bundle update

Improve controllers and views
Display form errors using custom validity messages
2026-10-04 01:26:16 +02:00 · 2026-07-28 00:46:33 +02:00 · 2026-07-28 00:45:08 +02:00 · 2026-07-20 21:45:33 +02:00 · 2026-07-20 16:38:05 +02:00 · 2026-07-12 17:20:00 +02:00
148 changed files with 2174 additions and 1654 deletions
@@ -1,74 +0,0 @@
-name: Tests
-
-on:
-  push:
-    branches: [ master ]
-  pull_request:
-    branches: [ master ]
-
-jobs:
-  test-sqlite:
-    name: Tests (SQLite)
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: '3.3'
-          bundler-cache: true
-        env:
-          BUNDLE_WITH: "sqlite:development:test"
-
-      - name: Set up test database
-        run: bin/rails db:create db:schema:load
-        env:
-          RAILS_ENV: test
-
-      - name: Run tests
-        run: bin/rails test
-        env:
-          RAILS_ENV: test
-          CI: "true"
-
-  test-mysql:
-    name: Tests (MySQL)
-    runs-on: ubuntu-latest
-
-    services:
-      mysql:
-        image: mysql:8.0
-        env:
-          MYSQL_ROOT_PASSWORD: ""
-          MYSQL_ALLOW_EMPTY_PASSWORD: "yes"
-          MYSQL_DATABASE: fixin_test
-        ports:
-          - 3306:3306
-        options: >-
-          --health-cmd="mysqladmin ping"
-          --health-interval=10s
-          --health-timeout=5s
-          --health-retries=3
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: '3.3'
-          bundler-cache: true
-        env:
-          BUNDLE_WITH: "mysql:development:test"
-
-      - name: Set up test database
-        run: bin/rails db:schema:load
-        env:
-          RAILS_ENV: test
-          DB_ADAPTER: mysql
-
-      - name: Run tests
-        run: bin/rails test
-        env:
-          RAILS_ENV: test
-          CI: "true"
-          DB_ADAPTER: mysql
@@ -15,6 +15,9 @@
 /config/master.key
 /config/puma.rb

+# Ignore test database.
+/db/test.sqlite3
+
 # Ignore all logfiles and tempfiles.
 /log/*
 /tmp/*
@@ -30,7 +33,7 @@

 /tmp/restart.txt

-# Ignore user files
+# Ignore user files.
 /.bash_history
 /.byebug_history
 /.config
@@ -38,6 +41,7 @@
 /.lesshst
 /.local
 /.mysql_history
+/.sqlite_history
 /.ssh
 /.vim
 /.viminfo
@@ -0,0 +1,76 @@
+DESIGN
+======
+
+Below is a list of design decisions. The justification is to be consulted
+whenever a change is considered, to avoid regressions.
+
+### Data type for DB storage of numeric values (`decimal` vs `float`)
+
+* among database engines supported (by Rails), SQLite offers storage of
+  `decimal` data type with the lowest precision, equal to the precision of
+  `REAL` type (double precision float value, IEEE 754), but in a floating point
+  format,
+    * decimal types in other database engines offer greater precision, but store
+      data in a fixed point format,
+* biology-related values differ by several orders of magnitude; storing them in
+  fixed point format would only make sense if required precision would be
+  greater than that offered by floating point format,
+    * even then, fixed point would mean either bigger memory requirements or
+      worse precision for numbers close to scale limit,
+        * for a fixed point format to use the same 8 bytes of storage as IEEE
+          754, precision would need to be limited to 18 digits (4 bytes/9 digits)
+          and scale approximately half of that - 9,
+    * double precision floating point guarantees 15 digits of precision, which
+      is more than enough for all expected use cases,
+        * if a decimal string with at most 15 significant digits is converted to
+          the IEEE 754 double-precision format, giving a normal number, and then
+          converted back to a decimal string with the same number of digits, the
+          final result should match the original string,
+        * if an IEEE 754 double-precision number is converted to a decimal
+          string with at least 17 significant digits, and then converted back to
+          double-precision representation, the final result must match the
+          original number,
+        * single precision floating point only guarntees 6 digits of precision,
+          which is estimated to be too low for some use cases (e.g. storing
+          latitude/longitude with a resolution grater than 100m),
+* double precision floating point (IEEE 754) is a standard that ensures
+  compatibility with majority of database engines,
+    * the same data format is used internally by Ruby as a `Float`; it
+      guarantees no conversions between storage and computation,
+    * as a standard with hardware implementations ensures both: computing
+      efficiency and hardware/3rd party library compatibility as opposed to Ruby
+      custom `BigDecimal` type,
+    * at present, only normalized numbers are used and considered sufficient, in
+      order to avoid potential issues with the cross-platform compatibility of
+      subnormal (denormal) numbers,
+* in the future, the IEEE 754 decimal64 data type may be considered once it is
+  supported by database engines.
+
+### Database layer vs application layer data model constraints
+
+* database constraints are the final guard against data integrity corruption,
+    * they should safeguard against data referential integrity loss under _all_
+      data (not schema) manipulation scenarios, including application level
+      logic errors and direct data manipulation (e.g. through `dbconsole`),
+* application constraints can be as restrictive as database constraints or more,
+  but not less, as it doesn't serve any use case,
+    * proper application level constraints should prevent unhandled database
+      exception occurences, e.g `ActiveRecord::InvalidForeignKey` for operations
+      performed through Models (i.e. not `#delete_all` etc.)
+
+### User interface
+* values provided by user have to be exactly preserved, avoiding any precision
+  loss due to e.g. type casting
+    * when it's not possible to store value without information loss, feedback has to
+      be given at the time of entering value
+    * values can be received using either:
+        * `input[number]` - validates: number format, value against `[min]` and
+          `[max]` attributes; cannot validate precision (no `[pattern]` support);
+          or
+        * `input[text]` - can validate number format and precision with
+          `[pattern]`; cannot validate range (no `[min]`/`[max]` support),
+        * none of the above prevents misinterpretation of values between 0 and
+          Float::MIN as 0.0 - this has to be checked manually,
+        * assuming that user input with _precision > DIG_ is as rare as in
+          the range _(0, MIN)_, the decision is to choose input which requires
+          the least/simplest additional code.
@@ -1,14 +1,14 @@
 source "https://rubygems.org"

-# The requirement for the Ruby version comes from Rails
-gem "rails", "~> 7.2.3"
+# The requirement for the Ruby version comes from Rails.
+gem "rails", "~> 8.1.4"
 gem "sprockets-rails"
 gem "puma", "~> 6.0"
 gem "sassc-rails"
 # Windows does not include zoneinfo files, so bundle the tzinfo-data gem
 gem "tzinfo-data", platforms: %i[ mingw mswin x64_mingw jruby ]

-# TODO: select db gems automatically
+# TODO: select db gems automatically?
 #   database_config = ERB.new(File.read("config/database.yml")).result
 #   YAML.load(database_config, aliases: true).values.map { |env| env["adapter"] }.uniq
 group :mysql, optional: true do
@@ -21,7 +21,7 @@ group :sqlite, optional: true do
  gem "sqlite3", "~> 2.7"
 end

-gem "devise"
+gem "devise", "~> 5.0.4"

 gem "importmap-rails"
 gem "turbo-rails", "~> 2.0"
@@ -42,11 +42,8 @@ group :test do
  # Use system testing [https://guides.rubyonrails.org/testing.html#system-testing]
  gem "capybara"
  gem "selenium-webdriver"
-
-  # Remove minitest version restriction after error fixed:
-  #   railties-7.2.3/lib/rails/test_unit/line_filtering.rb:7:in `run':
-  #     wrong number of arguments (given 3, expected 1..2) (ArgumentError)
-  #   from /var/www/.gem/ruby/3.3.0/gems/minitest-6.0.2/lib/minitest.rb:473:in
-  #     `block (2 levels) in run_suite'
-  gem "minitest", "< 6"
 end
+
+# TODO: remove after upgrade to next version containing PR:
+#   https://github.com/ruby-i18n/i18n/pull/755
+gem "i18n", git: "https://github.com/ruby-i18n/i18n", branch: "delegate-missing-interpolation-handler"
@@ -1,85 +1,93 @@
+GIT
+  remote: https://github.com/ruby-i18n/i18n
+  revision: 8850d979a3a32453123ed744b943ead8751ba73b
+  branch: delegate-missing-interpolation-handler
+  specs:
+    i18n (1.15.2)
+      concurrent-ruby (~> 1.0)
+
 GEM
  remote: https://rubygems.org/
  specs:
-    actioncable (7.2.3)
-      actionpack (= 7.2.3)
-      activesupport (= 7.2.3)
+    action_text-trix (2.1.19)
+      railties
+    actioncable (8.1.4)
+      actionpack (= 8.1.4)
+      activesupport (= 8.1.4)
      nio4r (~> 2.0)
      websocket-driver (>= 0.6.1)
      zeitwerk (~> 2.6)
-    actionmailbox (7.2.3)
-      actionpack (= 7.2.3)
-      activejob (= 7.2.3)
-      activerecord (= 7.2.3)
-      activestorage (= 7.2.3)
-      activesupport (= 7.2.3)
+    actionmailbox (8.1.4)
+      actionpack (= 8.1.4)
+      activejob (= 8.1.4)
+      activerecord (= 8.1.4)
+      activestorage (= 8.1.4)
+      activesupport (= 8.1.4)
      mail (>= 2.8.0)
-    actionmailer (7.2.3)
-      actionpack (= 7.2.3)
-      actionview (= 7.2.3)
-      activejob (= 7.2.3)
-      activesupport (= 7.2.3)
+    actionmailer (8.1.4)
+      actionpack (= 8.1.4)
+      actionview (= 8.1.4)
+      activejob (= 8.1.4)
+      activesupport (= 8.1.4)
      mail (>= 2.8.0)
      rails-dom-testing (~> 2.2)
-    actionpack (7.2.3)
-      actionview (= 7.2.3)
-      activesupport (= 7.2.3)
-      cgi
+    actionpack (8.1.4)
+      actionview (= 8.1.4)
+      activesupport (= 8.1.4)
      nokogiri (>= 1.8.5)
-      racc
-      rack (>= 2.2.4, < 3.3)
+      rack (>= 2.2.4)
      rack-session (>= 1.0.1)
      rack-test (>= 0.6.3)
      rails-dom-testing (~> 2.2)
      rails-html-sanitizer (~> 1.6)
      useragent (~> 0.16)
-    actiontext (7.2.3)
-      actionpack (= 7.2.3)
-      activerecord (= 7.2.3)
-      activestorage (= 7.2.3)
-      activesupport (= 7.2.3)
+    actiontext (8.1.4)
+      action_text-trix (~> 2.1.15)
+      actionpack (= 8.1.4)
+      activerecord (= 8.1.4)
+      activestorage (= 8.1.4)
+      activesupport (= 8.1.4)
      globalid (>= 0.6.0)
      nokogiri (>= 1.8.5)
-    actionview (7.2.3)
-      activesupport (= 7.2.3)
+    actionview (8.1.4)
+      activesupport (= 8.1.4)
      builder (~> 3.1)
-      cgi
      erubi (~> 1.11)
      rails-dom-testing (~> 2.2)
      rails-html-sanitizer (~> 1.6)
-    activejob (7.2.3)
-      activesupport (= 7.2.3)
+    activejob (8.1.4)
+      activesupport (= 8.1.4)
      globalid (>= 0.3.6)
-    activemodel (7.2.3)
-      activesupport (= 7.2.3)
-    activerecord (7.2.3)
-      activemodel (= 7.2.3)
-      activesupport (= 7.2.3)
+    activemodel (8.1.4)
+      activesupport (= 8.1.4)
+    activerecord (8.1.4)
+      activemodel (= 8.1.4)
+      activesupport (= 8.1.4)
      timeout (>= 0.4.0)
-    activestorage (7.2.3)
-      actionpack (= 7.2.3)
-      activejob (= 7.2.3)
-      activerecord (= 7.2.3)
-      activesupport (= 7.2.3)
+    activestorage (8.1.4)
+      actionpack (= 8.1.4)
+      activejob (= 8.1.4)
+      activerecord (= 8.1.4)
+      activesupport (= 8.1.4)
      marcel (~> 1.0)
-    activesupport (7.2.3)
+    activesupport (8.1.4)
      base64
-      benchmark (>= 0.3)
      bigdecimal
      concurrent-ruby (~> 1.0, >= 1.3.1)
      connection_pool (>= 2.2.5)
      drb
      i18n (>= 1.6, < 2)
+      json
      logger (>= 1.4.2)
      minitest (>= 5.1)
      securerandom (>= 0.3)
      tzinfo (~> 2.0, >= 2.0.5)
-    addressable (2.8.8)
+      uri (>= 0.13.1)
+    addressable (2.9.0)
      public_suffix (>= 2.0.2, < 8.0)
    base64 (0.3.0)
-    bcrypt (3.1.21)
-    benchmark (0.5.0)
-    bigdecimal (4.0.1)
+    bcrypt (3.1.22)
+    bigdecimal (4.1.3)
    bindex (0.8.1)
    builder (3.3.0)
    byebug (13.0.0)
@@ -93,155 +101,155 @@ GEM
      rack-test (>= 0.6.3)
      regexp_parser (>= 1.5, < 3.0)
      xpath (~> 3.2)
-    cgi (0.5.1)
-    concurrent-ruby (1.3.6)
+    concurrent-ruby (1.3.8)
    connection_pool (3.0.2)
-    crass (1.0.6)
+    crass (1.0.7)
    date (3.5.1)
-    devise (5.0.2)
+    devise (5.0.4)
      bcrypt (~> 3.0)
      orm_adapter (~> 0.1)
      railties (>= 7.0)
      responders
      warden (~> 1.2.3)
    drb (2.2.3)
-    erb (6.0.2)
+    erb (6.0.7)
    erubi (1.13.1)
-    ffi (1.17.3-aarch64-linux-gnu)
-    ffi (1.17.3-aarch64-linux-musl)
-    ffi (1.17.3-arm-linux-gnu)
-    ffi (1.17.3-arm-linux-musl)
-    ffi (1.17.3-arm64-darwin)
-    ffi (1.17.3-x86_64-darwin)
-    ffi (1.17.3-x86_64-linux-gnu)
-    ffi (1.17.3-x86_64-linux-musl)
-    globalid (1.3.0)
+    ffi (1.17.4-aarch64-linux-gnu)
+    ffi (1.17.4-aarch64-linux-musl)
+    ffi (1.17.4-arm-linux-gnu)
+    ffi (1.17.4-arm-linux-musl)
+    ffi (1.17.4-arm64-darwin)
+    ffi (1.17.4-x86_64-darwin)
+    ffi (1.17.4-x86_64-linux-gnu)
+    ffi (1.17.4-x86_64-linux-musl)
+    globalid (1.4.0)
      activesupport (>= 6.1)
-    i18n (1.14.8)
-      concurrent-ruby (~> 1.0)
    importmap-rails (2.2.3)
      actionpack (>= 6.0.0)
      activesupport (>= 6.0.0)
      railties (>= 6.0.0)
-    io-console (0.8.2)
-    irb (1.17.0)
+    io-console (0.9.4)
+    irb (1.18.0)
      pp (>= 0.6.0)
      prism (>= 1.3.0)
      rdoc (>= 4.0.0)
      reline (>= 0.4.2)
+    json (3.0.2)
    logger (1.7.0)
-    loofah (2.25.0)
+    loofah (2.25.2)
      crass (~> 1.0.2)
      nokogiri (>= 1.12.0)
-    mail (2.9.0)
+    mail (2.9.1)
      logger
      mini_mime (>= 0.1.1)
      net-imap
      net-pop
      net-smtp
-    marcel (1.1.0)
+    marcel (1.2.1)
    matrix (0.4.3)
    mini_mime (1.1.5)
-    minitest (5.27.0)
+    minitest (6.0.6)
+      drb (~> 2.0)
+      prism (~> 1.5)
    mysql2 (0.5.7)
      bigdecimal
-    net-imap (0.6.3)
+    net-imap (0.6.7)
      date
      net-protocol
    net-pop (0.1.2)
      net-protocol
-    net-protocol (0.2.2)
+    net-protocol (0.4.0)
      timeout
-    net-smtp (0.5.1)
+    net-smtp (0.5.2)
      net-protocol
    nio4r (2.7.5)
-    nokogiri (1.19.1-aarch64-linux-gnu)
+    nokogiri (1.19.4-aarch64-linux-gnu)
      racc (~> 1.4)
-    nokogiri (1.19.1-aarch64-linux-musl)
+    nokogiri (1.19.4-aarch64-linux-musl)
      racc (~> 1.4)
-    nokogiri (1.19.1-arm-linux-gnu)
+    nokogiri (1.19.4-arm-linux-gnu)
      racc (~> 1.4)
-    nokogiri (1.19.1-arm-linux-musl)
+    nokogiri (1.19.4-arm-linux-musl)
      racc (~> 1.4)
-    nokogiri (1.19.1-arm64-darwin)
+    nokogiri (1.19.4-arm64-darwin)
      racc (~> 1.4)
-    nokogiri (1.19.1-x86_64-darwin)
+    nokogiri (1.19.4-x86_64-darwin)
      racc (~> 1.4)
-    nokogiri (1.19.1-x86_64-linux-gnu)
+    nokogiri (1.19.4-x86_64-linux-gnu)
      racc (~> 1.4)
-    nokogiri (1.19.1-x86_64-linux-musl)
+    nokogiri (1.19.4-x86_64-linux-musl)
      racc (~> 1.4)
    orm_adapter (0.5.0)
-    pg (1.6.3)
-    pg (1.6.3-aarch64-linux)
-    pg (1.6.3-aarch64-linux-musl)
-    pg (1.6.3-arm64-darwin)
-    pg (1.6.3-x86_64-darwin)
-    pg (1.6.3-x86_64-linux)
-    pg (1.6.3-x86_64-linux-musl)
-    pp (0.6.3)
+    pg (1.7.0)
+    pg (1.7.0-aarch64-linux)
+    pg (1.7.0-aarch64-linux-musl)
+    pg (1.7.0-arm64-darwin)
+    pg (1.7.0-x86_64-darwin)
+    pg (1.7.0-x86_64-linux)
+    pg (1.7.0-x86_64-linux-musl)
+    pp (0.6.4)
      prettyprint
    prettyprint (0.2.0)
    prism (1.9.0)
-    psych (5.3.1)
-      date
-      stringio
-    public_suffix (7.0.2)
+    public_suffix (7.0.5)
    puma (6.6.1)
      nio4r (~> 2.0)
    racc (1.8.1)
-    rack (3.2.5)
-    rack-session (2.1.1)
+    rack (3.2.7)
+    rack-session (2.1.2)
      base64 (>= 0.1.0)
      rack (>= 3.0.0)
    rack-test (2.2.0)
      rack (>= 1.3)
    rackup (2.3.1)
      rack (>= 3)
-    rails (7.2.3)
-      actioncable (= 7.2.3)
-      actionmailbox (= 7.2.3)
-      actionmailer (= 7.2.3)
-      actionpack (= 7.2.3)
-      actiontext (= 7.2.3)
-      actionview (= 7.2.3)
-      activejob (= 7.2.3)
-      activemodel (= 7.2.3)
-      activerecord (= 7.2.3)
-      activestorage (= 7.2.3)
-      activesupport (= 7.2.3)
+    rails (8.1.4)
+      actioncable (= 8.1.4)
+      actionmailbox (= 8.1.4)
+      actionmailer (= 8.1.4)
+      actionpack (= 8.1.4)
+      actiontext (= 8.1.4)
+      actionview (= 8.1.4)
+      activejob (= 8.1.4)
+      activemodel (= 8.1.4)
+      activerecord (= 8.1.4)
+      activestorage (= 8.1.4)
+      activesupport (= 8.1.4)
      bundler (>= 1.15.0)
-      railties (= 7.2.3)
+      railties (= 8.1.4)
    rails-dom-testing (2.3.0)
      activesupport (>= 5.0.0)
      minitest
      nokogiri (>= 1.6)
-    rails-html-sanitizer (1.7.0)
-      loofah (~> 2.25)
+    rails-html-sanitizer (1.7.1)
+      loofah (~> 2.25, >= 2.25.2)
      nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
-    railties (7.2.3)
-      actionpack (= 7.2.3)
-      activesupport (= 7.2.3)
-      cgi
+    railties (8.1.4)
+      actionpack (= 8.1.4)
+      activesupport (= 8.1.4)
      irb (~> 1.13)
      rackup (>= 1.0.0)
      rake (>= 12.2)
      thor (~> 1.0, >= 1.2.2)
      tsort (>= 0.2)
      zeitwerk (~> 2.6)
-    rake (13.3.1)
-    rdoc (7.2.0)
-      erb
-      psych (>= 4.0.0)
+    rake (13.4.2)
+    rbs (4.2.0)
+      logger
+      prism (>= 1.6.0)
      tsort
-    regexp_parser (2.11.3)
-    reline (0.6.3)
+    rdoc (8.1.0)
+      erb
+      prism (>= 1.6.0)
+      rbs (>= 4.0.0)
+      tsort
+    regexp_parser (2.13.1)
+    reline (0.7.0)
      io-console (~> 0.5)
-    responders (3.2.0)
+    responders (3.2.1)
      actionpack (>= 7.0)
      railties (>= 7.0)
-    rexml (3.4.4)
-    rubyzip (3.2.2)
+    rubyzip (3.7.0)
    sassc (2.4.0)
      ffi (~> 1.9)
    sassc-rails (2.1.2)
@@ -251,54 +259,52 @@ GEM
      sprockets-rails
      tilt
    securerandom (0.4.1)
-    selenium-webdriver (4.41.0)
+    selenium-webdriver (4.50.0)
      base64 (~> 0.2)
      logger (~> 1.4)
-      rexml (~> 3.2, >= 3.2.5)
      rubyzip (>= 1.2.2, < 4.0)
      websocket (~> 1.0)
-    sprockets (4.2.2)
-      concurrent-ruby (~> 1.0)
+    sprockets (4.4.1)
+      concurrent-ruby (~> 1.1)
      logger
      rack (>= 2.2.4, < 4)
    sprockets-rails (3.5.2)
      actionpack (>= 6.1)
      activesupport (>= 6.1)
      sprockets (>= 3.0.0)
-    sqlite3 (2.9.0-aarch64-linux-gnu)
-    sqlite3 (2.9.0-aarch64-linux-musl)
-    sqlite3 (2.9.0-arm-linux-gnu)
-    sqlite3 (2.9.0-arm-linux-musl)
-    sqlite3 (2.9.0-arm64-darwin)
-    sqlite3 (2.9.0-x86_64-darwin)
-    sqlite3 (2.9.0-x86_64-linux-gnu)
-    sqlite3 (2.9.0-x86_64-linux-musl)
-    stringio (3.2.0)
+    sqlite3 (2.9.6-aarch64-linux-gnu)
+    sqlite3 (2.9.6-aarch64-linux-musl)
+    sqlite3 (2.9.6-arm-linux-gnu)
+    sqlite3 (2.9.6-arm-linux-musl)
+    sqlite3 (2.9.6-arm64-darwin)
+    sqlite3 (2.9.6-x86_64-darwin)
+    sqlite3 (2.9.6-x86_64-linux-gnu)
+    sqlite3 (2.9.6-x86_64-linux-musl)
    thor (1.5.0)
-    tilt (2.7.0)
-    timeout (0.6.0)
+    tilt (2.9.0)
+    timeout (0.6.1)
    tsort (0.2.0)
    turbo-rails (2.0.23)
      actionpack (>= 7.1.0)
      railties (>= 7.1.0)
    tzinfo (2.0.6)
      concurrent-ruby (~> 1.0)
+    uri (1.1.1)
    useragent (0.16.11)
    warden (1.2.9)
      rack (>= 2.0.9)
-    web-console (4.2.1)
-      actionview (>= 6.0.0)
-      activemodel (>= 6.0.0)
+    web-console (4.3.0)
+      actionview (>= 8.0.0)
      bindex (>= 0.4.0)
-      railties (>= 6.0.0)
+      railties (>= 8.0.0)
    websocket (1.2.11)
-    websocket-driver (0.8.0)
+    websocket-driver (0.8.2)
      base64
      websocket-extensions (>= 0.1.0)
    websocket-extensions (0.1.5)
    xpath (3.2.0)
      nokogiri (~> 1.8)
-    zeitwerk (2.7.5)
+    zeitwerk (2.8.3)

 PLATFORMS
  aarch64-linux-gnu
@@ -313,13 +319,13 @@ PLATFORMS
 DEPENDENCIES
  byebug
  capybara
-  devise
+  devise (~> 5.0.4)
+  i18n!
  importmap-rails
-  minitest (< 6)
  mysql2 (~> 0.5)
  pg (~> 1.5)
  puma (~> 6.0)
-  rails (~> 7.2.3)
+  rails (~> 8.1.4)
  sassc-rails
  selenium-webdriver
  sprockets-rails
@@ -16,14 +16,10 @@ environment, see the _Contributing_ section below.
 * Server side:
    * Ruby interpreter, depending on the version of Rails used (see _Gemfile_),
        * https://guides.rubyonrails.org/upgrading_ruby_on_rails.html#ruby-versions
-    * database (e.g. MySQL >= 8.0) supporting:
+    * database (e.g. SQLite, MySQL >= 8.0) supporting:
        * recursive Common Table Expressions (CTE) for SELECT/UPDATE/DELETE,
            * MariaDB does not support CTE for UPDATE/DELETE
              (https://jira.mariadb.org/browse/MDEV-18511)
-        * decimal datatype with precision of at least 30,
-            * SQLite3 _flexible typing_ decimal will work, but precision
-              will be limited to 16, making it practical mostly for testing
-              purposes
    * for testing: browser as specified in _Client side_ requirements
 * Client side:
    * browser (e.g. Firefox >= 121) supporting:
@@ -89,14 +85,10 @@ Running

 ### Standalone Rails server + Apache proxy

-Customize Puma config template:
+Copy and customize Puma config template if required:

    cp -a config/puma.rb.dist config/puma.rb

-and specify server IP/port, either with `port` or `bind`, e.g.:
-
-    bind 'tcp://0.0.0.0:3000'
-
 #### (option 1) Start server manually

    bundle exec rails s -e production
@@ -123,9 +115,26 @@ Contributing

 ### Gems

-Apart from database adapter, install development and testing gems:
+Install development and testing gems, including at least MySQL and SQLite
+database adapters:

-    bundle config --local with mysql development test
+    bundle config --local with development test mysql sqlite
+
+#### Using gems from local git repos
+
+When working on gem PRs, it may be useful to work with proposed changes locally
+until PRs get accepted upstream. To add gem hosted in local git repository:
+
+    bundle config set local.capybara /var/www/tmp/capybara
+
+Add gem to `Gemfile`:
+
+  gem "capybara", git: "https://github.com/teamcapybara/capybara", branch: "branch-name"
+
+and install:
+
+    bundle install
+    bundle show capybara

 ### Configuration

@@ -138,20 +147,29 @@ assets.

 ### Database

-Grant database user privileges for development and test environments,
-possibly with different Ruby versions:
+Grant database user privileges for development and test environments. Example
+below shows how to grant privileges to all databases which names start with
+`fixinme-` on MySQL:

    > mysql -p
    mysql> create user `fixinme-dev`@localhost identified by '<some password>';
    mysql> grant all privileges on `fixinme-%`.* to `fixinme-dev`@localhost;
    mysql> flush privileges;

+Dumping development data before database reset:
+
+    mysqldump -h <address> -u <user> -p --no-create-info --no-tablespaces --complete-insert <database> > tmp/data.sql
+
 ### Development environment

 Starting application server in development environment:

    bundle exec rails s -e development

+Accessing database console when more than one test db is present:
+
+    bundle exec rails dbconsole -e test --db sqlite3
+
 For running rake tasks, prepend command with environment:

    RAILS_ENV=development bundle exec rails ...
@@ -164,14 +182,22 @@ Tests need to be run from within toplevel application directory:

        bundle exec rails test:system

-* system test(s) with seed/test name specified:
+* system test(s) with seed or test name specified:

-        bundle exec rails test:system --seed 64690 --name test_add_unit
+        bundle exec rails test:system --include test_add_unit --seed 64690

-* all tests from one file, with optional seed:
+* all tests from one file, optionally with seed:

        bundle exec rails test test/system/users_test.rb --seed 1234

+* system tests for selected database configuration (if multiple present):
+
+        bundle exec rails test:system --include /^test_sqlite3_/
+
+* single system test for all database configurations (if multiple present):
+
+        bundle exec rails test:system --include /^test_\\w+_add_unit$/
+
 ### Icons

 Pictogrammers Material Design Icons: https://pictogrammers.com/library/mdi/
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" id="icon" viewBox="0 0 24 24"><path d="M12,2L1,21H23M12,6L19.53,19H4.47M11,10V14H13V10M11,16V18H13V16" /></svg>
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" id="icon" viewBox="0 0 24 24"><path d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M12 20C7.59 20 4 16.41 4 12S7.59 4 12 4 20 7.59 20 12 16.41 20 12 20M16.59 7.58L10 14.17L7.41 11.59L6 13L10 17L18 9L16.59 7.58Z" /></svg>
@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" id="icon" viewBox="0 0 24 24"><path fill="#ffffff" d="M12,2L1,21H23M12,6L19.53,19H4.47M11,10V14H13V10M11,16V18H13V16" /></svg>
@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" id="icon" viewBox="0 0 24 24"><path fill="#ffffff" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M12 20C7.59 20 4 16.41 4 12S7.59 4 12 4 20 7.59 20 12 16.41 20 12 20M16.59 7.58L10 14.17L7.41 11.59L6 13L10 17L18 9L16.59 7.58Z" /></svg>
@@ -18,10 +18,12 @@
 /* Strive for simplicity:
 * * style elements/tags only - if possible,
 * * replace element/tag name with class name - if element has to be styled
- * differently depending on context (e.g. form)
+ * differently depending on context (e.g. <form>, <table>, <a> as link/button),
+ * * styles with multiple selectors should have all selectors with same
+ * specificity, to allow proper rule specificity vs order management.
 *
- * NOTE: Style in a modular way, similar to how CSS @scope would be used,
- * to make transition easier once @scope is widely available */
+ * NOTE: style in a modular way, similar to how CSS @scope would be used,
+ * to make transition easier once @scope is widely available. */
 :root {
  --color-focus-gray: #f3f3f3;
  --color-border-gray: #dddddd;
@@ -53,17 +55,41 @@
 :focus-visible {
  outline: none;
 }
+/* NOTE: move to higher priority layer instead of using !important?; add CSS
+ * @layer requirements in README */
+/* Disable elements with:
+ *  `[aria-disabled=true]` - non-form elements (e.g. links),
+ *  `[disabled]` - form controls, that may be enabled conditionally,
+ *  `[readonly]` - form controls, that stay disabled for form lifetime. */
+[aria-disabled=true],
+[disabled] {
+  border-color: var(--color-border-gray) !important;
+  color: var(--color-border-gray) !important;
+  /* NOTE: cannot set cursor when `pointer-events: none`; can be fixed by setting
+   * `cursor` on wrapping element.
+  cursor: not-allowed; */
+  fill: var(--color-border-gray) !important;
+  pointer-events: none !important;
+}
+/* Styles set `display` without distinguishing between [hidden] elements, making
+ * them visible. */
+[hidden] {
+  display: none !important;
+}


 /* Color coding of input controls' background:
- *  blue - target for interaction with pointer
- *  gray - target for interaction with keyboard
- *  red - destructive, non-undoable action
+ *  blue - target for interaction with pointer,
+ *  gray - target for interaction with keyboard,
+ *  red - destructive, non-undoable action.
 */
+/* TODO: merge selectors using :is() */
+a,
 button,
 details,
 input,
 select,
+summary,
 textarea {
  background-color: inherit;
  font: inherit;
@@ -73,50 +99,24 @@ input,
 select {
  text-align: inherit;
 }
-a,
-button,
-input[type=submit] {
-  cursor: pointer;
-  text-decoration: none;
-  white-space: nowrap;
-}
-/* [hidden] submit controls cannot have `display` set as it makes them visible */
-.button,
-button:not([hidden]),
-input[type=submit]:not([hidden]),
-.tab {
-  align-items: center;
-  color: var(--color-gray);
-  display: flex;
-  fill: var(--color-gray);
-  font-weight: bold;
-}
-.button,
-button,
-input[type=submit] {
-  font-size: 0.8rem;
-  padding: 0.6em 0.5em;
-  width: fit-content;
-}
-input:not([type=submit]):not([type=checkbox]),
-select,
-summary,
-textarea {
-  padding: 0.2em 0.4em;
-}
-.button,
-button,
 input,
 select,
 summary,
 textarea {
-  border: solid 1px var(--color-gray);
+  border: 1px solid var(--color-gray);
  border-radius: 0.25em;
+  padding: 0.2em 0.4em;
+}
+svg {
+  height: 1.4em;
+  margin: 0 0.2em 0 0;
+  width: 1.4em;
+}
+svg:last-child {
+  margin-right: 0;
 }
-input[type=checkbox],
-svg,
 textarea {
-  margin: 0
+  margin: 0;
 }
 input[type=checkbox] {
  accent-color: var(--color-blue);
@@ -124,16 +124,20 @@ input[type=checkbox] {
  -webkit-appearance: none;
  display: flex;
  height: 1.1em;
+  margin: 0;
+  padding: 0;
  width: 1.1em;
 }
 input[type=checkbox]:checked {
  appearance: checkbox;
  -webkit-appearance: checkbox;
 }
-/* Hide spin buttons in input number fields */
+/* Hide spin buttons of <input type=number>. */
+/* TODO: add spin buttons inside <input type=number>: before (-) and after (+) input. */
 input[type=number] {
  appearance: textfield;
  -moz-appearance: textfield;
+  text-align: end;
 }
 input::-webkit-inner-spin-button {
  -webkit-appearance: none;
@@ -142,37 +146,117 @@ input::-webkit-outer-spin-button {
  -webkit-appearance: none;
  margin: 0;
 }
-.button > svg,
-.tab > svg,
-button > svg {
-  height: 1.4em;
-  width: 1.4em;
+/* Text color of table form controls:
+ *  - black for row/table forms,
+ *  - inherited for internal (column specific) buttons/forms. */
+table input,
+table select,
+table summary,
+table textarea {
+  border-color: var(--color-border-gray);
 }
-.button > svg:not(:last-child),
-.tab > svg:not(:last-child),
-button > svg:not(:last-child) {
-  margin-right: 0.2em;
+table input,
+table select,
+table textarea {
+  padding-block: 0.375em;
 }
-/* TODO: move normal non-button links (<a>:hover/:focus) styling here (i.e.
- * page-wide, top-level) and remove from table.items - as the style should be
- * same everywhere */
-.button:focus-visible,
-button:focus-visible,
-input[type=submit]:focus-visible {
-  background-color: var(--color-focus-gray);
+table form input,
+table form select,
+table form summary,
+table form textarea {
+  color: inherit;
+}
+table svg:not(:only-child) {
+  height: 1.25em;
+  width: 1.25em;
 }
 input:focus-visible,
 select:focus-visible,
 select:focus-within,
-/* TODO: how to achieve summary:focus-within for ::details-content? */
+/* TODO: how to achieve `summary:focus-within` for `::details-content`? */
 summary:focus-visible,
 textarea:focus-visible {
  accent-color: var(--color-dark-blue);
  background-color: var(--color-focus-gray);
+  color: black;
 }
-.button:hover,
-button:hover,
-input[type=submit]:hover {
+input:hover,
+select:hover,
+summary:hover,
+textarea:hover {
+  border-color: var(--color-blue);
+  outline: 1px solid var(--color-blue);
+}
+select:hover,
+summary:hover {
+  color: black;
+  cursor: pointer;
+}
+/* TODO: style <details>/<summary> focus to match <select> as much as possible.
+summary:focus-visible::before,
+summary:hover::before {
+  background-color: black;
+}
+ */
+input:invalid,
+select:invalid,
+textarea:invalid {
+  border-color: var(--color-red);
+  outline-color: var(--color-red);
+}
+pre {
+  display: inline;
+  font: inherit;
+}
+
+/* `.button`: button-styled <a>, <button>, <input type=submit>.
+ * `.link`: any other <a>.
+ * `.tab`: tab-styled <a>.
+ */
+.button,
+.link,
+.tab {
+  cursor: pointer;
+  text-decoration: none;
+  white-space: nowrap;
+}
+.button,
+.tab {
+  align-items: center;
+  color: var(--color-gray);
+  display: flex;
+  fill: var(--color-gray);
+  font-weight: bold;
+}
+.button {
+  border: 1px solid var(--color-gray);
+  border-radius: 0.25em;
+  font-size: 0.8rem;
+  padding: 0.6em 0.5em;
+  width: fit-content;
+}
+.link {
+  color: inherit;
+  text-decoration: underline 1px var(--color-border-gray);
+  text-underline-offset: 0.25em;
+}
+.auxiliary {
+  border-color: var(--color-nav-gray);
+  color: var(--color-nav-gray);
+  fill: var(--color-nav-gray);
+}
+table .button {
+  border-color: var(--color-border-gray);
+  font-weight: normal;
+  height: 100%;
+  padding: 0.4em;
+}
+.button:focus-visible,
+.tab:focus-visible,
+.tab:hover {
+  background-color: var(--color-focus-gray);
+}
+.button:hover {
  background-color: var(--color-blue);
  border-color: var(--color-blue);
  color: white;
@@ -182,32 +266,17 @@ input[type=submit]:hover {
  background-color: var(--color-red);
  border-color: var(--color-red);
 }
-input:hover,
-select:hover,
-summary:hover,
-textarea:hover {
-  border-color: var(--color-blue);
-  outline: solid 1px var(--color-blue);
+.link:focus-visible {
+  text-decoration-color: var(--color-gray);
 }
-select:hover,
-summary:hover {
-  cursor: pointer;
-}
-input:invalid,
-select:invalid,
-textarea:invalid {
-  border-color: var(--color-red);
-  outline: solid 1px var(--color-red);
-}
-input[type=text]:read-only,
-textarea:read-only {
-  border: none;
-  padding-inline: 0;
+.link:hover {
+  color: var(--color-blue);
+  text-decoration-color: var(--color-blue);
 }


-/* NOTE: collapse gaps around empty rows (`topside`) once possible
- * with grid-collapse property and remove alternative grid-template
+/* NOTE: collapse gaps around empty rows (`topside`) once possible with
+ * `grid-collapse` property and remove alternative `grid-template-areas`.
 * https://github.com/w3c/csswg-drafts/issues/5813 */
 body {
  display: grid;
@@ -215,16 +284,16 @@ body {
  grid-template-areas:
    "header    header  header"
    "nav       nav     nav"
-    "leftside  topside rightside"
    "leftside  main    rightside";
  grid-template-columns: 1fr minmax(max-content, 2fr) 1fr;
  font-family: system-ui;
  margin: 0.4em;
 }
-body:not(:has(.topside-area)) {
+body:has(> .topside-area) {
  grid-template-areas:
    "header    header  header"
    "nav       nav     nav"
+    "leftside  topside rightside"
    "leftside  main    rightside";
 }

@@ -240,18 +309,14 @@ header {
  margin-inline-start: 4%;
 }
 .navigation > .tab {
-  border-bottom: solid 2px var(--color-nav-gray);
+  border-bottom: 2px solid var(--color-nav-gray);
  flex: 1;
  font-size: 1rem;
  justify-content: center;
  padding-block: 0.4em;
 }
-.navigation > .tab:hover,
-.navigation > .tab:focus-visible {
-  background-color: var(--color-focus-gray);
-}
 .navigation > .tab.active {
-  border-bottom: solid 4px var(--color-blue);
+  border-bottom: 4px solid var(--color-blue);
  color: var(--color-blue);
  fill: var(--color-blue);
 }
@@ -283,7 +348,7 @@ header {

 #flashes {
  display: grid;
-  gap: 0.2em;
+  row-gap: 0.4em;
  grid-template-columns: 1fr auto auto auto 1fr;
  left: 0;
  pointer-events: none;
@@ -299,48 +364,42 @@ header {
  display: grid;
  grid-column: 2/5;
  grid-template-columns: subgrid;
+  line-height: 2.2em;
  pointer-events: auto;
 }
-.flash.alert:before {
-  content: url('pictograms/alert-outline.svg');
+.flash::before {
+  filter: invert(1);
  height: 1.4em;
  margin: 0 0.5em;
  width: 1.4em;
 }
+.flash.alert::before {
+  content: url('alert-outline.svg');
+}
 .flash.alert {
  border-color: var(--color-red);
  background-color: var(--color-red);
 }
-.flash.notice:before {
-  content: url('pictograms/check-circle-outline.svg');
-  height: 1.4em;
-  margin: 0 0.5em;
-  width: 1.4em;
+.flash.notice::before {
+  content: url('check-circle-outline.svg');
 }
 .flash.notice {
  border-color: var(--color-blue);
  background-color: var(--color-blue);
 }
-.flash > div {
-  grid-column: 2;
-}
-/* NOTE: currently flash button inherits some unnecessary styles from generic
- * button. */
-.flash > button {
-  border: none;
-  color: inherit;
+.flash svg {
  cursor: pointer;
-  font-size: 1.4em;
-  font-weight: bold;
-  grid-column: 3;
+  fill: white;
+  height: 2.2em;
  opacity: 0.6;
-  padding: 0.2em 0.4em;
+  padding: 0.4em 0.5em;
+  width: 2.4em;
 }
-.flash > button:hover {
+.flash svg:hover {
  opacity: 1;
 }

-/* TODO: Hover over invalid should work like in measurements (thin vs thick border) */
+
 .labeled-form {
  align-items: center;
  display: grid;
@@ -357,7 +416,7 @@ header {
 .labeled-form label.required {
  font-weight: bold;
 }
-/* Don't style `label.error + input` if case already covered by input:invalid */
+/* Don't style `label.error + input` if case already covered by `input:invalid`. */
 .labeled-form label.error {
  color: var(--color-red);
 }
@@ -371,203 +430,126 @@ header {
 }
 .labeled-form input[type=submit] {
  font-size: 1rem;
-  margin: 1.5em auto 0 auto;
+  margin: 1em auto 0 auto;
  padding: 0.75em;
 }
+.labeled-form .auxiliary {
+  grid-column: 3;
+  /* If more buttons are needed, `grid-row` can be replaced with
+   * `reading-flow: grid-columns` to ensure proper [tabindex] order. */
+  grid-row: 1;
+  height: 100%;
+  padding-block: 0;
+}
+
+.tabular-form table {
+  border: none;
+  border-spacing: 0;
+}
+.tabular-form table td {
+  border: none;
+  padding-inline-start: 0.4em;
+  vertical-align: middle;
+}
+.tabular-form table td:first-child {
+  padding-inline-start: 0;
+}
+.tabular-form table td:last-child {
+  padding-inline-end: 0;
+}
+.tabular-form table :is(form, input, select, textarea):only-child {
+  margin-inline-start: 0;
+}


-/* TODO: remove .items class (?) and make 'form table' work properly */
-table.items {
+.items-table {
  border-spacing: 0;
-  border: solid 1px var(--color-border-gray);
+  border: 1px solid var(--color-border-gray);
  border-radius: 0.25em;
  font-size: 0.85rem;
  text-align: left;
 }
-table:not(:has(tr)) {
-  display: none;
-}
-table.items thead {
+.items-table thead {
  font-size: 0.8rem;
 }
-table.items thead,
-table.items tbody tr:hover {
+.items-table thead,
+.items-table tbody tr:hover {
  background-color: var(--color-focus-gray);
 }
-table.items th {
-  padding-block: 0.75em;
+.items-table th {
+  padding: 0.75em 0 0.75em 1em;
  text-align: center;
 }
-table.items th,
-table.items td {
-  padding-inline: 1em 0;
-}
-/* For <a> to fill <td> completely, we use an ::after pseudoelement. */
-table.items td.link {
-  padding: 0;
-  position: relative;
-}
-table.items td.link a {
-  color: inherit;
-  font: inherit;
-}
-table.items td.link a::after {
-  content: '';
-  inset: 0;
-  position: absolute;
-}
-table.items td:first-child {
-  padding-inline-start: calc(1em + var(--depth) * 0.8em);
-}
-table.items td:has(input, select, textarea) {
-  padding-inline-start: calc(0.6em - 0.9px);
-}
-table.items td:first-child:has(input, select, textarea) {
-  padding-inline-start: calc(0.6em + var(--depth) * 0.8em - 0.9px);
-}
-table.items th:last-child {
+.items-table th:last-child {
  padding-inline-end: 0.4em;
 }
-table.items td:last-child {
+.items-table td {
+  border-top: 1px solid var(--color-border-gray);
+  height: 2.4em;
+  padding: 0.1em 0 0.1em calc(1em + var(--depth) * 0.8em);
+}
+.items-table td:last-child {
  padding-inline-end: 0.1em;
 }
-table.items td {
-  border-top: solid 1px var(--color-border-gray);
-  height: 2.4em;
-  padding-block: 0.1em;
+.items-table :is(form, input, select, textarea):only-child {
+  margin-inline-start: calc(-0.4em - 0.9px);
 }
-table.items .actions {
-  display: flex;
+/* For <a> to fill table cell completely, we use an `::after` pseudoelement. */
+/* TODO: expand to whole row? will require adjusting z-index on inputs/buttons */
+.items-table td:has(> .link) {
+  position: relative;
+}
+.items-table .link::after {
+  content: '';
+  inset: -1px 0 0 0;
+  position: absolute;
+}
+.items-table .flex {
  gap: 0.4em;
  justify-content: end;
 }
-table.items .actions.centered {
-  justify-content: center;
-}
-table.items tr.dropzone {
+.items-table .dropzone {
  position: relative;
 }
-table.items tr.dropzone::after {
+.items-table .dropzone::after {
  content: '';
  inset: 1px 0 0 0;
  position: absolute;
-  outline: dashed 2px var(--color-blue);
+  outline: 2px dashed var(--color-blue);
  outline-offset: -1px;
  z-index: var(--z-index-table-row-outline);
 }
-table.items td.handle {
-  cursor: move;
+.items-table .handle {
+  cursor: grab;
 }
-table.items tr.form td {
+.items-table .form td {
  vertical-align: top;
 }
-
-/* TODO: replace :hover:focus-visible combos with proper LOVE stye order */
-/* TODO: Update table styling: simplify selectors, deduplicate, remove non-font rem. */
-table.items td.link a:hover,
-table.items td.link a:focus-visible,
-table.items td.link a:hover:focus-visible {
-  text-decoration: underline;
-  text-decoration-thickness: 0.05rem;
-  text-underline-offset: 0.2rem;
-}
-table.items td.link a:hover {
-  color: var(--color-blue);
-}
-table.items td.link a:focus-visible {
-  text-decoration-color: var(--color-gray);
-}
-table.items td.link a:hover:focus-visible {
-  color: var(--color-dark-blue);
-}
-
-table.items td:not(:first-child),
+.items-table td:not(:first-child),
 .grayed {
  color: var(--color-table-gray);
-  fill: var(--color-table-gray);
+  fill: var(--color-gray);
 }
-table.items svg {
-  height: 1rem;
-  vertical-align: middle;
-  width: 1rem;
-}
-table.items svg:last-child {
-  height: 1.2rem;
-  width: 1.2rem;
-}
-table.items td.svg {
+.items-table td:has(> svg:only-child) {
  text-align: center;
 }
-table.items td.number {
-  text-align: right;
-}
-table.items .button,
-table.items button,
-table.items input[type=submit] {
-  font-weight: normal;
-  height: 100%;
-  padding: 0.4em;
-}
-table.items input:not([type=submit]):not([type=checkbox]),
-table.items select,
-table.items textarea {
-  padding-block: 0.375em;
-}
-/* TODO: find a way (layers?) to style inputs differently while making sure
- * hover works properly without using :not(:hover) selectors here. */
-table.items .button:not(:hover),
-table.items button:not(:hover),
-table.items input:not(:hover),
-table.items select:not(:hover),
-table.items textarea:not(:hover) {
-  border-color: var(--color-border-gray);
-}
-table.items .button:not(:hover),
-table.items button:not(:hover),
-table.items input[type=submit]:not(:hover),
-table.items select:not(:hover) {
-  color: var(--color-table-gray);
-}
-table.items select:focus-within,
-table.items select:focus-visible {
-  color: black;
-}
-form a[name=cancel] {
-  border-color: var(--color-border-gray);
-  color: var(--color-nav-gray);
-  fill: var(--color-nav-gray);
-}
-form table.items {
-  border: none;
-}
-form table.items td {
-  border: none;
-  text-align: left;
-  vertical-align: middle;
-}
-form table.items td:first-child {
-  color: inherit;
-}


-.centered {
+.center {
  margin: 0 auto;
 }
-.extendedright {
-  margin-right: auto;
-}
 .hexpand {
  width: 100%;
 }
-.hflex {
+.flex {
  display: flex;
  gap: 0.8em;
 }
-.hflex.reverse {
+.flex.reverse {
  flex-direction: row-reverse;
 }
-.hflex.centered {
-  justify-content: center;
+.flex.vertical {
+  flex-direction: column;
 }
 .hint {
  color: var(--color-table-gray);
@@ -575,21 +557,18 @@ form table.items td:first-child {
  font-size: 0.9rem;
  text-align: center;
 }
-.vflex {
-  display: flex;
-  gap: 0.8em;
-  flex-direction: column;
+.hmin50 {
+  min-width: 50%;
 }
-[disabled] {
-/* label:has(input[disabled]) {
- * TODO: disabled checkbox blue square focus removal; disabled label styling;
- * focused label styling (currently only checkbox has focus)
- * */
-  border-color: var(--color-border-gray) !important;
-  color: var(--color-border-gray) !important;
-  cursor: not-allowed;
-  fill: var(--color-border-gray) !important;
-  pointer-events: none;
+.italic {
+  color: var(--color-gray);
+  font-style: italic;
+}
+.ralign {
+  text-align: right;
+}
+.rextend {
+  margin-right: auto;
 }


@@ -601,15 +580,15 @@ summary {
  align-items: center;
  color: var(--color-gray);
  display: flex;
-  gap: 0.2em;
+  gap: 0.4em;
  height: 100%;
  white-space: nowrap;
 }
 summary::before {
-  background-color: #000;
+  background-color: currentColor;
  content: "";
  height: 1em;
-  mask-image: url('pictograms/chevron-down.svg');
+  mask-image: url('chevron-down.svg');
  mask-size: cover;
  width: 1em;
 }
@@ -618,7 +597,7 @@ summary:has(.button) {
  padding-inline-end: 0;
 }
 summary .button {
-  border: solid 1px var(--color-border-gray);
+  border: 1px solid var(--color-border-gray);
  border-radius: inherit;
  border-top-left-radius: 0;
  border-bottom-left-radius: 0;
@@ -629,15 +608,15 @@ summary span {
  width: 100%;
 }
 details[open] summary::before {
-  transform: rotate(180deg);
+  transform: scaleY(-1);
 }
 summary::marker {
  padding-left: 0.25em;
 }
-/* NOTE: use details[open]::details-content once widely available */
+/* NOTE: use `details[open]::details-content` once widely available. */
 details[open] ul {
-  background: white;
-  border: solid 1px var(--color-border-gray);
+  background-color: white;
+  border: 1px solid var(--color-border-gray);
  border-radius: 0.25em;
  box-shadow: 1px 1px 3px var(--color-border-gray);
  margin: -1px 0 0 0;
@@ -659,3 +638,15 @@ li input[type=checkbox] {
 li::marker {
  content: '';
 }
+/*
+ * TODO:
+ * * disable <label> containing disabled checkbox: `label:has(input[disabled])`,
+ * * disabled label styling,
+ * * focused label styling (currently only checkbox has focus),
+ * * disabled checkbox blue square focus removal.
+ * */
+
+#measurement_form {
+  min-width: 66%;
+  width: max-content;
+}
@@ -9,7 +9,6 @@ class ApplicationController < ActionController::Base
  helper_method :current_user_disguised?
  helper_method :current_tab

-  before_action :redirect_to_setup_if_needed
  before_action :authenticate_user!

  class AccessForbidden < StandardError; end
@@ -26,6 +25,18 @@ class ApplicationController < ActionController::Base
  #   Turbo will reload 2nd time with HTML format and flashes will be lost.
  rescue_from *ActionDispatch::ExceptionWrapper.rescue_responses.keys, with: :rescue_turbo

+  # Required by #respond_with (gem `responders`) used by Devise controllers.
+  respond_to :html, :turbo_stream
+
+  def after_sign_in_path_for(resource)
+    # TODO: allow setting path per-user or save last path in session and restore
+    units_path
+  end
+
+  def after_sign_out_path_for(resource)
+    new_user_session_path
+  end
+
  protected

  def current_user_disguised?
@@ -44,19 +55,9 @@ class ApplicationController < ActionController::Base

  private

-  # Redirect to the web setup wizard when the application has not yet been
-  # initialised (i.e. no admin account exists in the database).
-  def redirect_to_setup_if_needed
-    return if User.exists?(status: :admin)
-    redirect_to new_setup_path
-  rescue ActiveRecord::StatementInvalid
-    # Tables may not exist yet (migrations not run). Fall through and let the
-    # normal request handling surface a meaningful error.
-  end
-
-  def render_no_content(record)
-    helpers.render_errors(record)
-    render html: nil, layout: true
+  def render_errors(record)
+    target = record.new_record? ? [:new, record.parent || record.class] : [:edit, record]
+    render 'errors', assigns: {record: record, target: target}
  end

  def rescue_turbo(exception)
@@ -17,7 +17,7 @@ class Default::UnitsController < ApplicationController

  def import
    @unit.port!(current_user)
-    flash.now[:notice] = t('.success', unit: @unit)
+    flash.now.notice = t('.success', unit: @unit)
  ensure
    run_and_render :index
  end
@@ -30,14 +30,14 @@ class Default::UnitsController < ApplicationController

  def export
    @unit.port!(nil)
-    flash.now[:notice] = t('.success', unit: @unit)
+    flash.now.notice = t('.success', unit: @unit)
  ensure
    run_and_render :index
  end

  def destroy
    @unit.destroy!
-    flash.now[:notice] = t('.success', unit: @unit)
+    flash.now.notice = t('.success', unit: @unit)
  ensure
    run_and_render :index
  end
@@ -21,7 +21,7 @@ class QuantitiesController < ApplicationController
    if @quantity.save
      @before = @quantity.successive
      @ancestors = @quantity.ancestors
-      flash.now[:notice] = t('.success', quantity: @quantity)
+      flash.now.notice = t('.success', quantity: @quantity)
    else
      render :new
    end
@@ -33,7 +33,7 @@ class QuantitiesController < ApplicationController
  def update
    if @quantity.update(quantity_params.except(:parent_id))
      @ancestors = @quantity.ancestors
-      flash.now[:notice] = t('.success', quantity: @quantity)
+      flash.now.notice = t('.success', quantity: @quantity)
    else
      render :edit
    end
@@ -43,18 +43,21 @@ class QuantitiesController < ApplicationController
    permitted = params.require(:quantity).permit(:parent_id)
    @previous_ancestors = @quantity.ancestors

-    # Until UI blocks all disallowed reparents, render error messages if present
-    render_no_content(@quantity) unless @quantity.update(permitted)
-
+    if @quantity.update(permitted)
      @ancestors = @quantity.ancestors
      @self_and_progenies = @quantity.with_progenies
      @before = @self_and_progenies.last.successive
+    else
+      # Until UI blocks all disallowed reparents, render error messages if present.
+      flash.now.alert = @quantity.errors.full_messages
+      render :nothing
+    end
  end

  def destroy
    @quantity.destroy!
    @ancestors = @quantity.ancestors
-    flash.now[:notice] = t('.success', quantity: @quantity)
+    flash.now.notice = t('.success', quantity: @quantity)
  end

  private
@@ -6,7 +6,7 @@ class ReadoutsController < ApplicationController
  def new
    @quantities -= @prev_quantities
    # TODO: raise ParameterInvalid if new_quantities.empty?
-    @readouts = current_user.readouts.build(@quantities.map { |q| {quantity: q} })
+    @readouts = @quantities.map { |q| q.readouts.build }

    @user_units = current_user.units.ordered

@@ -1,39 +0,0 @@
-class RegistrationsController < Devise::RegistrationsController
-  before_action :authenticate_user!, only: [:edit, :update, :destroy]
-
-  def destroy
-    if current_user.sole_admin?
-      redirect_back fallback_location: edit_user_registration_path,
-        alert: t(".sole_admin")
-      return
-    end
-    super
-  end
-
-  protected
-
-  def build_resource(hash = {})
-    super
-    # Skip the email confirmation step when the admin has enabled this option
-    # via the web setup wizard (stored as the "skip_email_confirmation" Setting).
-    # The account becomes active immediately so the user can sign in right after
-    # registering.
-    resource.skip_confirmation! if Setting.get("skip_email_confirmation") == "true"
-  end
-
-  def update_resource(resource, params)
-    # Based on update_with_password()
-    if params[:password].blank?
-      params.delete(:password)
-      params.delete(:password_confirmation) if params[:password_confirmation].blank?
-    end
-
-    result = resource.update(params)
-    resource.clean_up_passwords
-    result
-  end
-
-  def after_inactive_sign_up_path_for(resource)
-    new_user_session_path
-  end
-end
@@ -1,59 +0,0 @@
-# Handles the one-time web-based installation wizard.
-#
-# The wizard is only accessible when no admin account exists yet.  Once an
-# admin has been created the controller redirects every request to the root
-# path, so it can never be used to overwrite an existing installation.
-class SetupController < ActionController::Base
-  # Use the full application layout (header, flash, etc.) so the page looks
-  # consistent with the rest of the site.
-  layout "application"
-
-  before_action :redirect_if_installed
-
-  def new
-  end
-
-  def create
-    email    = params[:admin_email].to_s.strip
-    password = params[:admin_password].to_s
-    confirm  = params[:admin_password_confirmation].to_s
-
-    errors = []
-    errors << t(".email_blank")    if email.blank?
-    errors << t(".password_blank") if password.blank?
-    errors << t(".password_mismatch") if password != confirm
-
-    if errors.any?
-      flash.now[:alert] = errors.join("  ")
-      return render :new, status: :unprocessable_entity
-    end
-
-    user = User.new(email: email, password: password, status: :admin)
-    user.skip_confirmation!
-
-    unless user.save
-      flash.now[:alert] = user.errors.full_messages.join("  ")
-      return render :new, status: :unprocessable_entity
-    end
-
-    # Persist runtime settings chosen during setup.
-    Setting.set("skip_email_confirmation",
-                params[:skip_email_confirmation] == "1")
-
-    # Optionally seed the built-in default units.
-    if params[:seed_units] == "1"
-      load Rails.root.join("db/seeds/units.rb")
-    end
-
-    redirect_to new_user_session_path, notice: t(".success")
-  end
-
-  private
-
-  def redirect_if_installed
-    redirect_to root_path if User.exists?(status: :admin)
-  rescue ActiveRecord::StatementInvalid
-    # Tables are not yet migrated — stay on the setup page so the user sees a
-    # meaningful error rather than a crash.
-  end
-end
@@ -1,10 +1,9 @@
 class UnitsController < ApplicationController
-  before_action only: :new do
-    find_unit if params[:id].present?
-  end
-  before_action :find_unit, only: [:edit, :update, :rebase, :destroy]
+  before_action ->{ @unit = current_user.units.find_by!(id: params[:id]) },
+    only: [:new, :edit, :update, :rebase, :destroy],
+    unless: ->{ action_name == "new" && params[:id].nil? }

-  before_action except: :index do
+  before_action except: [:index] do
    raise AccessForbidden unless current_user.at_least(:active)
  end

@@ -17,12 +16,12 @@ class UnitsController < ApplicationController
  end

  def create
-    @unit = current_user.units.new(unit_params)
+    @unit = current_user.units.new(params.expect(Unit::ATTRIBUTES))
    if @unit.save
      @before = @unit.successive
-      flash.now[:notice] = t('.success', unit: @unit)
+      flash.now.notice = t('.success', unit: @unit)
    else
-      render :new
+      render_errors @unit
    end
  end

@@ -30,40 +29,32 @@ class UnitsController < ApplicationController
  end

  def update
-    if @unit.update(unit_params.except(:base_id))
-      flash.now[:notice] = t('.success', unit: @unit)
+    if @unit.update(params.except(:base_id).expect(Unit::ATTRIBUTES))
+      flash.now.notice = t('.success', unit: @unit)
    else
-      render :edit
+      render_errors @unit
    end
  end

  # TODO: Avoid double table width change by first un-hiding table header,
  # then displaying index, e.g. by re-displaying header in index
  def rebase
-    permitted = params.require(:unit).permit(:base_id)
-    permitted.merge!(multiplier: 1) if permitted[:base_id].blank? && @unit.multiplier != 1
+    unit_params = params.expect(unit: :base_id)
+    unit_params.merge!(multiplier: 1.0) if unit_params[:base_id].blank?

    @previous_base = @unit.base
-    @unit.update!(permitted)
+    @unit.update!(unit_params)

    @before = @unit.successive
    if @unit.multiplier_previously_changed?
-      flash.now[:notice] = t(".multiplier_reset", unit: @unit)
+      flash.now.notice = t(".multiplier_reset", unit: @unit)
    end
  end

  def destroy
    @unit.destroy!
-    flash.now[:notice] = t('.success', unit: @unit)
+    flash.now.notice = t('.success', unit: @unit)
  end

  private
-
-  def unit_params
-    params.require(:unit).permit(Unit::ATTRIBUTES)
-  end
-
-  def find_unit
-    @unit = current_user.units.find_by!(id: params[:id])
-  end
 end
@@ -0,0 +1,24 @@
+class User::ProfilesController < Devise::RegistrationsController
+  def destroy
+    # TODO: Disallow/disable deletion for last admin account; update :edit view
+    super
+  end
+
+  protected
+
+  def update_resource(resource, params)
+    # Based on update_with_password()
+    if params[:password].blank?
+      params.delete(:password)
+      params.delete(:password_confirmation) if params[:password_confirmation].blank?
+    end
+
+    result = resource.update(params)
+    resource.clean_up_passwords
+    result
+  end
+
+  def after_inactive_sign_up_path_for(resource)
+    new_user_session_path
+  end
+end
@@ -37,7 +37,7 @@ class UsersController < ApplicationController
  end

  # NOTE: limited actions availabe to :admin by design. Users are meant to
-  # manage their accounts by themselves through registrations. :admin
+  # manage their accounts by themselves through profiles. :admin
  # is allowed to sign-in (disguise) as user and make changes from there.

  protected
@@ -12,6 +12,12 @@ module ApplicationHelper
      labeled_field_for(method, options) { super }
    end

+    def submit(value = nil, options = {})
+      value, options = nil, value if value.is_a?(Hash)
+      options[:class] = @template.class_names('button', options[:class])
+      super
+    end
+
    private

    def labeled_field_for(method, options)
@@ -34,7 +40,7 @@ module ApplicationHelper
      #   controller.action.* => helpers.label.model.* => activerecord.attributes.model.*
      # First 2 levels are translated recursively.
      label(method, class: classes) do |builder|
-        translation = I18n.config.with(**handler) { deep_translate(method, **options) }
+        translation = I18n.with(**handler) { deep_translate(method, **options) }
        translation.presence || "#{builder.translation}:"
      end
    end
@@ -72,13 +78,8 @@ module ApplicationHelper
  end

  def labeled_form_for(record, options = {}, &block)
-    extra_options = {builder: LabeledFormBuilder,
-                     data: {turbo: false},
-                     html: {class: 'labeled-form'}}
-    options = options.deep_merge(extra_options) do |key, left, right|
-      key == :class ? class_names(left, right) : right
-    end
-    form_for(record, **options, &block)
+    extra_options = {builder: LabeledFormBuilder, html: {class: 'labeled-form'}}
+    form_for(record, **merge_attributes(options, extra_options), &block)
  end

  class TabularFormBuilder < ActionView::Helpers::FormBuilder
@@ -90,31 +91,32 @@ module ApplicationHelper
    [:text_field, :password_field, :text_area].each do |selector|
      class_eval <<-RUBY_EVAL, __FILE__, __LINE__ + 1
        def #{selector}(method, options = {})
-          options[:maxlength] ||= object.class.type_for_attribute(method).limit
-          if object.errors.include?(method)
-            options[:pattern] = except_pattern(object.public_send(method), options[:pattern])
-          end
+          options[:maxlength] ||= object.type_for_attribute(method).limit
          super
        end
      RUBY_EVAL
    end

    def number_field(method, options = {})
-      attr_type = object.type_for_attribute(method)
-      if attr_type.type == :decimal
-        options[:value] = object.public_send(method)&.to_scientific
-        options[:step] ||= BigDecimal(10).power(-attr_type.scale)
-        options[:max] ||= BigDecimal(10).power(attr_type.precision - attr_type.scale) -
-          options[:step]
-        options[:min] = options[:min] == :step ? options[:step] : options[:min]
-        options[:min] ||= -options[:max]
+      case object.type_for_attribute(method).type
+      when :float, :double
+        options[:min] ||= Float::MIN_15.to_scientific
+        options[:max] ||= Float::MAX_15.to_scientific
+        options[:oninput] = 'numberValidate(event)'
+        options[:size] ||= 6
+        options[:step] ||= :any
+        options[:value] = object.public_send("#{method}_before_type_cast")
      end
      super
    end

    def button(value = nil, options = {}, &block)
-      # button does not use #objectify_options
-      options.merge!(@options.slice(:form))
+      # #button does not use #objectify_options/@default_options
+      value, options = nil, value if value.is_a?(Hash)
+      options = options.merge(
+        @default_options.slice(:form),
+        class: @template.class_names('button', options[:class])
+      )
      super
    end

@@ -122,11 +124,7 @@ module ApplicationHelper

    def submit_default_value
      svg_name = object ? (object.persisted? ? 'update' : 'plus-circle-outline') : ''
-      @template.svg_tag("pictograms/#{svg_name}", super)
-    end
-
-    def except_pattern(value, pattern = nil)
-      "(?!^#{Regexp.escape(value)}$)" + (pattern || ".*")
+      @template.svg_tag(svg_name, super)
    end
  end

@@ -135,21 +133,21 @@ module ApplicationHelper
    # [autofocus].  Otherwise IDs are not unique when multiple forms are open
    # and the first input gets focus.
    record_object, options = nil, record_object if record_object.is_a?(Hash)
-    options.merge!(builder: TabularFormBuilder, skip_default_ids: true)
-    # TODO: set error message with setCustomValidity instead of rendering to flash?
-    render_errors(record_object || record_name)
+    extra_options = {builder: TabularFormBuilder, skip_default_ids: true}
+    options = merge_attributes(options, extra_options)
    fields_for(record_name, record_object, **options, &block)
  end

  def tabular_form_with(**options, &block)
-    options = options.deep_merge(builder: TabularFormBuilder,
-                                 html: {autocomplete: 'off'})
-    form_with(**options, &block)
+    extra_options = {builder: TabularFormBuilder, class: 'tabular-form',
+                     html: {autocomplete: 'off'}}
+    form_with(**merge_attributes(options, extra_options), &block)
  end

  def svg_tag(source, label = nil, options = {})
-    svg_tag = tag.svg(options) do
-      tag.use(href: "#{image_path(source + ".svg")}#icon")
+    label, options = nil, label if label.is_a? Hash
+    svg_tag = tag.svg(**options) do
+      tag.use(href: image_path("#{source}.svg") + '#icon')
    end
    label.blank? ? svg_tag : svg_tag + tag.span(label)
  end
@@ -159,12 +157,13 @@ module ApplicationHelper
      ['measurements', 'scale-bathroom', :restricted],
      ['quantities', 'axis-arrow', :restricted, 'right'],
      ['units', 'weight-gram', :restricted],
+      # TODO: display users tab only if >1 user present; sole_user?/sole_admin?
      ['users', 'account-multiple-outline', :admin],
    ]

    menu_tabs.map do |name, image, status, css_class|
      if current_user.at_least(status)
-        link_to svg_tag("pictograms/#{image}", t("#{name}.navigation")),
+        link_to svg_tag(image, t("#{name}.navigation")),
          {controller: "/#{name}", action: "index"},
          class: class_names('tab', css_class, active: name == current_tab)
      end
@@ -196,27 +195,19 @@ module ApplicationHelper

  def image_link_to_unless_current(name, image = nil, options = nil, html_options = {})
    name, html_options = link_or_button_options(:link, name, image, html_options)
-    # NOTE: Starting from Rails 8.1.0, below condition can be replaced with:
-    #   current_page?(options, method: [:get, :post])
-    if request.path == url_for(options)
+    if current_page?(options, method: [:get, :post])
      html_options = html_options.deep_merge DISABLED_ATTRIBUTES
    end
    link_to name, options, html_options
  end

-  def render_errors(records)
-    # Conversion of flash to Array only required because of Devise
-    flash[:alert] = Array(flash[:alert])
-    Array(records).each { |record| flash[:alert] += record.errors.full_messages }
-  end
-
-  def render_flash_messages
+  def render_flash
    flash.map do |entry, messages|
-      # Conversion of flash to Array only required because of Devise
+      # Conversion of flash to Array only required because of Devise.
      Array(messages).map do |message|
        tag.div class: "flash #{entry}" do
-          tag.div(sanitize(message)) + tag.button(sanitize("&times;"), tabindex: -1,
-                                                  onclick: "this.parentElement.remove();")
+          tag.span(sanitize(message)) +
+            svg_tag('close-outline', {onclick: "this.parentElement.remove()"})
        end
      end
    end.join.html_safe
@@ -248,8 +239,15 @@ module ApplicationHelper
    link_is_local = html_options[:onclick] || html_options.dig(:data, :turbo_stream)
    name = name.to_s
    name += '...' if type == :link && !link_is_local
-    name = svg_tag("pictograms/#{image}", name) if image
+    name = svg_tag(image, name) if image

    [name, html_options]
  end
+
+  # Like Hash#deep_merge, but aware of HTML attributes.
+  def merge_attributes(left, right)
+    left.deep_merge(right) do |key, lvalue, rvalue|
+      key == :class ? class_names(lvalue, rvalue) : rvalue
+    end
+  end
 end
@@ -1,9 +1,9 @@
 module QuantitiesHelper
-  def quantities_check_boxes
+  def quantities_check_boxes(quantities)
    # Closing <details> on focusout event depends on relatedTarget for internal
    # actions being non-null. To ensure this, all top-layer elements of
    # ::details-content must accept focus, e.g. <label> needs tabindex="-1" */
-    collection_check_boxes(nil, :quantity, @quantities, :id, :to_s_with_depth,
+    collection_check_boxes(nil, :quantity, quantities, :id, :to_s_with_depth,
                           include_hidden: false) do |b|
      content_tag :li, b.label(tabindex: -1) { b.check_box + b.text }
    end
@@ -1,14 +1,18 @@
 // Configure your import map in config/importmap.rb. Read more:
 // https://github.com/rails/importmap-rails
 import "@hotwired/turbo-rails"
+// TODO: access `data-` attributes through
+// `keyname in`/`dataset.keyname`/`delete dataset.keyname`


-/* Hide page before loaded for testing purposes */
+// Show page if hidden for testing purposes.
 function showPage(event) {
  document.documentElement.style.visibility="visible"
 }
 document.addEventListener('turbo:load', showPage)

+
+// <details> event handlers.
 function detailsChange(event) {
  var target = event.currentTarget
  var count = target.querySelectorAll('input:checked:not([disabled])').length
@@ -24,7 +28,7 @@ function detailsChange(event) {
 }
 window.detailsChange = detailsChange

-/* Close open <details> when focus lost */
+// Close open <details> when focus lost.
 function detailsClose(event) {
  if (!event.relatedTarget ||
      event.relatedTarget.closest("details") != event.currentTarget) {
@@ -38,27 +42,71 @@ window.detailsObserver = new MutationObserver((mutations) => {
 });


-/* Turbo stream actions */
+// Validation of multiple-submit forms with different field requirements.
+function formValidate(event) {
+  var id = event.submitter.getAttribute("data-validate")
+  if (!id) return;
+
+  var input = document.getElementById(id)
+  if (!input.checkValidity()) {
+    input.reportValidity()
+    event.preventDefault()
+  }
+}
+window.formValidate = formValidate
+
+// Pattern for number precision verification. Should accept all number formats
+// accepted by Kernel#Float. Lookahead checks the number of significant digits
+// in mantissa, following expression makes sure there is only one dot.
+const numberRegExp = /^\-?(?=(?:\.?0)*(?:\.?\d){1,15}?(?:\.?0)*\.?(?:[eE]|$))(?<mantissa>\d*\.?\d+|\d+\.)(?:[eE]\-?\d{1,3})?$/
+
+// Validation of input[type=number] value precision.
+function numberValidate(event) {
+  var input = event.target
+
+  input.setCustomValidity("")
+  if (!input.validity.valid) return
+
+  var match = numberRegExp.exec(input.value)
+  if (!match ||
+      (parseFloat(input.value) == 0.0 && match.groups['mantissa'].match(/[1-9]/))) {
+    // TODO: move message to locales
+    input.setCustomValidity("Please select a value within range of double precision floating-point format.")
+  }
+}
+window.numberValidate = numberValidate
+
+
+// Turbo stream actions.
+const FORM_CONTROLS = ["BUTTON", "FIELDSET", "INPUT", "OPTGROUP", "OPTION", "SELECT",
+                       "TEXTAREA"]
 Turbo.StreamElement.prototype.disableElement = function(element) {
+  if (FORM_CONTROLS.includes(element.tagName)) {
    element.setAttribute("disabled", "disabled")
+  } else {
    element.setAttribute("aria-disabled", "true")
+    // NOTE: tabindex should not be disabled?
    element.setAttribute("tabindex", "-1")
  }
+}
 Turbo.StreamActions.disable = function() {
  this.targetElements.forEach((e) => { this.disableElement(e) })
 }

 Turbo.StreamElement.prototype.enableElement = function(element) {
+  if (FORM_CONTROLS.includes(element.tagName)) {
    element.removeAttribute("disabled")
+  } else {
    element.removeAttribute("aria-disabled")
-    // Assume 'tabindex' is not used explicitly, so removing it is safe
+    // Assume 'tabindex' is not used explicitly, so removing it is safe.
    element.removeAttribute("tabindex")
  }
+}
 Turbo.StreamActions.enable = function() {
  this.targetElements.forEach((e) => { this.enableElement(e) })
 }

-/* TODO: change to visibility = collapse to avoid width change? */
+// TODO: change to visibility = collapse to avoid width change?
 Turbo.StreamActions.hide = function() {
  this.targetElements.forEach((e) => { e.style.display = "none" })
 }
@@ -75,7 +123,7 @@ Turbo.StreamActions.collapse = function() {

 Turbo.StreamActions.close_form = function() {
  this.targetElements.forEach((e) => {
-    /* Move focus if there's no focus or focus inside form being closed */
+    // Move focus if there's no focus or focus inside form being closed.
    const focused = document.activeElement
    if (!focused || (focused == document.body) || e.contains(focused)) {
      let nextForm = e.parentElement.querySelector(`#${e.id} ~ tr:has([autofocus])`)
@@ -100,6 +148,35 @@ Turbo.StreamActions.unselect = function() {
  })
 }

+Turbo.StreamActions.validate = function() {
+  this.targetElements.forEach((form) => {
+    this.templateContent.querySelectorAll("span").forEach((span) => {
+      var control = document.querySelector(
+        `[form="${form.id}"][name="${span.dataset.name}"]`
+      )
+      control.setCustomValidity(span.textContent)
+      // Add event listener in capture phase to clear custom validity before
+      // `[oninput]` or any other bubble phase handler is invoked.
+      //   https://www.quirksmode.org/js/events_order.html
+      // TODO: keep invalidating current value whenever user re-enters it. Store
+      // invalid value and validation message in `[data-invalid-message/value]`
+      // and check input value on "input" event (below) (using `[pattern]` may not
+      // be suitable due to inability to customize validtion message; also
+      // pattern may be used for other, conflicting purposes).
+      // After user executes any other action (while form is open), remove `[data-]`
+      // attributes and custom validation, as value may no longer be invalid.
+      control.addEventListener(
+        "input",
+        function(event) { event.target.setCustomValidity("") },
+        {capture: true, once: true}
+      )
+    })
+    form.reportValidity()
+  })
+}
+
+
+// Keyboard event processing handlers.
 function formProcessKey(event) {
  switch (event.key) {
    case "Escape":
@@ -126,7 +203,7 @@ function detailsProcessKey(event) {
      var button = event.currentTarget.querySelector("button:not([disabled])")
      if (button) {
        button.click()
-        // Autofocus won't be respected unless target is blurred
+        // Autofocus won't be respected unless target is blurred.
        event.target.blur()
        event.preventDefault()
        event.stopPropagation()
@@ -136,7 +213,8 @@ function detailsProcessKey(event) {
 }
 window.detailsProcessKey = detailsProcessKey;

-/* Items table drag and drop support */
+
+// Items table drag and drop support.
 var lastEnterTime
 function dragStart(event) {
  lastEnterTime = event.timeStamp
@@ -146,7 +224,8 @@ function dragStart(event) {
  })
  event.dataTransfer.setData("text/plain", row.getAttribute("data-drag-path"))
  var rowRectangle = row.getBoundingClientRect()
-  event.dataTransfer.setDragImage(row, event.x - rowRectangle.left, event.y - rowRectangle.top)
+  event.dataTransfer.setDragImage(row, event.x - rowRectangle.left,
+                                  event.y - rowRectangle.top)
  event.dataTransfer.dropEffect = "move"
 }
 window.dragStart = dragStart
@@ -156,9 +235,11 @@ window.dragStart = dragStart
 *   * Enter/Leave events at the same timeStamp may not be logically ordered
 *     (e.g. E -> E -> L, not E -> L -> E),
 *   * not every Enter event has corresponding Leave event, especially during
-*     rapid pointer moves
+*     rapid pointer moves.
 * NOTE: sometimes Leave is not emitted when pointer goes fast over table
 * and outside. This should probably be fixed in browser, than patched here.
+* TODO: replace Leave table with Enter document?
+*   https://www.quirksmode.org/js/events_order.html#link4
 */
 function dragEnter(event) {
  //console.log(event.timeStamp + " " + event.type + ": " + event.currentTarget.id)
@@ -176,7 +257,7 @@ window.dragOver = dragOver

 function dragLeave(event) {
  //console.log(event.timeStamp + " " + event.type + ": " + event.currentTarget.id)
-  // Leave has been accounted for by Enter at the same timestamp, processed earlier
+  // Leave has been accounted for by Enter at the same timestamp, processed earlier.
  if (event.timeStamp <= lastEnterTime) return
  event.currentTarget.closest("table").querySelectorAll(".dropzone").forEach((tr) => {
    tr.classList.remove("dropzone")
@@ -1,4 +1,6 @@
 class ApplicationRecord < ActiveRecord::Base
+  include ActionView::Helpers::TagHelper
+
  class << self
    # Cached attribute has non-user assignable value calculated from other
    # attributes' values on create/update. This simplifies and speeds up
@@ -0,0 +1,3 @@
+class Note < ApplicationRecord
+  ATTRIBUTES = [:text]
+end
@@ -6,17 +6,19 @@ class Quantity < ApplicationRecord
  belongs_to :parent, optional: true, class_name: "Quantity"
  has_many :subquantities, ->{ order(:name) }, class_name: "Quantity",
    inverse_of: :parent, dependent: :restrict_with_error
+  has_many :readouts, dependent: :restrict_with_error

  validate if: ->{ parent.present? } do
    errors.add(:parent, :user_mismatch) unless user_id == parent.user_id
    errors.add(:parent, :self_reference) if id == parent_id
  end
  validate if: ->{ parent.present? }, on: :update do
+    # TODO: should not report error for (parent == self)
    errors.add(:parent, :descendant_reference) if ancestor_of?(parent)
  end
  validates :name, presence: true, uniqueness: {scope: [:user_id, :parent_id]},
-    length: {maximum: type_for_attribute(:name).limit || Float::INFINITY}
-  validates :description, length: {maximum: type_for_attribute(:description).limit || Float::INFINITY}
+    length: {maximum: type_for_attribute(:name).limit}
+  validates :description, length: {maximum: type_for_attribute(:description).limit}

  # Update :depths of progenies after parent change
  before_save if: :parent_changed? do
@@ -97,7 +99,7 @@ class Quantity < ApplicationRecord
  }

  def to_s
-    name
+    tag.pre name
  end

  def to_s_with_depth
@@ -4,4 +4,6 @@ class Readout < ApplicationRecord
  belongs_to :user
  belongs_to :quantity
  belongs_to :unit
+
+  # TODO: validate quantity.user_id == unit.user_id != NULL
 end
@@ -1,20 +0,0 @@
-# Key-value store for runtime application settings that are configured through
-# the web setup wizard (or updated by an administrator) rather than hard-coded
-# in application.rb.
-#
-# Known keys:
-#   skip_email_confirmation  – "true"/"false", mirrors the homonymous option
-#                              that was previously in application.rb.
-class Setting < ApplicationRecord
-  validates :key, presence: true, uniqueness: true
-
-  # Return the string value stored for +key+, or +default+ when absent.
-  def self.get(key, default: nil)
-    find_by(key: key)&.value || default
-  end
-
-  # Persist +value+ for +key+, creating the record if it does not yet exist.
-  def self.set(key, value)
-    find_or_initialize_by(key: key).update!(value: value.to_s)
-  end
-end
@@ -1,8 +1,9 @@
 class Unit < ApplicationRecord
-  ATTRIBUTES = [:symbol, :description, :multiplier, :base_id]
+  ATTRIBUTES = {unit: [:symbol, :description, :multiplier, :base_id]}

  belongs_to :user, optional: true
  belongs_to :base, optional: true, class_name: "Unit"
+  alias_method :parent, :base
  has_many :subunits, class_name: "Unit", inverse_of: :base,
    dependent: :restrict_with_error

@@ -12,10 +13,10 @@ class Unit < ApplicationRecord
    errors.add(:base, :multilevel_nesting) if base.base_id?
  end
  validates :symbol, presence: true, uniqueness: {scope: :user_id},
-    length: {maximum: type_for_attribute(:symbol).limit || Float::INFINITY}
-  validates :description, length: {maximum: type_for_attribute(:description).limit || Float::INFINITY}
-  validates :multiplier, numericality: {equal_to: 1}, unless: :base
-  validates :multiplier, numericality: {greater_than: 0, precision: true, scale: true}, if: :base
+    length: {maximum: type_for_attribute(:symbol).limit}
+  validates :description, length: {maximum: type_for_attribute(:description).limit}
+  validates :multiplier, numericality: {equal_to: 1.0}, unless: :base
+  validates :multiplier, numericality: {greater_than: 0.0}, if: :base

  scope :defaults, ->{ where(user: nil) }
  scope :defaults_diff, ->{
@@ -26,8 +27,10 @@ class Unit < ApplicationRecord
    other_bases_units = arel_table.alias('other_bases_units')
    sub_units = arel_table.alias('sub_units')

+    # TODO: move inner 'with' CTE to outer 'with recursive' - it can have multiple
+    # CTEs, even non recursive ones.
    Unit.with_recursive(actionable_units: [
-      self.or(Unit.defaults).left_joins(:base)
+      Unit.with(units: self.or(Unit.defaults)).left_joins(:base)
        .where.not(
          # Exclude Units that are/have default counterpart
          Arel::SelectManager.new.project(1).from(other_units)
@@ -63,14 +66,8 @@ class Unit < ApplicationRecord
        ),
      # Fill base Units to display proper hierarchy. Duplicates will be removed
      # by final group() - can't be deduplicated with UNION due to 'portable' field.
-      # Use ActiveRecord::Relation (not a raw SelectManager) so the SQLite Arel
-      # visitor does not wrap it in parentheses inside the UNION ALL CTE body.
-      Unit.joins(
-        arel_table.create_join(
-          actionable_units,
-          arel_table.create_on(actionable_units[:base_id].eq(arel_table[:id]))
-        )
-      ).select(arel_table[Arel.star], Arel::Nodes.build_quoted(nil).as('portable'))
+      arel_table.join(actionable_units).on(actionable_units[:base_id].eq(arel_table[:id]))
+        .project(arel_table[Arel.star], Arel::Nodes.build_quoted(nil).as('portable'))
    ]).select(units: [:base_id, :symbol])
      .select(
        units[:id].minimum.as('id'), # can be ANY_VALUE()
@@ -78,18 +75,16 @@ class Unit < ApplicationRecord
        Arel::Nodes.build_quoted(1).as('multiplier'), # disregard multiplier when sorting
        units[:portable].minimum.as('portable')
      )
-      .from(units).group(units[:base_id], units[:symbol])
+      .from(units).group(:base_id, :symbol)
  }
  scope :ordered, ->{
-    left_outer_joins(:base).order(ordering)
-  }
-
-  def self.ordering
-    [arel_table.coalesce(Arel::Table.new(:bases_units)[:symbol], arel_table[:symbol]),
+    left_outer_joins(:base).order([
+      arel_table.coalesce(Arel::Table.new(:bases_units)[:symbol], arel_table[:symbol]),
      arel_table[:base_id].not_eq(nil),
      arel_table[:multiplier],
-     arel_table[:symbol]]
-  end
+      arel_table[:symbol]
+    ])
+  }

  before_destroy do
    # TODO: disallow destruction if any object depends on this unit
@@ -97,7 +92,7 @@ class Unit < ApplicationRecord
  end

  def to_s
-    symbol
+    tag.pre symbol
  end

  def movable?
@@ -108,21 +103,21 @@ class Unit < ApplicationRecord
    user_id.nil?
  end

-  # Should only by invoked on Units returned from #defaults_diff which are #portable
+  # Should only by invoked on Units returned from #defaults_diff which are #portable.
  def port!(recipient)
    recipient_base = base && Unit.find_by!(symbol: base.symbol, user: recipient)
-    params = slice(ATTRIBUTES - [:symbol, :base_id])
+    params = slice(ATTRIBUTES[:unit] - [:symbol, :base_id])
    Unit.find_or_initialize_by(user: recipient, symbol: symbol)
      .update!(base: recipient_base, **params)
  end

  def successive
    units = Unit.arel_table
-    lead = Arel::Nodes::NamedFunction.new('LAG', [units[:id]])
-    window = Arel::Nodes::Window.new.order(*Unit.ordering)
-    lag_id = lead.over(window).as('lag_id')
-    Unit.with(
-      units: user.units.left_outer_joins(:base).select(units[Arel.star], lag_id)
-    ).where(units[:lag_id].eq(id)).first
+    Unit.with(units_with_lag: user.units.left_outer_joins(:base).select(
+      units[Arel.star],
+      Arel::Nodes::NamedFunction.new('LAG', [units[:id]])
+        .over(Arel::Nodes::Window.new.order(Unit.ordered.order_values)).as('lag_id')
+    )).from(Arel::Table.new(:units_with_lag).as(:units))
+      .where(units[:lag_id].eq(id)).take
  end
 end
@@ -29,11 +29,4 @@ class User < ApplicationRecord
  def at_least(status)
    User.statuses[self.status] >= User.statuses[status]
  end
-
-  # Returns true when this user is the only admin account in the system.
-  # Used to block actions that would leave the application without an admin
-  # (account deletion, status demotion).
-  def sole_admin?
-    admin? && !User.admin.where.not(id: id).exists?
-  end
 end
@@ -0,0 +1,7 @@
+<%= turbo_stream.validate dom_target(*@target, :form) do %>
+  <% @record.errors.attribute_names.map do |attr| %>
+    <%= tag.span data: {name: field_name(dom_class(@record), attr)} do %>
+      <%- @record.errors.full_messages_for(attr).map { |m| m + '.' }.join(' ') %>
+    <% end %>
+  <% end %>
+<% end %>
@@ -5,7 +5,7 @@
  </td>

  <% if current_user.at_least(:active) %>
-    <td class="actions">
+    <td class="flex">
      <% unless unit.portable.nil? %>
        <% if unit.default? %>
          <%= image_button_to_if unit.portable?, t('.import'), 'download-outline',
@@ -8,7 +8,7 @@
    class: 'tools-area' %>
 </div>

-<table class="main-area items">
+<table class="main-area items-table">
  <thead>
    <tr>
      <th><%= Unit.human_attribute_name(:symbol) %></th>
@@ -23,10 +23,10 @@
  </head>

  <body>
-    <header class="hflex">
+    <header class="flex">
      <%= image_link_to t(".source_code"), "code-braces", source_code_url %>
      <%= image_link_to t(".issue_tracker"), "bug-outline", issue_tracker_url,
-            class: "extendedright" %>
+        class: "rextend" %>
      <% if user_signed_in? %>
        <%= image_link_to_unless_current(current_user, "account-wrench-outline",
          edit_user_registration_path) %>
@@ -44,7 +44,7 @@
    </header>

    <div id="flashes">
-      <%= render_flash_messages %>
+      <%= render_flash %>
    </div>

    <%# Allows overwriting/clearing navigation menu for some views %>
@@ -1,6 +1,6 @@
-<%= yield %>
-
-<%# Some views may convert ActiveRecord errors to flashes, render at the end. %>
+<%# Render unconditionally, to clear previous flash messages. %>
 <%= turbo_stream.update :flashes do %>
-  <%= render_flash_messages %>
+  <%= render_flash %>
 <% end %>
+
+<%= yield %>
@@ -1,12 +1,22 @@
 <%= tabular_form_with model: Measurement.new, id: :measurement_form,
-  class: 'topside-area vflex', html: {onkeydown: 'formProcessKey(event)'} do |form| %>
-  <table class="items centered">
-    <tbody id="readouts"></tbody>
+  class: 'topside-area flex vertical center',
+  html: {onkeydown: 'formProcessKey(event)'} do |form| %>
+
+  <table class="items-table center">
+    <tbody id="readouts">
+      <%= tabular_fields_for @measurement do |form| %>
+        <tr class="italic">
+          <td class="hexpand hmin50"><%= t '.taken_at_html' %></td>
+          <td colspan="3" class="ralign">
+            <%= form.datetime_field :taken_at, required: true %>
+          </td>
+        </tr>
+      <% end %>
+    </tbody>
  </table>

-  <div class="hflex">
-    <%# TODO: right-click selection %>
-    <details id="quantity_select" class="hexpand" open
+  <%# TODO: right-click selection; unnecessary with hierarchical tags? %>
+  <details id="quantity_select" class="center hexpand" open
           onkeydown="detailsProcessKey(event)">
    <summary autofocus>
      <!-- TODO: Set content with CSS when span empty to avoid duplication -->
@@ -17,14 +27,13 @@
        formaction: new_readout_path, formmethod: :get, formnovalidate: true,
        data: {turbo_stream: true} %>
    </summary>
-      <ul><%= quantities_check_boxes %></ul>
+    <ul><%= quantities_check_boxes(@quantities) %></ul>
  </details>
-    <%= form.button id: :create_measurement_button, disabled: true -%>
-  </div>

-  <div class="hflex reverse">
+  <div class="flex reverse">
+    <%= form.button id: :create_measurement_button, disabled: true -%>
    <%= image_link_to t(:cancel), "close-outline", measurements_path, name: :cancel,
-      class: 'dangerous', onclick: render_turbo_stream('form_close') %>
+      class: 'auxiliary dangerous', onclick: render_turbo_stream('form_close') %>
  </div>
 <% end %>

@@ -9,7 +9,7 @@
      <%= form.text_area :description, cols: 30, rows: 1, escape: false %>
    </td>

-    <td class="actions">
+    <td class="flex">
      <%= form.button %>
      <%= image_link_to t(:cancel), "close-outline", quantities_path, class: 'dangerous',
        name: :cancel, onclick: render_turbo_stream('form_close', {row: row}) %>
@@ -5,14 +5,14 @@
           data: {drag_path: reparent_quantity_path(quantity), drop_id: dom_id(quantity),
                  drop_id_param: "quantity[parent_id]"} do %>

-  <td class="link" style="--depth:<%= quantity.depth %>">
-    <%= link_to quantity, edit_quantity_path(quantity), onclick: 'this.blur();',
-      data: {turbo_stream: true} %>
+  <td style="--depth:<%= quantity.depth %>">
+    <%= link_to quantity, edit_quantity_path(quantity), class: 'link',
+      onclick: 'this.blur();', data: {turbo_stream: true} %>
  </td>
  <td><%= quantity.description %></td>

  <% if current_user.at_least(:active) %>
-    <td class="actions">
+    <td class="flex">
      <%= image_link_to t('.new_subquantity'), 'plus-outline', new_quantity_path(quantity),
        id: dom_id(quantity, :new, :link), onclick: 'this.blur();', data: {turbo_stream: true} %>

@@ -8,13 +8,14 @@
    class: 'tools-area' %>
 </div>

+<%# TODO: remove? form can be inserted directly, e.g. at the end of index %>
 <%= tag.div class: 'main-area', id: :quantity_form %>

-<table class="main-area items">
+<table class="main-area items-table">
  <thead>
    <tr>
      <th><%= Quantity.human_attribute_name(:name) %></th>
-      <th><%= Quantity.human_attribute_name(:description) %></th>
+      <th class="hexpand"><%= Quantity.human_attribute_name(:description) %></th>
      <% if current_user.at_least(:active) %>
        <th><%= t :actions %></th>
        <th></th>
@@ -1,25 +1,24 @@
 <%# TODO: add readout reordering by dragging %>
 <%= tabular_fields_for 'readouts[]', readout do |form| %>
  <%- tag.tr id: dom_id(readout.quantity, :new, :readout) do %>
-    <td class="actions">
+    <td>
+      <%# TODO: add grayed readout index (in separate column?) %>
+      <%= readout.quantity.relative_pathname(@superquantity) %>
+      <%= form.hidden_field :quantity_id %>
+    </td>
+    <td>
+      <%= form.number_field :value, required: true, autofocus: readout_counter == 0 %>
+    </td>
+    <td>
+      <%= form.collection_select :unit_id, @user_units, :id,
+        ->(u){ sanitize('&emsp;' * (u.base_id ? 1 : 0) + u.symbol) },
+        {prompt: '', disabled: '', selected: ''}, required: true %>
+    </td>
+    <td class="flex">
      <%# TODO: change to _link_ after giving up displaying relative paths %>
      <%= image_button_tag '', 'delete-outline', class: 'dangerous', name: nil,
        formaction: discard_readouts_path(readout.quantity),
        formmethod: :get, formnovalidate: true, data: {turbo_stream: true} %>
    </td>
-    <td>
-      <%= readout.quantity.relative_pathname(@superquantity) %>
-    </td>
-    <td>
-      <%= form.number_field :value, required: true,
-        size: readout.type_for_attribute(:value).precision / 2,
-        autofocus: readout_counter == 0 %>
-    </td>
-    <td>
-      <%= form.hidden_field :quantity_id %>
-      <%= form.collection_select :unit_id, @user_units, :id,
-        ->(u){ sanitize('&emsp;' * (u.base_id ? 1 : 0) + u.symbol) },
-        {prompt: t('.select_unit'), disabled: '', selected: ''}, required: true %>
-    </td>
  <% end %>
 <% end %>
@@ -1,39 +0,0 @@
-<%= form_with url: setup_path, method: :post, class: "labeled-form main-area" do %>
-
-  <h3 style="grid-column: 1 / -1; text-align: left; margin: 0;">
-    <%= t(".admin_account") %>
-  </h3>
-
-  <label for="admin_email"><%= t(".admin_email") %></label>
-  <%= email_field_tag :admin_email, params[:admin_email],
-        id: "admin_email", required: true, size: 30, autofocus: true,
-        autocomplete: "email" %>
-
-  <label for="admin_password"><%= t(".admin_password") %></label>
-  <%= password_field_tag :admin_password, nil,
-        id: "admin_password", required: true, size: 30,
-        autocomplete: "new-password" %>
-
-  <label for="admin_password_confirmation"><%= t(".admin_password_confirmation") %></label>
-  <%= password_field_tag :admin_password_confirmation, nil,
-        id: "admin_password_confirmation", required: true, size: 30,
-        autocomplete: "off" %>
-
-  <h3 style="grid-column: 1 / -1; text-align: left; margin: 0.5em 0 0 0;">
-    <%= t(".options") %>
-  </h3>
-
-  <label for="skip_email_confirmation" style="grid-column: 1 / 3; text-align: left;">
-    <%= check_box_tag :skip_email_confirmation, "1",
-          params[:skip_email_confirmation] == "1",
-          id: "skip_email_confirmation" %>
-    <%= t(".skip_email_confirmation") %>
-  </label>
-
-  <label for="seed_units" style="grid-column: 1 / 3; text-align: left;">
-    <%= check_box_tag :seed_units, "1", true, id: "seed_units" %>
-    <%= t(".seed_units") %>
-  </label>
-
-  <%= submit_tag t(".submit") %>
-<% end %>
@@ -8,11 +8,11 @@
    <td>
      <%= form.text_area :description, cols: 30, rows: 1, escape: false %>
    </td>
-    <td class="number">
-      <%= form.number_field :multiplier, required: true, size: 10, min: :step if @unit.base_id? %>
+    <td>
+      <%= form.number_field :multiplier, required: true if @unit.base_id? %>
    </td>

-    <td class="actions">
+    <td class="flex">
      <%= form.button %>
      <%= image_link_to t(:cancel), "close-outline", units_path, class: 'dangerous',
        name: :cancel, onclick: render_turbo_stream('form_close', {row: row}) %>
@@ -6,14 +6,15 @@
                  drop_id: dom_id(unit.base || unit),
                  drop_id_param: "unit[base_id]"} do %>

-  <td class="link" style="--depth:<%= unit.base_id? ? 1 : 0 %>">
-    <%= link_to unit, edit_unit_path(unit), onclick: 'this.blur();', data: {turbo_stream: true} %>
+  <td style="--depth:<%= unit.base_id? ? 1 : 0 %>">
+    <%= link_to unit, edit_unit_path(unit), class: 'link', onclick: 'this.blur();',
+      data: {turbo_stream: true} %>
  </td>
  <td><%= unit.description %></td>
-  <td class="number"><%= unit.multiplier.to_html %></td>
+  <td class="ralign"><%= unit.multiplier.to_html if unit.base_id? %></td>

  <% if current_user.at_least(:active) %>
-    <td class="actions">
+    <td class="flex">
      <% unless unit.base_id? %>
        <%= image_link_to t('.new_subunit'), 'plus-outline', new_unit_path(unit),
          id: dom_id(unit, :new, :link), onclick: 'this.blur();', data: {turbo_stream: true} %>
@@ -1,4 +1,4 @@
-<%= turbo_stream.close_form dom_id(@unit.base || Unit, :new) %>
+<%= turbo_stream.close_form dom_target(:new, @unit.base || :unit) %>
 <%= turbo_stream.remove :no_items %>
 <%= turbo_stream.replace @unit.base if @unit.base_id? %>
 <%= @before ? turbo_stream.before(@before, @unit) : turbo_stream.append(:units, @unit) %>
@@ -1,7 +1,7 @@
-<% ids = {row: dom_id(@unit, :edit),
-          hidden_row: dom_id(@unit),
+<% ids = {row: dom_target(:edit, @unit),
+          hidden_row: dom_target(@unit),
          link: nil,
-          form_tag: dom_id(@unit, :edit, :form)} %>
+          form_tag: dom_target(:edit, @unit, :form)} %>

 <%= turbo_stream.append :unit_form do %>
  <%- tabular_form_with model: @unit, html: {id: ids[:form_tag]} do %>
@@ -7,13 +7,14 @@
    class: 'tools-area' %>
 </div>

+<%# TODO: remove? form can be inserted directly, e.g. at the end of index %>
 <%= tag.div id: :unit_form %>

-<table class="main-area items">
+<table class="main-area items-table">
  <thead>
    <tr>
      <th><%= Unit.human_attribute_name(:symbol) %></th>
-      <th><%= Unit.human_attribute_name(:description) %></th>
+      <th class="hexpand"><%= Unit.human_attribute_name(:description) %></th>
      <th><%= Unit.human_attribute_name(:multiplier) %></th>
      <% if current_user.at_least(:active) %>
        <th><%= t :actions %></th>
@@ -1,8 +1,8 @@
-<% dom_obj = @unit.base || @unit %>
-<% ids = {row: dom_id(dom_obj, :new),
+<% target_id = dom_target(:new, @unit.base || :unit) %>
+<% ids = {row: target_id,
          hidden_row: nil,
-          link: dom_id(dom_obj, :new, :link),
-          form_tag: dom_id(dom_obj, :new, :form)} %>
+          link: dom_target(target_id, :link),
+          form_tag: dom_target(target_id, :form)} %>

 <%= turbo_stream.disable ids[:link] -%>

@@ -1,4 +1,4 @@
 <%= turbo_stream.remove @unit %>
 <%= turbo_stream.replace @previous_base if @previous_base %>
-<%= turbo_stream.replace @unit.base if @unit.base_id? && (@previous_base.id != @unit.base_id) %>
+<%= turbo_stream.replace @unit.base if @unit.base_id? && (@previous_base&.id != @unit.base_id) %>
 <%= @before ? turbo_stream.before(@before, @unit) : turbo_stream.append(:units, @unit) %>
@@ -1,3 +1,3 @@
-<%= turbo_stream.close_form dom_id(@unit, :edit) %>
+<%= turbo_stream.close_form dom_target(:edit, @unit) %>
 <%= turbo_stream.replace @unit.base if @unit.base_id? %>
 <%= turbo_stream.replace @unit %>
@@ -0,0 +1 @@
+<% flash.discard %>
@@ -1,9 +0,0 @@
-<%= labeled_form_for resource, url: user_confirmation_path,
-  html: {class: 'main-area'} do |f| %>
-
-  <%= f.email_field :email, required: true, size: 30, autofocus: true,
-    autocomplete: 'email', value:
-    resource.pending_reconfirmation? ? resource.unconfirmed_email : resource.email %>
-
-  <%= f.submit t(:resend_confirmation) %>
-<% end %>
@@ -1,17 +1,17 @@
-<table class="main-area items" id="users">
+<table class="main-area items-table" id="users">
  <thead>
    <tr>
      <th><%= User.human_attribute_name(:email) %></th>
      <th><%= User.human_attribute_name(:status) %></th>
      <th><%= User.human_attribute_name(:confirmed_at) %></th>
-      <th><%= User.human_attribute_name(:created_at) %>&nbsp;<sup>(UTC)</sup></th>
+      <th><pre><%= User.human_attribute_name(:created_at) %> <sup>(UTC)</sup></pre></th>
      <th><%= t :actions %></th>
    </tr>
  </thead>
  <tbody>
    <% @users.each do |user| %>
      <tr>
-        <td class="link"><%= link_to user, user_path(user) %></td>
+        <td><%= link_to user, user_path(user), class: 'link' %></td>
        <td>
          <% if user == current_user %>
            <%= user.status %>
@@ -22,11 +22,9 @@
            <% end %>
          <% end %>
        </td>
-        <td class="svg">
-          <%= svg_tag 'pictograms/checkbox-marked-outline' if user.confirmed_at.present? %>
-        </td>
-        <td><%= l user.created_at, format: :without_tz %></td>
-        <td class="actions">
+        <td><%= svg_tag 'checkbox-marked-outline' if user.confirmed_at.present? %></td>
+        <td><pre><%= l user.created_at, format: :without_tz %></pre></td>
+        <td class="flex">
          <% if allow_disguise?(user) %>
            <%= image_link_to t('.disguise'), 'incognito', disguise_user_path(user) %>
          <% end %>
@@ -0,0 +1 @@
+<% flash.discard %>
@@ -1,5 +1,5 @@
 <%= labeled_form_for resource, url: user_password_path,
-  html: {method: :put, class: 'main-area'} do |f| %>
+  html: {method: :put, class: 'main-area', data: {turbo: false}} do |f| %>

  <%= f.hidden_field :reset_password_token %>

@@ -1,8 +0,0 @@
-<%= labeled_form_for resource, url: user_password_path,
-  html: {class: 'main-area'} do |f| %>
-
-  <%= f.email_field :email, required: true, size: 30, autofocus: true,
-    autocomplete: 'email' %>
-
-  <%= f.submit t(:recover_password) %>
-<% end %>
@@ -1,11 +1,12 @@
 <% content_for :navigation, flush: true do %>
-  <%= link_to svg_tag('pictograms/arrow-left-bold-outline', t(:back)),
+  <%= link_to svg_tag('arrow-left-bold-outline', t(:back)),
    request.referer.present? ? :back : root_path, class: 'tab' %>
 <% end %>

 <div class="rightside-area buttongrid">
-  <%= image_button_to_if !current_user.sole_admin?, t('.delete'), 'account-remove-outline',
-    user_registration_path, form_class: 'tools-area', method: :delete, data: {turbo: false},
+  <%#= TODO: Disallow/disable deletion for last admin account, image_button_to_if %>
+  <%= image_button_to t('.delete'), 'account-remove-outline', user_registration_path,
+    form_class: 'tools-area', method: :delete, data: {turbo: false},
    onclick: {confirm: t('.confirm_delete')} %>
 </div>

@@ -0,0 +1,16 @@
+<%= labeled_form_for resource, url: user_registration_path,
+  html: {class: 'main-area', onsubmit: 'formValidate(event)'} do |f| %>
+
+  <%= f.email_field :email, required: true, size: 30, autofocus: true,
+    autocomplete: 'email' %>
+  <%= f.password_field :password, required: true, size: 30,
+    minlength: @minimum_password_length, autocomplete: 'new-password' %>
+  <%= f.password_field :password_confirmation, required: true, size: 30,
+    minlength: @minimum_password_length, autocomplete: 'off' %>
+
+  <%= f.submit t(:register), data: {turbo: false} %>
+
+  <%= image_button_tag t(:resend_confirmation), 'email-sync-outline',
+    class: 'auxiliary', formaction: user_confirmation_path, formnovalidate: true,
+    data: {validate: f.field_id(:email)} %>
+<% end %>
@@ -1,16 +0,0 @@
-<div class="main-area">
-  <%= labeled_form_for resource, url: user_registration_path do |f| %>
-    <%= f.email_field :email, required: true, size: 30, autofocus: true,
-      autocomplete: 'email' %>
-    <%= f.password_field :password, required: true, size: 30,
-      minlength: @minimum_password_length, autocomplete: 'new-password' %>
-    <%= f.password_field :password_confirmation, required: true, size: 30,
-      minlength: @minimum_password_length, autocomplete: 'off' %>
-
-    <%= f.submit t(:register) %>
-  <% end %>
-
-  <%= content_tag :p, t(:or), style: 'text-align: center;' %>
-  <%= image_link_to t(:resend_confirmation), 'email-sync-outline',
-    new_user_confirmation_path, class: 'centered' %>
-</div>
@@ -1,18 +1,19 @@
-<div class="main-area">
-  <%= labeled_form_for resource, url: user_session_path do |f| %>
+<%= labeled_form_for resource, url: user_session_path,
+  html: {class: 'main-area', onsubmit: 'formValidate(event)'} do |f| %>
+
  <%= f.email_field :email, required: true, size: 30, autofocus: true,
    autocomplete: 'email' %>
  <%= f.password_field :password, required: true, size: 30,
-      minlength: @minimum_password_length, autocomplete: 'current-password' %>
+    autocomplete: 'current-password' %>

  <% if devise_mapping.rememberable? %>
    <%= f.check_box :remember_me %>
  <% end %>

-    <%= f.submit t(:sign_in) %>
-  <% end %>
+  <%# /sign_in as HTML; /password as TURBO_STREAM %>
+  <%= f.submit t(:sign_in), data: {turbo: false} %>

-  <%= content_tag :p, t(:or), style: 'text-align: center;' %>
-  <%= image_link_to t(:recover_password), 'lock-reset', new_user_password_path,
-    class: 'centered' %>
-</div>
+  <%= image_button_tag t(:recover_password), 'lock-reset', class: 'auxiliary',
+    formaction: user_password_path, formnovalidate: true,
+    data: {validate: f.field_id(:email)} %>
+<% end %>
@@ -1,6 +1,5 @@
 <% content_for :navigation, flush: true do %>
-  <%= link_to svg_tag('pictograms/arrow-left-bold-outline', t(:back)), users_path,
-    class: 'tab' %>
+  <%= link_to svg_tag('arrow-left-bold-outline', t(:back)), users_path, class: 'tab' %>
 <% end %>

 <%= labeled_form_for @user, html: {class: 'main-area'} do |f| %>
@@ -8,7 +8,7 @@
    <%= f.email_field :email, autofocus: true, autocomplete: "email" %>
  </div>

-  <div class="actions">
+  <div class="flex">
    <%= f.submit "Resend unlock instructions" %>
  </div>
 <% end %>
@@ -0,0 +1,6 @@
+#!/usr/bin/env ruby
+require_relative "../config/boot"
+require "active_support/continuous_integration"
+
+CI = ActiveSupport::ContinuousIntegration
+require_relative "../config/ci.rb"
@@ -0,0 +1,2 @@
+#!/usr/bin/env ruby
+exec "./bin/rails", "server", *ARGV
@@ -0,0 +1,29 @@
+#!/usr/bin/ruby33
+#
+# This file was generated by RubyGems.
+#
+# The application 'nokogiri' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'rubygems'
+
+Gem.use_gemdeps
+
+version = ">= 0.a"
+
+str = ARGV.first
+if str
+  str = str.b[/\A_(.*)_\z/, 1]
+  if str and Gem::Version.correct?(str)
+    version = str
+    ARGV.shift
+  end
+end
+
+if Gem.respond_to?(:activate_bin_path)
+load Gem.activate_bin_path('nokogiri', 'nokogiri', version)
+else
+gem "nokogiri", version
+load Gem.bin_path("nokogiri", "nokogiri", version)
+end
@@ -1,11 +1,10 @@
 #!/usr/bin/env ruby
 require "fileutils"

-# path to your application root.
 APP_ROOT = File.expand_path("..", __dir__)

 def system!(*args)
-  system(*args) || abort("\n== Command #{args} failed ==")
+  system(*args, exception: true)
 end

 FileUtils.chdir APP_ROOT do
@@ -14,7 +13,6 @@ FileUtils.chdir APP_ROOT do
  # Add necessary setup steps to this file.

  puts "== Installing dependencies =="
-  system! "gem install bundler --conservative"
  system("bundle check") || system!("bundle install")

  # puts "\n== Copying sample files =="
@@ -24,10 +22,14 @@ FileUtils.chdir APP_ROOT do

  puts "\n== Preparing database =="
  system! "bin/rails db:prepare"
+  system! "bin/rails db:reset" if ARGV.include?("--reset")

  puts "\n== Removing old logs and tempfiles =="
  system! "bin/rails log:clear tmp:clear"

-  puts "\n== Restarting application server =="
-  system! "bin/rails restart"
+  unless ARGV.include?("--skip-server")
+    puts "\n== Starting development server =="
+    STDOUT.flush # flush the output before exec(2) so that it displays
+    exec "bin/dev"
+  end
 end
@@ -18,14 +18,17 @@ require "rails/test_unit/railtie"
 # you've limited to :test, :development, or :production.
 Bundler.require(*Rails.groups)

+require_relative '../lib/default_settings_strategy'
+
 module FixinMe
  class Application < Rails::Application
    # Initialize configuration defaults for originally generated Rails version.
-    config.load_defaults 7.0
+    config.load_defaults 8.1

-    # Autoload lib/, required e.g. for core library extensions.
-    # https://guides.rubyonrails.org/autoloading_and_reloading_constants.html#config-autoload-lib-ignore.
-    config.autoload_lib(ignore: %w(assets tasks))
+    # Please, add to the `ignore` list any other `lib` subdirectories that do
+    # not contain `.rb` files, or that should not be reloaded or eager loaded.
+    # Common ones are `templates`, `generators`, or `middleware`, for example.
+    config.autoload_lib(ignore: %w[assets tasks])

    # Configuration for the application, engines, and railties goes here.
    #
@@ -38,25 +41,24 @@ module FixinMe
    config.action_dispatch.rescue_responses['ApplicationController::AccessForbidden'] = :forbidden
    config.action_dispatch.rescue_responses['ApplicationController::ParameterInvalid'] = :unprocessable_entity

+    # Set default migrations parameters.
+    config.active_record.migration_strategy = DefaultSettingsStrategy
+
    # SETUP: Below settings need to be updated on a per-installation basis.
    #
-    # URL to use in sent e-mails.
-    config.action_mailer.default_url_options = {host: 'localhost', :protocol => 'https'}
+    # Set host to be used by links generated in mailer templates.
+    config.action_mailer.default_url_options = {host: 'localhost', protocol: 'https'}
    # https://guides.rubyonrails.org/configuring.html#config-action-mailer-delivery-method
    config.action_mailer.delivery_method = :sendmail

    # List of hosts this app is available at.
    # https://guides.rubyonrails.org/configuring.html#actiondispatch-hostauthorization
-    config.hosts += ['localhost', 'example.com', IPAddr.new('1.2.3.4/32')]
+    config.hosts |= ['localhost']

    # Email address of admin account
    config.admin = 'admin@localhost'

    # Sender address of account registration-related messages
    Devise.mailer_sender = 'noreply@localhost'
-
-    # Whether to skip e-mail confirmation for new registrations is configured
-    # through the web setup wizard and stored in the database (Setting model),
-    # so it does not need to be set here.
  end
 end
@@ -0,0 +1,20 @@
+# Run using bin/ci
+
+CI.run do
+  step "Setup", "bin/setup --skip-server"
+
+  step "Security: Importmap vulnerability audit", "bin/importmap audit"
+  step "Tests: Rails", "bin/rails test"
+  step "Tests: Seeds", "env RAILS_ENV=test bin/rails db:seed:replant"
+
+  # Optional: Run system tests
+  # step "Tests: System", "bin/rails test:system"
+
+  # Optional: set a green GitHub commit status to unblock PR merge.
+  # Requires the `gh` CLI and `gh extension install basecamp/gh-signoff`.
+  # if success?
+  #   step "Signoff: All systems go. Ready for merge and deploy.", "gh signoff"
+  # else
+  #   failure "Signoff: CI failed. Do not merge or deploy.", "Fix the issues and try again."
+  # end
+end
@@ -24,27 +24,45 @@
 # Read https://guides.rubyonrails.org/configuring.html#configuring-a-database
 # for a full overview on how database connection configuration can be specified.
 default: &default
-  adapter: mysql2
-  encoding: utf8mb4
-  collation: utf8mb4_0900_as_ci
-  pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
-  username: fixinme
-  password: Some-password1%
-  socket: /run/mysqld/mysqld.sock
+  pool: <%= ENV.fetch('RAILS_MAX_THREADS', 3) %>
+
+#mysql_default: &mysql_default
+#  <<: *default
+#  username: fixinme
+#  password: Some-password1%
+#  host: 127.0.0.1
+#  encoding: utf8mb4
+#  collation: utf8mb4_0900_as_ci

 production:
  <<: *default
-  database: fixinme
+  adapter: sqlite3
+  database: db/production.sqlite3

-# Unless you're planning on developing the application, you can skip
+# Unless you're planning on developing the application, you can skip/remove
 # configurations for development and test databases altogether.
 #development:
-#  <<: *default
+#  <<: *mysql_default
+#  adapter: mysql2
 #  database: fixinme_dev

-# Warning: The database defined as "test" will be erased and
+# Warning: The database(s) defined as "test" will be erased and
 # re-generated from your development database when you run "rake".
 # Do not set this db to the same as development or production.
 #test:
-#  <<: *default
+#  <<: *mysql_default
+#  adapter: mysql2
 #  database: fixinme_test
+
+# Multiple test databases can be provided. When more than one test db is
+# present, every test task (test, test:models, test:system, etc.) runs against
+# all of them.
+#test:
+#  mysql2:
+#    <<: *mysql_default
+#    adapter: mysql2
+#    database: fixinme_test
+#  sqlite3:
+#    <<: *default
+#    adapter: sqlite3
+#    database: db/test.sqlite3
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
cryptogopher	4d86652247	bundle update	2026-10-04 01:26:16 +02:00
cryptogopher	eae0ee9d20	Improve controllers and views	2026-07-28 00:46:33 +02:00
cryptogopher	eb2797bd90	Display form errors using custom validity messages	2026-07-28 00:45:08 +02:00
cryptogopher	5d051de666	Check for out of range float values Remove unsupported attribute `[maxlength]` from `input[number]`.	2026-07-20 21:45:33 +02:00
cryptogopher	ef8214cfa7	Improve tests, extend fixtures	2026-07-20 16:38:05 +02:00
cryptogopher	30c80e6e2e	Fix js code and comment formatting	2026-07-12 17:20:00 +02:00
cryptogopher	159b4b340f	Test Unit using float multiplier Improve string randomization. Use Capybara table selectors.	2026-07-12 17:20:00 +02:00
cryptogopher	774b1eb19b	Use `[disabled]` attribute only on tags that support it Add Capybara selector for disabled links.	2026-07-12 17:20:00 +02:00
cryptogopher	d4be84875e	Use <pre> tag for formatting	2026-07-12 17:19:50 +02:00
cryptogopher	65e5643b13	Remove pictograms directory	2026-07-12 17:17:59 +02:00
cryptogopher	b05523dcd6	Change Unit.multiplier type from decimal to float Remove remnants related to BigDecimal.	2026-07-12 17:16:43 +02:00
cryptogopher	1ab925f6fa	Improve Units tests and remove test parallelization Parallelization produces errors (#92)	2026-05-15 00:21:10 +02:00
cryptogopher	83168092f1	Fix SQLite query compatibility inside WITH clause SQLite3::SQLException: circular reference	2026-05-15 00:21:01 +02:00
cryptogopher	852e6e7cea	Fix test passing blank input into required field	2026-05-15 00:20:28 +02:00
cryptogopher	0481b0f6f1	Allow Capybara test server IP in HostAuthorization	2026-05-07 20:53:18 +02:00
cryptogopher	76b95f7c30	Set default `:text` type column limit	2026-05-07 18:20:06 +02:00
cryptogopher	ca7edb99e1	Add Note	2026-05-07 18:17:30 +02:00
cryptogopher	98044fc04a	Remove empty test files	2026-05-05 23:41:08 +02:00
cryptogopher	d3a34233b9	Set constraints on Readouts.user_id foreign key Add Measurements table	2026-05-05 20:36:57 +02:00
cryptogopher	4a36ffc8bf	Move migration defaults to ActiveRecord migration strategy Remove redundant defaults	2026-05-05 20:36:51 +02:00
cryptogopher	78639b4c1e	Upgrade Rails to 8.1.3	2026-05-05 20:35:00 +02:00
cryptogopher	c4def9cd86	Filter :email field logging only in production env	2026-04-30 18:26:43 +02:00
cryptogopher	3454d3052b	Generate admin password on db:seed Test admin account creation in db:seed	2026-04-30 18:23:00 +02:00
cryptogopher	dedea0246f	Run tests on multiple database configurations	2026-04-27 17:38:49 +02:00
cryptogopher	3ac3a6f13c	Drop Readout.value decimal type in favor of float	2026-04-25 18:20:16 +02:00
cryptogopher	97e7bfedf7	Upgrade Rails to 8.0.5 Install sqlite3 Migrate Rails default settings from 7.2 to 8.0	2026-04-25 04:13:47 +02:00
cryptogopher	a05767213c	Fix test based on unavailable `td.link` selector	2026-04-25 04:13:47 +02:00
cryptogopher	d002ae0f2c	Clean up and improve items-table styling Closes #9	2026-04-25 04:13:47 +02:00
cryptogopher	f87aa9fd3d	Improve Measurement form layout and styling	2026-04-25 04:13:47 +02:00
cryptogopher	5ed066ad18	Unify border/outline parameters order	2026-03-06 01:42:32 +01:00
cryptogopher	dde4e52f1b	Fix form elements styling on hover	2026-03-06 01:33:23 +01:00
cryptogopher	a9091d76a8	Merge styles of <a>.button/<button>/<input type="submit"> into .button Remove flash button Fix some multi-selector specificity differences	2026-03-04 17:13:11 +01:00
cryptogopher	4175d31b9d	Update and format comments	2026-03-03 01:31:44 +01:00
cryptogopher	c659201904	Make [disabled] and [hidden] styles !important	2026-03-03 01:14:12 +01:00
cryptogopher	83b064ef3c	Merge recover password/resend confirmation forms into sign in/register Closes #65, #66	2026-03-01 20:04:42 +01:00
				`@@ -0,0 +1 @@`
				`<svg xmlns="http://www.w3.org/2000/svg" id="icon" viewBox="0 0 24 24"><path d="M12,2L1,21H23M12,6L19.53,19H4.47M11,10V14H13V10M11,16V18H13V16" /></svg>`
				`@@ -1 +0,0 @@`
				`<svg xmlns="http://www.w3.org/2000/svg" id="icon" viewBox="0 0 24 24"><path fill="#ffffff" d="M12,2L1,21H23M12,6L19.53,19H4.47M11,10V14H13V10M11,16V18H13V16" /></svg>`