontend/io/operations.ts similarity index 100% rename from src/io/operations.ts rename to app/frontend/io/operations.ts diff --git a/src/io/xlsx.ts b/app/frontend/io/xlsx.ts similarity index 100% rename from src/io/xlsx.ts rename to app/frontend/io/xlsx.ts diff --git a/src/numolus-logo.svg b/app/frontend/numolus-logo.svg similarity index 100% rename from src/numolus-logo.svg rename to app/frontend/numolus-logo.svg diff --git a/src/store/__tests__/document.spec.ts b/app/frontend/store/__tests__/document.spec.ts similarity index 100% rename from src/store/__tests__/document.spec.ts rename to app/frontend/store/__tests__/document.spec.ts diff --git a/src/store/__tests__/format.spec.ts b/app/frontend/store/__tests__/format.spec.ts similarity index 100% rename from src/store/__tests__/format.spec.ts rename to app/frontend/store/__tests__/format.spec.ts diff --git a/src/store/document.ts b/app/frontend/store/document.ts similarity index 97% rename from src/store/document.ts rename to app/frontend/store/document.ts index 44a9ce3..47fd701 100644 --- a/src/store/document.ts +++ b/app/frontend/store/document.ts @@ -630,6 +630,11 @@ function createStore() { * any one `TableGrid` instance, so navigating across tables/sheets * inside it doesn't depend on which grid happened to open it. */ depGraph: null as { tableId: string; col: number; row: number } | null, + /** Why the open document can't be changed right now (shown to the user), + * or `null` when it can. Set by the library for shared server documents + * (view-only access, or someone else is editing). While set, every + * content-changing store function is a no-op -- see READ_ONLY_GUARDED. */ + readOnly: null as string | null, }); /** Copy/cut buffer -- not part of the persisted document. */ const clipboard = ref(null); @@ -3004,7 +3009,7 @@ function createStore() { return JSON.parse(JSON.stringify(doc)) as DocumentState; } - return { + const api = { doc, recalcTick, // undo / redo @@ -3156,6 +3161,52 @@ function createStore() { cancelSave, engine: () => wb, }; + + // one gate instead of a check in every mutation: while the document is + // read-only, the content-changing entry points do nothing + let lastBlockNote = 0; + const table = api as unknown as Record unknown>; + for (const name of READ_ONLY_GUARDED) { + const fn = table[name]; + table[name] = (...args: unknown[]) => { + if (ui.readOnly) { + if (Date.now() - lastBlockNote > 3000) { + lastBlockNote = Date.now(); + readOnlyNotifier?.(ui.readOnly); + } + return undefined; + } + return fn(...args); + }; + } + return api; +} + +/** Store functions that change document content, blocked while read-only. */ +const READ_ONLY_GUARDED = [ + 'undo', 'redo', + 'addSheet', 'renameSheet', 'deleteSheet', 'moveSheet', + 'addTable', 'addChart', 'addText', 'setTextContent', 'setTextFormat', 'resizeText', + 'addButton', 'setButtonLabel', 'setButtonMacroId', 'resizeButton', + 'renameObject', 'deleteObject', 'moveObject', 'resizeChart', 'bringToFront', + 'setChartView', 'setChartSource', 'setObjectBg', 'setObjectTextColor', 'setTableHideChromeUnfocused', + 'addCustomFunction', 'updateCustomFunction', 'deleteCustomFunction', + 'addNamedRange', 'updateNamedRange', 'deleteNamedRange', + 'addMacro', 'updateMacro', 'deleteMacro', 'runMacro', + 'setCellInput', 'clearRange', 'addRows', 'addColumns', 'removeLastRow', 'removeLastColumn', + 'setColWidth', 'setRowHeight', 'setTableRowHeight', 'setTableRows', 'setTableCols', + 'insertRow', 'deleteRow', 'insertColumn', 'deleteColumn', 'setTableView', + 'setRangeFormat', 'clearRangeFormat', 'applySelectionFormat', 'clearSelectionFormat', 'clearSelectionCells', + 'setDocumentLocale', 'setSheetLocale', 'setObjectLocale', + 'setSheetBackground', 'setSheetForeground', 'setSheetShowGrid', 'setSheetGridSize', 'setCsvDelimiter', + 'cutSelection', 'pasteClipboard', 'fillSelection', + 'newDocument', 'resetToSeed', 'appendSheets', 'addTableFromCells', 'replaceTableCells', +] as const; + +/** Tells the user why an edit was ignored (a toast) -- set by the app. */ +let readOnlyNotifier: ((why: string) => void) | null = null; +export function setReadOnlyNotifier(fn: ((why: string) => void) | null) { + readOnlyNotifier = fn; } let instance: ReturnType | null = null; diff --git a/src/store/format.ts b/app/frontend/store/format.ts similarity index 100% rename from src/store/format.ts rename to app/frontend/store/format.ts diff --git a/app/frontend/store/library.ts b/app/frontend/store/library.ts new file mode 100644 index 0000000..3870401 --- /dev/null +++ b/app/frontend/store/library.ts @@ -0,0 +1,852 @@ +/** + * Glue between the document store (one open document) and where documents + * live: + * + * - **local** documents: in this browser's IndexedDB (src/io/library.ts), + * URL `/?doc=`. Without an account, that's all there is. + * - **server** documents: on the numolus server (src/io/api.ts), URL + * `/d/`. With an account, new documents are created there and local + * ones can be uploaded; they can be shared. A share link + * (`/d/#k=`) also opens a server document without an account -- + * the token is kept in this browser (localStorage) and sent along. + * + * Persistence: the store's debounced save lands in `persist()` and goes to + * IndexedDB or to the server. Server documents have a single-editor lock + * (until live collaboration exists): whoever holds it edits, everyone else + * sees the document read-only and follows its changes by polling. + * + * Other tabs: a BroadcastChannel keeps lists current and lets a local + * document open in two tabs follow the other tab's saves. + */ + +import { computed, reactive } from 'vue'; +import { useDocument, setPersistHandler, setReadOnlyNotifier, contentFingerprint } from './document'; +import type { DocumentState } from './types'; +import { DocumentLibrary, newDocId, type DocMeta } from '../io/library'; +import { api, ApiError, type Role, type ServerDoc, type ServerDocMeta } from '../io/api'; +import { validateDocument } from '../io/json'; +import { createBlankDocument, createSeedDocument } from '../data/seed'; +import { useToasts } from '../composables/useToasts'; +import { useSession } from './session'; + +/** The single-document localStorage keys used before the library existed -- + * read once and moved into the library as its first document. */ +const LEGACY_KEYS = ['numolus:doc:v2', 'numbers-study:doc:v2']; +/** share-link tokens this browser holds without an account */ +const LINKS_KEY = 'numolus:links'; +const CHANNEL = 'numolus:library'; +const DEFAULT_TITLE = 'Unbenannt'; +const APP_TITLE = 'numolus'; +const UPLOAD_DELAY = 800; // ms after the last change +const HEARTBEAT = 30_000; // refresh the edit lock (server TTL is 90 s) +const POLL = 10_000; // read-only: look for someone else's changes + +export type DocSource = 'local' | 'server'; +export interface DocRef { + source: DocSource; + id: string; +} +export interface LinkDoc { + id: string; + token: string; + title: string; + role: Role; +} + +type Msg = + | { type: 'list' } + | { type: 'saved'; id: string } + | { type: 'deleted'; id: string } + | { type: 'hello'; id: string } + | { type: 'here'; id: string }; + +function metaOf(d: ServerDoc): ServerDocMeta { + const { id, title, version, role, owner_name, updated_at, updated_by_name } = d; + return { id, title, version, role, owner_name, updated_at, updated_by_name }; +} + +function readLinks(): LinkDoc[] { + try { + return JSON.parse(localStorage.getItem(LINKS_KEY) || '[]') as LinkDoc[]; + } catch { + return []; + } +} +function writeLinks(links: LinkDoc[]) { + try { + localStorage.setItem(LINKS_KEY, JSON.stringify(links)); + } catch { + /* private mode -- the link itself still works */ + } +} + +function createLibrary() { + const store = useDocument(); + const toasts = useToasts(); + const session = useSession(); + + const state = reactive({ + ready: false, + /** false = IndexedDB unavailable (private mode in some browsers, ...) */ + available: true, + /** local documents (IndexedDB) */ + docs: [] as DocMeta[], + /** server documents of the signed-in user: own + shared with them */ + serverDocs: [] as ServerDocMeta[], + /** documents opened via share link without an account */ + linkDocs: readLinks(), + current: null as DocRef | null, + /** the open server document's metadata (title, role, version, ...) */ + server: null as ServerDocMeta | null, + /** someone else holds the edit lock on the open server document */ + lockedBy: null as string | null, + /** server saves waiting or failing */ + syncState: 'idle' as 'idle' | 'saving' | 'offline', + }); + + const currentTitle = computed(() => { + const c = state.current; + if (!c) return DEFAULT_TITLE; + if (c.source === 'server') return state.server?.title ?? DEFAULT_TITLE; + return state.docs.find((d) => d.id === c.id)?.title ?? DEFAULT_TITLE; + }); + /** role in the open document; local documents are always the user's own */ + const currentRole = computed(() => + state.current?.source === 'server' ? (state.server?.role ?? 'viewer') : 'owner', + ); + const canEdit = computed(() => currentRole.value !== 'viewer' && !state.lockedBy); + + let lib: DocumentLibrary | null = null; + let channel: BroadcastChannel | null = null; + /** content fingerprint of what's saved for the open document */ + let savedContent = ''; + /** `updatedAt` of the open local document as this tab last wrote or read it */ + let knownUpdatedAt = 0; + /** local writes run one after another, in order */ + let writeQueue: Promise = Promise.resolve(); + const warnedShared = new Set(); + + // server document state + let uploadTimer: ReturnType | undefined; + let uploading: Promise | null = null; + let pendingJson: string | null = null; + let pendingFp = ''; + let holdsLock = false; + let heartbeatTimer: ReturnType | undefined; + let pollTimer: ReturnType | undefined; + + const post = (m: Msg) => channel?.postMessage(m); + const enqueue = (job: () => Promise) => { + writeQueue = writeQueue.then(job).catch((err) => { + console.error(err); + toasts.error(`Speichern fehlgeschlagen: ${(err as Error).message}`); + }); + return writeQueue; + }; + const shareToken = (id: string) => state.linkDocs.find((l) => l.id === id)?.token ?? null; + const isCurrent = (ref: DocRef) => state.current?.source === ref.source && state.current.id === ref.id; + + async function refreshList() { + if (lib) state.docs = await lib.list(); + } + async function refreshServerList() { + if (!session.signedIn.value) return; + try { + state.serverDocs = (await api<{ documents: ServerDocMeta[] }>('GET', '/documents')).documents; + } catch (err) { + console.error(err); + } + } + + function uniqueTitle(base: string, taken: string[]): string { + const set = new Set(taken.map((t) => t.toLowerCase())); + if (!set.has(base.toLowerCase())) return base; + for (let n = 2; ; n++) { + const t = `${base} ${n}`; + if (!set.has(t.toLowerCase())) return t; + } + } + + function setUrl(ref: DocRef, push: boolean) { + const url = new URL(location.href); + url.hash = ''; + if (ref.source === 'server') { + url.pathname = `/d/${ref.id}`; + url.searchParams.delete('doc'); + } else { + url.pathname = '/'; + url.searchParams.set('doc', ref.id); + } + if (url.href === location.href) return; + if (push) history.pushState(null, '', url); + else history.replaceState(null, '', url); + } + + function updateWindowTitle() { + document.title = `${currentTitle.value} – ${APP_TITLE}`; + } + + function applyReadOnly() { + store.ui.readOnly = + state.current?.source !== 'server' + ? null + : currentRole.value === 'viewer' + ? 'Nur Lesen – du kannst dieses Dokument ansehen, aber nicht bearbeiten.' + : state.lockedBy + ? `${state.lockedBy} bearbeitet gerade – nur Lesen, bis die Bearbeitung beendet ist.` + : null; + } + + /** Put `next` into the store as the open document. */ + function show(ref: DocRef, next: DocumentState, keepView = false) { + if (keepView && next.sheets.some((s) => s.id === store.doc.activeSheetId)) { + // someone else's save: take the content, keep this tab's cursor/sheet + next.activeSheetId = store.doc.activeSheetId; + next.activeObjectId = store.doc.activeObjectId; + next.selection = store.doc.selection; + } + state.current = ref; + store.replaceDocument(next); + // it came from where it's saved -- writing it straight back is pointless + store.cancelSave(); + savedContent = contentFingerprint(store.doc); + updateWindowTitle(); + } + + // ---- persistence ----------------------------------------------------- + function persist(doc: DocumentState) { + const c = state.current; + if (!c) return; + if (c.source === 'server') return persistServer(doc); + if (!lib) return; + const id = c.id; + const json = JSON.stringify(doc); + const fp = contentFingerprint(doc); + const changed = fp !== savedContent; + savedContent = fp; + void enqueue(async () => { + const meta = (await lib!.getMeta(id)) ?? { + id, + title: currentTitle.value, + createdAt: Date.now(), + updatedAt: Date.now(), + }; + if (!changed) { + // only the cursor/active sheet moved: saved so reopening restores + // it, but never over newer content another tab has written meanwhile + if (meta.updatedAt !== knownUpdatedAt) return; + await lib!.put(meta, json); + return; + } + const updatedAt = Math.max(Date.now(), meta.updatedAt + 1); + await lib!.put({ ...meta, updatedAt }, json); + if (isCurrent({ source: 'local', id })) knownUpdatedAt = updatedAt; + await refreshList(); + post({ type: 'saved', id }); + }); + } + + function persistServer(doc: DocumentState) { + if (!canEdit.value) return; + const fp = contentFingerprint(doc); + if (fp === savedContent && pendingJson === null) return; // cursor move only + pendingJson = JSON.stringify(doc); + pendingFp = fp; + clearTimeout(uploadTimer); + uploadTimer = setTimeout(() => void upload(), UPLOAD_DELAY); + } + + /** Send the pending change of the open server document (one at a time). */ + async function upload(): Promise { + clearTimeout(uploadTimer); + uploadTimer = undefined; + if (uploading) { + await uploading; + if (pendingJson !== null) return upload(); + return; + } + const c = state.current; + const meta = state.server; + if (!c || c.source !== 'server' || !meta || pendingJson === null) return; + const json = pendingJson; + const fp = pendingFp; + pendingJson = null; + state.syncState = 'saving'; + uploading = (async () => { + try { + const r = await api<{ document: ServerDocMeta }>('PATCH', `/documents/${c.id}`, { + body: { content: json, base_version: meta.version }, + shareToken: shareToken(c.id), + }); + if (isCurrent(c)) { + state.server = { ...meta, ...r.document, role: meta.role }; + savedContent = fp; + } + state.syncState = 'idle'; + } catch (err) { + await uploadFailed(c, err, json, fp); + } finally { + uploading = null; + } + })(); + await uploading; + if (pendingJson !== null && isCurrent(c)) return upload(); + } + + async function uploadFailed(c: DocRef, err: unknown, json: string, fp: string) { + if (!(err instanceof ApiError) || err.status === 0 || err.status >= 500) { + // offline / server trouble: keep it and try again + state.syncState = 'offline'; + if (pendingJson === null) { + pendingJson = json; + pendingFp = fp; + } + clearTimeout(uploadTimer); + uploadTimer = setTimeout(() => void upload(), 5000); + return; + } + state.syncState = 'idle'; + // the server's version wins; edits made meanwhile would be based on the + // rejected state, so they go too + pendingJson = null; + clearTimeout(uploadTimer); + if (err.status === 423) { + holdsLock = false; + state.lockedBy = (err.body.holder_name as string) || 'Jemand anderes'; + toasts.error(`${state.lockedBy} bearbeitet dieses Dokument inzwischen – deine letzte Änderung wurde nicht gespeichert.`); + } else if (err.status === 409) { + toasts.error('Das Dokument wurde inzwischen anderswo geändert – deine letzte Änderung wurde nicht gespeichert.'); + } else { + toasts.error(`Speichern fehlgeschlagen: ${err.message}`); + } + if (isCurrent(c)) await reloadServer(c.id, true); + startServerTimers(); + } + + /** Before leaving the open server document: send what's pending. */ + async function flushServer() { + store.flushSave(); + if (pendingJson !== null || uploading) await upload(); + } + + // ---- edit lock + polling --------------------------------------------- + function stopServerTimers() { + clearInterval(heartbeatTimer); + clearInterval(pollTimer); + heartbeatTimer = pollTimer = undefined; + } + + function startServerTimers() { + stopServerTimers(); + if (state.current?.source !== 'server') return; + if (holdsLock) heartbeatTimer = setInterval(() => void heartbeat(), HEARTBEAT); + else pollTimer = setInterval(() => void poll(), POLL); + } + + /** Try to take the edit lock of the open server document. */ + async function takeLock(id: string): Promise { + if (currentRole.value === 'viewer') return false; + try { + const r = await api<{ lock: { mine: boolean; holder_name: string | null } }>('POST', `/documents/${id}/lock`, { + shareToken: shareToken(id), + }); + holdsLock = r.lock.mine; + state.lockedBy = r.lock.mine ? null : r.lock.holder_name || 'Jemand anderes'; + } catch { + holdsLock = false; + } + applyReadOnly(); + return holdsLock; + } + + async function heartbeat() { + const c = state.current; + if (c?.source !== 'server') return; + const had = holdsLock; + await takeLock(c.id); + if (had && !holdsLock) { + toasts.error(`${state.lockedBy ?? 'Jemand anderes'} bearbeitet dieses Dokument jetzt.`); + startServerTimers(); + } + } + + async function poll() { + const c = state.current; + if (c?.source !== 'server' || document.visibilityState === 'hidden') return; + if (currentRole.value !== 'viewer' && (await takeLock(c.id))) { + await reloadServer(c.id, true); + toasts.info('Du kannst das Dokument jetzt bearbeiten.'); + startServerTimers(); + return; + } + await reloadServer(c.id, true); + } + + function releaseLock(id: string) { + if (!holdsLock) return; + holdsLock = false; + void api('DELETE', `/documents/${id}/lock`, { shareToken: shareToken(id), keepalive: true }).catch(() => {}); + } + + /** Fetch the server document again; with `keepView` only when it changed. */ + async function reloadServer(id: string, keepView: boolean) { + const known = keepView ? state.server?.version : undefined; + try { + const q = known ? `?known_version=${known}` : ''; + const r = await api<{ document: ServerDoc; unchanged?: boolean }>('GET', `/documents/${id}${q}`, { + shareToken: shareToken(id), + }); + if (!isCurrent({ source: 'server', id })) return; + const { content } = r.document; + state.server = metaOf(r.document); + if (!r.unchanged && content !== undefined) { + show({ source: 'server', id }, validateDocument(JSON.parse(content)), keepView); + } + updateWindowTitle(); + applyReadOnly(); + } catch (err) { + if (err instanceof ApiError && err.status === 404) { + toasts.error('Kein Zugriff mehr auf dieses Dokument.'); + await openFallback(); + } + } + } + + // ---- leaving / opening ----------------------------------------------- + async function leaveCurrent() { + const c = state.current; + if (!c) return; + if (c.source === 'server') { + await flushServer(); + stopServerTimers(); + releaseLock(c.id); + state.lockedBy = null; + state.server = null; + } else { + store.flushSave(); + await writeQueue; + } + } + + async function openLocal(id: string, opts: { push?: boolean } = {}): Promise { + if (!lib) return false; + if (isCurrent({ source: 'local', id })) return true; + const [meta, json] = await Promise.all([lib.getMeta(id), lib.getContent(id)]); + if (!meta || json === undefined) return false; + let next: DocumentState; + try { + next = validateDocument(JSON.parse(json)); + } catch (err) { + toasts.error(`Dokument konnte nicht geladen werden: ${(err as Error).message}`); + return false; + } + await leaveCurrent(); + show({ source: 'local', id }, next); + knownUpdatedAt = meta.updatedAt; + applyReadOnly(); + setUrl({ source: 'local', id }, opts.push ?? true); + post({ type: 'hello', id }); + return true; + } + + async function openServer(id: string, opts: { push?: boolean } = {}): Promise { + if (isCurrent({ source: 'server', id })) return true; + let r: { document: ServerDoc }; + try { + r = await api<{ document: ServerDoc }>('GET', `/documents/${id}`, { shareToken: shareToken(id) }); + } catch (err) { + toasts.error( + err instanceof ApiError && err.status === 404 + ? 'Dieses Dokument gibt es nicht, oder du hast keinen Zugriff darauf.' + : `Dokument konnte nicht geladen werden: ${(err as Error).message}`, + ); + return false; + } + const { content } = r.document; + const meta = metaOf(r.document); + let next: DocumentState; + try { + next = validateDocument(JSON.parse(content ?? '')); + } catch (err) { + toasts.error(`Dokument konnte nicht geladen werden: ${(err as Error).message}`); + return false; + } + await leaveCurrent(); + state.server = meta; + state.lockedBy = null; + holdsLock = false; + show({ source: 'server', id }, next); + // remember the title for link-only documents + const link = state.linkDocs.find((l) => l.id === id); + if (link && (link.title !== meta.title || link.role !== meta.role)) { + Object.assign(link, { title: meta.title, role: meta.role }); + writeLinks(state.linkDocs); + } + applyReadOnly(); + if (meta.role !== 'viewer') await takeLock(id); + startServerTimers(); + setUrl({ source: 'server', id }, opts.push ?? true); + return true; + } + + function open(ref: DocRef, opts: { push?: boolean } = {}) { + return ref.source === 'server' ? openServer(ref.id, opts) : openLocal(ref.id, opts); + } + + // ---- creating -------------------------------------------------------- + /** Add a document and open it: on the server when signed in, else locally. */ + async function create(doc: DocumentState, title: string): Promise { + const t = title.trim() || DEFAULT_TITLE; + if (session.signedIn.value) { + try { + const r = await api<{ document: ServerDocMeta }>('POST', '/documents', { + body: { title: uniqueTitle(t, state.serverDocs.map((d) => d.title)), content: JSON.stringify(doc) }, + }); + await refreshServerList(); + post({ type: 'list' }); + await openServer(r.document.id); + return { source: 'server', id: r.document.id }; + } catch (err) { + toasts.error(`Anlegen auf dem Server fehlgeschlagen: ${(err as Error).message}`); + return null; + } + } + if (!lib) { + store.replaceDocument(doc); // no storage at all: at least show it + return null; + } + const id = newDocId(); + const now = Date.now(); + await enqueue(() => + lib!.put({ id, title: uniqueTitle(t, state.docs.map((d) => d.title)), createdAt: now, updatedAt: now }, JSON.stringify(doc)), + ); + await refreshList(); + post({ type: 'list' }); + await openLocal(id); + return { source: 'local', id }; + } + + const createBlank = () => create(createBlankDocument(), DEFAULT_TITLE); + const createSample = () => create(createSeedDocument(), 'Muster · Umsatzanalyse'); + + // ---- managing ---------------------------------------------------------- + async function rename(ref: DocRef, title: string) { + const t = title.trim(); + if (!t) return; + if (ref.source === 'server') { + try { + const r = await api<{ document: ServerDocMeta }>('PATCH', `/documents/${ref.id}`, { + body: { title: t }, + shareToken: shareToken(ref.id), + }); + if (isCurrent(ref) && state.server) state.server = { ...state.server, title: r.document.title }; + await refreshServerList(); + } catch (err) { + toasts.error(`Umbenennen fehlgeschlagen: ${(err as Error).message}`); + } + } else { + if (!lib) return; + await enqueue(() => lib!.patchMeta(ref.id, { title: t })); + await refreshList(); + } + if (isCurrent(ref)) updateWindowTitle(); + post({ type: 'list' }); + } + + async function contentOf(ref: DocRef): Promise<{ title: string; json: string } | null> { + if (isCurrent(ref)) { + if (ref.source === 'server') await flushServer(); + else { + store.flushSave(); + await writeQueue; + } + } + if (ref.source === 'server') { + const r = await api<{ document: ServerDoc }>('GET', `/documents/${ref.id}`, { shareToken: shareToken(ref.id) }); + return r.document.content === undefined ? null : { title: r.document.title, json: r.document.content }; + } + if (!lib) return null; + const [meta, json] = await Promise.all([lib.getMeta(ref.id), lib.getContent(ref.id)]); + return meta && json !== undefined ? { title: meta.title, json } : null; + } + + /** A copy next to the original (server copies go to the own account). */ + async function duplicate(ref: DocRef) { + try { + const src = await contentOf(ref); + if (!src) return; + const title = `${src.title} (Kopie)`; + if (ref.source === 'server') { + await api('POST', '/documents', { + body: { title: uniqueTitle(title, state.serverDocs.map((d) => d.title)), content: src.json }, + }); + await refreshServerList(); + } else if (lib) { + const now = Date.now(); + await enqueue(() => + lib!.put( + { id: newDocId(), title: uniqueTitle(title, state.docs.map((d) => d.title)), createdAt: now, updatedAt: now }, + src.json, + ), + ); + await refreshList(); + } + post({ type: 'list' }); + } catch (err) { + toasts.error(`Duplizieren fehlgeschlagen: ${(err as Error).message}`); + } + } + + /** Delete (own / local) or leave (shared with me / link). */ + async function remove(ref: DocRef) { + if (ref.source === 'server') { + const wasCurrent = isCurrent(ref); + if (wasCurrent) await leaveCurrent(); + if (session.signedIn.value) { + try { + await api('DELETE', `/documents/${ref.id}`); + } catch (err) { + if (!(err instanceof ApiError && err.status === 404)) { + toasts.error(`Löschen fehlgeschlagen: ${(err as Error).message}`); + return; + } + } + } + state.linkDocs = state.linkDocs.filter((l) => l.id !== ref.id); + writeLinks(state.linkDocs); + await refreshServerList(); + post({ type: 'list' }); + if (wasCurrent) { + state.current = null; + await openFallback(); + } + return; + } + if (!lib) return; + await enqueue(() => lib!.remove(ref.id)); + await refreshList(); + post({ type: 'deleted', id: ref.id }); + if (isCurrent(ref)) { + state.current = null; + await openFallback(); + } + } + + /** + * Move local documents into the account (server). Each one is removed from + * this browser once it's safely on the server; an open one is reopened + * from there. Returns the server id of each uploaded document. + */ + async function upload_(localIds: string[]): Promise> { + const done = new Map(); + if (!lib || !session.signedIn.value) return done; + for (const id of localIds) { + try { + const src = await contentOf({ source: 'local', id }); + if (!src) continue; + const r = await api<{ document: ServerDocMeta }>('POST', '/documents', { + body: { title: src.title, content: src.json }, + }); + done.set(id, r.document.id); + const wasCurrent = isCurrent({ source: 'local', id }); + if (wasCurrent) await openServer(r.document.id, { push: false }); + await enqueue(() => lib!.remove(id)); + post({ type: 'deleted', id }); + } catch (err) { + toasts.error(`Hochladen fehlgeschlagen: ${(err as Error).message}`); + } + } + await Promise.all([refreshList(), refreshServerList()]); + post({ type: 'list' }); + return done; + } + + /** Most recently changed document, or a new blank one. */ + async function openFallback() { + state.current = null; + const server = state.serverDocs[0]; + const local = state.docs[0]; + const serverNewer = server && (!local || Date.parse(server.updated_at) > local.updatedAt); + if (serverNewer && (await openServer(server.id, { push: false }))) return; + if (local && (await openLocal(local.id, { push: false }))) return; + await createBlank(); + } + + // ---- share links ------------------------------------------------------- + /** Redeem `#k=` for document `id` (from the URL). */ + async function joinByLink(id: string, token: string) { + try { + const r = await api<{ document: ServerDocMeta }>('POST', `/documents/${id}/join`, { body: { token } }); + if (session.signedIn.value) { + await refreshServerList(); // it's in the account now + } else { + state.linkDocs = [ + { id, token, title: r.document.title, role: r.document.role }, + ...state.linkDocs.filter((l) => l.id !== id), + ]; + writeLinks(state.linkDocs); + } + } catch { + toasts.error('Dieser Link ist nicht (mehr) gültig.'); + } + } + + /** After signing in: documents opened via link become part of the account. */ + async function adoptLinkDocs() { + if (!session.signedIn.value || !state.linkDocs.length) return; + for (const l of state.linkDocs) { + await api('POST', `/documents/${l.id}/join`, { body: { token: l.token } }).catch(() => {}); + } + state.linkDocs = []; + writeLinks([]); + } + + // ---- other tabs -------------------------------------------------------- + async function onMessage(m: Msg) { + if (m.type === 'list') { + await Promise.all([refreshList(), refreshServerList()]); + state.linkDocs = readLinks(); + updateWindowTitle(); + return; + } + const cur = state.current?.source === 'local' ? state.current.id : null; + if (m.type === 'saved') { + await refreshList(); + // our own unsaved edit wins (it's written right after); otherwise + // follow -- a pending save that's only a cursor move doesn't count + const localEdit = store.hasPendingSave() && contentFingerprint(store.doc) !== savedContent; + if (m.id === cur && !localEdit && lib) { + const [meta, json] = await Promise.all([lib.getMeta(m.id), lib.getContent(m.id)]); + if (meta && json !== undefined && isCurrent({ source: 'local', id: m.id })) { + show({ source: 'local', id: m.id }, validateDocument(JSON.parse(json)), true); + knownUpdatedAt = meta.updatedAt; + } + } + } else if (m.type === 'deleted') { + await refreshList(); + if (m.id === cur) { + toasts.info('Dieses Dokument ist nicht mehr in diesem Browser (gelöscht oder hochgeladen).'); + state.current = null; + await refreshServerList(); + await openFallback(); + } + } else if (m.id === cur) { + // hello / here: the same local document is open in another tab + if (m.type === 'hello') post({ type: 'here', id: m.id }); + if (!warnedShared.has(m.id)) { + warnedShared.add(m.id); + toasts.info( + 'Dieses Dokument ist auch in einem anderen Tab geöffnet. Gleichzeitige Änderungen können sich überschreiben.', + ); + } + } + } + + // ---- start ------------------------------------------------------------- + async function migrateLegacy() { + for (const key of LEGACY_KEYS) { + let raw: string | null = null; + try { + raw = localStorage.getItem(key); + } catch { + return; + } + if (!raw) continue; + try { + const doc = validateDocument(JSON.parse(raw)); + const now = Date.now(); + await lib!.put({ id: newDocId(), title: 'Mein Dokument', createdAt: now, updatedAt: now }, JSON.stringify(doc)); + } catch { + continue; // corrupt -- leave it where it is + } + for (const k of LEGACY_KEYS) localStorage.removeItem(k); + return; + } + } + + /** What the URL asks for: `/d/[#k=]` or `/?doc=`. */ + function refFromUrl(): { ref: DocRef | null; token: string | null } { + const m = location.pathname.match(/^\/d\/([0-9a-f-]{36})\/?$/i); + if (m) { + const token = new URLSearchParams(location.hash.slice(1)).get('k'); + return { ref: { source: 'server', id: m[1] }, token }; + } + const id = new URL(location.href).searchParams.get('doc'); + return { ref: id ? { source: 'local', id } : null, token: null }; + } + + async function init() { + setReadOnlyNotifier((why) => toasts.info(why)); + try { + lib = await DocumentLibrary.open(); + await migrateLegacy(); + await refreshList(); + } catch (err) { + console.error(err); + lib = null; + state.available = false; + if (!session.signedIn.value) { + toasts.error('Dokumente können in diesem Browser nicht gespeichert werden (IndexedDB nicht verfügbar).'); + } + } + await adoptLinkDocs(); + await refreshServerList(); + + if (typeof BroadcastChannel !== 'undefined') { + channel = new BroadcastChannel(CHANNEL); + channel.onmessage = (e: MessageEvent) => void onMessage(e.data); + } + setPersistHandler(persist); + + const { ref, token } = refFromUrl(); + if (ref?.source === 'server' && token) await joinByLink(ref.id, token); + if (ref && !(await open(ref, { push: false })) && ref.source === 'local') { + toasts.error('Das angeforderte Dokument gibt es in diesem Browser nicht.'); + } + if (!state.current) await openFallback(); + + window.addEventListener('popstate', () => { + const { ref: r } = refFromUrl(); + if (r && !isCurrent(r)) void open(r, { push: false }); + }); + // don't lose the last moments of typing when the tab goes away + window.addEventListener('pagehide', () => { + store.flushSave(); + if (state.current?.source === 'server') { + if (pendingJson !== null) void upload(); + releaseLock(state.current.id); + } + }); + window.addEventListener('beforeunload', (e) => { + if (pendingJson !== null || uploading) e.preventDefault(); // unsaved server changes + }); + document.addEventListener('visibilitychange', () => { + if (document.visibilityState === 'hidden') store.flushSave(); + }); + state.ready = true; + } + + return { + state, + currentTitle, + currentRole, + canEdit, + init, + open, + create, + createBlank, + createSample, + rename, + duplicate, + remove, + upload: upload_, + refreshServerList, + }; +} + +let instance: ReturnType | null = null; + +export function useLibrary() { + if (!instance) instance = createLibrary(); + return instance; +} diff --git a/app/frontend/store/session.ts b/app/frontend/store/session.ts new file mode 100644 index 0000000..58ff6e4 --- /dev/null +++ b/app/frontend/store/session.ts @@ -0,0 +1,36 @@ +/** + * Who is signed in. An account is optional: without one, documents stay in + * this browser (IndexedDB); with one, they live on the server and can be + * shared. Sign-in is by magic link or the 6-digit code from the same mail. + */ +import { computed, reactive } from 'vue'; +import { api, bootData, type User } from '../io/api'; + +const state = reactive({ user: bootData().user as User | null }); + +export function useSession() { + const signedIn = computed(() => !!state.user); + + /** Mail a sign-in link + code. `returnTo` = where the link leads back to. */ + async function requestLink(email: string, returnTo = location.pathname + location.search) { + await api('POST', '/auth/magic_link', { body: { email, return_to: returnTo } }); + } + + /** Sign in with the code. The page reloads, so everything starts signed in. */ + async function verifyCode(email: string, code: string) { + await api<{ redirect: string }>('POST', '/auth/code', { body: { email, code } }); + location.reload(); + } + + async function logout() { + await api('DELETE', '/auth/session'); + location.assign('/'); + } + + async function setDisplayName(display_name: string) { + const r = await api<{ user: User }>('PATCH', '/me', { body: { display_name } }); + state.user = r.user; + } + + return { state, signedIn, requestLink, verifyCode, logout, setDisplayName }; +} diff --git a/src/store/types.ts b/app/frontend/store/types.ts similarity index 100% rename from src/store/types.ts rename to app/frontend/store/types.ts diff --git a/src/styles/main.css b/app/frontend/styles/main.css similarity index 100% rename from src/styles/main.css rename to app/frontend/styles/main.css diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb new file mode 100644 index 0000000..de6be79 --- /dev/null +++ b/app/helpers/application_helper.rb @@ -0,0 +1,2 @@ +module ApplicationHelper +end diff --git a/app/jobs/application_job.rb b/app/jobs/application_job.rb new file mode 100644 index 0000000..d394c3d --- /dev/null +++ b/app/jobs/application_job.rb @@ -0,0 +1,7 @@ +class ApplicationJob < ActiveJob::Base + # Automatically retry jobs that encountered a deadlock + # retry_on ActiveRecord::Deadlocked + + # Most jobs are safe to ignore if the underlying records are no longer available + # discard_on ActiveJob::DeserializationError +end diff --git a/app/mailers/application_mailer.rb b/app/mailers/application_mailer.rb new file mode 100644 index 0000000..27c24e7 --- /dev/null +++ b/app/mailers/application_mailer.rb @@ -0,0 +1,4 @@ +class ApplicationMailer < ActionMailer::Base + default from: ENV.fetch("NUMOLUS_MAIL_FROM", "numolus ") + layout "mailer" +end diff --git a/app/mailers/auth_mailer.rb b/app/mailers/auth_mailer.rb new file mode 100644 index 0000000..d74e73e --- /dev/null +++ b/app/mailers/auth_mailer.rb @@ -0,0 +1,15 @@ +class AuthMailer < ApplicationMailer + def magic_link(link, token, code) + @url = verify_auth_url(token:) + @code = code + mail to: link.email, subject: "Dein Anmeldelink für numolus" + end + + def invitation(link, token) + @url = verify_auth_url(token:) + @inviter = link.invited_by.name + @title = link.document.title + @role = link.grants_editor? ? "bearbeiten" : "ansehen" + mail to: link.email, subject: "#{@inviter} hat „#{@title}“ mit dir geteilt" + end +end diff --git a/app/models/application_record.rb b/app/models/application_record.rb new file mode 100644 index 0000000..b63caeb --- /dev/null +++ b/app/models/application_record.rb @@ -0,0 +1,3 @@ +class ApplicationRecord < ActiveRecord::Base + primary_abstract_class +end diff --git a/app/models/concerns/.keep b/app/models/concerns/.keep new file mode 100644 index 0000000..e69de29 diff --git a/app/models/current.rb b/app/models/current.rb new file mode 100644 index 0000000..2bef56d --- /dev/null +++ b/app/models/current.rb @@ -0,0 +1,4 @@ +class Current < ActiveSupport::CurrentAttributes + attribute :session + delegate :user, to: :session, allow_nil: true +end diff --git a/app/models/document.rb b/app/models/document.rb new file mode 100644 index 0000000..8e1ac01 --- /dev/null +++ b/app/models/document.rb @@ -0,0 +1,84 @@ +class Document < ApplicationRecord + ROLES = %w[viewer editor owner].freeze + LOCK_TTL = 90.seconds + MAX_CONTENT_BYTES = 20.megabytes + + belongs_to :owner, class_name: "User" + belongs_to :updated_by, class_name: "User", optional: true + has_many :document_memberships, dependent: :delete_all + has_many :members, through: :document_memberships, source: :user + has_many :share_links, dependent: :delete_all + + validates :title, presence: true, length: { maximum: 200 } + validates :content, presence: true + validate :content_is_document_json, if: :content_changed? + + before_validation { self.content_updated_at ||= Time.current } + + # :owner / :editor / :viewer / nil for a signed-in user and/or a share + # link token (a visitor without an account holds only the token). The + # strongest of all applicable grants wins. + def role_for(user: nil, token: nil) + roles = [] + if user + return :owner if owner_id == user.id + m = document_memberships.find_by(user_id: user.id) + roles << m.role.to_sym if m + end + if token.present? + link = share_links.active.find_by(token: token) + roles << link.role.to_sym if link + end + roles.max_by { |r| ROLES.index(r.to_s) } + end + + def self.role_at_least?(role, minimum) + role.present? && ROLES.index(role.to_s) >= ROLES.index(minimum.to_s) + end + + # ---- edit lock -------------------------------------------------------- + def locked_by_other?(holder) + lock_holder.present? && lock_holder != holder && lock_expires_at&.future? + end + + # Take or refresh the lock for `holder`. Returns true when `holder` has it. + def acquire_lock!(holder, name) + with_lock do + return false if locked_by_other?(holder) + update_columns(lock_holder: holder, lock_holder_name: name, lock_expires_at: LOCK_TTL.from_now) + true + end + end + + def release_lock!(holder) + with_lock do + update_columns(lock_holder: nil, lock_holder_name: nil, lock_expires_at: nil) if lock_holder == holder + end + end + + def lock_info(holder) + { locked_by_other: locked_by_other?(holder), holder_name: (lock_holder_name if locked_by_other?(holder)) } + end + + def meta_json(role:) + { + id:, title:, version:, role:, + owner_name: owner.name, + updated_at: content_updated_at.iso8601(3), + updated_by_name: updated_by&.name + } + end + + private + + def content_is_document_json + if content.bytesize > MAX_CONTENT_BYTES + errors.add(:content, "ist zu groß (max. #{MAX_CONTENT_BYTES / 1.megabyte} MB)") + return + end + parsed = JSON.parse(content) + errors.add(:content, "ist kein numolus-Dokument") unless parsed.is_a?(Hash) && parsed["sheets"].is_a?(Array) + rescue JSON::ParserError + errors.add(:content, "ist kein gültiges JSON") + end +end diff --git a/app/models/document_membership.rb b/app/models/document_membership.rb new file mode 100644 index 0000000..81db5eb --- /dev/null +++ b/app/models/document_membership.rb @@ -0,0 +1,25 @@ +class DocumentMembership < ApplicationRecord + belongs_to :document + belongs_to :user + belongs_to :share_link, optional: true + + enum :role, { viewer: 0, editor: 1 }, validate: true + enum :source, { invite: 0, link: 1 }, validate: true + + # Grant access. An invitation is explicit: it sets exactly the invited role + # and survives revoking any link. A link never weakens existing access and + # never turns an invitation back into link-based access. + def self.grant!(document:, user:, role:, source:, share_link: nil) + return if document.owner_id == user.id + m = find_or_initialize_by(document:, user:) + if source.to_s == "invite" + m.assign_attributes(role:, source: :invite, share_link: nil) + elsif m.new_record? + m.assign_attributes(role:, source: :link, share_link:) + elsif m.link? && roles[role.to_s] > roles[m.role] + m.assign_attributes(role:, share_link:) + end + m.save! + m + end +end diff --git a/app/models/magic_link.rb b/app/models/magic_link.rb new file mode 100644 index 0000000..ee20e03 --- /dev/null +++ b/app/models/magic_link.rb @@ -0,0 +1,88 @@ +# A one-time sign-in link (and code) sent by mail. Also used for invitations: +# then it additionally grants access to a document when redeemed. Only +# digests of the token and the code are stored. +class MagicLink < ApplicationRecord + LOGIN_TTL = 15.minutes + INVITATION_TTL = 7.days + MAX_CODE_ATTEMPTS = 5 + MAX_PER_EMAIL_PER_HOUR = 5 + + belongs_to :document, optional: true + belongs_to :invited_by, class_name: "User", optional: true + + enum :purpose, { login: 0, invitation: 1 } + enum :role, { viewer: 0, editor: 1 }, prefix: :grants + + normalizes :email, with: ->(e) { e.strip.downcase } + validates :email, presence: true, format: { with: URI::MailTo::EMAIL_REGEXP } + validates :document, :role, :invited_by, presence: true, if: :invitation? + + # plain values, only available on the instance that created them (for the mail) + attr_reader :token, :code + + scope :usable, -> { where(used_at: nil).where("expires_at > ?", Time.current) } + + def self.digest(value) = OpenSSL::Digest::SHA256.hexdigest(value.to_s) + + def self.issue!(email:, purpose: :login, return_to: nil, **attrs) + link = new(email:, purpose:, return_to: safe_path(return_to), **attrs) + link.send(:generate_secrets) + link.expires_at = (link.invitation? ? INVITATION_TTL : LOGIN_TTL).from_now + link.save! + link + end + + def self.throttled?(email) + where(email: email.to_s.strip.downcase, purpose: :login).where("created_at > ?", 1.hour.ago).count >= MAX_PER_EMAIL_PER_HOUR + end + + def self.find_by_token(token) + usable.find_by(token_digest: digest(token)) if token.present? + end + + # The newest usable login link for `email` whose code matches. Wrong codes + # count against that link; after MAX_CODE_ATTEMPTS it is burned. + def self.find_by_code(email, code) + link = usable.login.where(email: email.to_s.strip.downcase).order(created_at: :desc).first + return unless link && link.failed_attempts < MAX_CODE_ATTEMPTS + if ActiveSupport::SecurityUtils.secure_compare(link.code_digest, digest(code.to_s.gsub(/\D/, ""))) + link + else + link.increment!(:failed_attempts) + nil + end + end + + # Only same-site paths, so a link can never redirect elsewhere. + def self.safe_path(path) + path = path.to_s + path.start_with?("/") && !path.start_with?("//") ? path[0, 500] : nil + end + + # Mark used and return the user (created on first sign-in). Invitations + # also grant their document access. + def redeem! + transaction do + lock! + raise ActiveRecord::RecordNotFound if used_at || expires_at.past? + update!(used_at: Time.current) + user = User.find_or_create_by!(email:) + DocumentMembership.grant!(document:, user:, role:, source: :invite) if invitation? + user + end + end + + def destination + return "/d/#{document_id}" if invitation? + return_to.presence || "/" + end + + private + + def generate_secrets + @token = SecureRandom.urlsafe_base64(32) + @code = format("%06d", SecureRandom.random_number(1_000_000)) + self.token_digest = self.class.digest(@token) + self.code_digest = self.class.digest(@code) + end +end diff --git a/app/models/session.rb b/app/models/session.rb new file mode 100644 index 0000000..53544e4 --- /dev/null +++ b/app/models/session.rb @@ -0,0 +1,4 @@ +# One signed-in browser. The browser holds the (signed) session id in a cookie. +class Session < ApplicationRecord + belongs_to :user +end diff --git a/app/models/share_link.rb b/app/models/share_link.rb new file mode 100644 index 0000000..1aed29b --- /dev/null +++ b/app/models/share_link.rb @@ -0,0 +1,27 @@ +# "Anyone with the link" access. The token is the secret part of the URL +# (/d/#k=). It is stored in plain text so the owner can +# copy the link again at any time; the document content next to it in the +# same database is no less sensitive. +class ShareLink < ApplicationRecord + belongs_to :document + belongs_to :created_by, class_name: "User" + has_many :document_memberships, dependent: :delete_all + + enum :role, { viewer: 0, editor: 1 }, validate: true + + scope :active, -> { where(revoked_at: nil) } + + before_validation(on: :create) { self.token ||= SecureRandom.urlsafe_base64(24) } + + # Revoking also removes the access people got through this link. + def revoke! + transaction do + update!(revoked_at: Time.current) + document_memberships.delete_all + end + end + + def as_json(*) + { id:, role:, token:, created_at: created_at.iso8601 } + end +end diff --git a/app/models/user.rb b/app/models/user.rb new file mode 100644 index 0000000..b4cc999 --- /dev/null +++ b/app/models/user.rb @@ -0,0 +1,28 @@ +class User < ApplicationRecord + COLORS = %w[#e67e22 #2980b9 #27ae60 #8e44ad #c0392b #16a085 #d35400 #2c3e50].freeze + + has_many :sessions, dependent: :destroy + has_many :owned_documents, class_name: "Document", foreign_key: :owner_id, dependent: :destroy, inverse_of: :owner + has_many :document_memberships, dependent: :destroy + has_many :shared_documents, through: :document_memberships, source: :document + + normalizes :email, with: ->(e) { e.strip.downcase } + validates :email, presence: true, uniqueness: true, format: { with: URI::MailTo::EMAIL_REGEXP } + validates :display_name, length: { maximum: 80 } + + before_create { self.color ||= COLORS.sample } + + # Name shown to others (share dialog, lock holder, later: cursors). + def name + display_name.presence || email.split("@").first + end + + # Documents this user owns or has been given access to. + def accessible_documents + Document.where(owner_id: id).or(Document.where(id: document_memberships.select(:document_id))) + end + + def as_json(*) + { id:, email:, name:, display_name:, color: } + end +end diff --git a/app/views/auth/invalid.html.erb b/app/views/auth/invalid.html.erb new file mode 100644 index 0000000..d55834e --- /dev/null +++ b/app/views/auth/invalid.html.erb @@ -0,0 +1,3 @@ +

    Link nicht mehr gültig

    +

    Dieser Link wurde schon verwendet oder ist abgelaufen. Fordere in numolus einfach einen neuen an.

    +Zu numolus diff --git a/app/views/auth/show.html.erb b/app/views/auth/show.html.erb new file mode 100644 index 0000000..4051cb6 --- /dev/null +++ b/app/views/auth/show.html.erb @@ -0,0 +1,11 @@ +<% if @link.invitation? %> +

    Einladung annehmen

    +

    <%= @link.invited_by.name %> hat dich zu „<%= @link.document.title %>“ eingeladen. Du wirst dabei als <%= @link.email %> angemeldet.

    +<% else %> +

    Bei numolus anmelden

    +

    Du meldest dich als <%= @link.email %> an.

    +<% end %> +<%= form_with url: verify_auth_path, method: :post do %> + <%= hidden_field_tag :token, @token %> + +<% end %> diff --git a/app/views/auth_mailer/invitation.html.erb b/app/views/auth_mailer/invitation.html.erb new file mode 100644 index 0000000..9811058 --- /dev/null +++ b/app/views/auth_mailer/invitation.html.erb @@ -0,0 +1,4 @@ +

    Hallo,

    +

    <%= @inviter %> hat das Dokument „<%= @title %>“ mit dir geteilt – du kannst es <%= @role %>.

    +

    Dokument öffnen

    +

    Der Link ist 7 Tage gültig und meldet dich gleichzeitig bei numolus an.

    diff --git a/app/views/auth_mailer/invitation.text.erb b/app/views/auth_mailer/invitation.text.erb new file mode 100644 index 0000000..3836580 --- /dev/null +++ b/app/views/auth_mailer/invitation.text.erb @@ -0,0 +1,7 @@ +Hallo, + +<%= @inviter %> hat das Dokument „<%= @title %>“ mit dir geteilt – du kannst es <%= @role %>. + +<%= @url %> + +Der Link ist 7 Tage gültig und meldet dich gleichzeitig bei numolus an. diff --git a/app/views/auth_mailer/magic_link.html.erb b/app/views/auth_mailer/magic_link.html.erb new file mode 100644 index 0000000..39eee78 --- /dev/null +++ b/app/views/auth_mailer/magic_link.html.erb @@ -0,0 +1,5 @@ +

    Hallo,

    +

    mit diesem Link meldest du dich bei numolus an (gültig 15 Minuten, einmal verwendbar):

    +

    Bei numolus anmelden

    +

    Oder gib diesen Code in numolus ein: <%= @code %>

    +

    Falls du das nicht angefordert hast, kannst du diese Mail ignorieren.

    diff --git a/app/views/auth_mailer/magic_link.text.erb b/app/views/auth_mailer/magic_link.text.erb new file mode 100644 index 0000000..08fdd94 --- /dev/null +++ b/app/views/auth_mailer/magic_link.text.erb @@ -0,0 +1,9 @@ +Hallo, + +mit diesem Link meldest du dich bei numolus an (gültig 15 Minuten, einmal verwendbar): + +<%= @url %> + +Oder gib diesen Code in numolus ein: <%= @code %> + +Falls du das nicht angefordert hast, kannst du diese Mail ignorieren. diff --git a/app/views/layouts/auth.html.erb b/app/views/layouts/auth.html.erb new file mode 100644 index 0000000..07a2109 --- /dev/null +++ b/app/views/layouts/auth.html.erb @@ -0,0 +1,30 @@ + + + + + + + + Anmelden – numolus + <%= csrf_meta_tags %> + + + +
    +
    numolus
    + <%= yield %> +
    + + diff --git a/app/views/layouts/mailer.html.erb b/app/views/layouts/mailer.html.erb new file mode 100644 index 0000000..3aac900 --- /dev/null +++ b/app/views/layouts/mailer.html.erb @@ -0,0 +1,13 @@ + + + + + + + + + <%= yield %> + + diff --git a/app/views/layouts/mailer.text.erb b/app/views/layouts/mailer.text.erb new file mode 100644 index 0000000..37f0bdd --- /dev/null +++ b/app/views/layouts/mailer.text.erb @@ -0,0 +1 @@ +<%= yield %> diff --git a/app/views/pwa/manifest.json.erb b/app/views/pwa/manifest.json.erb new file mode 100644 index 0000000..1ac85ef --- /dev/null +++ b/app/views/pwa/manifest.json.erb @@ -0,0 +1,22 @@ +{ + "name": "Numolus", + "icons": [ + { + "src": "/icon.png", + "type": "image/png", + "sizes": "512x512" + }, + { + "src": "/icon.png", + "type": "image/png", + "sizes": "512x512", + "purpose": "maskable" + } + ], + "start_url": "/", + "display": "standalone", + "scope": "/", + "description": "Numolus.", + "theme_color": "red", + "background_color": "red" +} diff --git a/app/views/pwa/service-worker.js b/app/views/pwa/service-worker.js new file mode 100644 index 0000000..b3a13fb --- /dev/null +++ b/app/views/pwa/service-worker.js @@ -0,0 +1,26 @@ +// Add a service worker for processing Web Push notifications: +// +// self.addEventListener("push", async (event) => { +// const { title, options } = await event.data.json() +// event.waitUntil(self.registration.showNotification(title, options)) +// }) +// +// self.addEventListener("notificationclick", function(event) { +// event.notification.close() +// event.waitUntil( +// clients.matchAll({ type: "window" }).then((clientList) => { +// for (let i = 0; i < clientList.length; i++) { +// let client = clientList[i] +// let clientPath = (new URL(client.url)).pathname +// +// if (clientPath == event.notification.data.path && "focus" in client) { +// return client.focus() +// } +// } +// +// if (clients.openWindow) { +// return clients.openWindow(event.notification.data.path) +// } +// }) +// ) +// }) diff --git a/index.html b/app/views/spa/show.html.erb similarity index 90% rename from index.html rename to app/views/spa/show.html.erb index 029384b..42d6391 100644 --- a/index.html +++ b/app/views/spa/show.html.erb @@ -14,7 +14,8 @@ - + + <%= csrf_meta_tags %> @@ -51,6 +52,8 @@
    - + + <%= vite_client_tag %> + <%= vite_typescript_tag "application" %> diff --git a/bin/brakeman b/bin/brakeman new file mode 100755 index 0000000..ace1c9b --- /dev/null +++ b/bin/brakeman @@ -0,0 +1,7 @@ +#!/usr/bin/env ruby +require "rubygems" +require "bundler/setup" + +ARGV.unshift("--ensure-latest") + +load Gem.bin_path("brakeman", "brakeman") diff --git a/bin/bundler-audit b/bin/bundler-audit new file mode 100755 index 0000000..e2ef226 --- /dev/null +++ b/bin/bundler-audit @@ -0,0 +1,6 @@ +#!/usr/bin/env ruby +require_relative "../config/boot" +require "bundler/audit/cli" + +ARGV.concat %w[ --config config/bundler-audit.yml ] if ARGV.empty? || ARGV.include?("check") +Bundler::Audit::CLI.start diff --git a/bin/ci b/bin/ci new file mode 100755 index 0000000..4137ad5 --- /dev/null +++ b/bin/ci @@ -0,0 +1,6 @@ +#!/usr/bin/env ruby +require_relative "../config/boot" +require "active_support/continuous_integration" + +CI = ActiveSupport::ContinuousIntegration +require_relative "../config/ci.rb" diff --git a/bin/dev b/bin/dev new file mode 100755 index 0000000..6bf124b --- /dev/null +++ b/bin/dev @@ -0,0 +1,9 @@ +#!/usr/bin/env sh +# Rails (port 3000) + Vite dev server with HMR (port 3036), see Procfile.dev + +if ! gem list foreman -i --silent; then + echo "Installing foreman..." + gem install foreman +fi + +exec foreman start -f Procfile.dev "$@" diff --git a/bin/jobs b/bin/jobs new file mode 100755 index 0000000..dcf59f3 --- /dev/null +++ b/bin/jobs @@ -0,0 +1,6 @@ +#!/usr/bin/env ruby + +require_relative "../config/environment" +require "solid_queue/cli" + +SolidQueue::Cli.start(ARGV) diff --git a/bin/rails b/bin/rails new file mode 100755 index 0000000..efc0377 --- /dev/null +++ b/bin/rails @@ -0,0 +1,4 @@ +#!/usr/bin/env ruby +APP_PATH = File.expand_path("../config/application", __dir__) +require_relative "../config/boot" +require "rails/commands" diff --git a/bin/rake b/bin/rake new file mode 100755 index 0000000..4fbf10b --- /dev/null +++ b/bin/rake @@ -0,0 +1,4 @@ +#!/usr/bin/env ruby +require_relative "../config/boot" +require "rake" +Rake.application.run diff --git a/bin/setup b/bin/setup new file mode 100755 index 0000000..91bcc3e --- /dev/null +++ b/bin/setup @@ -0,0 +1,36 @@ +#!/usr/bin/env ruby +require "fileutils" + +APP_ROOT = File.expand_path("..", __dir__) + +def system!(*args) + system(*args, exception: true) +end + +FileUtils.chdir APP_ROOT do + # This script is a way to set up or update your development environment automatically. + # This script is idempotent, so that you can run it at any time and get an expectable outcome. + # Add necessary setup steps to this file. + + puts "== Installing dependencies ==" + system("bundle check") || system!("bundle install") + system! "npm install" + + # puts "\n== Copying sample files ==" + # unless File.exist?("config/database.yml") + # FileUtils.cp "config/database.yml.sample", "config/database.yml" + # end + + puts "\n== Preparing database ==" + system! "bin/rails db:prepare" + system! "bin/rails db:reset" if ARGV.include?("--reset") + + puts "\n== Removing old logs and tempfiles ==" + system! "bin/rails log:clear tmp:clear" + + unless ARGV.include?("--skip-server") + puts "\n== Starting development server ==" + STDOUT.flush # flush the output before exec(2) so that it displays + exec "bin/dev" + end +end diff --git a/bin/vite b/bin/vite new file mode 100755 index 0000000..5da3388 --- /dev/null +++ b/bin/vite @@ -0,0 +1,27 @@ +#!/usr/bin/env ruby +# frozen_string_literal: true + +# +# This file was generated by Bundler. +# +# The application 'vite' is installed as part of a gem, and +# this file is here to facilitate running it. +# + +ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../Gemfile", __dir__) + +bundle_binstub = File.expand_path("bundle", __dir__) + +if File.file?(bundle_binstub) + if File.read(bundle_binstub, 300).include?("This file was generated by Bundler") + load(bundle_binstub) + else + abort("Your `bin/bundle` was not generated by Bundler, so this binstub cannot run. +Replace `bin/bundle` by running `bundle binstubs bundler --force`, then run this command again.") + end +end + +require "rubygems" +require "bundler/setup" + +load Gem.bin_path("vite_ruby", "vite") diff --git a/config.ru b/config.ru new file mode 100644 index 0000000..4a3c09a --- /dev/null +++ b/config.ru @@ -0,0 +1,6 @@ +# This file is used by Rack-based servers to start the application. + +require_relative "config/environment" + +run Rails.application +Rails.application.load_server diff --git a/config/application.rb b/config/application.rb new file mode 100644 index 0000000..b8f367f --- /dev/null +++ b/config/application.rb @@ -0,0 +1,42 @@ +require_relative "boot" + +require "rails" +# Pick the frameworks you want: +require "active_model/railtie" +require "active_job/railtie" +require "active_record/railtie" +# require "active_storage/engine" +require "action_controller/railtie" +require "action_mailer/railtie" +# require "action_mailbox/engine" +# require "action_text/engine" +require "action_view/railtie" +require "action_cable/engine" +require "rails/test_unit/railtie" + +# Require the gems listed in Gemfile, including any gems +# you've limited to :test, :development, or :production. +Bundler.require(*Rails.groups) + +module Numolus + class Application < Rails::Application + # Initialize configuration defaults for originally generated Rails version. + config.load_defaults 8.1 + + # Please, add to the `ignore` list any other `lib` subdirectories that do + # not contain `.rb` files, or that should not be reloaded or eager loaded. + # Common ones are `templates`, `generators`, or `middleware`, for example. + config.autoload_lib(ignore: %w[assets tasks]) + + # Configuration for the application, engines, and railties goes here. + # + # These settings can be overridden in specific environments using the files + # in config/environments, which are processed later. + # + # config.time_zone = "Central Time (US & Canada)" + # config.eager_load_paths << Rails.root.join("extras") + + # Don't generate system test files. + config.generators.system_tests = nil + end +end diff --git a/config/boot.rb b/config/boot.rb new file mode 100644 index 0000000..988a5dd --- /dev/null +++ b/config/boot.rb @@ -0,0 +1,4 @@ +ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../Gemfile", __dir__) + +require "bundler/setup" # Set up gems listed in the Gemfile. +require "bootsnap/setup" # Speed up boot time by caching expensive operations. diff --git a/config/bundler-audit.yml b/config/bundler-audit.yml new file mode 100644 index 0000000..e74b3af --- /dev/null +++ b/config/bundler-audit.yml @@ -0,0 +1,5 @@ +# Audit all gems listed in the Gemfile for known security problems by running bin/bundler-audit. +# CVEs that are not relevant to the application can be enumerated on the ignore list below. + +ignore: + - CVE-THAT-DOES-NOT-APPLY diff --git a/config/cable.yml b/config/cable.yml new file mode 100644 index 0000000..8d483fc --- /dev/null +++ b/config/cable.yml @@ -0,0 +1,16 @@ +# Async adapter only works within the same process, so for manually triggering cable updates from a console, +# and seeing results in the browser, you must do so from the web console (running inside the dev process), +# not a terminal started via bin/rails console! Add "console" to any action or any ERB template view +# to make the web console appear. +development: + adapter: async + +test: + adapter: test + +production: + adapter: solid_cable + polling_interval: 0.1.seconds + message_retention: 1.day + writer_batch_size: 4 + writer_batch_delay: 0.001.seconds diff --git a/config/cache.yml b/config/cache.yml new file mode 100644 index 0000000..ae55ceb --- /dev/null +++ b/config/cache.yml @@ -0,0 +1,15 @@ +default: &default + store_options: + # Cap age of oldest cache entry to fulfill retention policies + # max_age: <%= 60.days.to_i %> + max_size: <%= 256.megabytes %> + namespace: <%= Rails.env %> + +development: + <<: *default + +test: + <<: *default + +production: + <<: *default diff --git a/config/ci.rb b/config/ci.rb new file mode 100644 index 0000000..b7b96a6 --- /dev/null +++ b/config/ci.rb @@ -0,0 +1,21 @@ +# Run using bin/ci + +CI.run do + step "Setup", "bin/setup --skip-server" + + step "Security: Gem audit", "bin/bundler-audit" + step "Security: Brakeman code analysis", "bin/brakeman --quiet --no-pager --exit-on-warn --exit-on-error" + step "Tests: Rails", "bin/rails test" + step "Tests: Seeds", "env RAILS_ENV=test bin/rails db:seed:replant" + + # Optional: Run system tests + # step "Tests: System", "bin/rails test:system" + + # Optional: set a green GitHub commit status to unblock PR merge. + # Requires the `gh` CLI and `gh extension install basecamp/gh-signoff`. + # if success? + # step "Signoff: All systems go. Ready for merge and deploy.", "gh signoff" + # else + # failure "Signoff: CI failed. Do not merge or deploy.", "Fix the issues and try again." + # end +end diff --git a/config/credentials.yml.enc b/config/credentials.yml.enc new file mode 100644 index 0000000..f9672c5 --- /dev/null +++ b/config/credentials.yml.enc @@ -0,0 +1 @@ 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--2byEpB/5A5oqubg4--g/gkd6BoVg7/eUF6sgZZ7A== \ No newline at end of file diff --git a/config/database.yml b/config/database.yml new file mode 100644 index 0000000..28f0d45 --- /dev/null +++ b/config/database.yml @@ -0,0 +1,67 @@ +# PostgreSQL. Versions 9.5 and up are supported. +# +# Install the pg driver: +# gem install pg +# On macOS with Homebrew: +# gem install pg -- --with-pg-config=/opt/homebrew/bin/pg_config +# On Windows: +# gem install pg +# Choose the win32 build. +# Install PostgreSQL and put its /bin directory on your path. +# +# Configure Using Gemfile +# gem "pg" +# +default: &default + adapter: postgresql + encoding: unicode + # For details on connection pooling, see Rails configuration guide + # https://guides.rubyonrails.org/configuring.html#database-pooling + max_connections: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %> + + +development: + <<: *default + database: numolus_development + + # The specified database role being used to connect to PostgreSQL. + # To create additional roles in PostgreSQL see `$ createuser --help`. + # When left blank, PostgreSQL will use the default role. This is + # the same name as the operating system user running Rails. + #username: numolus + + # The password associated with the PostgreSQL role (username). + #password: + + # Connect on a TCP socket. Omitted by default since the client uses a + # domain socket that doesn't need configuration. Windows does not have + # domain sockets, so uncomment these lines. + #host: localhost + + # The TCP port the server listens on. Defaults to 5432. + # If your server runs on a different port number, change accordingly. + #port: 5432 + + # Schema search path. The server defaults to $user,public + #schema_search_path: myapp,sharedapp,public + + # Minimum log levels, in increasing order: + # debug5, debug4, debug3, debug2, debug1, + # log, notice, warning, error, fatal, and panic + # Defaults to warning. + #min_messages: notice + +# Warning: The database defined as "test" will be erased and +# re-generated from your development database when you run "rake". +# Do not set this db to the same as development or production. +test: + <<: *default + database: numolus_test + +# Production: one database for everything -- app data, Solid Queue, Solid +# Cache and Solid Cable. The password comes from NUMOLUS_DATABASE_PASSWORD. +production: + <<: *default + database: numolus_production + username: numolus + password: <%= ENV["NUMOLUS_DATABASE_PASSWORD"] %> diff --git a/config/environment.rb b/config/environment.rb new file mode 100644 index 0000000..cac5315 --- /dev/null +++ b/config/environment.rb @@ -0,0 +1,5 @@ +# Load the Rails application. +require_relative "application" + +# Initialize the Rails application. +Rails.application.initialize! diff --git a/config/environments/development.rb b/config/environments/development.rb new file mode 100644 index 0000000..c496564 --- /dev/null +++ b/config/environments/development.rb @@ -0,0 +1,72 @@ +require "active_support/core_ext/integer/time" + +Rails.application.configure do + # Settings specified here will take precedence over those in config/application.rb. + + # Make code changes take effect immediately without server restart. + config.enable_reloading = true + + # Do not eager load code on boot. + config.eager_load = false + + # Show full error reports. + config.consider_all_requests_local = true + + # Enable server timing. + config.server_timing = true + + # Enable/disable Action Controller caching. By default Action Controller caching is disabled. + # Run rails dev:cache to toggle Action Controller caching. + if Rails.root.join("tmp/caching-dev.txt").exist? + config.action_controller.perform_caching = true + config.action_controller.enable_fragment_cache_logging = true + config.public_file_server.headers = { "cache-control" => "public, max-age=#{2.days.to_i}" } + else + config.action_controller.perform_caching = false + end + + # Change to :null_store to avoid any caching. + config.cache_store = :memory_store + + # Don't care if the mailer can't send. + config.action_mailer.raise_delivery_errors = false + + # Make template changes take effect immediately. + config.action_mailer.perform_caching = false + + # Set localhost to be used by links generated in mailer templates. + config.action_mailer.default_url_options = { host: "localhost", port: 3000 } + # mails open at http://localhost:3000/letter_opener + config.action_mailer.delivery_method = :letter_opener_web + config.action_mailer.perform_deliveries = true + + # Print deprecation notices to the Rails logger. + config.active_support.deprecation = :log + + # Raise an error on page load if there are pending migrations. + config.active_record.migration_error = :page_load + + # Highlight code that triggered database queries in logs. + config.active_record.verbose_query_logs = true + + # Append comments with runtime information tags to SQL queries in logs. + config.active_record.query_log_tags_enabled = true + + # Highlight code that enqueued background job in logs. + config.active_job.verbose_enqueue_logs = true + + # Highlight code that triggered redirect in logs. + config.action_dispatch.verbose_redirect_logs = true + + # Raises error for missing translations. + # config.i18n.raise_on_missing_translations = true + + # Annotate rendered view with file names. + config.action_view.annotate_rendered_view_with_filenames = true + + # Uncomment if you wish to allow Action Cable access from any origin. + # config.action_cable.disable_request_forgery_protection = true + + # Raise error when a before_action's only/except options reference missing actions. + config.action_controller.raise_on_missing_callback_actions = true +end diff --git a/config/environments/production.rb b/config/environments/production.rb new file mode 100644 index 0000000..f72b751 --- /dev/null +++ b/config/environments/production.rb @@ -0,0 +1,88 @@ +require "active_support/core_ext/integer/time" + +Rails.application.configure do + # Settings specified here will take precedence over those in config/application.rb. + + # Code is not reloaded between requests. + config.enable_reloading = false + + # Eager load code on boot for better performance and memory savings (ignored by Rake tasks). + config.eager_load = true + + # Full error reports are disabled. + config.consider_all_requests_local = false + + # Turn on fragment caching in view templates. + config.action_controller.perform_caching = true + + # Cache assets for far-future expiry since they are all digest stamped. + config.public_file_server.headers = { "cache-control" => "public, max-age=#{1.year.to_i}" } + + # Enable serving of images, stylesheets, and JavaScripts from an asset server. + # config.asset_host = "http://assets.example.com" + + # Assume all access to the app is happening through a SSL-terminating reverse proxy. + config.assume_ssl = true + + # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies. + config.force_ssl = true + + # Skip http-to-https redirect for the default health check endpoint. + # config.ssl_options = { redirect: { exclude: ->(request) { request.path == "/up" } } } + + # Log to STDOUT with the current request id as a default log tag. + config.log_tags = [ :request_id ] + config.logger = ActiveSupport::TaggedLogging.logger(STDOUT) + + # Change to "debug" to log everything (including potentially personally-identifiable information!). + config.log_level = ENV.fetch("RAILS_LOG_LEVEL", "info") + + # Prevent health checks from clogging up the logs. + config.silence_healthcheck_path = "/up" + + # Don't log any deprecations. + config.active_support.report_deprecations = false + + # Replace the default in-process memory cache store with a durable alternative. + config.cache_store = :solid_cache_store + + # Replace the default in-process and non-durable queuing backend for Active Job. + config.active_job.queue_adapter = :solid_queue + + # Ignore bad email addresses and do not raise email delivery errors. + # Set this to true and configure the email server for immediate delivery to raise delivery errors. + # config.action_mailer.raise_delivery_errors = false + + # Set host to be used by links generated in mailer templates. + config.action_mailer.default_url_options = { host: ENV.fetch("NUMOLUS_HOST", "numolus.wicom.li"), protocol: "https" } + + # Outgoing SMTP server, configured by environment variables. + config.action_mailer.delivery_method = :smtp + config.action_mailer.smtp_settings = { + address: ENV["SMTP_ADDRESS"], + port: ENV.fetch("SMTP_PORT", 587).to_i, + user_name: ENV["SMTP_USER_NAME"], + password: ENV["SMTP_PASSWORD"], + authentication: :plain, + enable_starttls_auto: true + } + + # Enable locale fallbacks for I18n (makes lookups for any locale fall back to + # the I18n.default_locale when a translation cannot be found). + config.i18n.fallbacks = true + + # Do not dump schema after migrations. + config.active_record.dump_schema_after_migration = false + + # Only use :id for inspections in production. + config.active_record.attributes_for_inspect = [ :id ] + + # Enable DNS rebinding protection and other `Host` header attacks. + # config.hosts = [ + # "example.com", # Allow requests from example.com + # /.*\.example\.com/ # Allow requests from subdomains like `www.example.com` + # ] + # + # Skip DNS rebinding protection for the default health check endpoint. + # config.host_authorization = { exclude: ->(request) { request.path == "/up" } } +end diff --git a/config/environments/test.rb b/config/environments/test.rb new file mode 100644 index 0000000..0424d0f --- /dev/null +++ b/config/environments/test.rb @@ -0,0 +1,50 @@ +# The test environment is used exclusively to run your application's +# test suite. You never need to work with it otherwise. Remember that +# your test database is "scratch space" for the test suite and is wiped +# and recreated between test runs. Don't rely on the data there! + +Rails.application.configure do + # Settings specified here will take precedence over those in config/application.rb. + + # While tests run files are not watched, reloading is not necessary. + config.enable_reloading = false + + # Eager loading loads your entire application. When running a single test locally, + # this is usually not necessary, and can slow down your test suite. However, it's + # recommended that you enable it in continuous integration systems to ensure eager + # loading is working properly before deploying your code. + config.eager_load = ENV["CI"].present? + + # Configure public file server for tests with cache-control for performance. + config.public_file_server.headers = { "cache-control" => "public, max-age=3600" } + + # Show full error reports. + config.consider_all_requests_local = true + config.cache_store = :null_store + + # Render exception templates for rescuable exceptions and raise for other exceptions. + config.action_dispatch.show_exceptions = :rescuable + + # Disable request forgery protection in test environment. + config.action_controller.allow_forgery_protection = false + + # Tell Action Mailer not to deliver emails to the real world. + # The :test delivery method accumulates sent emails in the + # ActionMailer::Base.deliveries array. + config.action_mailer.delivery_method = :test + + # Set host to be used by links generated in mailer templates. + config.action_mailer.default_url_options = { host: "example.com" } + + # Print deprecation notices to the stderr. + config.active_support.deprecation = :stderr + + # Raises error for missing translations. + # config.i18n.raise_on_missing_translations = true + + # Annotate rendered view with file names. + # config.action_view.annotate_rendered_view_with_filenames = true + + # Raise error when a before_action's only/except options reference missing actions. + config.action_controller.raise_on_missing_callback_actions = true +end diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb new file mode 100644 index 0000000..94221e6 --- /dev/null +++ b/config/initializers/content_security_policy.rb @@ -0,0 +1,38 @@ +# Be sure to restart your server when you modify this file. + +# Define an application-wide content security policy. +# See the Securing Rails Applications Guide for more information: +# https://guides.rubyonrails.org/security.html#content-security-policy-header + +# Rails.application.configure do +# config.content_security_policy do |policy| +# policy.default_src :self, :https +# policy.font_src :self, :https, :data +# policy.img_src :self, :https, :data +# policy.object_src :none +# policy.script_src :self, :https + # Allow @vite/client to hot reload javascript changes in development +# policy.script_src *policy.script_src, :unsafe_eval, "http://#{ ViteRuby.config.host_with_port }" if Rails.env.development? + + # You may need to enable this in production as well depending on your setup. +# policy.script_src *policy.script_src, :blob if Rails.env.test? + +# policy.style_src :self, :https + # Allow @vite/client to hot reload style changes in development +# policy.style_src *policy.style_src, :unsafe_inline if Rails.env.development? + +# # Specify URI for violation reports +# # policy.report_uri "/csp-violation-report-endpoint" +# end +# +# # Generate session nonces for permitted importmap, inline scripts, and inline styles. +# config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s } +# config.content_security_policy_nonce_directives = %w(script-src style-src) +# +# # Automatically add `nonce` to `javascript_tag`, `javascript_include_tag`, and `stylesheet_link_tag` +# # if the corresponding directives are specified in `content_security_policy_nonce_directives`. +# # config.content_security_policy_nonce_auto = true +# +# # Report violations without enforcing the policy. +# # config.content_security_policy_report_only = true +# end diff --git a/config/initializers/filter_parameter_logging.rb b/config/initializers/filter_parameter_logging.rb new file mode 100644 index 0000000..c0b717f --- /dev/null +++ b/config/initializers/filter_parameter_logging.rb @@ -0,0 +1,8 @@ +# Be sure to restart your server when you modify this file. + +# Configure parameters to be partially matched (e.g. passw matches password) and filtered from the log file. +# Use this to limit dissemination of sensitive information. +# See the ActiveSupport::ParameterFilter documentation for supported notations and behaviors. +Rails.application.config.filter_parameters += [ + :passw, :email, :secret, :token, :_key, :crypt, :salt, :certificate, :otp, :ssn, :cvv, :cvc +] diff --git a/config/initializers/inflections.rb b/config/initializers/inflections.rb new file mode 100644 index 0000000..3860f65 --- /dev/null +++ b/config/initializers/inflections.rb @@ -0,0 +1,16 @@ +# Be sure to restart your server when you modify this file. + +# Add new inflection rules using the following format. Inflections +# are locale specific, and you may define rules for as many different +# locales as you wish. All of these examples are active by default: +# ActiveSupport::Inflector.inflections(:en) do |inflect| +# inflect.plural /^(ox)$/i, "\\1en" +# inflect.singular /^(ox)en/i, "\\1" +# inflect.irregular "person", "people" +# inflect.uncountable %w( fish sheep ) +# end + +# These inflection rules are supported but not enabled by default: +# ActiveSupport::Inflector.inflections(:en) do |inflect| +# inflect.acronym "RESTful" +# end diff --git a/config/locales/en.yml b/config/locales/en.yml new file mode 100644 index 0000000..6c349ae --- /dev/null +++ b/config/locales/en.yml @@ -0,0 +1,31 @@ +# Files in the config/locales directory are used for internationalization and +# are automatically loaded by Rails. If you want to use locales other than +# English, add the necessary files in this directory. +# +# To use the locales, use `I18n.t`: +# +# I18n.t "hello" +# +# In views, this is aliased to just `t`: +# +# <%= t("hello") %> +# +# To use a different locale, set it with `I18n.locale`: +# +# I18n.locale = :es +# +# This would use the information in config/locales/es.yml. +# +# To learn more about the API, please read the Rails Internationalization guide +# at https://guides.rubyonrails.org/i18n.html. +# +# Be aware that YAML interprets the following case-insensitive strings as +# booleans: `true`, `false`, `on`, `off`, `yes`, `no`. Therefore, these strings +# must be quoted to be interpreted as strings. For example: +# +# en: +# "yes": yup +# enabled: "ON" + +en: + hello: "Hello world" diff --git a/config/puma.rb b/config/puma.rb new file mode 100644 index 0000000..38c4b86 --- /dev/null +++ b/config/puma.rb @@ -0,0 +1,42 @@ +# This configuration file will be evaluated by Puma. The top-level methods that +# are invoked here are part of Puma's configuration DSL. For more information +# about methods provided by the DSL, see https://puma.io/puma/Puma/DSL.html. +# +# Puma starts a configurable number of processes (workers) and each process +# serves each request in a thread from an internal thread pool. +# +# You can control the number of workers using ENV["WEB_CONCURRENCY"]. You +# should only set this value when you want to run 2 or more workers. The +# default is already 1. You can set it to `auto` to automatically start a worker +# for each available processor. +# +# The ideal number of threads per worker depends both on how much time the +# application spends waiting for IO operations and on how much you wish to +# prioritize throughput over latency. +# +# As a rule of thumb, increasing the number of threads will increase how much +# traffic a given process can handle (throughput), but due to CRuby's +# Global VM Lock (GVL) it has diminishing returns and will degrade the +# response time (latency) of the application. +# +# The default is set to 3 threads as it's deemed a decent compromise between +# throughput and latency for the average Rails application. +# +# Any libraries that use a connection pool or another resource pool should +# be configured to provide at least as many connections as the number of +# threads. This includes Active Record's `pool` parameter in `database.yml`. +threads_count = ENV.fetch("RAILS_MAX_THREADS", 3) +threads threads_count, threads_count + +# Specifies the `port` that Puma will listen on to receive requests; default is 3000. +port ENV.fetch("PORT", 3000) + +# Allow puma to be restarted by `bin/rails restart` command. +plugin :tmp_restart + +# Run the Solid Queue supervisor inside of Puma for single-server deployments. +plugin :solid_queue if ENV["SOLID_QUEUE_IN_PUMA"] + +# Specify the PID file. Defaults to tmp/pids/server.pid in development. +# In other environments, only set the PID file if requested. +pidfile ENV["PIDFILE"] if ENV["PIDFILE"] diff --git a/config/queue.yml b/config/queue.yml new file mode 100644 index 0000000..6b14360 --- /dev/null +++ b/config/queue.yml @@ -0,0 +1,18 @@ +default: &default + dispatchers: + - polling_interval: 1 + batch_size: 500 + workers: + - queues: "*" + threads: 3 + processes: <%= ENV.fetch("JOB_CONCURRENCY", 1) %> + polling_interval: 1 + +development: + <<: *default + +test: + <<: *default + +production: + <<: *default diff --git a/config/recurring.yml b/config/recurring.yml new file mode 100644 index 0000000..b4207f9 --- /dev/null +++ b/config/recurring.yml @@ -0,0 +1,15 @@ +# examples: +# periodic_cleanup: +# class: CleanSoftDeletedRecordsJob +# queue: background +# args: [ 1000, { batch_size: 500 } ] +# schedule: every hour +# periodic_cleanup_with_command: +# command: "SoftDeletedRecord.due.delete_all" +# priority: 2 +# schedule: at 5am every day + +production: + clear_solid_queue_finished_jobs: + command: "SolidQueue::Job.clear_finished_in_batches(sleep_between_batches: 0.3)" + schedule: every hour at minute 12 diff --git a/config/routes.rb b/config/routes.rb new file mode 100644 index 0000000..f95a40c --- /dev/null +++ b/config/routes.rb @@ -0,0 +1,33 @@ +Rails.application.routes.draw do + get "up" => "rails/health#show", as: :rails_health_check + + # sign-in / invitation link from the mail: confirm page, then POST signs in + get "auth/verify" => "auth#show", as: :verify_auth + post "auth/verify" => "auth#create" + + namespace :api do + post "auth/magic_link" => "auth#magic_link" + post "auth/code" => "auth#code" + delete "auth/session" => "auth#logout" + + get "me" => "me#show" + patch "me" => "me#update" + + resources :documents, only: %i[index create show update destroy] do + resource :lock, only: %i[create destroy], controller: "document_locks" + resource :join, only: :create + get "share" => "shares#show" + post "share/links" => "shares#create_link" + delete "share/links/:id" => "shares#revoke_link" + post "share/invitations" => "shares#invite" + patch "share/members/:user_id" => "shares#update_member" + delete "share/members/:user_id" => "shares#remove_member" + end + end + + mount LetterOpenerWeb::Engine, at: "/letter_opener" if Rails.env.development? + + # the Vue app + get "d/:id" => "spa#show", as: :document_page + root "spa#show" +end diff --git a/config/vite.json b/config/vite.json new file mode 100644 index 0000000..8a2855f --- /dev/null +++ b/config/vite.json @@ -0,0 +1,17 @@ +{ + "all": { + "sourceCodeDir": "app/frontend", + "watchAdditionalPaths": [] + }, + "development": { + "autoBuild": true, + "skipProxy": true, + "publicOutputDir": "vite-dev", + "port": 3036 + }, + "test": { + "autoBuild": true, + "publicOutputDir": "vite-test", + "port": 3037 + } +} diff --git a/db/migrate/20260928120000_create_core_tables.rb b/db/migrate/20260928120000_create_core_tables.rb new file mode 100644 index 0000000..a902587 --- /dev/null +++ b/db/migrate/20260928120000_create_core_tables.rb @@ -0,0 +1,71 @@ +class CreateCoreTables < ActiveRecord::Migration[8.1] + def change + enable_extension "citext" + enable_extension "pgcrypto" + + create_table :users do |t| + t.citext :email, null: false, index: { unique: true } + t.string :display_name + t.string :color + t.datetime :last_seen_at + t.timestamps + end + + create_table :sessions do |t| + t.references :user, null: false, foreign_key: { on_delete: :cascade } + t.string :user_agent + t.string :ip_address + t.datetime :last_active_at + t.timestamps + end + + create_table :documents, id: :uuid do |t| + t.references :owner, null: false, foreign_key: { to_table: :users, on_delete: :cascade } + t.string :title, null: false + t.text :content, null: false # the DocumentState JSON, same as inside a .num file + t.integer :version, null: false, default: 1 + t.references :updated_by, foreign_key: { to_table: :users, on_delete: :nullify } + t.datetime :content_updated_at, null: false + # simple edit lock until live collaboration exists (concept, phase 3) + t.string :lock_holder + t.string :lock_holder_name + t.datetime :lock_expires_at + t.timestamps + end + + create_table :share_links do |t| + t.references :document, type: :uuid, null: false, foreign_key: { on_delete: :cascade } + t.integer :role, null: false + t.string :token, null: false, index: { unique: true } + t.references :created_by, null: false, foreign_key: { to_table: :users, on_delete: :cascade } + t.datetime :revoked_at + t.timestamps + end + + create_table :document_memberships do |t| + t.references :document, type: :uuid, null: false, foreign_key: { on_delete: :cascade } + t.references :user, null: false, foreign_key: { on_delete: :cascade } + t.integer :role, null: false + t.integer :source, null: false + t.references :share_link, foreign_key: { on_delete: :cascade } + t.datetime :last_opened_at + t.timestamps + t.index [ :document_id, :user_id ], unique: true + end + + create_table :magic_links do |t| + t.citext :email, null: false, index: true + t.string :token_digest, null: false, index: { unique: true } + t.string :code_digest, null: false + t.integer :purpose, null: false, default: 0 + t.references :document, type: :uuid, foreign_key: { on_delete: :cascade } + t.integer :role + t.references :invited_by, foreign_key: { to_table: :users, on_delete: :cascade } + t.string :return_to + t.integer :failed_attempts, null: false, default: 0 + t.datetime :expires_at, null: false + t.datetime :used_at + t.timestamps + end + end +end diff --git a/db/migrate/20260928120100_create_solid_queue_tables.rb b/db/migrate/20260928120100_create_solid_queue_tables.rb new file mode 100644 index 0000000..ab93181 --- /dev/null +++ b/db/migrate/20260928120100_create_solid_queue_tables.rb @@ -0,0 +1,164 @@ +# Solid Queue lives in the main database (same as the app data), +# converted from the generated db/queue_schema.rb. +class CreateSolidQueueTables < ActiveRecord::Migration[8.1] + def change + create_table "solid_queue_blocked_executions" do |t| + t.bigint "job_id", null: false + t.string "queue_name", null: false + t.integer "priority", default: 0, null: false + t.string "concurrency_key", null: false + t.datetime "expires_at", null: false + t.datetime "created_at", null: false + t.index [ "concurrency_key", "priority", "job_id" ], name: "index_solid_queue_blocked_executions_for_release" + t.index [ "expires_at", "concurrency_key" ], name: "index_solid_queue_blocked_executions_for_maintenance" + t.index [ "job_id" ], name: "index_solid_queue_blocked_executions_on_job_id", unique: true + end + + create_table "solid_queue_claimed_executions" do |t| + t.bigint "job_id", null: false + t.bigint "process_id" + t.datetime "created_at", null: false + t.index [ "job_id" ], name: "index_solid_queue_claimed_executions_on_job_id", unique: true + t.index [ "process_id", "job_id" ], name: "index_solid_queue_claimed_executions_on_process_id_and_job_id" + end + + create_table "solid_queue_failed_executions" do |t| + t.bigint "job_id", null: false + t.text "error" + t.datetime "created_at", null: false + t.index [ "job_id" ], name: "index_solid_queue_failed_executions_on_job_id", unique: true + end + + create_table "solid_queue_jobs" do |t| + t.string "queue_name", null: false + t.string "class_name", null: false + t.text "arguments" + t.integer "priority", default: 0, null: false + t.string "active_job_id" + t.datetime "scheduled_at" + t.datetime "finished_at" + t.string "concurrency_key" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.bigint "batch_id" + t.index [ "active_job_id" ], name: "index_solid_queue_jobs_on_active_job_id" + t.index [ "batch_id" ], name: "index_solid_queue_jobs_on_batch_id" + t.index [ "class_name" ], name: "index_solid_queue_jobs_on_class_name" + t.index [ "finished_at" ], name: "index_solid_queue_jobs_on_finished_at" + t.index [ "queue_name", "finished_at" ], name: "index_solid_queue_jobs_for_filtering" + t.index [ "scheduled_at", "finished_at" ], name: "index_solid_queue_jobs_for_alerting" + end + + create_table "solid_queue_pauses" do |t| + t.string "queue_name", null: false + t.datetime "created_at", null: false + t.index [ "queue_name" ], name: "index_solid_queue_pauses_on_queue_name", unique: true + end + + create_table "solid_queue_processes" do |t| + t.string "kind", null: false + t.datetime "last_heartbeat_at", null: false + t.bigint "supervisor_id" + t.integer "pid", null: false + t.string "hostname" + t.text "metadata" + t.datetime "created_at", null: false + t.string "name", null: false + t.index [ "last_heartbeat_at" ], name: "index_solid_queue_processes_on_last_heartbeat_at" + t.index [ "name", "supervisor_id" ], name: "index_solid_queue_processes_on_name_and_supervisor_id", unique: true + t.index [ "supervisor_id" ], name: "index_solid_queue_processes_on_supervisor_id" + end + + create_table "solid_queue_ready_executions" do |t| + t.bigint "job_id", null: false + t.string "queue_name", null: false + t.integer "priority", default: 0, null: false + t.datetime "created_at", null: false + t.index [ "job_id" ], name: "index_solid_queue_ready_executions_on_job_id", unique: true + t.index [ "priority", "job_id" ], name: "index_solid_queue_poll_all" + t.index [ "queue_name", "priority", "job_id" ], name: "index_solid_queue_poll_by_queue" + end + + create_table "solid_queue_recurring_executions" do |t| + t.bigint "job_id", null: false + t.string "task_key", null: false + t.datetime "run_at", null: false + t.datetime "created_at", null: false + t.index [ "job_id" ], name: "index_solid_queue_recurring_executions_on_job_id", unique: true + t.index [ "task_key", "run_at" ], name: "index_solid_queue_recurring_executions_on_task_key_and_run_at", unique: true + end + + create_table "solid_queue_recurring_tasks" do |t| + t.string "key", null: false + t.string "schedule", null: false + t.string "command", limit: 2048 + t.string "class_name" + t.text "arguments" + t.string "queue_name" + t.integer "priority", default: 0 + t.boolean "static", default: true, null: false + t.text "description" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index [ "key" ], name: "index_solid_queue_recurring_tasks_on_key", unique: true + t.index [ "static" ], name: "index_solid_queue_recurring_tasks_on_static" + end + + create_table "solid_queue_scheduled_executions" do |t| + t.bigint "job_id", null: false + t.string "queue_name", null: false + t.integer "priority", default: 0, null: false + t.datetime "scheduled_at", null: false + t.datetime "created_at", null: false + t.index [ "job_id" ], name: "index_solid_queue_scheduled_executions_on_job_id", unique: true + t.index [ "scheduled_at", "priority", "job_id" ], name: "index_solid_queue_dispatch_all" + end + + create_table "solid_queue_semaphores" do |t| + t.string "key", null: false + t.integer "value", default: 1, null: false + t.datetime "expires_at", null: false + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index [ "expires_at" ], name: "index_solid_queue_semaphores_on_expires_at" + t.index [ "key", "value" ], name: "index_solid_queue_semaphores_on_key_and_value" + t.index [ "key" ], name: "index_solid_queue_semaphores_on_key", unique: true + end + + create_table "solid_queue_batches" do |t| + t.string "active_job_batch_id" + t.string "description" + t.text "on_finish" + t.text "on_success" + t.text "on_failure" + t.text "metadata" + t.integer "total_jobs", default: 0, null: false + t.integer "completed_jobs", default: 0, null: false + t.integer "failed_jobs", default: 0, null: false + t.datetime "enqueued_at" + t.datetime "finished_at" + t.datetime "failed_at" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index [ "active_job_batch_id" ], name: "index_solid_queue_batches_on_active_job_batch_id", unique: true + t.index [ "finished_at" ], name: "index_solid_queue_batches_on_finished_at" + end + + create_table "solid_queue_batch_executions" do |t| + t.bigint "job_id", null: false + t.bigint "batch_id", null: false + t.datetime "created_at", null: false + t.index [ "job_id" ], name: "index_solid_queue_batch_executions_on_job_id", unique: true + t.index [ "batch_id" ], name: "index_solid_queue_batch_executions_on_batch_id" + end + + add_foreign_key "solid_queue_batch_executions", "solid_queue_batches", column: "batch_id", on_delete: :cascade + add_foreign_key "solid_queue_batch_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_blocked_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_claimed_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_failed_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_ready_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_recurring_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_scheduled_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + end +end diff --git a/db/migrate/20260928120200_create_solid_cache_tables.rb b/db/migrate/20260928120200_create_solid_cache_tables.rb new file mode 100644 index 0000000..39e0e86 --- /dev/null +++ b/db/migrate/20260928120200_create_solid_cache_tables.rb @@ -0,0 +1,16 @@ +# Solid Cache lives in the main database (same as the app data), +# converted from the generated db/cache_schema.rb. +class CreateSolidCacheTables < ActiveRecord::Migration[8.1] + def change + create_table "solid_cache_entries" do |t| + t.binary "key", limit: 1024, null: false + t.binary "value", limit: 536870912, null: false + t.datetime "created_at", null: false + t.integer "key_hash", limit: 8, null: false + t.integer "byte_size", limit: 4, null: false + t.index ["byte_size"], name: "index_solid_cache_entries_on_byte_size" + t.index ["key_hash", "byte_size"], name: "index_solid_cache_entries_on_key_hash_and_byte_size" + t.index ["key_hash"], name: "index_solid_cache_entries_on_key_hash", unique: true + end + end +end diff --git a/db/migrate/20260928120300_create_solid_cable_tables.rb b/db/migrate/20260928120300_create_solid_cable_tables.rb new file mode 100644 index 0000000..4328021 --- /dev/null +++ b/db/migrate/20260928120300_create_solid_cable_tables.rb @@ -0,0 +1,14 @@ +# Solid Cable lives in the main database (same as the app data), +# converted from the generated db/cable_schema.rb. +class CreateSolidCableTables < ActiveRecord::Migration[8.1] + def change + create_table "solid_cable_messages" do |t| + t.binary "channel", limit: 1024, null: false + t.binary "payload", limit: 536870912, null: false + t.datetime "created_at", null: false + t.integer "channel_hash", limit: 8, null: false + t.index ["channel_hash"], name: "index_solid_cable_messages_on_channel_hash" + t.index ["created_at"], name: "index_solid_cable_messages_on_created_at" + end + end +end diff --git a/db/schema.rb b/db/schema.rb new file mode 100644 index 0000000..ad25620 --- /dev/null +++ b/db/schema.rb @@ -0,0 +1,291 @@ +# This file is auto-generated from the current state of the database. Instead +# of editing this file, please use the migrations feature of Active Record to +# incrementally modify your database, and then regenerate this schema definition. +# +# This file is the source Rails uses to define your schema when running `bin/rails +# db:schema:load`. When creating a new database, `bin/rails db:schema:load` tends to +# be faster and is potentially less error prone than running all of your +# migrations from scratch. Old migrations may fail to apply correctly if those +# migrations use external dependencies or application code. +# +# It's strongly recommended that you check this file into your version control system. + +ActiveRecord::Schema[8.1].define(version: 2026_09_28_120300) do + # These are extensions that must be enabled in order to support this database + enable_extension "citext" + enable_extension "pg_catalog.plpgsql" + enable_extension "pgcrypto" + + create_table "document_memberships", force: :cascade do |t| + t.uuid "document_id", null: false + t.bigint "user_id", null: false + t.integer "role", null: false + t.integer "source", null: false + t.bigint "share_link_id" + t.datetime "last_opened_at" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index ["document_id", "user_id"], name: "index_document_memberships_on_document_id_and_user_id", unique: true + t.index ["document_id"], name: "index_document_memberships_on_document_id" + t.index ["share_link_id"], name: "index_document_memberships_on_share_link_id" + t.index ["user_id"], name: "index_document_memberships_on_user_id" + end + + create_table "documents", id: :uuid, default: -> { "gen_random_uuid()" }, force: :cascade do |t| + t.bigint "owner_id", null: false + t.string "title", null: false + t.text "content", null: false + t.integer "version", default: 1, null: false + t.bigint "updated_by_id" + t.datetime "content_updated_at", null: false + t.string "lock_holder" + t.string "lock_holder_name" + t.datetime "lock_expires_at" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index ["owner_id"], name: "index_documents_on_owner_id" + t.index ["updated_by_id"], name: "index_documents_on_updated_by_id" + end + + create_table "magic_links", force: :cascade do |t| + t.citext "email", null: false + t.string "token_digest", null: false + t.string "code_digest", null: false + t.integer "purpose", default: 0, null: false + t.uuid "document_id" + t.integer "role" + t.bigint "invited_by_id" + t.string "return_to" + t.integer "failed_attempts", default: 0, null: false + t.datetime "expires_at", null: false + t.datetime "used_at" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index ["document_id"], name: "index_magic_links_on_document_id" + t.index ["email"], name: "index_magic_links_on_email" + t.index ["invited_by_id"], name: "index_magic_links_on_invited_by_id" + t.index ["token_digest"], name: "index_magic_links_on_token_digest", unique: true + end + + create_table "sessions", force: :cascade do |t| + t.bigint "user_id", null: false + t.string "user_agent" + t.string "ip_address" + t.datetime "last_active_at" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index ["user_id"], name: "index_sessions_on_user_id" + end + + create_table "share_links", force: :cascade do |t| + t.uuid "document_id", null: false + t.integer "role", null: false + t.string "token", null: false + t.bigint "created_by_id", null: false + t.datetime "revoked_at" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index ["created_by_id"], name: "index_share_links_on_created_by_id" + t.index ["document_id"], name: "index_share_links_on_document_id" + t.index ["token"], name: "index_share_links_on_token", unique: true + end + + create_table "solid_cable_messages", force: :cascade do |t| + t.binary "channel", null: false + t.binary "payload", null: false + t.datetime "created_at", null: false + t.bigint "channel_hash", null: false + t.index ["channel_hash"], name: "index_solid_cable_messages_on_channel_hash" + t.index ["created_at"], name: "index_solid_cable_messages_on_created_at" + end + + create_table "solid_cache_entries", force: :cascade do |t| + t.binary "key", null: false + t.binary "value", null: false + t.datetime "created_at", null: false + t.bigint "key_hash", null: false + t.integer "byte_size", null: false + t.index ["byte_size"], name: "index_solid_cache_entries_on_byte_size" + t.index ["key_hash", "byte_size"], name: "index_solid_cache_entries_on_key_hash_and_byte_size" + t.index ["key_hash"], name: "index_solid_cache_entries_on_key_hash", unique: true + end + + create_table "solid_queue_batch_executions", force: :cascade do |t| + t.bigint "job_id", null: false + t.bigint "batch_id", null: false + t.datetime "created_at", null: false + t.index ["batch_id"], name: "index_solid_queue_batch_executions_on_batch_id" + t.index ["job_id"], name: "index_solid_queue_batch_executions_on_job_id", unique: true + end + + create_table "solid_queue_batches", force: :cascade do |t| + t.string "active_job_batch_id" + t.string "description" + t.text "on_finish" + t.text "on_success" + t.text "on_failure" + t.text "metadata" + t.integer "total_jobs", default: 0, null: false + t.integer "completed_jobs", default: 0, null: false + t.integer "failed_jobs", default: 0, null: false + t.datetime "enqueued_at" + t.datetime "finished_at" + t.datetime "failed_at" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index ["active_job_batch_id"], name: "index_solid_queue_batches_on_active_job_batch_id", unique: true + t.index ["finished_at"], name: "index_solid_queue_batches_on_finished_at" + end + + create_table "solid_queue_blocked_executions", force: :cascade do |t| + t.bigint "job_id", null: false + t.string "queue_name", null: false + t.integer "priority", default: 0, null: false + t.string "concurrency_key", null: false + t.datetime "expires_at", null: false + t.datetime "created_at", null: false + t.index ["concurrency_key", "priority", "job_id"], name: "index_solid_queue_blocked_executions_for_release" + t.index ["expires_at", "concurrency_key"], name: "index_solid_queue_blocked_executions_for_maintenance" + t.index ["job_id"], name: "index_solid_queue_blocked_executions_on_job_id", unique: true + end + + create_table "solid_queue_claimed_executions", force: :cascade do |t| + t.bigint "job_id", null: false + t.bigint "process_id" + t.datetime "created_at", null: false + t.index ["job_id"], name: "index_solid_queue_claimed_executions_on_job_id", unique: true + t.index ["process_id", "job_id"], name: "index_solid_queue_claimed_executions_on_process_id_and_job_id" + end + + create_table "solid_queue_failed_executions", force: :cascade do |t| + t.bigint "job_id", null: false + t.text "error" + t.datetime "created_at", null: false + t.index ["job_id"], name: "index_solid_queue_failed_executions_on_job_id", unique: true + end + + create_table "solid_queue_jobs", force: :cascade do |t| + t.string "queue_name", null: false + t.string "class_name", null: false + t.text "arguments" + t.integer "priority", default: 0, null: false + t.string "active_job_id" + t.datetime "scheduled_at" + t.datetime "finished_at" + t.string "concurrency_key" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.bigint "batch_id" + t.index ["active_job_id"], name: "index_solid_queue_jobs_on_active_job_id" + t.index ["batch_id"], name: "index_solid_queue_jobs_on_batch_id" + t.index ["class_name"], name: "index_solid_queue_jobs_on_class_name" + t.index ["finished_at"], name: "index_solid_queue_jobs_on_finished_at" + t.index ["queue_name", "finished_at"], name: "index_solid_queue_jobs_for_filtering" + t.index ["scheduled_at", "finished_at"], name: "index_solid_queue_jobs_for_alerting" + end + + create_table "solid_queue_pauses", force: :cascade do |t| + t.string "queue_name", null: false + t.datetime "created_at", null: false + t.index ["queue_name"], name: "index_solid_queue_pauses_on_queue_name", unique: true + end + + create_table "solid_queue_processes", force: :cascade do |t| + t.string "kind", null: false + t.datetime "last_heartbeat_at", null: false + t.bigint "supervisor_id" + t.integer "pid", null: false + t.string "hostname" + t.text "metadata" + t.datetime "created_at", null: false + t.string "name", null: false + t.index ["last_heartbeat_at"], name: "index_solid_queue_processes_on_last_heartbeat_at" + t.index ["name", "supervisor_id"], name: "index_solid_queue_processes_on_name_and_supervisor_id", unique: true + t.index ["supervisor_id"], name: "index_solid_queue_processes_on_supervisor_id" + end + + create_table "solid_queue_ready_executions", force: :cascade do |t| + t.bigint "job_id", null: false + t.string "queue_name", null: false + t.integer "priority", default: 0, null: false + t.datetime "created_at", null: false + t.index ["job_id"], name: "index_solid_queue_ready_executions_on_job_id", unique: true + t.index ["priority", "job_id"], name: "index_solid_queue_poll_all" + t.index ["queue_name", "priority", "job_id"], name: "index_solid_queue_poll_by_queue" + end + + create_table "solid_queue_recurring_executions", force: :cascade do |t| + t.bigint "job_id", null: false + t.string "task_key", null: false + t.datetime "run_at", null: false + t.datetime "created_at", null: false + t.index ["job_id"], name: "index_solid_queue_recurring_executions_on_job_id", unique: true + t.index ["task_key", "run_at"], name: "index_solid_queue_recurring_executions_on_task_key_and_run_at", unique: true + end + + create_table "solid_queue_recurring_tasks", force: :cascade do |t| + t.string "key", null: false + t.string "schedule", null: false + t.string "command", limit: 2048 + t.string "class_name" + t.text "arguments" + t.string "queue_name" + t.integer "priority", default: 0 + t.boolean "static", default: true, null: false + t.text "description" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index ["key"], name: "index_solid_queue_recurring_tasks_on_key", unique: true + t.index ["static"], name: "index_solid_queue_recurring_tasks_on_static" + end + + create_table "solid_queue_scheduled_executions", force: :cascade do |t| + t.bigint "job_id", null: false + t.string "queue_name", null: false + t.integer "priority", default: 0, null: false + t.datetime "scheduled_at", null: false + t.datetime "created_at", null: false + t.index ["job_id"], name: "index_solid_queue_scheduled_executions_on_job_id", unique: true + t.index ["scheduled_at", "priority", "job_id"], name: "index_solid_queue_dispatch_all" + end + + create_table "solid_queue_semaphores", force: :cascade do |t| + t.string "key", null: false + t.integer "value", default: 1, null: false + t.datetime "expires_at", null: false + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index ["expires_at"], name: "index_solid_queue_semaphores_on_expires_at" + t.index ["key", "value"], name: "index_solid_queue_semaphores_on_key_and_value" + t.index ["key"], name: "index_solid_queue_semaphores_on_key", unique: true + end + + create_table "users", force: :cascade do |t| + t.citext "email", null: false + t.string "display_name" + t.string "color" + t.datetime "last_seen_at" + t.datetime "created_at", null: false + t.datetime "updated_at", null: false + t.index ["email"], name: "index_users_on_email", unique: true + end + + add_foreign_key "document_memberships", "documents", on_delete: :cascade + add_foreign_key "document_memberships", "share_links", on_delete: :cascade + add_foreign_key "document_memberships", "users", on_delete: :cascade + add_foreign_key "documents", "users", column: "owner_id", on_delete: :cascade + add_foreign_key "documents", "users", column: "updated_by_id", on_delete: :nullify + add_foreign_key "magic_links", "documents", on_delete: :cascade + add_foreign_key "magic_links", "users", column: "invited_by_id", on_delete: :cascade + add_foreign_key "sessions", "users", on_delete: :cascade + add_foreign_key "share_links", "documents", on_delete: :cascade + add_foreign_key "share_links", "users", column: "created_by_id", on_delete: :cascade + add_foreign_key "solid_queue_batch_executions", "solid_queue_batches", column: "batch_id", on_delete: :cascade + add_foreign_key "solid_queue_batch_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_blocked_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_claimed_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_failed_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_ready_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_recurring_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade + add_foreign_key "solid_queue_scheduled_executions", "solid_queue_jobs", column: "job_id", on_delete: :cascade +end diff --git a/db/seeds.rb b/db/seeds.rb new file mode 100644 index 0000000..4fbd6ed --- /dev/null +++ b/db/seeds.rb @@ -0,0 +1,9 @@ +# This file should ensure the existence of records required to run the application in every environment (production, +# development, test). The code here should be idempotent so that it can be executed at any point in every environment. +# The data can then be loaded with the bin/rails db:seed command (or created alongside the database with db:setup). +# +# Example: +# +# ["Action", "Comedy", "Drama", "Horror"].each do |genre_name| +# MovieGenre.find_or_create_by!(name: genre_name) +# end diff --git a/docs/konzept-teilen-und-zusammenarbeit.md b/docs/konzept-teilen-und-zusammenarbeit.md index fac099d..57f1b76 100644 --- a/docs/konzept-teilen-und-zusammenarbeit.md +++ b/docs/konzept-teilen-und-zusammenarbeit.md @@ -621,6 +621,23 @@ wie jede andere Änderung verteilt. Viewer können keine Makros starten. --- +## Umsetzungsstand (Branch `with-server`, 2026-09-28) + +Umgesetzt sind Phasen 1–3 in angepasster Form; Live-Sync (Phase 4) fehlt noch. + +| Thema | Umsetzung | Abweichung vom Konzept | +| --- | --- | --- | +| Anonym | Dokumente bleiben lokal in IndexedDB (`/?doc=`) | kein Gast-Konto auf dem Server | +| Konto | Magic Link + 6-stelliger Code, Konto entsteht bei der ersten Anmeldung | – | +| Übernahme | nach der ersten Anmeldung Rückfrage, welche lokalen Dokumente hochgeladen werden; hochgeladene werden lokal entfernt | statt automatischer Übernahme | +| Server-Dokumente | JSON-Inhalt mit Versionsnummer, `/d/`; mit Konto werden neue Dokumente auf dem Server angelegt | Inhalt noch nicht als Yjs-Stand | +| Gleichzeitiges Bearbeiten | Sperre pro Browser-Tab (90 s ohne Heartbeat), andere sehen „Nur Lesen“ und folgen per Abfrage alle 10 s | Übergang bis Phase 4 | +| Teilen per Link | ohne Konto nutzbar; Token im Browser gespeichert (localStorage), nach Anmeldung dem Konto zugeordnet | Link-Token im Klartext gespeichert, damit der Besitzer den Link erneut kopieren kann | +| Einladungen | Mail mit Link (7 Tage gültig), meldet gleichzeitig an | – | +| Sessions | signierte Session-ID im Cookie (Rails-8-Standard) | statt Token-Digest | +| Datenbank | App-Daten, Solid Queue, Cache und Cable in **einer** PostgreSQL-Datenbank | – | +| Papierkorb, Aufräumjobs, Konto löschen | noch offen | – | + ## 11. Umsetzung in Phasen Jede Phase ist für sich nutzbar und wird einzeln ausgeliefert. diff --git a/eslint.config.js b/eslint.config.js index b3687ad..fe7990d 100644 --- a/eslint.config.js +++ b/eslint.config.js @@ -4,7 +4,7 @@ import skipFormatting from '@vue/eslint-config-prettier/skip-formatting'; export default [ { - ignores: ['dist/**', 'node_modules/**', 'coverage/**'], + ignores: ['dist/**', 'node_modules/**', 'coverage/**', 'public/**', 'vendor/**', 'tmp/**', 'log/**'], }, ...pluginVue.configs['flat/recommended'], ...vueTsEslintConfig(), diff --git a/lib/tasks/.keep b/lib/tasks/.keep new file mode 100644 index 0000000..e69de29 diff --git a/log/.keep b/log/.keep new file mode 100644 index 0000000..e69de29 diff --git a/package-lock.json b/package-lock.json index 12a3d69..f67ddf4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -23,7 +23,8 @@ "jsdom": "^25.0.1", "prettier": "^3.3.3", "typescript": "~5.6.3", - "vite": "^5.4.11", + "vite": "^5.4.21", + "vite-plugin-ruby": "^5.2.4", "vitest": "^2.1.5", "vue-tsc": "^2.1.10" } @@ -934,9 +935,9 @@ } }, "node_modules/@rollup/rollup-android-arm-eabi": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.63.1.tgz", - "integrity": "sha512-UZ8sUxPTiHWYX9QNdJedb1kDZSpS1t/VPWBWGSgqHNi9w3Cu6IXvu2mzbhiTiPvtrqgTQJ+zqiAq2iPIPilpaQ==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.63.5.tgz", + "integrity": "sha512-J25QJU+B78T4FhhBsNpLJyVWOi31mwtpcMwywHmOKH65Q9IWGA81gPj+dnwlhU8wktVriYE+tFAaQgrnJRzAZg==", "cpu": [ "arm" ], @@ -948,9 +949,9 @@ ] }, "node_modules/@rollup/rollup-android-arm64": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.63.1.tgz", - "integrity": "sha512-cQ4nFQABN5cDvDpbvJ7bMStCpnaVxynZrRMfUJYgxcIk9Sh54FIO1vtfkg0B69REjER77ioZ/ov+eAApx/KmLQ==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.63.5.tgz", + "integrity": "sha512-LDopB3zuZM5Ux9TT2luNEBJW/tYbGU2g1d+VpKk6I+gSKDb+/7sYE6M225gRQt4RbMX6MSwMsVR/phdjVUgRLg==", "cpu": [ "arm64" ], @@ -962,9 +963,9 @@ ] }, "node_modules/@rollup/rollup-darwin-arm64": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.63.1.tgz", - "integrity": "sha512-FQNqd1lRy/0QhDk3xeRIkSBiCpXCiDnZO3YLVdcDKN1UBiKToNftCzcXYNLshmPDUMlu2TdeS8tGcsU6f3YF1Q==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.63.5.tgz", + "integrity": "sha512-wlJEERGfeuHeBavCL2qVnNacOK43NDoZM4sjkeRPymd04OAE9T1zBqDJgmZ+CIsPTYKwdzpUC8vmOw84dwY4Tg==", "cpu": [ "arm64" ], @@ -976,9 +977,9 @@ ] }, "node_modules/@rollup/rollup-darwin-x64": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.63.1.tgz", - "integrity": "sha512-pvD16V939D3CloK0+qikpGaxiPrDUXTe7Y5cWOMkMSy7m1cawa8EGy/kXYi/G/cKAC4HDAbSnzCIk1WmsoOKXg==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.63.5.tgz", + "integrity": "sha512-4nJJGg5jbo2wwPP4JP+LfEBA3bvP8rU9CLuhp7jWvq9sxEyhjQFTFdrqi+/dHEin/pd8jpT0vcehIpnZtmEdcQ==", "cpu": [ "x64" ], @@ -990,9 +991,9 @@ ] }, "node_modules/@rollup/rollup-freebsd-arm64": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.63.1.tgz", - "integrity": "sha512-pcFGeL2345VwdTnJhA6zLbew+YgWB0qBG2+dMtXjCicf6+rm6kO6cOoh5VnTe0ZMrMRgRyuHmCJxZWrIdzYuOw==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.63.5.tgz", + "integrity": "sha512-DrZbyCDF1hneuO6jRbvZ2D7+PIBM6yIwYnJpg2vIk58T+wuFpiaGZrfUr59lDWw45bg+IrpTGLPiNi/Fk4w3Cg==", "cpu": [ "arm64" ], @@ -1004,9 +1005,9 @@ ] }, "node_modules/@rollup/rollup-freebsd-x64": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.63.1.tgz", - "integrity": "sha512-mRJlqSRulVzcKq/LKA6ICSIc3K/l4fzlVn/gePn2nXIHy8seRi5z/eeRE0d/XMBxcMldiXtQTSpRj0tkkC3g8Q==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.63.5.tgz", + "integrity": "sha512-gqfUVMJMB3mehqywxp6hTBFfgtMQykZY19+cfiaYP0toIJLb/1DZRJHVkQQGP13W4TAwfZDWeg1qBcheTRioXQ==", "cpu": [ "x64" ], @@ -1018,9 +1019,9 @@ ] }, "node_modules/@rollup/rollup-linux-arm-gnueabihf": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.63.1.tgz", - "integrity": "sha512-YDUNvVM85TI3g/1OpnqKP1h4NeW/j64DfWMf+G3M809xNk1bJSnpFp4sh83NpmVE5DXnkh8ULor4LTVZKoYLHw==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.63.5.tgz", + "integrity": "sha512-CFmhpvAwzSaWMlN3VN7UtmoTihlZNzoP0juQib5TQRnYUyDV8dXeWOp29sobWAT6gXl/hQgAClLlEiYozQG3OQ==", "cpu": [ "arm" ], @@ -1032,9 +1033,9 @@ ] }, "node_modules/@rollup/rollup-linux-arm-musleabihf": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.63.1.tgz", - "integrity": "sha512-7Mcn71p9ZuQFAj+h+dhQXy/yeLePRS2yKRnmW1DijA9thKO5qap0GNOIQK4yQ6iP3SU0Mrb/yWo8h8vgRba8lw==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.63.5.tgz", + "integrity": "sha512-Uc9H8eXCOayV6JLTH5bXKMId6qbhNHa818/BgYjm4jrlq3vZquC9cqyvHBw17xy5Mnj5f+I3gFK5JcEf3hSqrw==", "cpu": [ "arm" ], @@ -1046,9 +1047,9 @@ ] }, "node_modules/@rollup/rollup-linux-arm64-gnu": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.63.1.tgz", - "integrity": "sha512-4YiLQTX6U4CSl0L9cluep9A9W6UmTfqBDc2/CH6wlu54pl4E7Jn3cOD8oxzvBDEGk/JMKgJ47C8g+radF7mwvg==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.63.5.tgz", + "integrity": "sha512-VcPr/szv/1BFw112Kt//fxulXt/JPqzzidU84iW68L2DdjnOO8QFUv2zTSYBEPHD6movBD4z+bbr5y60GYM7Jw==", "cpu": [ "arm64" ], @@ -1060,9 +1061,9 @@ ] }, "node_modules/@rollup/rollup-linux-arm64-musl": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.63.1.tgz", - "integrity": "sha512-2ra8F7w8OquwZN9z2/fKFnli69wa8PLwaVzRMIPGb13ByMJwC28Fbp8YcVGoUhlYMTt7j5j9bNgpysrN2UM+vw==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.63.5.tgz", + "integrity": "sha512-BnxtJ5/91BrIHYIkGrmjz/lbMhqEHt1dPFqIxIFR+jPn0xVc/oUSCtIT089zfp5ufwGDlYz2UC+Fe1SRBpYFbQ==", "cpu": [ "arm64" ], @@ -1074,9 +1075,9 @@ ] }, "node_modules/@rollup/rollup-linux-loong64-gnu": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.63.1.tgz", - "integrity": "sha512-Sy20ncyhjmBP0Ml+UvQbimjlk6VFgjW5uNP+qqwHB00mTE8Bl2C1TuHTlRwK2YoXeZbee5lP2XevBWVkAQAtSQ==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.63.5.tgz", + "integrity": "sha512-LrYcHZwF+fAMNKHYTOQ5osWM4AZF7YF6D+XtsjDyEvljtt11twc+zHVXBLNEjxVSUnKYsOhvVz4Z213eW02COQ==", "cpu": [ "loong64" ], @@ -1088,9 +1089,9 @@ ] }, "node_modules/@rollup/rollup-linux-loong64-musl": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.63.1.tgz", - "integrity": "sha512-noITLp8oNjYliPnGWmLyelIHwULGqbHloQHGw1rtxbWhTuWooRpnZarZQJ1y9EUC4szuCusCc+HEpUtxpIwYvA==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.63.5.tgz", + "integrity": "sha512-nj7QKQePAAUpCpJHtg0pR0W/b92A9NO17JS3BAQmHDn/yhmkir2p8llrKY9TOhleKIaSzy1JhxS3T9FVld6coA==", "cpu": [ "loong64" ], @@ -1102,9 +1103,9 @@ ] }, "node_modules/@rollup/rollup-linux-ppc64-gnu": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.63.1.tgz", - "integrity": "sha512-hlxxXd+F1mWiAcaFR7Sv9ZQT6m6UfI8+Vy/kFJzztq2pDMU/0wZ9sish0iszNZvsQDo8Gc0i5yuFEOz5dDf6fA==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.63.5.tgz", + "integrity": "sha512-5ylkX6dWMeBKge9nTU+Rxfb+ZfaCIJ9lRqIFaK0eAMcWp7OJbYnLveLgXmm0VrvuLKb8qIK+mHyH0qu88RM+iA==", "cpu": [ "ppc64" ], @@ -1116,9 +1117,9 @@ ] }, "node_modules/@rollup/rollup-linux-ppc64-musl": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.63.1.tgz", - "integrity": "sha512-EF7OpqQTQ/BvGqLzUi4rEHuagCV9MugAUXSHemwPW5vxZ75RR+jxO/2j95Ph2dalMpFHSVECjRoioHZgA9zOYA==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.63.5.tgz", + "integrity": "sha512-oHK4ZHYFDKjZviK34I+NwgfbGxgI7ztrNxj2hPTSSNFgeq1a/lEd7dHV2fdGAuTH4Iym3RHJg+vAbWaWG4B7Zg==", "cpu": [ "ppc64" ], @@ -1130,9 +1131,9 @@ ] }, "node_modules/@rollup/rollup-linux-riscv64-gnu": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.63.1.tgz", - "integrity": "sha512-wQO3JesW9PRkwlabQ27y7sPfVOOTLRG73I4F2UYHG5PXun3J9U3y+b7ezVKSYbsvSKGQ1k1cq8Qlun4C9kLt3w==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.63.5.tgz", + "integrity": "sha512-UcetmHZ6XOXuUByiKZyQmb55ZPr0LABr3Ec/HB9wKZn6CEAFWZkE+hsJErJ9hbPBC7nI0dKuELx7CoV6IM7TMg==", "cpu": [ "riscv64" ], @@ -1144,9 +1145,9 @@ ] }, "node_modules/@rollup/rollup-linux-riscv64-musl": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.63.1.tgz", - "integrity": "sha512-ouAGwhO6wHRXdnOVCOsB0tRFkA7nhNB2Nwax6oECXN0YiN8EYUTBAOudADOB1PI+yDL61TeNx/u7MVCzksNbkQ==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.63.5.tgz", + "integrity": "sha512-C5CmDPQBtvjVo8cgQsBs+w6WB0JLkiixhgi6hVLV11hERWdn/p0XcPU2OUcZzac9BPOFq7SbaHFa8r3SWEysCQ==", "cpu": [ "riscv64" ], @@ -1158,9 +1159,9 @@ ] }, "node_modules/@rollup/rollup-linux-s390x-gnu": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.63.1.tgz", - "integrity": "sha512-q2R38Sn+1J8RxhfJ+T54wSWmyKXWec+9jgDfqO2AtArEqHO5R2aeayp5H5OYLr5UYDVGsVaZPEFUooMhYCdz5A==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.63.5.tgz", + "integrity": "sha512-lHVQHJFKsuuxLMi3MQO9XVL8Tje3JR82CzB+QDKC5NWBcsIWuwsn9uIM5e3lBhI+fF1/s63qnyYqsg65+8rV/w==", "cpu": [ "s390x" ], @@ -1172,9 +1173,9 @@ ] }, "node_modules/@rollup/rollup-linux-x64-gnu": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.63.1.tgz", - "integrity": "sha512-gfI5T24WLLuFfSKw7Go/zDXjAAV0fny0swTaDv+WjK7vqcw4cRhFfdsyKL1n+ukI+ooBxn3bVQnyrn06WpI50w==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.63.5.tgz", + "integrity": "sha512-3W9bTFcQNJn71cSJVM9RKIiZOy8DO/XLDii8Uv/Pm6WKqDRj7JV3ZfuXIEfyuy5LXpIzAbB/1M4Ukp9GKNa7nA==", "cpu": [ "x64" ], @@ -1186,9 +1187,9 @@ ] }, "node_modules/@rollup/rollup-linux-x64-musl": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.63.1.tgz", - "integrity": "sha512-4h6XqthmB4Hspji84wvgk+ElodTsGj+dbZqHJHHtKxj4mYq0ANSEEPX9ys3moJueqsRjwpaJYH7874Itwnj2ow==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.63.5.tgz", + "integrity": "sha512-VDC7rRJlee/scpki96GZ27Omf6yU87s1YXwVTpjE5841faVlDYYT565rgfmoR1U0sqL7z5ivQSDjcsF6VRXyBA==", "cpu": [ "x64" ], @@ -1200,9 +1201,9 @@ ] }, "node_modules/@rollup/rollup-openbsd-x64": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.63.1.tgz", - "integrity": "sha512-dlfCOa87o1VAYegLQ9EKilx2JCeRofiyPGhTCmqnuXZ6bMPiycO1rq1+sKoulAp7pGLIsTIw+1x5R+zgh5LhhA==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.63.5.tgz", + "integrity": "sha512-z86Ok2p4pTdv5xqCKZsTooO7yBEiaJR/HzU3Wx8RmWsPoLppnMKROhJusQob8B3IE1ghC343kUW9rC2r+Wf3ig==", "cpu": [ "x64" ], @@ -1214,9 +1215,9 @@ ] }, "node_modules/@rollup/rollup-openharmony-arm64": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.63.1.tgz", - "integrity": "sha512-cjkLbOlfcm3QGhMM1J5zaZjsw1GggbN6rw9UTSSRrPrR1KkcXnN7Uq9rPw34xImQ9VOY9GN+6u2Zj80B9ptkcw==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.63.5.tgz", + "integrity": "sha512-IzQmj+xXwQFGhMAMKMQVXkMwMZN3TqkJgAE0nSsqvVwWWciP4AIPMmWRqOQ2GfX7TUDZr+xqGFcBS36CRPGw0g==", "cpu": [ "arm64" ], @@ -1228,9 +1229,9 @@ ] }, "node_modules/@rollup/rollup-win32-arm64-msvc": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.63.1.tgz", - "integrity": "sha512-Li1KdUnWGE4N3e1F/B4RTB1ms+nG4WBgjByO46pkeBVX/2UBsY53xf5vK9WygVmnH3RwncIST7lkSdLSY6P9lg==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.63.5.tgz", + "integrity": "sha512-F6qpTaPc9bwBH85kjy0/BLmLSW1uv7AoOXCoRIkg2arlgCYlWYcAbiMkvZuAcaWk9TpCRG//okznLAqLGshkMw==", "cpu": [ "arm64" ], @@ -1242,9 +1243,9 @@ ] }, "node_modules/@rollup/rollup-win32-ia32-msvc": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.63.1.tgz", - "integrity": "sha512-t4ZYOSoLTgwhuFMrmTMLx/+i1DQVK7HYqMc6kY46EApwi8X0nIVphzdNoThU3xt6n+N5urG1/gxBdCaKDLavfg==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.63.5.tgz", + "integrity": "sha512-igoDsTFhhwECBeGbUuLeIk7t8Y1apa+cs6mDWpx2EZ0ch7oEQgzHbFUXN9euoHekCAQzXdXApAGkV6jznS7tWw==", "cpu": [ "ia32" ], @@ -1256,9 +1257,9 @@ ] }, "node_modules/@rollup/rollup-win32-x64-gnu": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.63.1.tgz", - "integrity": "sha512-RgroPfMmKlD1RzSDxvwgcPiy2HNQKoYV7OmwIXDsk73uKW5t6B/V8KIy27SMv/FNXFo/oSBtWc9J0X7t91ezZg==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.63.5.tgz", + "integrity": "sha512-U3teMeMbXFmaM5D+OTJpsOXd+wV/qftIeYF9kBKL4v73641qyJmoXFtA28DQLsnmlyayEsTe72xpLHrArq6vHw==", "cpu": [ "x64" ], @@ -1270,9 +1271,9 @@ ] }, "node_modules/@rollup/rollup-win32-x64-msvc": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.63.1.tgz", - "integrity": "sha512-at8QVep6S3h5Y6gSbdGU06bRY5WJkf6WUduM9YtvYMbYhB1MOFfUgc6kehitQXzOtMSaT70q7f9ydPhpqu821w==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.63.5.tgz", + "integrity": "sha512-ypfC34F3RKXvCXBglGqGMsUSMKlgwd1HX9AOAlx9RoZZ6GaI42YHVeKpzg3JG+wpBUJYTG+NNZhqbDWL8tBZkw==", "cpu": [ "x64" ], @@ -1570,33 +1571,6 @@ "url": "https://opencollective.com/vitest" } }, - "node_modules/@vitest/mocker": { - "version": "2.1.9", - "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-2.1.9.tgz", - "integrity": "sha512-tVL6uJgoUdi6icpxmdrn5YNo3g3Dxv+IHJBr0GXHaEdTcw3F+cPKnsXFhli6nO+f/6SDKPHEK1UN+k+TQv0Ehg==", - "dev": true, - "license": "MIT", - "dependencies": { - "@vitest/spy": "2.1.9", - "estree-walker": "^3.0.3", - "magic-string": "^0.30.12" - }, - "funding": { - "url": "https://opencollective.com/vitest" - }, - "peerDependencies": { - "msw": "^2.4.9", - "vite": "^5.0.0" - }, - "peerDependenciesMeta": { - "msw": { - "optional": true - }, - "vite": { - "optional": true - } - } - }, "node_modules/@vitest/pretty-format": { "version": "2.1.9", "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-2.1.9.tgz", @@ -2372,6 +2346,18 @@ "node": ">=0.4.0" } }, + "node_modules/detect-libc": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", + "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==", + "dev": true, + "license": "Apache-2.0", + "optional": true, + "peer": true, + "engines": { + "node": ">=8" + } + }, "node_modules/dunder-proto": { "version": "1.0.1", "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", @@ -3482,6 +3468,280 @@ "node": ">= 0.8.0" } }, + "node_modules/lightningcss": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz", + "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==", + "dev": true, + "license": "MPL-2.0", + "optional": true, + "peer": true, + "dependencies": { + "detect-libc": "^2.0.3" + }, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + }, + "optionalDependencies": { + "lightningcss-android-arm64": "1.33.0", + "lightningcss-darwin-arm64": "1.33.0", + "lightningcss-darwin-x64": "1.33.0", + "lightningcss-freebsd-x64": "1.33.0", + "lightningcss-linux-arm-gnueabihf": "1.33.0", + "lightningcss-linux-arm64-gnu": "1.33.0", + "lightningcss-linux-arm64-musl": "1.33.0", + "lightningcss-linux-x64-gnu": "1.33.0", + "lightningcss-linux-x64-musl": "1.33.0", + "lightningcss-win32-arm64-msvc": "1.33.0", + "lightningcss-win32-x64-msvc": "1.33.0" + } + }, + "node_modules/lightningcss-android-arm64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz", + "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "android" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-darwin-arm64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz", + "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "darwin" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-darwin-x64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz", + "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "darwin" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-freebsd-x64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz", + "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "freebsd" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-linux-arm-gnueabihf": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz", + "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-linux-arm64-gnu": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz", + "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-linux-arm64-musl": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz", + "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-linux-x64-gnu": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz", + "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-linux-x64-musl": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz", + "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-win32-arm64-msvc": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz", + "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "win32" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-win32-x64-msvc": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz", + "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "win32" + ], + "peer": true, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, "node_modules/locate-path": { "version": "6.0.0", "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz", @@ -3667,6 +3927,20 @@ "dev": true, "license": "MIT" }, + "node_modules/obug": { + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/obug/-/obug-2.2.1.tgz", + "integrity": "sha512-XrsrhT5sybtKI6wakr2SPOlGZWWYbUXZ7a0jT8/QOeAPau+1X/bSegNe5YR75oJmEZQbKningirmGOEJCIk61Q==", + "dev": true, + "funding": [ + "https://github.com/sponsors/sxzz", + "https://opencollective.com/debug" + ], + "license": "MIT", + "engines": { + "node": ">=12.20.0" + } + }, "node_modules/optionator": { "version": "0.9.4", "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz", @@ -3807,9 +4081,9 @@ } }, "node_modules/postcss": { - "version": "8.5.26", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz", - "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==", + "version": "8.5.28", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.28.tgz", + "integrity": "sha512-RRuzqDtt5Y9h3quz5hWhK+TPnsmVs6WwSU6LkJMeY4HstUEDuYTG8UJSdawMRzmzAtV+KEoG8N3Qg2qLy5vM/A==", "funding": [ { "type": "opencollective", @@ -3826,7 +4100,7 @@ ], "license": "MIT", "dependencies": { - "nanoid": "^3.3.17", + "nanoid": "^3.3.18", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" }, @@ -3940,9 +4214,9 @@ } }, "node_modules/rollup": { - "version": "4.63.1", - "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.63.1.tgz", - "integrity": "sha512-3Df9jsstwhccuEfmAMi9l8XUh/GOkVObmFTU7CCVBysEbcOZLl84jCtaAZMcPiMz2EGKsATzQcU+Xr3n/wU6cg==", + "version": "4.63.5", + "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.63.5.tgz", + "integrity": "sha512-KRWwmNLlPw5M7HcdYfm15oBv9n9LPtjzpzCIxS/phwqvPyxHSoKX6Y2YU3pxSPfy0CLquVgsx/j/hBi6OvH1Nw==", "dev": true, "license": "MIT", "dependencies": { @@ -3957,31 +4231,31 @@ }, "optionalDependencies": { "@napi-rs/lzma-linux-x64-gnu": "1.5.1", - "@rollup/rollup-android-arm-eabi": "4.63.1", - "@rollup/rollup-android-arm64": "4.63.1", - "@rollup/rollup-darwin-arm64": "4.63.1", - "@rollup/rollup-darwin-x64": "4.63.1", - "@rollup/rollup-freebsd-arm64": "4.63.1", - "@rollup/rollup-freebsd-x64": "4.63.1", - "@rollup/rollup-linux-arm-gnueabihf": "4.63.1", - "@rollup/rollup-linux-arm-musleabihf": "4.63.1", - "@rollup/rollup-linux-arm64-gnu": "4.63.1", - "@rollup/rollup-linux-arm64-musl": "4.63.1", - "@rollup/rollup-linux-loong64-gnu": "4.63.1", - "@rollup/rollup-linux-loong64-musl": "4.63.1", - "@rollup/rollup-linux-ppc64-gnu": "4.63.1", - "@rollup/rollup-linux-ppc64-musl": "4.63.1", - "@rollup/rollup-linux-riscv64-gnu": "4.63.1", - "@rollup/rollup-linux-riscv64-musl": "4.63.1", - "@rollup/rollup-linux-s390x-gnu": "4.63.1", - "@rollup/rollup-linux-x64-gnu": "4.63.1", - "@rollup/rollup-linux-x64-musl": "4.63.1", - "@rollup/rollup-openbsd-x64": "4.63.1", - "@rollup/rollup-openharmony-arm64": "4.63.1", - "@rollup/rollup-win32-arm64-msvc": "4.63.1", - "@rollup/rollup-win32-ia32-msvc": "4.63.1", - "@rollup/rollup-win32-x64-gnu": "4.63.1", - "@rollup/rollup-win32-x64-msvc": "4.63.1", + "@rollup/rollup-android-arm-eabi": "4.63.5", + "@rollup/rollup-android-arm64": "4.63.5", + "@rollup/rollup-darwin-arm64": "4.63.5", + "@rollup/rollup-darwin-x64": "4.63.5", + "@rollup/rollup-freebsd-arm64": "4.63.5", + "@rollup/rollup-freebsd-x64": "4.63.5", + "@rollup/rollup-linux-arm-gnueabihf": "4.63.5", + "@rollup/rollup-linux-arm-musleabihf": "4.63.5", + "@rollup/rollup-linux-arm64-gnu": "4.63.5", + "@rollup/rollup-linux-arm64-musl": "4.63.5", + "@rollup/rollup-linux-loong64-gnu": "4.63.5", + "@rollup/rollup-linux-loong64-musl": "4.63.5", + "@rollup/rollup-linux-ppc64-gnu": "4.63.5", + "@rollup/rollup-linux-ppc64-musl": "4.63.5", + "@rollup/rollup-linux-riscv64-gnu": "4.63.5", + "@rollup/rollup-linux-riscv64-musl": "4.63.5", + "@rollup/rollup-linux-s390x-gnu": "4.63.5", + "@rollup/rollup-linux-x64-gnu": "4.63.5", + "@rollup/rollup-linux-x64-musl": "4.63.5", + "@rollup/rollup-openbsd-x64": "4.63.5", + "@rollup/rollup-openharmony-arm64": "4.63.5", + "@rollup/rollup-win32-arm64-msvc": "4.63.5", + "@rollup/rollup-win32-ia32-msvc": "4.63.5", + "@rollup/rollup-win32-x64-gnu": "4.63.5", + "@rollup/rollup-win32-x64-msvc": "4.63.5", "fsevents": "~2.3.2" } }, @@ -4491,6 +4765,20 @@ "url": "https://opencollective.com/vitest" } }, + "node_modules/vite-plugin-ruby": { + "version": "5.2.4", + "resolved": "https://registry.npmjs.org/vite-plugin-ruby/-/vite-plugin-ruby-5.2.4.tgz", + "integrity": "sha512-DdFjS7TB8mgPx0Zhsf4kqgZYKxlZHgbyiijAj8l4OTbkEF1Lvk7U/HAGOKWjlpPR9RgatwNGZ1wZwAhyMJBcHg==", + "dev": true, + "license": "MIT", + "dependencies": { + "obug": "^2.0", + "tinyglobby": "^0.2.12" + }, + "peerDependencies": { + "vite": ">=5.0.0" + } + }, "node_modules/vitest": { "version": "2.1.9", "resolved": "https://registry.npmjs.org/vitest/-/vitest-2.1.9.tgz", @@ -4557,6 +4845,33 @@ } } }, + "node_modules/vitest/node_modules/@vitest/mocker": { + "version": "2.1.9", + "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-2.1.9.tgz", + "integrity": "sha512-tVL6uJgoUdi6icpxmdrn5YNo3g3Dxv+IHJBr0GXHaEdTcw3F+cPKnsXFhli6nO+f/6SDKPHEK1UN+k+TQv0Ehg==", + "dev": true, + "license": "MIT", + "dependencies": { + "@vitest/spy": "2.1.9", + "estree-walker": "^3.0.3", + "magic-string": "^0.30.12" + }, + "funding": { + "url": "https://opencollective.com/vitest" + }, + "peerDependencies": { + "msw": "^2.4.9", + "vite": "^5.0.0" + }, + "peerDependenciesMeta": { + "msw": { + "optional": true + }, + "vite": { + "optional": true + } + } + }, "node_modules/vscode-uri": { "version": "3.2.0", "resolved": "https://registry.npmjs.org/vscode-uri/-/vscode-uri-3.2.0.tgz", diff --git a/package.json b/package.json index 6b69fa4..5bca01a 100644 --- a/package.json +++ b/package.json @@ -5,14 +5,13 @@ "type": "module", "description": "Browser-Tabellenkalkulation nach dem Vorbild von Apple Numbers – mit selbst geschriebener Formel-Engine.", "scripts": { - "dev": "vite --port 3000", + "dev": "bin/dev", "build": "vue-tsc --noEmit && vite build", - "preview": "vite preview", "test": "vitest run", "test:watch": "vitest", + "test:server": "bin/rails test", "lint": "eslint . --ext .ts,.vue", - "format": "prettier --write \"src/**/*.{ts,vue,css}\"", - "sync": "rsync -aPv dist/* wkh@rails.wicom.li:/home/www/numolus.wicom.li/htdocs/" + "format": "prettier --write \"app/frontend/**/*.{ts,vue,css}\"" }, "dependencies": { "chart.js": "^4.4.6", @@ -30,7 +29,8 @@ "jsdom": "^25.0.1", "prettier": "^3.3.3", "typescript": "~5.6.3", - "vite": "^5.4.11", + "vite": "^5.4.21", + "vite-plugin-ruby": "^5.2.4", "vitest": "^2.1.5", "vue-tsc": "^2.1.10" } diff --git a/public/400.html b/public/400.html new file mode 100644 index 0000000..640de03 --- /dev/null +++ b/public/400.html @@ -0,0 +1,135 @@ + + + + + + + The server cannot process the request due to a client error (400 Bad Request) + + + + + + + + + + + + + +
    +
    + +
    +
    +

    The server cannot process the request due to a client error. Please check the request and try again. If you're the application owner check the logs for more information.

    +
    +
    + + + + diff --git a/public/404.html b/public/404.html new file mode 100644 index 0000000..d7f0f14 --- /dev/null +++ b/public/404.html @@ -0,0 +1,135 @@ + + + + + + + The page you were looking for doesn't exist (404 Not found) + + + + + + + + + + + + + +
    +
    + +
    +
    +

    The page you were looking for doesn't exist. You may have mistyped the address or the page may have moved. If you're the application owner check the logs for more information.

    +
    +
    + + + + diff --git a/public/406-unsupported-browser.html b/public/406-unsupported-browser.html new file mode 100644 index 0000000..43d2811 --- /dev/null +++ b/public/406-unsupported-browser.html @@ -0,0 +1,135 @@ + + + + + + + Your browser is not supported (406 Not Acceptable) + + + + + + + + + + + + + +
    +
    + +
    +
    +

    Your browser is not supported.
    Please upgrade your browser to continue.

    +
    +
    + + + + diff --git a/public/422.html b/public/422.html new file mode 100644 index 0000000..f12fb4a --- /dev/null +++ b/public/422.html @@ -0,0 +1,135 @@ + + + + + + + The change you wanted was rejected (422 Unprocessable Entity) + + + + + + + + + + + + + +
    +
    + +
    +
    +

    The change you wanted was rejected. Maybe you tried to change something you didn't have access to. If you're the application owner check the logs for more information.

    +
    +
    + + + + diff --git a/public/500.html b/public/500.html new file mode 100644 index 0000000..e4eb18a --- /dev/null +++ b/public/500.html @@ -0,0 +1,135 @@ + + + + + + + We're sorry, but something went wrong (500 Internal Server Error) + + + + + + + + + + + + + +
    +
    + +
    +
    +

    We're sorry, but something went wrong.
    If you're the application owner check the logs for more information.

    +
    +
    + + + + diff --git a/public/icon.png b/public/icon.png new file mode 100644 index 0000000000000000000000000000000000000000..c4c9dbfbbd2f7c1421ffd5727188146213abbcef GIT binary patch literal 4166 zcmd6qU;WFw?|v@m)Sk^&NvB8tcujdV-r1b=i(NJxn&7{KTb zX$3(M+3TP2o^#KAo{#tIjl&t~(8D-k004kqPglzn0HFG(Q~(I*AKsD#M*g7!XK0T7 zN6P7j>HcT8rZgKl$v!xr806dyN19Bd4C0x_R*I-a?#zsTvb_89cyhuC&T**i|Rc zq5b8M;+{8KvoJ~uj9`u~d_f6`V&3+&ZX9x5pc8s)d175;@pjm(?dapmBcm0&vl9+W zx1ZD2o^nuyUHWj|^A8r>lUorO`wFF;>9XL-Jy!P}UXC{(z!FO%SH~8k`#|9;Q|eue zqWL0^Bp(fg_+Pkm!fDKRSY;+^@BF?AJE zCUWpXPst~hi_~u)SzYBDZroR+Z4xeHIlm_3Yc_9nZ(o_gg!jDgVa=E}Y8uDgem9`b zf=mfJ_@(BXSkW53B)F2s!&?_R4ptb1fYXlF++@vPhd=marQgEGRZS@B4g1Mu?euknL= z67P~tZ?*>-Hmi7GwlisNHHJDku-dSm7g@!=a}9cSL6Pa^w^2?&?$Oi8ibrr>w)xqx zOH_EMU@m05)9kuNR>>4@H%|){U$^yvVQ(YgOlh;5oU_-vivG-p4=LrN-k7D?*?u1u zsWly%tfAzKd6Fb=`eU2un_uaTXmcT#tlOL+aRS=kZZf}A7qT8lvcTx~7j` z*b>=z)mwg7%B2_!D0!1IZ?Nq{^Y$uI4Qx*6T!E2Col&2{k?ImCO=dD~A&9f9diXy^$x{6CwkBimn|1E09 zAMSezYtiL?O6hS37KpvDM?22&d{l)7h-!F)C-d3j8Z`c@($?mfd{R82)H>Qe`h{~G z!I}(2j(|49{LR?w4Jspl_i!(4T{31|dqCOpI52r5NhxYV+cDAu(xp*4iqZ2e-$YP= zoFOPmm|u*7C?S{Fp43y+V;>~@FFR76bCl@pTtyB93vNWy5yf;HKr8^0d7&GVIslYm zo3Tgt@M!`8B6IW&lK{Xk>%zp41G%`(DR&^u z5^pwD4>E6-w<8Kl2DzJ%a@~QDE$(e87lNhy?-Qgep!$b?5f7+&EM7$e>|WrX+=zCb z=!f5P>MxFyy;mIRxjc(H*}mceXw5a*IpC0PEYJ8Y3{JdoIW)@t97{wcUB@u+$FCCO z;s2Qe(d~oJC^`m$7DE-dsha`glrtu&v&93IZadvl_yjp!c89>zo;Krk+d&DEG4?x$ zufC1n+c1XD7dolX1q|7}uelR$`pT0Z)1jun<39$Sn2V5g&|(j~Z!wOddfYiZo7)A< z!dK`aBHOOk+-E_xbWCA3VR-+o$i5eO9`rMI#p_0xQ}rjEpGW;U!&&PKnivOcG(|m9 z!C8?WC6nCXw25WVa*eew)zQ=h45k8jSIPbq&?VE{oG%?4>9rwEeB4&qe#?-y_es4c|7ufw%+H5EY#oCgv!Lzv291#-oNlX~X+Jl5(riC~r z=0M|wMOP)Tt8@hNg&%V@Z9@J|Q#K*hE>sr6@oguas9&6^-=~$*2Gs%h#GF@h)i=Im z^iKk~ipWJg1VrvKS;_2lgs3n1zvNvxb27nGM=NXE!D4C!U`f*K2B@^^&ij9y}DTLB*FI zEnBL6y{jc?JqXWbkIZd7I16hA>(f9T!iwbIxJj~bKPfrO;>%*5nk&Lf?G@c2wvGrY&41$W{7HM9+b@&XY@>NZM5s|EK_Dp zQX60CBuantx>|d#DsaZ*8MW(we|#KTYZ=vNa#d*DJQe6hr~J6{_rI#?wi@s|&O}FR zG$kfPxheXh1?IZ{bDT-CWB4FTvO-k5scW^mi8?iY5Q`f8JcnnCxiy@m@D-%lO;y0pTLhh6i6l@x52j=#^$5_U^os}OFg zzdHbo(QI`%9#o*r8GCW~T3UdV`szO#~)^&X_(VW>o~umY9-ns9-V4lf~j z`QBD~pJ4a#b`*6bJ^3RS5y?RAgF7K5$ll97Y8#WZduZ`j?IEY~H(s^doZg>7-tk*t z4_QE1%%bb^p~4F5SB$t2i1>DBG1cIo;2(xTaj*Y~hlM{tSDHojL-QPg%Mo%6^7FrpB*{ z4G0@T{-77Por4DCMF zB_5Y~Phv%EQ64W8^GS6h?x6xh;w2{z3$rhC;m+;uD&pR74j+i22P5DS-tE8ABvH(U~indEbBUTAAAXfHZg5QpB@TgV9eI<)JrAkOI z8!TSOgfAJiWAXeM&vR4Glh;VxH}WG&V$bVb`a`g}GSpwggti*&)taV1@Ak|{WrV|5 zmNYx)Ans=S{c52qv@+jmGQ&vd6>6yX6IKq9O$3r&0xUTdZ!m1!irzn`SY+F23Rl6# zFRxws&gV-kM1NX(3(gnKpGi0Q)Dxi~#?nyzOR9!en;Ij>YJZVFAL*=R%7y%Mz9hU% zs>+ZB?qRmZ)nISx7wxY)y#cd$iaC~{k0avD>BjyF1q^mNQ1QcwsxiTySe<6C&cC6P zE`vwO9^k-d`9hZ!+r@Jnr+MF*2;2l8WjZ}DrwDUHzSF{WoG zucbSWguA!3KgB3MU%HH`R;XqVv0CcaGq?+;v_A5A2kpmk5V%qZE3yzQ7R5XWhq=eR zyUezH=@V)y>L9T-M-?tW(PQYTRBKZSVb_!$^H-Pn%ea;!vS_?M<~Tm>_rWIW43sPW z=!lY&fWc1g7+r?R)0p8(%zp&vl+FK4HRkns%BW+Up&wK8!lQ2~bja|9bD12WrKn#M zK)Yl9*8$SI7MAwSK$%)dMd>o+1UD<2&aQMhyjS5R{-vV+M;Q4bzl~Z~=4HFj_#2V9 zB)Gfzx3ncy@uzx?yzi}6>d%-?WE}h7v*w)Jr_gBl!2P&F3DX>j_1#--yjpL%<;JMR z*b70Gr)MMIBWDo~#<5F^Q0$VKI;SBIRneuR7)yVsN~A9I@gZTXe)E?iVII+X5h0~H zx^c(fP&4>!*q>fb6dAOC?MI>Cz3kld#J*;uik+Ps49cwm1B4 zZc1|ZxYyTv;{Z!?qS=D)sgRKx^1AYf%;y_V&VgZglfU>d+Ufk5&LV$sKv}Hoj+s; xK3FZRYdhbXT_@RW*ff3@`D1#ps#~H)p+y&j#(J|vk^lW{fF9OJt5(B-_&*Xgn9~3N literal 0 HcmV?d00001 diff --git a/public/icon.svg b/public/icon.svg new file mode 100644 index 0000000..04b34bf --- /dev/null +++ b/public/icon.svg @@ -0,0 +1,3 @@ + + + diff --git a/public/robots.txt b/public/robots.txt new file mode 100644 index 0000000..c19f78a --- /dev/null +++ b/public/robots.txt @@ -0,0 +1 @@ +# See https://www.robotstxt.org/robotstxt.html for documentation on how to use the robots.txt file diff --git a/script/.keep b/script/.keep new file mode 100644 index 0000000..e69de29 diff --git a/src/components/DocumentsModal.vue b/src/components/DocumentsModal.vue deleted file mode 100644 index b954639..0000000 --- a/src/components/DocumentsModal.vue +++ /dev/null @@ -1,211 +0,0 @@ - - - - - diff --git a/src/store/library.ts b/src/store/library.ts deleted file mode 100644 index fe2204a..0000000 --- a/src/store/library.ts +++ /dev/null @@ -1,341 +0,0 @@ -/** - * Glue between the document store (one open document) and the document - * library in IndexedDB (all documents in this browser): - * - * - which document is open: `?doc=` in the URL, so every browser tab can - * have its own document and a reload reopens the same one; - * - persistence: the store's debounced save lands here and is written into - * the library under the open document's id; - * - other tabs: a BroadcastChannel tells them when a document's content, the - * list or a title changed, so an open document list stays current and a - * document open in two tabs follows the other tab's saves. Two tabs editing - * the *same* document at the same moment still overwrite each other (last - * save wins), so a hint is shown when that situation arises. - */ - -import { computed, reactive } from 'vue'; -import { useDocument, setPersistHandler, contentFingerprint } from './document'; -import type { DocumentState } from './types'; -import { DocumentLibrary, newDocId, type DocMeta } from '../io/library'; -import { validateDocument } from '../io/json'; -import { createBlankDocument, createSeedDocument } from '../data/seed'; -import { useToasts } from '../composables/useToasts'; - -/** The single-document localStorage keys used before the library existed -- - * read once and moved into the library as its first document. */ -const LEGACY_KEYS = ['numolus:doc:v2', 'numbers-study:doc:v2']; -const CHANNEL = 'numolus:library'; -const DEFAULT_TITLE = 'Unbenannt'; -const APP_TITLE = 'numolus'; - -type Msg = - | { type: 'list' } - | { type: 'saved'; id: string } - | { type: 'deleted'; id: string } - | { type: 'hello'; id: string } - | { type: 'here'; id: string }; - -function createLibrary() { - const store = useDocument(); - const toasts = useToasts(); - - const state = reactive({ - ready: false, - /** false = IndexedDB unavailable (private mode in some browsers, ...) */ - available: true, - docs: [] as DocMeta[], - currentId: null as string | null, - }); - const current = computed(() => state.docs.find((d) => d.id === state.currentId) ?? null); - const currentTitle = computed(() => current.value?.title ?? DEFAULT_TITLE); - - let lib: DocumentLibrary | null = null; - let channel: BroadcastChannel | null = null; - /** content fingerprint of what the library holds for the open document */ - let savedContent = ''; - /** `updatedAt` of the open document as this tab last wrote or read it -- - * a differing value in the library means another tab saved since */ - let knownUpdatedAt = 0; - /** writes run one after another, in order */ - let writeQueue: Promise = Promise.resolve(); - /** documents we've already warned about being open in another tab */ - const warnedShared = new Set(); - - const post = (m: Msg) => channel?.postMessage(m); - const enqueue = (job: () => Promise) => { - writeQueue = writeQueue.then(job).catch((err) => { - console.error(err); - toasts.error(`Speichern fehlgeschlagen: ${(err as Error).message}`); - }); - return writeQueue; - }; - - async function refreshList() { - if (lib) state.docs = await lib.list(); - } - - function uniqueTitle(base: string): string { - const taken = new Set(state.docs.map((d) => d.title.toLowerCase())); - if (!taken.has(base.toLowerCase())) return base; - for (let n = 2; ; n++) { - const t = `${base} ${n}`; - if (!taken.has(t.toLowerCase())) return t; - } - } - - function setUrl(id: string, push: boolean) { - const url = new URL(location.href); - if (url.searchParams.get('doc') === id) return; - url.searchParams.set('doc', id); - if (push) history.pushState(null, '', url); - else history.replaceState(null, '', url); - } - - function updateWindowTitle() { - document.title = `${currentTitle.value} – ${APP_TITLE}`; - } - - // ---- persistence --------------------------------------------------- - function persist(doc: DocumentState) { - const id = state.currentId; - if (!lib || !id) return; - const json = JSON.stringify(doc); - const fp = contentFingerprint(doc); - const changed = fp !== savedContent; - savedContent = fp; - void enqueue(async () => { - const meta = (await lib!.getMeta(id)) ?? { - id, - title: currentTitle.value, - createdAt: Date.now(), - updatedAt: Date.now(), - }; - if (!changed) { - // only the cursor/active sheet moved: saved so reopening restores - // it, but never over newer content another tab has written meanwhile - if (meta.updatedAt !== knownUpdatedAt) return; - await lib!.put(meta, json); - return; - } - const updatedAt = Math.max(Date.now(), meta.updatedAt + 1); - await lib!.put({ ...meta, updatedAt }, json); - if (id === state.currentId) knownUpdatedAt = updatedAt; - await refreshList(); - post({ type: 'saved', id }); - }); - } - - /** Show `json` in the store as the open document `id`. */ - function show(id: string, json: string, updatedAt: number, keepView = false) { - const next = validateDocument(JSON.parse(json)); - if (keepView) { - // another tab's save: take its content, keep this tab's cursor/sheet - if (next.sheets.some((s) => s.id === store.doc.activeSheetId)) { - next.activeSheetId = store.doc.activeSheetId; - next.activeObjectId = store.doc.activeObjectId; - next.selection = store.doc.selection; - } - } - state.currentId = id; - store.replaceDocument(next); - // it came from the library -- writing it straight back would only risk - // overwriting a newer save from another tab - store.cancelSave(); - savedContent = contentFingerprint(store.doc); - knownUpdatedAt = updatedAt; - updateWindowTitle(); - } - - // ---- opening documents --------------------------------------------- - async function open(id: string, opts: { push?: boolean } = {}): Promise { - if (!lib) return false; - if (id === state.currentId) return true; - store.flushSave(); - await writeQueue; - const [meta, json] = await Promise.all([lib.getMeta(id), lib.getContent(id)]); - if (!meta || json === undefined) return false; - try { - show(id, json, meta.updatedAt); - } catch (err) { - toasts.error(`Dokument konnte nicht geladen werden: ${(err as Error).message}`); - return false; - } - setUrl(id, opts.push ?? true); - post({ type: 'hello', id }); - return true; - } - - /** Add a document to the library and open it. */ - async function create(doc: DocumentState, title: string): Promise { - if (!lib) { - // no library: at least show it - store.replaceDocument(doc); - return null; - } - const id = newDocId(); - const now = Date.now(); - await enqueue(() => - lib!.put({ id, title: uniqueTitle(title.trim() || DEFAULT_TITLE), createdAt: now, updatedAt: now }, JSON.stringify(doc)), - ); - await refreshList(); - post({ type: 'list' }); - await open(id); - return id; - } - - const createBlank = () => create(createBlankDocument(), DEFAULT_TITLE); - const createSample = () => create(createSeedDocument(), 'Muster · Umsatzanalyse'); - - async function rename(id: string, title: string) { - const t = title.trim(); - if (!lib || !t) return; - await enqueue(() => lib!.patchMeta(id, { title: t })); - await refreshList(); - if (id === state.currentId) updateWindowTitle(); - post({ type: 'list' }); - } - - async function duplicate(id: string) { - if (!lib) return; - if (id === state.currentId) store.flushSave(); - await writeQueue; - const [meta, json] = await Promise.all([lib.getMeta(id), lib.getContent(id)]); - if (!meta || json === undefined) return; - const now = Date.now(); - await enqueue(() => - lib!.put({ id: newDocId(), title: uniqueTitle(`${meta.title} (Kopie)`), createdAt: now, updatedAt: now }, json), - ); - await refreshList(); - post({ type: 'list' }); - } - - async function remove(id: string) { - if (!lib) return; - await enqueue(() => lib!.remove(id)); - await refreshList(); - post({ type: 'deleted', id }); - if (id === state.currentId) await openFallback(); - } - - /** Most recently changed document, or a new blank one. */ - async function openFallback() { - state.currentId = null; - const next = state.docs[0]; - if (!next || !(await open(next.id, { push: false }))) await createBlank(); - } - - // ---- other tabs ------------------------------------------------------ - async function onMessage(m: Msg) { - if (m.type === 'list') { - await refreshList(); - updateWindowTitle(); - } else if (m.type === 'saved') { - await refreshList(); - // our own unsaved edit wins (it's written right after); otherwise - // follow -- a pending save that's only a cursor move doesn't count - const localEdit = store.hasPendingSave() && contentFingerprint(store.doc) !== savedContent; - if (m.id === state.currentId && !localEdit && lib) { - const [meta, json] = await Promise.all([lib.getMeta(m.id), lib.getContent(m.id)]); - if (meta && json !== undefined && m.id === state.currentId) show(m.id, json, meta.updatedAt, true); - } - } else if (m.type === 'deleted') { - await refreshList(); - if (m.id === state.currentId) { - toasts.info('Dieses Dokument wurde in einem anderen Tab gelöscht.'); - await openFallback(); - } - } else if (m.id === state.currentId) { - // hello / here: the same document is open in another tab - if (m.type === 'hello') post({ type: 'here', id: m.id }); - if (!warnedShared.has(m.id)) { - warnedShared.add(m.id); - toasts.info( - 'Dieses Dokument ist auch in einem anderen Tab geöffnet. Gleichzeitige Änderungen können sich überschreiben.', - ); - } - } - } - - // ---- start ----------------------------------------------------------- - async function migrateLegacy() { - for (const key of LEGACY_KEYS) { - let raw: string | null = null; - try { - raw = localStorage.getItem(key); - } catch { - return; - } - if (!raw) continue; - try { - const doc = validateDocument(JSON.parse(raw)); - const now = Date.now(); - await lib!.put( - { id: newDocId(), title: 'Mein Dokument', createdAt: now, updatedAt: now }, - JSON.stringify(doc), - ); - } catch { - continue; // corrupt -- leave it where it is - } - for (const k of LEGACY_KEYS) localStorage.removeItem(k); - return; - } - } - - async function init() { - try { - lib = await DocumentLibrary.open(); - } catch (err) { - console.error(err); - state.available = false; - state.ready = true; - toasts.error('Dokumente können in diesem Browser nicht gespeichert werden (IndexedDB nicht verfügbar).'); - return; - } - await migrateLegacy(); - await refreshList(); - - if (typeof BroadcastChannel !== 'undefined') { - channel = new BroadcastChannel(CHANNEL); - channel.onmessage = (e: MessageEvent) => void onMessage(e.data); - } - setPersistHandler(persist); - - const wanted = new URL(location.href).searchParams.get('doc'); - if (wanted && !(await open(wanted, { push: false }))) { - toasts.error('Das angeforderte Dokument gibt es in diesem Browser nicht.'); - } - if (!state.currentId) await openFallback(); - - window.addEventListener('popstate', () => { - const id = new URL(location.href).searchParams.get('doc'); - if (id && id !== state.currentId) void open(id, { push: false }); - }); - // don't lose the last 250 ms of typing when the tab goes away - window.addEventListener('pagehide', () => store.flushSave()); - document.addEventListener('visibilitychange', () => { - if (document.visibilityState === 'hidden') store.flushSave(); - }); - state.ready = true; - } - - return { - state, - current, - currentTitle, - init, - open, - create, - createBlank, - createSample, - rename, - duplicate, - remove, - }; -} - -let instance: ReturnType | null = null; - -export function useLibrary() { - if (!instance) instance = createLibrary(); - return instance; -} diff --git a/test/integration/.keep b/test/integration/.keep new file mode 100644 index 0000000..e69de29 diff --git a/test/integration/auth_flow_test.rb b/test/integration/auth_flow_test.rb new file mode 100644 index 0000000..9d48d88 --- /dev/null +++ b/test/integration/auth_flow_test.rb @@ -0,0 +1,52 @@ +require "test_helper" + +class AuthFlowTest < ActionDispatch::IntegrationTest + include ActionMailer::TestHelper + + test "requesting a link sends a mail, same answer for any address" do + assert_enqueued_emails 1 do + post "/api/auth/magic_link", params: { email: "anna@example.com", return_to: "/d/x" }, as: :json + end + assert_response :success + assert_equal({ "ok" => true }, json) + end + + test "mail link: GET only shows a confirm page, POST signs in and redirects" do + link = MagicLink.issue!(email: "anna@example.com", return_to: "/d/123") + get "/auth/verify", params: { token: link.token } + assert_response :success + assert_nil link.reload.used_at, "a GET (mail scanner) must not use the link" + + post "/auth/verify", params: { token: link.token } + assert_redirected_to "/d/123" + get "/api/me" + assert_equal "anna@example.com", json.dig("user", "email") + + post "/auth/verify", params: { token: link.token } + assert_response :not_found + end + + test "code sign-in and logout" do + user = create_user + sign_in user + get "/api/me" + assert_equal user.id, json.dig("user", "id") + + delete "/api/auth/session" + get "/api/me" + assert_nil json["user"] + end + + test "wrong code" do + MagicLink.issue!(email: "anna@example.com") + post "/api/auth/code", params: { email: "anna@example.com", code: "abc" }, as: :json + assert_response :unprocessable_entity + end + + test "the app page embeds the signed-in user" do + sign_in create_user + get "/" + assert_response :success + assert_includes response.body, "anna@example.com" + end +end diff --git a/test/integration/documents_api_test.rb b/test/integration/documents_api_test.rb new file mode 100644 index 0000000..67ef6ac --- /dev/null +++ b/test/integration/documents_api_test.rb @@ -0,0 +1,111 @@ +require "test_helper" + +class DocumentsApiTest < ActionDispatch::IntegrationTest + setup do + @anna = create_user("anna@example.com") + @bob = create_user("bob@example.com") + @doc = create_document(@anna) + end + + def put_content(doc, base_version, headers: {}) + patch "/api/documents/#{doc.id}", params: { content: DOC_JSON, base_version: }, headers:, as: :json + end + + test "listing and creating need an account" do + get "/api/documents" + assert_response :unauthorized + post "/api/documents", params: { title: "x", content: DOC_JSON }, as: :json + assert_response :unauthorized + end + + test "create (upload), list, read" do + sign_in @anna + post "/api/documents", params: { title: "Hochgeladen", content: DOC_JSON }, as: :json + assert_response :created + id = json.dig("document", "id") + + get "/api/documents" + assert_equal [ id, @doc.id ].sort, json["documents"].map { _1["id"] }.sort + + get "/api/documents/#{id}" + assert_equal DOC_JSON, json.dig("document", "content") + assert_equal "owner", json.dig("document", "role") + end + + test "someone else's document is a 404" do + sign_in @bob + get "/api/documents/#{@doc.id}" + assert_response :not_found + end + + test "save with version check; stale base_version is a conflict" do + sign_in @anna + put_content(@doc, 1) + assert_response :success + assert_equal 2, json.dig("document", "version") + + put_content(@doc, 1) + assert_response :conflict + assert_equal 2, json["version"] + end + + test "known_version returns metadata only when unchanged" do + sign_in @anna + get "/api/documents/#{@doc.id}", params: { known_version: 1 } + assert json["unchanged"] + assert_nil json.dig("document", "content") + end + + test "edit lock blocks saves from another tab" do + sign_in @anna + post "/api/documents/#{@doc.id}/lock", headers: { "X-Client-Id" => "tab-a" } + assert json.dig("lock", "mine") + + post "/api/documents/#{@doc.id}/lock", headers: { "X-Client-Id" => "tab-b" } + assert_not json.dig("lock", "mine") + put_content(@doc, 1, headers: { "X-Client-Id" => "tab-b" }) + assert_response :locked + + delete "/api/documents/#{@doc.id}/lock", headers: { "X-Client-Id" => "tab-a" } + put_content(@doc, 1, headers: { "X-Client-Id" => "tab-b" }) + assert_response :success + end + + test "share link without account: read with token; viewer cannot write" do + link = @doc.share_links.create!(role: :viewer, created_by: @anna) + headers = { "X-Share-Token" => link.token } + + post "/api/documents/#{@doc.id}/join", params: { token: link.token }, as: :json + assert_equal "viewer", json.dig("document", "role") + get "/api/documents/#{@doc.id}", headers: headers + assert_response :success + put_content(@doc, 1, headers:) + assert_response :forbidden + + get "/api/documents/#{@doc.id}", headers: { "X-Share-Token" => "wrong" } + assert_response :not_found + end + + test "share link with account: joining adds it to the list" do + link = @doc.share_links.create!(role: :editor, created_by: @anna) + sign_in @bob + post "/api/documents/#{@doc.id}/join", params: { token: link.token }, as: :json + get "/api/documents" + assert_equal [ [ @doc.id, "editor" ] ], json["documents"].map { [ _1["id"], _1["role"] ] } + put_content(@doc, 1) + assert_response :success + end + + test "owner deletes; a member only leaves" do + DocumentMembership.grant!(document: @doc, user: @bob, role: :editor, source: :invite) + sign_in @bob + delete "/api/documents/#{@doc.id}" + assert_response :no_content + assert Document.exists?(@doc.id) + assert_nil @doc.role_for(user: @bob) + + sign_in @anna + delete "/api/documents/#{@doc.id}" + assert_not Document.exists?(@doc.id) + end +end diff --git a/test/integration/shares_api_test.rb b/test/integration/shares_api_test.rb new file mode 100644 index 0000000..4133a82 --- /dev/null +++ b/test/integration/shares_api_test.rb @@ -0,0 +1,55 @@ +require "test_helper" + +class SharesApiTest < ActionDispatch::IntegrationTest + include ActionMailer::TestHelper + + setup do + @anna = create_user("anna@example.com") + @bob = create_user("bob@example.com") + @doc = create_document(@anna) + end + + test "only the owner manages sharing" do + DocumentMembership.grant!(document: @doc, user: @bob, role: :editor, source: :invite) + sign_in @bob + get "/api/documents/#{@doc.id}/share" + assert_response :not_found + end + + test "one active link per role; a new one revokes the old" do + sign_in @anna + post "/api/documents/#{@doc.id}/share/links", params: { role: "editor" }, as: :json + first = json["links"].first["token"] + post "/api/documents/#{@doc.id}/share/links", params: { role: "editor" }, as: :json + assert_equal 1, json["links"].size + assert_not_equal first, json["links"].first["token"] + assert_nil @doc.role_for(token: first) + + delete "/api/documents/#{@doc.id}/share/links/#{json['links'].first['id']}" + assert_empty json["links"] + end + + test "invite by mail, change role, remove" do + sign_in @anna + assert_enqueued_emails 1 do + post "/api/documents/#{@doc.id}/share/invitations", params: { email: "bob@example.com", role: "viewer" }, as: :json + end + assert_equal [ "bob@example.com" ], json["invitations"].map { _1["email"] } + + MagicLink.invitation.last.redeem! + get "/api/documents/#{@doc.id}/share" + assert_equal [ [ "bob@example.com", "viewer", "invite" ] ], json["members"].map { _1.values_at("email", "role", "source") } + assert_empty json["invitations"] + + patch "/api/documents/#{@doc.id}/share/members/#{@bob.id}", params: { role: "editor" }, as: :json + assert_equal :editor, @doc.role_for(user: @bob) + delete "/api/documents/#{@doc.id}/share/members/#{@bob.id}" + assert_nil @doc.role_for(user: @bob) + end + + test "cannot invite yourself" do + sign_in @anna + post "/api/documents/#{@doc.id}/share/invitations", params: { email: "anna@example.com", role: "viewer" }, as: :json + assert_response :unprocessable_entity + end +end diff --git a/test/models/.keep b/test/models/.keep new file mode 100644 index 0000000..e69de29 diff --git a/test/models/document_test.rb b/test/models/document_test.rb new file mode 100644 index 0000000..c403ab7 --- /dev/null +++ b/test/models/document_test.rb @@ -0,0 +1,63 @@ +require "test_helper" + +class DocumentTest < ActiveSupport::TestCase + setup do + @owner = create_user("owner@example.com") + @doc = create_document(@owner) + end + + test "rejects content that is not a numolus document" do + doc = @owner.owned_documents.build(title: "x", content: "[1,2]") + assert_not doc.valid? + doc.content = "{nope" + assert_not doc.valid? + end + + test "role_for: owner, member, link token, and the strongest grant wins" do + bob = create_user("bob@example.com") + assert_equal :owner, @doc.role_for(user: @owner) + assert_nil @doc.role_for(user: bob) + + viewer_link = @doc.share_links.create!(role: :viewer, created_by: @owner) + editor_link = @doc.share_links.create!(role: :editor, created_by: @owner) + assert_equal :viewer, @doc.role_for(token: viewer_link.token) + + DocumentMembership.grant!(document: @doc, user: bob, role: :viewer, source: :invite) + assert_equal :viewer, @doc.role_for(user: bob) + assert_equal :editor, @doc.role_for(user: bob, token: editor_link.token) + + editor_link.revoke! + assert_nil @doc.role_for(token: editor_link.token) + end + + test "revoking a link removes access gained through it, but not invitations" do + carl = create_user("carl@example.com") + dora = create_user("dora@example.com") + link = @doc.share_links.create!(role: :editor, created_by: @owner) + DocumentMembership.grant!(document: @doc, user: carl, role: :editor, source: :link, share_link: link) + DocumentMembership.grant!(document: @doc, user: dora, role: :editor, source: :link, share_link: link) + DocumentMembership.grant!(document: @doc, user: dora, role: :viewer, source: :invite) + + link.revoke! + assert_nil @doc.role_for(user: carl) + assert_equal :viewer, @doc.role_for(user: dora) + end + + test "a link never weakens a membership" do + bob = create_user("bob@example.com") + DocumentMembership.grant!(document: @doc, user: bob, role: :editor, source: :invite) + DocumentMembership.grant!(document: @doc, user: bob, role: :viewer, source: :link) + assert_equal :editor, @doc.role_for(user: bob) + end + + test "edit lock: one holder at a time, expires without heartbeat" do + assert @doc.acquire_lock!("1:tab-a", "Anna") + assert @doc.acquire_lock!("1:tab-a", "Anna"), "refreshing own lock" + assert_not @doc.acquire_lock!("2:tab-b", "Bob") + assert @doc.reload.locked_by_other?("2:tab-b") + + travel Document::LOCK_TTL + 1.second do + assert @doc.acquire_lock!("2:tab-b", "Bob") + end + end +end diff --git a/test/models/magic_link_test.rb b/test/models/magic_link_test.rb new file mode 100644 index 0000000..2cb0dd5 --- /dev/null +++ b/test/models/magic_link_test.rb @@ -0,0 +1,49 @@ +require "test_helper" + +class MagicLinkTest < ActiveSupport::TestCase + test "stores only digests and redeems once, creating the user" do + link = MagicLink.issue!(email: " New@Example.com ") + assert_equal "new@example.com", link.email + assert_not_equal link.token, link.token_digest + assert_equal link, MagicLink.find_by_token(link.token) + + user = link.redeem! + assert_equal "new@example.com", user.email + assert_nil MagicLink.find_by_token(link.token), "used" + end + + test "expires" do + link = MagicLink.issue!(email: "a@example.com") + travel MagicLink::LOGIN_TTL + 1.second do + assert_nil MagicLink.find_by_token(link.token) + end + end + + test "code: wrong attempts burn the link" do + link = MagicLink.issue!(email: "a@example.com") + wrong = link.code == "000000" ? "111111" : "000000" + MagicLink::MAX_CODE_ATTEMPTS.times { assert_nil MagicLink.find_by_code("a@example.com", wrong) } + assert_nil MagicLink.find_by_code("a@example.com", link.code) + end + + test "code accepts formatting and the right email only" do + link = MagicLink.issue!(email: "a@example.com") + assert_equal link, MagicLink.find_by_code("A@example.com", link.code.chars.each_slice(3).map(&:join).join(" ")) + assert_nil MagicLink.find_by_code("b@example.com", link.code) + end + + test "return_to only allows local paths" do + assert_equal "/d/abc", MagicLink.safe_path("/d/abc") + assert_nil MagicLink.safe_path("https://evil.example") + assert_nil MagicLink.safe_path("//evil.example") + end + + test "invitation grants the document on redeem" do + owner = create_user("owner@example.com") + doc = create_document(owner) + link = MagicLink.issue!(email: "guest@example.com", purpose: :invitation, document: doc, role: :editor, invited_by: owner) + user = link.redeem! + assert_equal :editor, doc.role_for(user:) + assert_equal "/d/#{doc.id}", link.destination + end +end diff --git a/test/test_helper.rb b/test/test_helper.rb new file mode 100644 index 0000000..ea33b36 --- /dev/null +++ b/test/test_helper.rb @@ -0,0 +1,32 @@ +ENV["RAILS_ENV"] ||= "test" +require_relative "../config/environment" +require "rails/test_help" + +module ActiveSupport + class TestCase + # Run tests in parallel with specified workers + parallelize(workers: :number_of_processors) + + DOC_JSON = { version: 2, sheets: [ { id: "s1", name: "Blatt 1", objects: [] } ] }.to_json + + def create_user(email = "anna@example.com") = User.create!(email:) + + def create_document(owner, title: "Budget") = + owner.owned_documents.create!(title:, content: DOC_JSON) + end +end + +module SignInHelper + # signs in through the real code flow + def sign_in(user) + link = MagicLink.issue!(email: user.email) + post "/api/auth/code", params: { email: user.email, code: link.code }, as: :json + assert_response :success + end + + def json = response.parsed_body +end + +class ActionDispatch::IntegrationTest + include SignInHelper +end diff --git a/tmp/.keep b/tmp/.keep new file mode 100644 index 0000000..e69de29 diff --git a/tmp/pids/.keep b/tmp/pids/.keep new file mode 100644 index 0000000..e69de29 diff --git a/tsconfig.json b/tsconfig.json index 145e7f0..5d2f558 100644 --- a/tsconfig.json +++ b/tsconfig.json @@ -21,6 +21,6 @@ "types": ["vitest/globals"] }, - "include": ["src/**/*.ts", "src/**/*.d.ts", "src/**/*.vue", "vite.config.ts"], + "include": ["app/frontend/**/*.ts", "app/frontend/**/*.d.ts", "app/frontend/**/*.vue", "vite.config.ts"], "exclude": ["node_modules", "dist"] } diff --git a/vendor/.keep b/vendor/.keep new file mode 100644 index 0000000..e69de29 diff --git a/vite.config.ts b/vite.config.ts index 38fea5a..784a6c9 100644 --- a/vite.config.ts +++ b/vite.config.ts @@ -1,17 +1,19 @@ /// import { defineConfig } from 'vite'; +import RubyPlugin from 'vite-plugin-ruby'; import vue from '@vitejs/plugin-vue'; export default defineConfig({ - plugins: [vue()], + plugins: [RubyPlugin(), vue()], build: { target: 'es2020', }, + // vite-plugin-ruby makes app/frontend the root, so paths are relative to it test: { environment: 'node', - include: ['src/**/*.spec.ts'], + include: ['**/*.spec.ts'], coverage: { - include: ['src/engine/**', 'src/store/**'], + include: ['engine/**', 'store/**'], }, }, });