Merge upstream/final-form into master

Incorporates WIP alternative measurement form (single select form with multiple select actions) and readouts controller. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Merge upstream/css-cleanup into master
2026-03-13 02:38:09 +00:00 · 2026-03-12 18:07:54 +00:00 · 2026-03-10 18:40:54 +00:00 · 2026-03-10 18:34:27 +00:00 · 2026-03-10 18:24:58 +00:00 · 2026-03-10 18:16:01 +00:00
148 changed files with 1528 additions and 1905 deletions
@@ -0,0 +1,74 @@
+name: Tests
+
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
+
+jobs:
+  test-sqlite:
+    name: Tests (SQLite)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.3'
+          bundler-cache: true
+        env:
+          BUNDLE_WITH: "sqlite:development:test"
+
+      - name: Set up test database
+        run: bin/rails db:create db:schema:load
+        env:
+          RAILS_ENV: test
+
+      - name: Run tests
+        run: bin/rails test
+        env:
+          RAILS_ENV: test
+          CI: "true"
+
+  test-mysql:
+    name: Tests (MySQL)
+    runs-on: ubuntu-latest
+
+    services:
+      mysql:
+        image: mysql:8.0
+        env:
+          MYSQL_ROOT_PASSWORD: ""
+          MYSQL_ALLOW_EMPTY_PASSWORD: "yes"
+          MYSQL_DATABASE: fixin_test
+        ports:
+          - 3306:3306
+        options: >-
+          --health-cmd="mysqladmin ping"
+          --health-interval=10s
+          --health-timeout=5s
+          --health-retries=3
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.3'
+          bundler-cache: true
+        env:
+          BUNDLE_WITH: "mysql:development:test"
+
+      - name: Set up test database
+        run: bin/rails db:schema:load
+        env:
+          RAILS_ENV: test
+          DB_ADAPTER: mysql
+
+      - name: Run tests
+        run: bin/rails test
+        env:
+          RAILS_ENV: test
+          CI: "true"
+          DB_ADAPTER: mysql
@@ -15,9 +15,6 @@
 /config/master.key
 /config/puma.rb

-# Ignore test database.
-/db/test.sqlite3
-
 # Ignore all logfiles and tempfiles.
 /log/*
 /tmp/*
@@ -33,7 +30,7 @@

 /tmp/restart.txt

-# Ignore user files.
+# Ignore user files
 /.bash_history
 /.byebug_history
 /.config
@@ -41,7 +38,6 @@
 /.lesshst
 /.local
 /.mysql_history
-/.sqlite_history
 /.ssh
 /.vim
 /.viminfo
@@ -1,76 +0,0 @@
-DESIGN
-======
-
-Below is a list of design decisions. The justification is to be consulted
-whenever a change is considered, to avoid regressions.
-
-### Data type for DB storage of numeric values (`decimal` vs `float`)
-
-* among database engines supported (by Rails), SQLite offers storage of
-  `decimal` data type with the lowest precision, equal to the precision of
-  `REAL` type (double precision float value, IEEE 754), but in a floating point
-  format,
-    * decimal types in other database engines offer greater precision, but store
-      data in a fixed point format,
-* biology-related values differ by several orders of magnitude; storing them in
-  fixed point format would only make sense if required precision would be
-  greater than that offered by floating point format,
-    * even then, fixed point would mean either bigger memory requirements or
-      worse precision for numbers close to scale limit,
-        * for a fixed point format to use the same 8 bytes of storage as IEEE
-          754, precision would need to be limited to 18 digits (4 bytes/9 digits)
-          and scale approximately half of that - 9,
-    * double precision floating point guarantees 15 digits of precision, which
-      is more than enough for all expected use cases,
-        * if a decimal string with at most 15 significant digits is converted to
-          the IEEE 754 double-precision format, giving a normal number, and then
-          converted back to a decimal string with the same number of digits, the
-          final result should match the original string,
-        * if an IEEE 754 double-precision number is converted to a decimal
-          string with at least 17 significant digits, and then converted back to
-          double-precision representation, the final result must match the
-          original number,
-        * single precision floating point only guarntees 6 digits of precision,
-          which is estimated to be too low for some use cases (e.g. storing
-          latitude/longitude with a resolution grater than 100m),
-* double precision floating point (IEEE 754) is a standard that ensures
-  compatibility with majority of database engines,
-    * the same data format is used internally by Ruby as a `Float`; it
-      guarantees no conversions between storage and computation,
-    * as a standard with hardware implementations ensures both: computing
-      efficiency and hardware/3rd party library compatibility as opposed to Ruby
-      custom `BigDecimal` type,
-    * at present, only normalized numbers are used and considered sufficient, in
-      order to avoid potential issues with the cross-platform compatibility of
-      subnormal (denormal) numbers,
-* in the future, the IEEE 754 decimal64 data type may be considered once it is
-  supported by database engines.
-
-### Database layer vs application layer data model constraints
-
-* database constraints are the final guard against data integrity corruption,
-    * they should safeguard against data referential integrity loss under _all_
-      data (not schema) manipulation scenarios, including application level
-      logic errors and direct data manipulation (e.g. through `dbconsole`),
-* application constraints can be as restrictive as database constraints or more,
-  but not less, as it doesn't serve any use case,
-    * proper application level constraints should prevent unhandled database
-      exception occurences, e.g `ActiveRecord::InvalidForeignKey` for operations
-      performed through Models (i.e. not `#delete_all` etc.)
-
-### User interface
-* values provided by user have to be exactly preserved, avoiding any precision
-  loss due to e.g. type casting
-    * when it's not possible to store value without information loss, feedback has to
-      be given at the time of entering value
-    * values can be received using either:
-        * `input[number]` - validates: number format, value against `[min]` and
-          `[max]` attributes; cannot validate precision (no `[pattern]` support);
-          or
-        * `input[text]` - can validate number format and precision with
-          `[pattern]`; cannot validate range (no `[min]`/`[max]` support),
-        * none of the above prevents misinterpretation of values between 0 and
-          Float::MIN as 0.0 - this has to be checked manually,
-        * assuming that user input with _precision > DIG_ is as rare as in
-          the range _(0, MIN)_, the decision is to choose input which requires
-          the least/simplest additional code.
@@ -1,14 +1,14 @@
 source "https://rubygems.org"

-# The requirement for the Ruby version comes from Rails.
-gem "rails", "~> 8.1.4"
+# The requirement for the Ruby version comes from Rails
+gem "rails", "~> 7.2.3"
 gem "sprockets-rails"
 gem "puma", "~> 6.0"
 gem "sassc-rails"
 # Windows does not include zoneinfo files, so bundle the tzinfo-data gem
 gem "tzinfo-data", platforms: %i[ mingw mswin x64_mingw jruby ]

-# TODO: select db gems automatically?
+# TODO: select db gems automatically
 #   database_config = ERB.new(File.read("config/database.yml")).result
 #   YAML.load(database_config, aliases: true).values.map { |env| env["adapter"] }.uniq
 group :mysql, optional: true do
@@ -21,7 +21,7 @@ group :sqlite, optional: true do
  gem "sqlite3", "~> 2.7"
 end

-gem "devise", "~> 5.0.4"
+gem "devise"

 gem "importmap-rails"
 gem "turbo-rails", "~> 2.0"
@@ -42,8 +42,11 @@ group :test do
  # Use system testing [https://guides.rubyonrails.org/testing.html#system-testing]
  gem "capybara"
  gem "selenium-webdriver"
-end

-# TODO: remove after upgrade to next version containing PR:
-#   https://github.com/ruby-i18n/i18n/pull/755
-gem "i18n", git: "https://github.com/ruby-i18n/i18n", branch: "delegate-missing-interpolation-handler"
+  # Remove minitest version restriction after error fixed:
+  #   railties-7.2.3/lib/rails/test_unit/line_filtering.rb:7:in `run':
+  #     wrong number of arguments (given 3, expected 1..2) (ArgumentError)
+  #   from /var/www/.gem/ruby/3.3.0/gems/minitest-6.0.2/lib/minitest.rb:473:in
+  #     `block (2 levels) in run_suite'
+  gem "minitest", "< 6"
+end
@@ -1,93 +1,85 @@
-GIT
-  remote: https://github.com/ruby-i18n/i18n
-  revision: 8850d979a3a32453123ed744b943ead8751ba73b
-  branch: delegate-missing-interpolation-handler
-  specs:
-    i18n (1.15.2)
-      concurrent-ruby (~> 1.0)
-
 GEM
  remote: https://rubygems.org/
  specs:
-    action_text-trix (2.1.19)
-      railties
-    actioncable (8.1.4)
-      actionpack (= 8.1.4)
-      activesupport (= 8.1.4)
+    actioncable (7.2.3)
+      actionpack (= 7.2.3)
+      activesupport (= 7.2.3)
      nio4r (~> 2.0)
      websocket-driver (>= 0.6.1)
      zeitwerk (~> 2.6)
-    actionmailbox (8.1.4)
-      actionpack (= 8.1.4)
-      activejob (= 8.1.4)
-      activerecord (= 8.1.4)
-      activestorage (= 8.1.4)
-      activesupport (= 8.1.4)
+    actionmailbox (7.2.3)
+      actionpack (= 7.2.3)
+      activejob (= 7.2.3)
+      activerecord (= 7.2.3)
+      activestorage (= 7.2.3)
+      activesupport (= 7.2.3)
      mail (>= 2.8.0)
-    actionmailer (8.1.4)
-      actionpack (= 8.1.4)
-      actionview (= 8.1.4)
-      activejob (= 8.1.4)
-      activesupport (= 8.1.4)
+    actionmailer (7.2.3)
+      actionpack (= 7.2.3)
+      actionview (= 7.2.3)
+      activejob (= 7.2.3)
+      activesupport (= 7.2.3)
      mail (>= 2.8.0)
      rails-dom-testing (~> 2.2)
-    actionpack (8.1.4)
-      actionview (= 8.1.4)
-      activesupport (= 8.1.4)
+    actionpack (7.2.3)
+      actionview (= 7.2.3)
+      activesupport (= 7.2.3)
+      cgi
      nokogiri (>= 1.8.5)
-      rack (>= 2.2.4)
+      racc
+      rack (>= 2.2.4, < 3.3)
      rack-session (>= 1.0.1)
      rack-test (>= 0.6.3)
      rails-dom-testing (~> 2.2)
      rails-html-sanitizer (~> 1.6)
      useragent (~> 0.16)
-    actiontext (8.1.4)
-      action_text-trix (~> 2.1.15)
-      actionpack (= 8.1.4)
-      activerecord (= 8.1.4)
-      activestorage (= 8.1.4)
-      activesupport (= 8.1.4)
+    actiontext (7.2.3)
+      actionpack (= 7.2.3)
+      activerecord (= 7.2.3)
+      activestorage (= 7.2.3)
+      activesupport (= 7.2.3)
      globalid (>= 0.6.0)
      nokogiri (>= 1.8.5)
-    actionview (8.1.4)
-      activesupport (= 8.1.4)
+    actionview (7.2.3)
+      activesupport (= 7.2.3)
      builder (~> 3.1)
+      cgi
      erubi (~> 1.11)
      rails-dom-testing (~> 2.2)
      rails-html-sanitizer (~> 1.6)
-    activejob (8.1.4)
-      activesupport (= 8.1.4)
+    activejob (7.2.3)
+      activesupport (= 7.2.3)
      globalid (>= 0.3.6)
-    activemodel (8.1.4)
-      activesupport (= 8.1.4)
-    activerecord (8.1.4)
-      activemodel (= 8.1.4)
-      activesupport (= 8.1.4)
+    activemodel (7.2.3)
+      activesupport (= 7.2.3)
+    activerecord (7.2.3)
+      activemodel (= 7.2.3)
+      activesupport (= 7.2.3)
      timeout (>= 0.4.0)
-    activestorage (8.1.4)
-      actionpack (= 8.1.4)
-      activejob (= 8.1.4)
-      activerecord (= 8.1.4)
-      activesupport (= 8.1.4)
+    activestorage (7.2.3)
+      actionpack (= 7.2.3)
+      activejob (= 7.2.3)
+      activerecord (= 7.2.3)
+      activesupport (= 7.2.3)
      marcel (~> 1.0)
-    activesupport (8.1.4)
+    activesupport (7.2.3)
      base64
+      benchmark (>= 0.3)
      bigdecimal
      concurrent-ruby (~> 1.0, >= 1.3.1)
      connection_pool (>= 2.2.5)
      drb
      i18n (>= 1.6, < 2)
-      json
      logger (>= 1.4.2)
      minitest (>= 5.1)
      securerandom (>= 0.3)
      tzinfo (~> 2.0, >= 2.0.5)
-      uri (>= 0.13.1)
-    addressable (2.9.0)
+    addressable (2.8.8)
      public_suffix (>= 2.0.2, < 8.0)
    base64 (0.3.0)
-    bcrypt (3.1.22)
-    bigdecimal (4.1.3)
+    bcrypt (3.1.21)
+    benchmark (0.5.0)
+    bigdecimal (4.0.1)
    bindex (0.8.1)
    builder (3.3.0)
    byebug (13.0.0)
@@ -101,155 +93,155 @@ GEM
      rack-test (>= 0.6.3)
      regexp_parser (>= 1.5, < 3.0)
      xpath (~> 3.2)
-    concurrent-ruby (1.3.8)
+    cgi (0.5.1)
+    concurrent-ruby (1.3.6)
    connection_pool (3.0.2)
-    crass (1.0.7)
+    crass (1.0.6)
    date (3.5.1)
-    devise (5.0.4)
+    devise (5.0.2)
      bcrypt (~> 3.0)
      orm_adapter (~> 0.1)
      railties (>= 7.0)
      responders
      warden (~> 1.2.3)
    drb (2.2.3)
-    erb (6.0.7)
+    erb (6.0.2)
    erubi (1.13.1)
-    ffi (1.17.4-aarch64-linux-gnu)
-    ffi (1.17.4-aarch64-linux-musl)
-    ffi (1.17.4-arm-linux-gnu)
-    ffi (1.17.4-arm-linux-musl)
-    ffi (1.17.4-arm64-darwin)
-    ffi (1.17.4-x86_64-darwin)
-    ffi (1.17.4-x86_64-linux-gnu)
-    ffi (1.17.4-x86_64-linux-musl)
-    globalid (1.4.0)
+    ffi (1.17.3-aarch64-linux-gnu)
+    ffi (1.17.3-aarch64-linux-musl)
+    ffi (1.17.3-arm-linux-gnu)
+    ffi (1.17.3-arm-linux-musl)
+    ffi (1.17.3-arm64-darwin)
+    ffi (1.17.3-x86_64-darwin)
+    ffi (1.17.3-x86_64-linux-gnu)
+    ffi (1.17.3-x86_64-linux-musl)
+    globalid (1.3.0)
      activesupport (>= 6.1)
+    i18n (1.14.8)
+      concurrent-ruby (~> 1.0)
    importmap-rails (2.2.3)
      actionpack (>= 6.0.0)
      activesupport (>= 6.0.0)
      railties (>= 6.0.0)
-    io-console (0.9.4)
-    irb (1.18.0)
+    io-console (0.8.2)
+    irb (1.17.0)
      pp (>= 0.6.0)
      prism (>= 1.3.0)
      rdoc (>= 4.0.0)
      reline (>= 0.4.2)
-    json (3.0.2)
    logger (1.7.0)
-    loofah (2.25.2)
+    loofah (2.25.0)
      crass (~> 1.0.2)
      nokogiri (>= 1.12.0)
-    mail (2.9.1)
+    mail (2.9.0)
      logger
      mini_mime (>= 0.1.1)
      net-imap
      net-pop
      net-smtp
-    marcel (1.2.1)
+    marcel (1.1.0)
    matrix (0.4.3)
    mini_mime (1.1.5)
-    minitest (6.0.6)
-      drb (~> 2.0)
-      prism (~> 1.5)
+    minitest (5.27.0)
    mysql2 (0.5.7)
      bigdecimal
-    net-imap (0.6.7)
+    net-imap (0.6.3)
      date
      net-protocol
    net-pop (0.1.2)
      net-protocol
-    net-protocol (0.4.0)
+    net-protocol (0.2.2)
      timeout
-    net-smtp (0.5.2)
+    net-smtp (0.5.1)
      net-protocol
    nio4r (2.7.5)
-    nokogiri (1.19.4-aarch64-linux-gnu)
+    nokogiri (1.19.1-aarch64-linux-gnu)
      racc (~> 1.4)
-    nokogiri (1.19.4-aarch64-linux-musl)
+    nokogiri (1.19.1-aarch64-linux-musl)
      racc (~> 1.4)
-    nokogiri (1.19.4-arm-linux-gnu)
+    nokogiri (1.19.1-arm-linux-gnu)
      racc (~> 1.4)
-    nokogiri (1.19.4-arm-linux-musl)
+    nokogiri (1.19.1-arm-linux-musl)
      racc (~> 1.4)
-    nokogiri (1.19.4-arm64-darwin)
+    nokogiri (1.19.1-arm64-darwin)
      racc (~> 1.4)
-    nokogiri (1.19.4-x86_64-darwin)
+    nokogiri (1.19.1-x86_64-darwin)
      racc (~> 1.4)
-    nokogiri (1.19.4-x86_64-linux-gnu)
+    nokogiri (1.19.1-x86_64-linux-gnu)
      racc (~> 1.4)
-    nokogiri (1.19.4-x86_64-linux-musl)
+    nokogiri (1.19.1-x86_64-linux-musl)
      racc (~> 1.4)
    orm_adapter (0.5.0)
-    pg (1.7.0)
-    pg (1.7.0-aarch64-linux)
-    pg (1.7.0-aarch64-linux-musl)
-    pg (1.7.0-arm64-darwin)
-    pg (1.7.0-x86_64-darwin)
-    pg (1.7.0-x86_64-linux)
-    pg (1.7.0-x86_64-linux-musl)
-    pp (0.6.4)
+    pg (1.6.3)
+    pg (1.6.3-aarch64-linux)
+    pg (1.6.3-aarch64-linux-musl)
+    pg (1.6.3-arm64-darwin)
+    pg (1.6.3-x86_64-darwin)
+    pg (1.6.3-x86_64-linux)
+    pg (1.6.3-x86_64-linux-musl)
+    pp (0.6.3)
      prettyprint
    prettyprint (0.2.0)
    prism (1.9.0)
-    public_suffix (7.0.5)
+    psych (5.3.1)
+      date
+      stringio
+    public_suffix (7.0.2)
    puma (6.6.1)
      nio4r (~> 2.0)
    racc (1.8.1)
-    rack (3.2.7)
-    rack-session (2.1.2)
+    rack (3.2.5)
+    rack-session (2.1.1)
      base64 (>= 0.1.0)
      rack (>= 3.0.0)
    rack-test (2.2.0)
      rack (>= 1.3)
    rackup (2.3.1)
      rack (>= 3)
-    rails (8.1.4)
-      actioncable (= 8.1.4)
-      actionmailbox (= 8.1.4)
-      actionmailer (= 8.1.4)
-      actionpack (= 8.1.4)
-      actiontext (= 8.1.4)
-      actionview (= 8.1.4)
-      activejob (= 8.1.4)
-      activemodel (= 8.1.4)
-      activerecord (= 8.1.4)
-      activestorage (= 8.1.4)
-      activesupport (= 8.1.4)
+    rails (7.2.3)
+      actioncable (= 7.2.3)
+      actionmailbox (= 7.2.3)
+      actionmailer (= 7.2.3)
+      actionpack (= 7.2.3)
+      actiontext (= 7.2.3)
+      actionview (= 7.2.3)
+      activejob (= 7.2.3)
+      activemodel (= 7.2.3)
+      activerecord (= 7.2.3)
+      activestorage (= 7.2.3)
+      activesupport (= 7.2.3)
      bundler (>= 1.15.0)
-      railties (= 8.1.4)
+      railties (= 7.2.3)
    rails-dom-testing (2.3.0)
      activesupport (>= 5.0.0)
      minitest
      nokogiri (>= 1.6)
-    rails-html-sanitizer (1.7.1)
-      loofah (~> 2.25, >= 2.25.2)
+    rails-html-sanitizer (1.7.0)
+      loofah (~> 2.25)
      nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
-    railties (8.1.4)
-      actionpack (= 8.1.4)
-      activesupport (= 8.1.4)
+    railties (7.2.3)
+      actionpack (= 7.2.3)
+      activesupport (= 7.2.3)
+      cgi
      irb (~> 1.13)
      rackup (>= 1.0.0)
      rake (>= 12.2)
      thor (~> 1.0, >= 1.2.2)
      tsort (>= 0.2)
      zeitwerk (~> 2.6)
-    rake (13.4.2)
-    rbs (4.2.0)
-      logger
-      prism (>= 1.6.0)
-      tsort
-    rdoc (8.1.0)
+    rake (13.3.1)
+    rdoc (7.2.0)
      erb
-      prism (>= 1.6.0)
-      rbs (>= 4.0.0)
+      psych (>= 4.0.0)
      tsort
-    regexp_parser (2.13.1)
-    reline (0.7.0)
+    regexp_parser (2.11.3)
+    reline (0.6.3)
      io-console (~> 0.5)
-    responders (3.2.1)
+    responders (3.2.0)
      actionpack (>= 7.0)
      railties (>= 7.0)
-    rubyzip (3.7.0)
+    rexml (3.4.4)
+    rubyzip (3.2.2)
    sassc (2.4.0)
      ffi (~> 1.9)
    sassc-rails (2.1.2)
@@ -259,52 +251,54 @@ GEM
      sprockets-rails
      tilt
    securerandom (0.4.1)
-    selenium-webdriver (4.50.0)
+    selenium-webdriver (4.41.0)
      base64 (~> 0.2)
      logger (~> 1.4)
+      rexml (~> 3.2, >= 3.2.5)
      rubyzip (>= 1.2.2, < 4.0)
      websocket (~> 1.0)
-    sprockets (4.4.1)
-      concurrent-ruby (~> 1.1)
+    sprockets (4.2.2)
+      concurrent-ruby (~> 1.0)
      logger
      rack (>= 2.2.4, < 4)
    sprockets-rails (3.5.2)
      actionpack (>= 6.1)
      activesupport (>= 6.1)
      sprockets (>= 3.0.0)
-    sqlite3 (2.9.6-aarch64-linux-gnu)
-    sqlite3 (2.9.6-aarch64-linux-musl)
-    sqlite3 (2.9.6-arm-linux-gnu)
-    sqlite3 (2.9.6-arm-linux-musl)
-    sqlite3 (2.9.6-arm64-darwin)
-    sqlite3 (2.9.6-x86_64-darwin)
-    sqlite3 (2.9.6-x86_64-linux-gnu)
-    sqlite3 (2.9.6-x86_64-linux-musl)
+    sqlite3 (2.9.0-aarch64-linux-gnu)
+    sqlite3 (2.9.0-aarch64-linux-musl)
+    sqlite3 (2.9.0-arm-linux-gnu)
+    sqlite3 (2.9.0-arm-linux-musl)
+    sqlite3 (2.9.0-arm64-darwin)
+    sqlite3 (2.9.0-x86_64-darwin)
+    sqlite3 (2.9.0-x86_64-linux-gnu)
+    sqlite3 (2.9.0-x86_64-linux-musl)
+    stringio (3.2.0)
    thor (1.5.0)
-    tilt (2.9.0)
-    timeout (0.6.1)
+    tilt (2.7.0)
+    timeout (0.6.0)
    tsort (0.2.0)
    turbo-rails (2.0.23)
      actionpack (>= 7.1.0)
      railties (>= 7.1.0)
    tzinfo (2.0.6)
      concurrent-ruby (~> 1.0)
-    uri (1.1.1)
    useragent (0.16.11)
    warden (1.2.9)
      rack (>= 2.0.9)
-    web-console (4.3.0)
-      actionview (>= 8.0.0)
+    web-console (4.2.1)
+      actionview (>= 6.0.0)
+      activemodel (>= 6.0.0)
      bindex (>= 0.4.0)
-      railties (>= 8.0.0)
+      railties (>= 6.0.0)
    websocket (1.2.11)
-    websocket-driver (0.8.2)
+    websocket-driver (0.8.0)
      base64
      websocket-extensions (>= 0.1.0)
    websocket-extensions (0.1.5)
    xpath (3.2.0)
      nokogiri (~> 1.8)
-    zeitwerk (2.8.3)
+    zeitwerk (2.7.5)

 PLATFORMS
  aarch64-linux-gnu
@@ -319,13 +313,13 @@ PLATFORMS
 DEPENDENCIES
  byebug
  capybara
-  devise (~> 5.0.4)
-  i18n!
+  devise
  importmap-rails
+  minitest (< 6)
  mysql2 (~> 0.5)
  pg (~> 1.5)
  puma (~> 6.0)
-  rails (~> 8.1.4)
+  rails (~> 7.2.3)
  sassc-rails
  selenium-webdriver
  sprockets-rails
@@ -16,10 +16,14 @@ environment, see the _Contributing_ section below.
 * Server side:
    * Ruby interpreter, depending on the version of Rails used (see _Gemfile_),
        * https://guides.rubyonrails.org/upgrading_ruby_on_rails.html#ruby-versions
-    * database (e.g. SQLite, MySQL >= 8.0) supporting:
+    * database (e.g. MySQL >= 8.0) supporting:
        * recursive Common Table Expressions (CTE) for SELECT/UPDATE/DELETE,
            * MariaDB does not support CTE for UPDATE/DELETE
              (https://jira.mariadb.org/browse/MDEV-18511)
+        * decimal datatype with precision of at least 30,
+            * SQLite3 _flexible typing_ decimal will work, but precision
+              will be limited to 16, making it practical mostly for testing
+              purposes
    * for testing: browser as specified in _Client side_ requirements
 * Client side:
    * browser (e.g. Firefox >= 121) supporting:
@@ -85,10 +89,14 @@ Running

 ### Standalone Rails server + Apache proxy

-Copy and customize Puma config template if required:
+Customize Puma config template:

    cp -a config/puma.rb.dist config/puma.rb

+and specify server IP/port, either with `port` or `bind`, e.g.:
+
+    bind 'tcp://0.0.0.0:3000'
+
 #### (option 1) Start server manually

    bundle exec rails s -e production
@@ -115,26 +123,9 @@ Contributing

 ### Gems

-Install development and testing gems, including at least MySQL and SQLite
-database adapters:
+Apart from database adapter, install development and testing gems:

-    bundle config --local with development test mysql sqlite
-
-#### Using gems from local git repos
-
-When working on gem PRs, it may be useful to work with proposed changes locally
-until PRs get accepted upstream. To add gem hosted in local git repository:
-
-    bundle config set local.capybara /var/www/tmp/capybara
-
-Add gem to `Gemfile`:
-
-  gem "capybara", git: "https://github.com/teamcapybara/capybara", branch: "branch-name"
-
-and install:
-
-    bundle install
-    bundle show capybara
+    bundle config --local with mysql development test

 ### Configuration

@@ -147,29 +138,20 @@ assets.

 ### Database

-Grant database user privileges for development and test environments. Example
-below shows how to grant privileges to all databases which names start with
-`fixinme-` on MySQL:
+Grant database user privileges for development and test environments,
+possibly with different Ruby versions:

    > mysql -p
    mysql> create user `fixinme-dev`@localhost identified by '<some password>';
    mysql> grant all privileges on `fixinme-%`.* to `fixinme-dev`@localhost;
    mysql> flush privileges;

-Dumping development data before database reset:
-
-    mysqldump -h <address> -u <user> -p --no-create-info --no-tablespaces --complete-insert <database> > tmp/data.sql
-
 ### Development environment

 Starting application server in development environment:

    bundle exec rails s -e development

-Accessing database console when more than one test db is present:
-
-    bundle exec rails dbconsole -e test --db sqlite3
-
 For running rake tasks, prepend command with environment:

    RAILS_ENV=development bundle exec rails ...
@@ -182,22 +164,14 @@ Tests need to be run from within toplevel application directory:

        bundle exec rails test:system

-* system test(s) with seed or test name specified:
+* system test(s) with seed/test name specified:

-        bundle exec rails test:system --include test_add_unit --seed 64690
+        bundle exec rails test:system --seed 64690 --name test_add_unit

-* all tests from one file, optionally with seed:
+* all tests from one file, with optional seed:

        bundle exec rails test test/system/users_test.rb --seed 1234

-* system tests for selected database configuration (if multiple present):
-
-        bundle exec rails test:system --include /^test_sqlite3_/
-
-* single system test for all database configurations (if multiple present):
-
-        bundle exec rails test:system --include /^test_\\w+_add_unit$/
-
 ### Icons

 Pictogrammers Material Design Icons: https://pictogrammers.com/library/mdi/
@@ -18,12 +18,14 @@
 /* Strive for simplicity:
 * * style elements/tags only - if possible,
 * * replace element/tag name with class name - if element has to be styled
- * differently depending on context (e.g. <form>, <table>, <a> as link/button),
+ * differently depending on context (e.g. <form>; <a> as link/button),
 * * styles with multiple selectors should have all selectors with same
 * specificity, to allow proper rule specificity vs order management.
 *
 * NOTE: style in a modular way, similar to how CSS @scope would be used,
 * to make transition easier once @scope is widely available. */
+/* TODO: review styles with multiple selectors and try to convert them to the same
+ * specificity. */
 :root {
  --color-focus-gray: #f3f3f3;
  --color-border-gray: #dddddd;
@@ -55,24 +57,8 @@
 :focus-visible {
  outline: none;
 }
-/* NOTE: move to higher priority layer instead of using !important?; add CSS
- * @layer requirements in README */
-/* Disable elements with:
- *  `[aria-disabled=true]` - non-form elements (e.g. links),
- *  `[disabled]` - form controls, that may be enabled conditionally,
- *  `[readonly]` - form controls, that stay disabled for form lifetime. */
-[aria-disabled=true],
-[disabled] {
-  border-color: var(--color-border-gray) !important;
-  color: var(--color-border-gray) !important;
-  /* NOTE: cannot set cursor when `pointer-events: none`; can be fixed by setting
-   * `cursor` on wrapping element.
-  cursor: not-allowed; */
-  fill: var(--color-border-gray) !important;
-  pointer-events: none !important;
-}
-/* Styles set `display` without distinguishing between [hidden] elements, making
- * them visible. */
+
+/* [hidden] submit elements cannot have `display` set as it makes them visible. */
 [hidden] {
  display: none !important;
 }
@@ -83,13 +69,10 @@
 *  gray - target for interaction with keyboard,
 *  red - destructive, non-undoable action.
 */
-/* TODO: merge selectors using :is() */
-a,
 button,
 details,
 input,
 select,
-summary,
 textarea {
  background-color: inherit;
  font: inherit;
@@ -107,14 +90,14 @@ textarea {
  border-radius: 0.25em;
  padding: 0.2em 0.4em;
 }
-svg {
-  height: 1.4em;
-  margin: 0 0.2em 0 0;
-  width: 1.4em;
-}
-svg:last-child {
-  margin-right: 0;
+[name=cancel],
+.auxiliary {
+  border-color: var(--color-border-gray);
+  color: var(--color-nav-gray);
+  fill: var(--color-nav-gray);
 }
+input[type=checkbox],
+svg,
 textarea {
  margin: 0;
 }
@@ -132,12 +115,11 @@ input[type=checkbox]:checked {
  appearance: checkbox;
  -webkit-appearance: checkbox;
 }
-/* Hide spin buttons of <input type=number>. */
-/* TODO: add spin buttons inside <input type=number>: before (-) and after (+) input. */
+/* Hide spin buttons in input number fields */
+/* TODO: add spin buttons inside input[number]: before (-) and after (+) input */
 input[type=number] {
  appearance: textfield;
  -moz-appearance: textfield;
-  text-align: end;
 }
 input::-webkit-inner-spin-button {
  -webkit-appearance: none;
@@ -146,30 +128,6 @@ input::-webkit-outer-spin-button {
  -webkit-appearance: none;
  margin: 0;
 }
-/* Text color of table form controls:
- *  - black for row/table forms,
- *  - inherited for internal (column specific) buttons/forms. */
-table input,
-table select,
-table summary,
-table textarea {
-  border-color: var(--color-border-gray);
-}
-table input,
-table select,
-table textarea {
-  padding-block: 0.375em;
-}
-table form input,
-table form select,
-table form summary,
-table form textarea {
-  color: inherit;
-}
-table svg:not(:only-child) {
-  height: 1.25em;
-  width: 1.25em;
-}
 input:focus-visible,
 select:focus-visible,
 select:focus-within,
@@ -178,7 +136,6 @@ summary:focus-visible,
 textarea:focus-visible {
  accent-color: var(--color-dark-blue);
  background-color: var(--color-focus-gray);
-  color: black;
 }
 input:hover,
 select:hover,
@@ -189,25 +146,14 @@ textarea:hover {
 }
 select:hover,
 summary:hover {
-  color: black;
  cursor: pointer;
 }
-/* TODO: style <details>/<summary> focus to match <select> as much as possible.
-summary:focus-visible::before,
-summary:hover::before {
-  background-color: black;
-}
- */
 input:invalid,
 select:invalid,
 textarea:invalid {
  border-color: var(--color-red);
  outline-color: var(--color-red);
 }
-pre {
-  display: inline;
-  font: inherit;
-}

 /* `.button`: button-styled <a>, <button>, <input type=submit>.
 * `.link`: any other <a>.
@@ -235,21 +181,20 @@ pre {
  padding: 0.6em 0.5em;
  width: fit-content;
 }
-.link {
-  color: inherit;
-  text-decoration: underline 1px var(--color-border-gray);
-  text-underline-offset: 0.25em;
-}
+[name=cancel],
 .auxiliary {
-  border-color: var(--color-nav-gray);
+  border-color: var(--color-border-gray);
  color: var(--color-nav-gray);
  fill: var(--color-nav-gray);
 }
-table .button {
-  border-color: var(--color-border-gray);
-  font-weight: normal;
-  height: 100%;
-  padding: 0.4em;
+.button > svg,
+.tab > svg {
+  height: 1.4em;
+  width: 1.4em;
+}
+.button > svg:not(:last-child),
+.tab > svg:not(:last-child) {
+  margin-right: 0.2em;
 }
 .button:focus-visible,
 .tab:focus-visible,
@@ -266,12 +211,13 @@ table .button {
  background-color: var(--color-red);
  border-color: var(--color-red);
 }
-.link:focus-visible {
-  text-decoration-color: var(--color-gray);
-}
-.link:hover {
-  color: var(--color-blue);
-  text-decoration-color: var(--color-blue);
+/* TODO: move normal, non-button links (<a>:hover/:focus) styling here (i.e.
+ * page-wide, top-level) and remove from `table.items` - as the style should be
+ * same everywhere. */
+input[type=text]:read-only,
+textarea:read-only {
+  border: none;
+  padding-inline: 0;
 }


@@ -284,16 +230,16 @@ body {
  grid-template-areas:
    "header    header  header"
    "nav       nav     nav"
+    "leftside  topside rightside"
    "leftside  main    rightside";
  grid-template-columns: 1fr minmax(max-content, 2fr) 1fr;
  font-family: system-ui;
  margin: 0.4em;
 }
-body:has(> .topside-area) {
+body:not(:has(.topside-area)) {
  grid-template-areas:
    "header    header  header"
    "nav       nav     nav"
-    "leftside  topside rightside"
    "leftside  main    rightside";
 }

@@ -367,21 +313,21 @@ header {
  line-height: 2.2em;
  pointer-events: auto;
 }
-.flash::before {
-  filter: invert(1);
+.flash:before {
+  filter: invert();
  height: 1.4em;
  margin: 0 0.5em;
  width: 1.4em;
 }
-.flash.alert::before {
-  content: url('alert-outline.svg');
+.flash.alert:before {
+  content: url('pictograms/alert-outline.svg');
 }
 .flash.alert {
  border-color: var(--color-red);
  background-color: var(--color-red);
 }
-.flash.notice::before {
-  content: url('check-circle-outline.svg');
+.flash.notice:before {
+  content: url('pictograms/check-circle-outline.svg');
 }
 .flash.notice {
  border-color: var(--color-blue);
@@ -400,6 +346,7 @@ header {
 }


+/* TODO: Hover over invalid should work like in measurements (thin vs thick border) */
 .labeled-form {
  align-items: center;
  display: grid;
@@ -436,82 +383,85 @@ header {
 .labeled-form .auxiliary {
  grid-column: 3;
  /* If more buttons are needed, `grid-row` can be replaced with
-   * `reading-flow: grid-columns` to ensure proper [tabindex] order. */
+   * `reading-flow: grid-columns` to ensure proper tabindex order */
  grid-row: 1;
  height: 100%;
  padding-block: 0;
 }

-.tabular-form table {
-  border: none;
-  border-spacing: 0;
-}
-.tabular-form table td {
-  border: none;
-  padding-inline-start: 0.4em;
-  vertical-align: middle;
-}
-.tabular-form table td:first-child {
-  padding-inline-start: 0;
-}
-.tabular-form table td:last-child {
-  padding-inline-end: 0;
-}
-.tabular-form table :is(form, input, select, textarea):only-child {
-  margin-inline-start: 0;
-}

-
-.items-table {
+/* TODO: remove `.items` class (?) and make `form table` work properly. */
+table.items {
  border-spacing: 0;
  border: 1px solid var(--color-border-gray);
  border-radius: 0.25em;
  font-size: 0.85rem;
  text-align: left;
 }
-.items-table thead {
+table:not(:has(tr)) {
+  display: none;
+}
+table.items thead {
  font-size: 0.8rem;
 }
-.items-table thead,
-.items-table tbody tr:hover {
+table.items thead,
+table.items tbody tr:hover {
  background-color: var(--color-focus-gray);
 }
-.items-table th {
-  padding: 0.75em 0 0.75em 1em;
+table.items th {
+  padding-block: 0.75em;
  text-align: center;
 }
-.items-table th:last-child {
-  padding-inline-end: 0.4em;
+table.items th,
+table.items td {
+  padding-inline: 1em 0;
 }
-.items-table td {
-  border-top: 1px solid var(--color-border-gray);
-  height: 2.4em;
-  padding: 0.1em 0 0.1em calc(1em + var(--depth) * 0.8em);
-}
-.items-table td:last-child {
-  padding-inline-end: 0.1em;
-}
-.items-table :is(form, input, select, textarea):only-child {
-  margin-inline-start: calc(-0.4em - 0.9px);
-}
-/* For <a> to fill table cell completely, we use an `::after` pseudoelement. */
-/* TODO: expand to whole row? will require adjusting z-index on inputs/buttons */
-.items-table td:has(> .link) {
+/* For <a> to fill <td> completely, we use an `::after` pseudoelement. */
+table.items td.link {
+  padding: 0;
  position: relative;
 }
-.items-table .link::after {
+table.items td.link a {
+  color: inherit;
+  font: inherit;
+}
+table.items td.link a::after {
  content: '';
-  inset: -1px 0 0 0;
+  inset: 0;
  position: absolute;
 }
-.items-table .flex {
+table.items td:first-child {
+  padding-inline-start: calc(1em + var(--depth) * 0.8em);
+}
+table.items td:has(input, select, textarea) {
+  padding-inline-start: calc(0.6em - 0.9px);
+}
+table.items td:first-child:has(input, select, textarea) {
+  padding-inline-start: calc(0.6em + var(--depth) * 0.8em - 0.9px);
+}
+table.items th:last-child {
+  padding-inline-end: 0.4em;
+}
+table.items td:last-child {
+  padding-inline-end: 0.1em;
+}
+table.items td {
+  border-top: 1px solid var(--color-border-gray);
+  height: 2.4em;
+  padding-block: 0.1em;
+}
+table.items .actions {
+  display: flex;
  gap: 0.4em;
  justify-content: end;
 }
-.items-table .dropzone {
+table.items .actions.centered {
+  justify-content: center;
+}
+table.items tr.dropzone {
  position: relative;
 }
-.items-table .dropzone::after {
+table.items tr.dropzone::after {
  content: '';
  inset: 1px 0 0 0;
  position: absolute;
@@ -519,57 +469,123 @@ header {
  outline-offset: -1px;
  z-index: var(--z-index-table-row-outline);
 }
-.items-table .handle {
-  cursor: grab;
+table.items td.handle {
+  cursor: move;
 }
-.items-table .form td {
+table.items tr.form td {
  vertical-align: top;
 }
-.items-table td:not(:first-child),
+
+/* TODO: replace `:hover:focus-visible` combos with proper LOVE style order. */
+/* TODO: update table styling: simplify selectors, deduplicate, remove non-font rem. */
+table.items td.link a:hover,
+table.items td.link a:focus-visible,
+table.items td.link a:hover:focus-visible {
+  text-decoration: underline;
+  text-decoration-thickness: 0.05rem;
+  text-underline-offset: 0.2rem;
+}
+table.items td.link a:hover {
+  color: var(--color-blue);
+}
+table.items td.link a:focus-visible {
+  text-decoration-color: var(--color-gray);
+}
+table.items td.link a:hover:focus-visible {
+  color: var(--color-dark-blue);
+}
+
+table.items td:not(:first-child),
 .grayed {
  color: var(--color-table-gray);
-  fill: var(--color-gray);
+  fill: var(--color-table-gray);
 }
-.items-table td:has(> svg:only-child) {
+table.items svg {
+  height: 1rem;
+  vertical-align: middle;
+  width: 1rem;
+}
+table.items svg:last-child {
+  height: 1.2rem;
+  width: 1.2rem;
+}
+table.items td.svg {
  text-align: center;
 }
+table.items td.number {
+  text-align: right;
+}
+table.items .button {
+  font-weight: normal;
+  height: 100%;
+  padding: 0.4em;
+}
+table.items input:not([type=submit]):not([type=checkbox]),
+table.items select,
+table.items textarea {
+  padding-block: 0.375em;
+}
+
+table input,
+table select,
+table summary,
+table textarea {
+  border-color: var(--color-border-gray);
+}
+table select {
+  color: var(--color-table-gray);
+}
+table select:hover,
+table select:focus-within,
+table select:focus-visible {
+  color: black;
+}
+table .button {
+  border-color: var(--color-border-gray);
+  color: var(--color-table-gray);
+}


-.center {
+form table.items {
+  border: none;
+}
+form table.items td {
+  border: none;
+  text-align: left;
+  vertical-align: middle;
+}
+form table.items td:first-child {
+  color: inherit;
+}
+form table select {
+  color: black;
+}
+
+
+.centered {
  margin: 0 auto;
 }
+.extendedright {
+  margin-right: auto;
+}
 .hexpand {
  width: 100%;
 }
-.flex {
+.hflex {
  display: flex;
  gap: 0.8em;
 }
-.flex.reverse {
-  flex-direction: row-reverse;
+.hflex.centered {
+  justify-content: center;
 }
-.flex.vertical {
+.vexpand {
+  width: 100%;
+}
+.vflex {
+  display: flex;
+  gap: 0.8em;
  flex-direction: column;
 }
-.hint {
-  color: var(--color-table-gray);
-  font-style: italic;
-  font-size: 0.9rem;
-  text-align: center;
-}
-.hmin50 {
-  min-width: 50%;
-}
-.italic {
-  color: var(--color-gray);
-  font-style: italic;
-}
-.ralign {
-  text-align: right;
-}
-.rextend {
-  margin-right: auto;
-}


 details {
@@ -580,15 +596,15 @@ summary {
  align-items: center;
  color: var(--color-gray);
  display: flex;
-  gap: 0.4em;
+  gap: 0.2em;
  height: 100%;
  white-space: nowrap;
 }
 summary::before {
-  background-color: currentColor;
+  background-color: #000;
  content: "";
  height: 1em;
-  mask-image: url('chevron-down.svg');
+  mask-image: url('pictograms/chevron-down.svg');
  mask-size: cover;
  width: 1em;
 }
@@ -608,14 +624,14 @@ summary span {
  width: 100%;
 }
 details[open] summary::before {
-  transform: scaleY(-1);
+  transform: rotate(180deg);
 }
 summary::marker {
  padding-left: 0.25em;
 }
 /* NOTE: use `details[open]::details-content` once widely available. */
 details[open] ul {
-  background-color: white;
+  background: white;
  border: 1px solid var(--color-border-gray);
  border-radius: 0.25em;
  box-shadow: 1px 1px 3px var(--color-border-gray);
@@ -645,8 +661,3 @@ li::marker {
 * * focused label styling (currently only checkbox has focus),
 * * disabled checkbox blue square focus removal.
 * */
-
-#measurement_form {
-  min-width: 66%;
-  width: max-content;
-}
@@ -9,6 +9,7 @@ class ApplicationController < ActionController::Base
  helper_method :current_user_disguised?
  helper_method :current_tab

+  before_action :redirect_to_setup_if_needed
  before_action :authenticate_user!

  class AccessForbidden < StandardError; end
@@ -55,9 +56,19 @@ class ApplicationController < ActionController::Base

  private

-  def render_errors(record)
-    target = record.new_record? ? [:new, record.parent || record.class] : [:edit, record]
-    render 'errors', assigns: {record: record, target: target}
+  # Redirect to the web setup wizard when the application has not yet been
+  # initialised (i.e. no admin account exists in the database).
+  def redirect_to_setup_if_needed
+    return if User.exists?(status: :admin)
+    redirect_to new_setup_path
+  rescue ActiveRecord::StatementInvalid
+    # Tables may not exist yet (migrations not run). Fall through and let the
+    # normal request handling surface a meaningful error.
+  end
+
+  def render_no_content(record)
+    helpers.render_errors(record)
+    render html: nil, layout: true
  end

  def rescue_turbo(exception)
@@ -17,7 +17,7 @@ class Default::UnitsController < ApplicationController

  def import
    @unit.port!(current_user)
-    flash.now.notice = t('.success', unit: @unit)
+    flash.now[:notice] = t('.success', unit: @unit)
  ensure
    run_and_render :index
  end
@@ -30,14 +30,14 @@ class Default::UnitsController < ApplicationController

  def export
    @unit.port!(nil)
-    flash.now.notice = t('.success', unit: @unit)
+    flash.now[:notice] = t('.success', unit: @unit)
  ensure
    run_and_render :index
  end

  def destroy
    @unit.destroy!
-    flash.now.notice = t('.success', unit: @unit)
+    flash.now[:notice] = t('.success', unit: @unit)
  ensure
    run_and_render :index
  end
@@ -1,7 +1,13 @@
 class MeasurementsController < ApplicationController
+  before_action except: :index do
+    raise AccessForbidden unless current_user.at_least(:active)
+  end
+
  def index
-    @measurements = []
-    #@measurements = current_user.units.ordered.includes(:base, :subunits)
+    readouts = current_user.readouts.includes(:quantity, :unit).order(created_at: :desc)
+    @measurements = readouts.group_by(&:created_at).map do |created_at, grouped|
+      Measurement.new(created_at: created_at, readouts: grouped)
+    end
  end

  def new
@@ -9,8 +15,33 @@ class MeasurementsController < ApplicationController
  end

  def create
+    timestamp = Time.current
+    @readouts = readout_params.map do |rp|
+      r = current_user.readouts.new(rp)
+      r.created_at = timestamp
+      r
+    end
+
+    if @readouts.all?(&:valid?)
+      Readout.transaction { @readouts.each(&:save!) }
+      @measurement = Measurement.new(readouts: @readouts, created_at: timestamp)
+      flash.now[:notice] = t('.success')
+    else
+      render :new, status: :unprocessable_entity
+    end
  end

  def destroy
+    @measurement = Measurement.new(id: params[:id].to_i,
+                                   created_at: Time.at(params[:id].to_i))
+    current_user.readouts.where(created_at: @measurement.created_at).delete_all
+    @measurements_empty = current_user.readouts.empty?
+    flash.now[:notice] = t('.success')
+  end
+
+  private
+
+  def readout_params
+    params.require(:readouts).map { |r| r.permit(:quantity_id, :value, :unit_id) }
  end
 end
@@ -21,7 +21,7 @@ class QuantitiesController < ApplicationController
    if @quantity.save
      @before = @quantity.successive
      @ancestors = @quantity.ancestors
-      flash.now.notice = t('.success', quantity: @quantity)
+      flash.now[:notice] = t('.success', quantity: @quantity)
    else
      render :new
    end
@@ -33,7 +33,7 @@ class QuantitiesController < ApplicationController
  def update
    if @quantity.update(quantity_params.except(:parent_id))
      @ancestors = @quantity.ancestors
-      flash.now.notice = t('.success', quantity: @quantity)
+      flash.now[:notice] = t('.success', quantity: @quantity)
    else
      render :edit
    end
@@ -43,21 +43,18 @@ class QuantitiesController < ApplicationController
    permitted = params.require(:quantity).permit(:parent_id)
    @previous_ancestors = @quantity.ancestors

-    if @quantity.update(permitted)
-      @ancestors = @quantity.ancestors
-      @self_and_progenies = @quantity.with_progenies
-      @before = @self_and_progenies.last.successive
-    else
-      # Until UI blocks all disallowed reparents, render error messages if present.
-      flash.now.alert = @quantity.errors.full_messages
-      render :nothing
-    end
+    # Until UI blocks all disallowed reparents, render error messages if present
+    render_no_content(@quantity) unless @quantity.update(permitted)
+
+    @ancestors = @quantity.ancestors
+    @self_and_progenies = @quantity.with_progenies
+    @before = @self_and_progenies.last.successive
  end

  def destroy
    @quantity.destroy!
    @ancestors = @quantity.ancestors
-    flash.now.notice = t('.success', quantity: @quantity)
+    flash.now[:notice] = t('.success', quantity: @quantity)
  end

  private
@@ -1,16 +1,23 @@
 class ReadoutsController < ApplicationController
-  before_action :find_quantities, only: [:new]
-  before_action :find_quantity, only: [:discard]
+  before_action :find_quantity, only: [:new, :discard]
  before_action :find_prev_quantities, only: [:new, :discard]

  def new
-    @quantities -= @prev_quantities
-    # TODO: raise ParameterInvalid if new_quantities.empty?
-    @readouts = @quantities.map { |q| q.readouts.build }
+    new_quantities =
+      case params[:button]
+      when 'children'
+        @quantity.subquantities
+      when 'subtree'
+        @quantity.progenies
+      else
+        [@quantity]
+      end
+    new_quantities -= @prev_quantities
+    @readouts = current_user.readouts.build(new_quantities.map { |q| {quantity: q} })

    @user_units = current_user.units.ordered

-    quantities = @prev_quantities + @quantities
+    quantities = @prev_quantities + new_quantities
    @superquantity = current_user.quantities
      .common_ancestors(quantities.map(&:parent_id)).first
  end
@@ -24,9 +31,6 @@ class ReadoutsController < ApplicationController

  private

-  def find_quantities
-    @quantities = current_user.quantities.find(params[:quantity])
-  end

  def find_quantity
    @quantity = current_user.quantities.find_by!(id: params[:id])
@@ -0,0 +1,59 @@
+# Handles the one-time web-based installation wizard.
+#
+# The wizard is only accessible when no admin account exists yet.  Once an
+# admin has been created the controller redirects every request to the root
+# path, so it can never be used to overwrite an existing installation.
+class SetupController < ActionController::Base
+  # Use the full application layout (header, flash, etc.) so the page looks
+  # consistent with the rest of the site.
+  layout "application"
+
+  before_action :redirect_if_installed
+
+  def new
+  end
+
+  def create
+    email    = params[:admin_email].to_s.strip
+    password = params[:admin_password].to_s
+    confirm  = params[:admin_password_confirmation].to_s
+
+    errors = []
+    errors << t(".email_blank")    if email.blank?
+    errors << t(".password_blank") if password.blank?
+    errors << t(".password_mismatch") if password != confirm
+
+    if errors.any?
+      flash.now[:alert] = errors.join("  ")
+      return render :new, status: :unprocessable_entity
+    end
+
+    user = User.new(email: email, password: password, status: :admin)
+    user.skip_confirmation!
+
+    unless user.save
+      flash.now[:alert] = user.errors.full_messages.join("  ")
+      return render :new, status: :unprocessable_entity
+    end
+
+    # Persist runtime settings chosen during setup.
+    Setting.set("skip_email_confirmation",
+                params[:skip_email_confirmation] == "1")
+
+    # Optionally seed the built-in default units.
+    if params[:seed_units] == "1"
+      load Rails.root.join("db/seeds/units.rb")
+    end
+
+    redirect_to new_user_session_path, notice: t(".success")
+  end
+
+  private
+
+  def redirect_if_installed
+    redirect_to root_path if User.exists?(status: :admin)
+  rescue ActiveRecord::StatementInvalid
+    # Tables are not yet migrated — stay on the setup page so the user sees a
+    # meaningful error rather than a crash.
+  end
+end
@@ -1,9 +1,10 @@
 class UnitsController < ApplicationController
-  before_action ->{ @unit = current_user.units.find_by!(id: params[:id]) },
-    only: [:new, :edit, :update, :rebase, :destroy],
-    unless: ->{ action_name == "new" && params[:id].nil? }
+  before_action only: :new do
+    find_unit if params[:id].present?
+  end
+  before_action :find_unit, only: [:edit, :update, :rebase, :destroy]

-  before_action except: [:index] do
+  before_action except: :index do
    raise AccessForbidden unless current_user.at_least(:active)
  end

@@ -16,12 +17,12 @@ class UnitsController < ApplicationController
  end

  def create
-    @unit = current_user.units.new(params.expect(Unit::ATTRIBUTES))
+    @unit = current_user.units.new(unit_params)
    if @unit.save
      @before = @unit.successive
-      flash.now.notice = t('.success', unit: @unit)
+      flash.now[:notice] = t('.success', unit: @unit)
    else
-      render_errors @unit
+      render :new
    end
  end

@@ -29,32 +30,40 @@ class UnitsController < ApplicationController
  end

  def update
-    if @unit.update(params.except(:base_id).expect(Unit::ATTRIBUTES))
-      flash.now.notice = t('.success', unit: @unit)
+    if @unit.update(unit_params.except(:base_id))
+      flash.now[:notice] = t('.success', unit: @unit)
    else
-      render_errors @unit
+      render :edit
    end
  end

  # TODO: Avoid double table width change by first un-hiding table header,
  # then displaying index, e.g. by re-displaying header in index
  def rebase
-    unit_params = params.expect(unit: :base_id)
-    unit_params.merge!(multiplier: 1.0) if unit_params[:base_id].blank?
+    permitted = params.require(:unit).permit(:base_id)
+    permitted.merge!(multiplier: 1) if permitted[:base_id].blank? && @unit.multiplier != 1

    @previous_base = @unit.base
-    @unit.update!(unit_params)
+    @unit.update!(permitted)

    @before = @unit.successive
    if @unit.multiplier_previously_changed?
-      flash.now.notice = t(".multiplier_reset", unit: @unit)
+      flash.now[:notice] = t(".multiplier_reset", unit: @unit)
    end
  end

  def destroy
    @unit.destroy!
-    flash.now.notice = t('.success', unit: @unit)
+    flash.now[:notice] = t('.success', unit: @unit)
  end

  private
+
+  def unit_params
+    params.require(:unit).permit(Unit::ATTRIBUTES)
+  end
+
+  def find_unit
+    @unit = current_user.units.find_by!(id: params[:id])
+  end
 end
@@ -1,11 +1,24 @@
 class User::ProfilesController < Devise::RegistrationsController
  def destroy
-    # TODO: Disallow/disable deletion for last admin account; update :edit view
+    if current_user.sole_admin?
+      redirect_back fallback_location: edit_user_registration_path,
+        alert: t(".sole_admin")
+      return
+    end
    super
  end

  protected

+  def build_resource(hash = {})
+    super
+    # Skip the email confirmation step when the admin has enabled this option
+    # via the web setup wizard (stored as the "skip_email_confirmation" Setting).
+    # The account becomes active immediately so the user can sign in right after
+    # registering.
+    resource.skip_confirmation! if Setting.get("skip_email_confirmation") == "true"
+  end
+
  def update_resource(resource, params)
    # Based on update_with_password()
    if params[:password].blank?
@@ -40,7 +40,7 @@ module ApplicationHelper
      #   controller.action.* => helpers.label.model.* => activerecord.attributes.model.*
      # First 2 levels are translated recursively.
      label(method, class: classes) do |builder|
-        translation = I18n.with(**handler) { deep_translate(method, **options) }
+        translation = I18n.config.with(**handler) { deep_translate(method, **options) }
        translation.presence || "#{builder.translation}:"
      end
    end
@@ -91,21 +91,24 @@ module ApplicationHelper
    [:text_field, :password_field, :text_area].each do |selector|
      class_eval <<-RUBY_EVAL, __FILE__, __LINE__ + 1
        def #{selector}(method, options = {})
-          options[:maxlength] ||= object.type_for_attribute(method).limit
+          options[:maxlength] ||= object.class.type_for_attribute(method).limit
+          if object.errors.include?(method)
+            options[:pattern] = except_pattern(object.public_send(method), options[:pattern])
+          end
          super
        end
      RUBY_EVAL
    end

    def number_field(method, options = {})
-      case object.type_for_attribute(method).type
-      when :float, :double
-        options[:min] ||= Float::MIN_15.to_scientific
-        options[:max] ||= Float::MAX_15.to_scientific
-        options[:oninput] = 'numberValidate(event)'
-        options[:size] ||= 6
-        options[:step] ||= :any
-        options[:value] = object.public_send("#{method}_before_type_cast")
+      attr_type = object.type_for_attribute(method)
+      if attr_type.type == :decimal
+        options[:value] = object.public_send(method)&.to_scientific
+        options[:step] ||= BigDecimal(10).power(-attr_type.scale)
+        options[:max] ||= BigDecimal(10).power(attr_type.precision - attr_type.scale) -
+          options[:step]
+        options[:min] = options[:min] == :step ? options[:step] : options[:min]
+        options[:min] ||= -options[:max]
      end
      super
    end
@@ -124,7 +127,11 @@ module ApplicationHelper

    def submit_default_value
      svg_name = object ? (object.persisted? ? 'update' : 'plus-circle-outline') : ''
-      @template.svg_tag(svg_name, super)
+      @template.svg_tag("pictograms/#{svg_name}", super)
+    end
+
+    def except_pattern(value, pattern = nil)
+      "(?!^#{Regexp.escape(value)}$)" + (pattern || ".*")
    end
  end

@@ -135,19 +142,20 @@ module ApplicationHelper
    record_object, options = nil, record_object if record_object.is_a?(Hash)
    extra_options = {builder: TabularFormBuilder, skip_default_ids: true}
    options = merge_attributes(options, extra_options)
+    # TODO: set error message with setCustomValidity instead of rendering to flash?
+    render_errors(record_object || record_name)
    fields_for(record_name, record_object, **options, &block)
  end

  def tabular_form_with(**options, &block)
-    extra_options = {builder: TabularFormBuilder, class: 'tabular-form',
-                     html: {autocomplete: 'off'}}
+    extra_options = {builder: TabularFormBuilder, html: {autocomplete: 'off'}}
    form_with(**merge_attributes(options, extra_options), &block)
  end

  def svg_tag(source, label = nil, options = {})
    label, options = nil, label if label.is_a? Hash
    svg_tag = tag.svg(**options) do
-      tag.use(href: image_path("#{source}.svg") + '#icon')
+      tag.use(href: "#{image_path(source + ".svg")}#icon")
    end
    label.blank? ? svg_tag : svg_tag + tag.span(label)
  end
@@ -163,7 +171,7 @@ module ApplicationHelper

    menu_tabs.map do |name, image, status, css_class|
      if current_user.at_least(status)
-        link_to svg_tag(image, t("#{name}.navigation")),
+        link_to svg_tag("pictograms/#{image}", t("#{name}.navigation")),
          {controller: "/#{name}", action: "index"},
          class: class_names('tab', css_class, active: name == current_tab)
      end
@@ -195,19 +203,28 @@ module ApplicationHelper

  def image_link_to_unless_current(name, image = nil, options = nil, html_options = {})
    name, html_options = link_or_button_options(:link, name, image, html_options)
-    if current_page?(options, method: [:get, :post])
+    # NOTE: Starting from Rails 8.1.0, below condition can be replaced with:
+    #   current_page?(options, method: [:get, :post])
+    if request.path == url_for(options)
      html_options = html_options.deep_merge DISABLED_ATTRIBUTES
    end
    link_to name, options, html_options
  end

-  def render_flash
+  def render_errors(records)
+    # Conversion of flash to Array only required because of Devise
+    # TODO: override Devise message setting to Array()?
+    flash[:alert] = Array(flash[:alert])
+    Array(records).each { |record| flash[:alert] += record.errors.full_messages }
+  end
+
+  def render_flash_messages
    flash.map do |entry, messages|
-      # Conversion of flash to Array only required because of Devise.
+      # Conversion of flash to Array only required because of Devise
      Array(messages).map do |message|
        tag.div class: "flash #{entry}" do
          tag.span(sanitize(message)) +
-            svg_tag('close-outline', {onclick: "this.parentElement.remove()"})
+            svg_tag('pictograms/close-outline', {onclick: "this.parentElement.remove()"})
        end
      end
    end.join.html_safe
@@ -239,7 +256,7 @@ module ApplicationHelper
    link_is_local = html_options[:onclick] || html_options.dig(:data, :turbo_stream)
    name = name.to_s
    name += '...' if type == :link && !link_is_local
-    name = svg_tag(image, name) if image
+    name = svg_tag("pictograms/#{image}", name) if image

    [name, html_options]
  end
@@ -1,9 +1,9 @@
 module QuantitiesHelper
-  def quantities_check_boxes(quantities)
+  def quantities_check_boxes
    # Closing <details> on focusout event depends on relatedTarget for internal
    # actions being non-null. To ensure this, all top-layer elements of
    # ::details-content must accept focus, e.g. <label> needs tabindex="-1" */
-    collection_check_boxes(nil, :quantity, quantities, :id, :to_s_with_depth,
+    collection_check_boxes(nil, :quantity, @quantities, :id, :to_s_with_depth,
                           include_hidden: false) do |b|
      content_tag :li, b.label(tabindex: -1) { b.check_box + b.text }
    end
@@ -1,18 +1,14 @@
 // Configure your import map in config/importmap.rb. Read more:
 // https://github.com/rails/importmap-rails
 import "@hotwired/turbo-rails"
-// TODO: access `data-` attributes through
-// `keyname in`/`dataset.keyname`/`delete dataset.keyname`


-// Show page if hidden for testing purposes.
+/* Hide page before loaded for testing purposes */
 function showPage(event) {
  document.documentElement.style.visibility="visible"
 }
 document.addEventListener('turbo:load', showPage)

-
-// <details> event handlers.
 function detailsChange(event) {
  var target = event.currentTarget
  var count = target.querySelectorAll('input:checked:not([disabled])').length
@@ -28,7 +24,7 @@ function detailsChange(event) {
 }
 window.detailsChange = detailsChange

-// Close open <details> when focus lost.
+/* Close open <details> when focus lost */
 function detailsClose(event) {
  if (!event.relatedTarget ||
      event.relatedTarget.closest("details") != event.currentTarget) {
@@ -41,8 +37,6 @@ window.detailsObserver = new MutationObserver((mutations) => {
  mutations[0].target.dispatchEvent(new Event('change', {bubbles: true}))
 });

-
-// Validation of multiple-submit forms with different field requirements.
 function formValidate(event) {
  var id = event.submitter.getAttribute("data-validate")
  if (!id) return;
@@ -55,58 +49,28 @@ function formValidate(event) {
 }
 window.formValidate = formValidate

-// Pattern for number precision verification. Should accept all number formats
-// accepted by Kernel#Float. Lookahead checks the number of significant digits
-// in mantissa, following expression makes sure there is only one dot.
-const numberRegExp = /^\-?(?=(?:\.?0)*(?:\.?\d){1,15}?(?:\.?0)*\.?(?:[eE]|$))(?<mantissa>\d*\.?\d+|\d+\.)(?:[eE]\-?\d{1,3})?$/

-// Validation of input[type=number] value precision.
-function numberValidate(event) {
-  var input = event.target
-
-  input.setCustomValidity("")
-  if (!input.validity.valid) return
-
-  var match = numberRegExp.exec(input.value)
-  if (!match ||
-      (parseFloat(input.value) == 0.0 && match.groups['mantissa'].match(/[1-9]/))) {
-    // TODO: move message to locales
-    input.setCustomValidity("Please select a value within range of double precision floating-point format.")
-  }
-}
-window.numberValidate = numberValidate
-
-
-// Turbo stream actions.
-const FORM_CONTROLS = ["BUTTON", "FIELDSET", "INPUT", "OPTGROUP", "OPTION", "SELECT",
-                       "TEXTAREA"]
+/* Turbo stream actions */
 Turbo.StreamElement.prototype.disableElement = function(element) {
-  if (FORM_CONTROLS.includes(element.tagName)) {
    element.setAttribute("disabled", "disabled")
-  } else {
    element.setAttribute("aria-disabled", "true")
-    // NOTE: tabindex should not be disabled?
    element.setAttribute("tabindex", "-1")
-  }
 }
 Turbo.StreamActions.disable = function() {
  this.targetElements.forEach((e) => { this.disableElement(e) })
 }

 Turbo.StreamElement.prototype.enableElement = function(element) {
-  if (FORM_CONTROLS.includes(element.tagName)) {
    element.removeAttribute("disabled")
-  } else {
    element.removeAttribute("aria-disabled")
-    // Assume 'tabindex' is not used explicitly, so removing it is safe.
+    // Assume 'tabindex' is not used explicitly, so removing it is safe
    element.removeAttribute("tabindex")
-  }
 }
 Turbo.StreamActions.enable = function() {
  this.targetElements.forEach((e) => { this.enableElement(e) })
 }

-// TODO: change to visibility = collapse to avoid width change?
+/* TODO: change to visibility = collapse to avoid width change? */
 Turbo.StreamActions.hide = function() {
  this.targetElements.forEach((e) => { e.style.display = "none" })
 }
@@ -123,7 +87,7 @@ Turbo.StreamActions.collapse = function() {

 Turbo.StreamActions.close_form = function() {
  this.targetElements.forEach((e) => {
-    // Move focus if there's no focus or focus inside form being closed.
+    /* Move focus if there's no focus or focus inside form being closed */
    const focused = document.activeElement
    if (!focused || (focused == document.body) || e.contains(focused)) {
      let nextForm = e.parentElement.querySelector(`#${e.id} ~ tr:has([autofocus])`)
@@ -148,35 +112,6 @@ Turbo.StreamActions.unselect = function() {
  })
 }

-Turbo.StreamActions.validate = function() {
-  this.targetElements.forEach((form) => {
-    this.templateContent.querySelectorAll("span").forEach((span) => {
-      var control = document.querySelector(
-        `[form="${form.id}"][name="${span.dataset.name}"]`
-      )
-      control.setCustomValidity(span.textContent)
-      // Add event listener in capture phase to clear custom validity before
-      // `[oninput]` or any other bubble phase handler is invoked.
-      //   https://www.quirksmode.org/js/events_order.html
-      // TODO: keep invalidating current value whenever user re-enters it. Store
-      // invalid value and validation message in `[data-invalid-message/value]`
-      // and check input value on "input" event (below) (using `[pattern]` may not
-      // be suitable due to inability to customize validtion message; also
-      // pattern may be used for other, conflicting purposes).
-      // After user executes any other action (while form is open), remove `[data-]`
-      // attributes and custom validation, as value may no longer be invalid.
-      control.addEventListener(
-        "input",
-        function(event) { event.target.setCustomValidity("") },
-        {capture: true, once: true}
-      )
-    })
-    form.reportValidity()
-  })
-}
-
-
-// Keyboard event processing handlers.
 function formProcessKey(event) {
  switch (event.key) {
    case "Escape":
@@ -203,7 +138,7 @@ function detailsProcessKey(event) {
      var button = event.currentTarget.querySelector("button:not([disabled])")
      if (button) {
        button.click()
-        // Autofocus won't be respected unless target is blurred.
+        // Autofocus won't be respected unless target is blurred
        event.target.blur()
        event.preventDefault()
        event.stopPropagation()
@@ -213,8 +148,7 @@ function detailsProcessKey(event) {
 }
 window.detailsProcessKey = detailsProcessKey;

-
-// Items table drag and drop support.
+/* Items table drag and drop support */
 var lastEnterTime
 function dragStart(event) {
  lastEnterTime = event.timeStamp
@@ -224,8 +158,7 @@ function dragStart(event) {
  })
  event.dataTransfer.setData("text/plain", row.getAttribute("data-drag-path"))
  var rowRectangle = row.getBoundingClientRect()
-  event.dataTransfer.setDragImage(row, event.x - rowRectangle.left,
-                                  event.y - rowRectangle.top)
+  event.dataTransfer.setDragImage(row, event.x - rowRectangle.left, event.y - rowRectangle.top)
  event.dataTransfer.dropEffect = "move"
 }
 window.dragStart = dragStart
@@ -235,11 +168,9 @@ window.dragStart = dragStart
 *   * Enter/Leave events at the same timeStamp may not be logically ordered
 *     (e.g. E -> E -> L, not E -> L -> E),
 *   * not every Enter event has corresponding Leave event, especially during
-*     rapid pointer moves.
+*     rapid pointer moves
 * NOTE: sometimes Leave is not emitted when pointer goes fast over table
 * and outside. This should probably be fixed in browser, than patched here.
-* TODO: replace Leave table with Enter document?
-*   https://www.quirksmode.org/js/events_order.html#link4
 */
 function dragEnter(event) {
  //console.log(event.timeStamp + " " + event.type + ": " + event.currentTarget.id)
@@ -257,7 +188,7 @@ window.dragOver = dragOver

 function dragLeave(event) {
  //console.log(event.timeStamp + " " + event.type + ": " + event.currentTarget.id)
-  // Leave has been accounted for by Enter at the same timestamp, processed earlier.
+  // Leave has been accounted for by Enter at the same timestamp, processed earlier
  if (event.timeStamp <= lastEnterTime) return
  event.currentTarget.closest("table").querySelectorAll(".dropzone").forEach((tr) => {
    tr.classList.remove("dropzone")
@@ -1,6 +1,4 @@
 class ApplicationRecord < ActiveRecord::Base
-  include ActionView::Helpers::TagHelper
-
  class << self
    # Cached attribute has non-user assignable value calculated from other
    # attributes' values on create/update. This simplifies and speeds up
@@ -1,3 +1,17 @@
 class Measurement
  include ActiveModel::Model
+
+  attr_accessor :readouts, :created_at
+
+  def id
+    created_at.to_i
+  end
+
+  def to_param
+    id.to_s
+  end
+
+  def persisted?
+    true
+  end
 end
@@ -1,3 +0,0 @@
-class Note < ApplicationRecord
-  ATTRIBUTES = [:text]
-end
@@ -6,19 +6,17 @@ class Quantity < ApplicationRecord
  belongs_to :parent, optional: true, class_name: "Quantity"
  has_many :subquantities, ->{ order(:name) }, class_name: "Quantity",
    inverse_of: :parent, dependent: :restrict_with_error
-  has_many :readouts, dependent: :restrict_with_error

  validate if: ->{ parent.present? } do
    errors.add(:parent, :user_mismatch) unless user_id == parent.user_id
    errors.add(:parent, :self_reference) if id == parent_id
  end
  validate if: ->{ parent.present? }, on: :update do
-    # TODO: should not report error for (parent == self)
    errors.add(:parent, :descendant_reference) if ancestor_of?(parent)
  end
  validates :name, presence: true, uniqueness: {scope: [:user_id, :parent_id]},
-    length: {maximum: type_for_attribute(:name).limit}
-  validates :description, length: {maximum: type_for_attribute(:description).limit}
+    length: {maximum: type_for_attribute(:name).limit || Float::INFINITY}
+  validates :description, length: {maximum: type_for_attribute(:description).limit || Float::INFINITY}

  # Update :depths of progenies after parent change
  before_save if: :parent_changed? do
@@ -63,18 +61,26 @@ class Quantity < ApplicationRecord

  # Return: ordered [sub]hierarchy
  scope :ordered, ->(root: nil, include_root: true) {
-    numbered = Arel::Table.new('numbered')
-
-    self.model.with(numbered: numbered(:parent_id, :name)).with_recursive(arel_table.name => [
-      numbered.project(
-        numbered[Arel.star],
-        numbered.cast(numbered[:child_number], 'BINARY').as('path')
-      ).where(numbered[root && include_root ? :id : :parent_id].eq(root)),
-      numbered.project(
-        numbered[Arel.star],
-        arel_table[:path].concat(numbered[:child_number])
-      ).join(arel_table).on(numbered[:parent_id].eq(arel_table[:id]))
-    ]).order(arel_table[:path])
+    if connection.adapter_name =~ /mysql/i
+      numbered = Arel::Table.new('numbered')
+      self.model.with(numbered: numbered(:parent_id, :name)).with_recursive(arel_table.name => [
+        numbered.project(
+          numbered[Arel.star],
+          numbered.cast(numbered[:child_number], 'BINARY').as('path')
+        ).where(numbered[root && include_root ? :id : :parent_id].eq(root)),
+        numbered.project(
+          numbered[Arel.star],
+          arel_table[:path].concat(numbered[:child_number])
+        ).join(arel_table).on(numbered[:parent_id].eq(arel_table[:id]))
+      ]).order(arel_table[:path])
+    elsif root.nil?
+      # SQLite: pathname column already stores the full hierarchical path
+      order(:pathname)
+    else
+      root_pathname = unscoped.where(id: root).pick(:pathname)
+      scope = order(:pathname).where("pathname LIKE ?", "#{root_pathname}#{PATHNAME_DELIMITER}%")
+      include_root ? scope.or(where(id: root)) : scope
+    end
  }

  # TODO: extract named functions to custom Arel extension
@@ -99,7 +105,7 @@ class Quantity < ApplicationRecord
  }

  def to_s
-    tag.pre name
+    name
  end

  def to_s_with_depth
@@ -4,6 +4,4 @@ class Readout < ApplicationRecord
  belongs_to :user
  belongs_to :quantity
  belongs_to :unit
-
-  # TODO: validate quantity.user_id == unit.user_id != NULL
 end
@@ -0,0 +1,20 @@
+# Key-value store for runtime application settings that are configured through
+# the web setup wizard (or updated by an administrator) rather than hard-coded
+# in application.rb.
+#
+# Known keys:
+#   skip_email_confirmation  – "true"/"false", mirrors the homonymous option
+#                              that was previously in application.rb.
+class Setting < ApplicationRecord
+  validates :key, presence: true, uniqueness: true
+
+  # Return the string value stored for +key+, or +default+ when absent.
+  def self.get(key, default: nil)
+    find_by(key: key)&.value || default
+  end
+
+  # Persist +value+ for +key+, creating the record if it does not yet exist.
+  def self.set(key, value)
+    find_or_initialize_by(key: key).update!(value: value.to_s)
+  end
+end
@@ -1,9 +1,8 @@
 class Unit < ApplicationRecord
-  ATTRIBUTES = {unit: [:symbol, :description, :multiplier, :base_id]}
+  ATTRIBUTES = [:symbol, :description, :multiplier, :base_id]

  belongs_to :user, optional: true
  belongs_to :base, optional: true, class_name: "Unit"
-  alias_method :parent, :base
  has_many :subunits, class_name: "Unit", inverse_of: :base,
    dependent: :restrict_with_error

@@ -13,10 +12,10 @@ class Unit < ApplicationRecord
    errors.add(:base, :multilevel_nesting) if base.base_id?
  end
  validates :symbol, presence: true, uniqueness: {scope: :user_id},
-    length: {maximum: type_for_attribute(:symbol).limit}
-  validates :description, length: {maximum: type_for_attribute(:description).limit}
-  validates :multiplier, numericality: {equal_to: 1.0}, unless: :base
-  validates :multiplier, numericality: {greater_than: 0.0}, if: :base
+    length: {maximum: type_for_attribute(:symbol).limit || Float::INFINITY}
+  validates :description, length: {maximum: type_for_attribute(:description).limit || Float::INFINITY}
+  validates :multiplier, numericality: {equal_to: 1}, unless: :base
+  validates :multiplier, numericality: {greater_than: 0, precision: true, scale: true}, if: :base

  scope :defaults, ->{ where(user: nil) }
  scope :defaults_diff, ->{
@@ -27,10 +26,8 @@ class Unit < ApplicationRecord
    other_bases_units = arel_table.alias('other_bases_units')
    sub_units = arel_table.alias('sub_units')

-    # TODO: move inner 'with' CTE to outer 'with recursive' - it can have multiple
-    # CTEs, even non recursive ones.
    Unit.with_recursive(actionable_units: [
-      Unit.with(units: self.or(Unit.defaults)).left_joins(:base)
+      self.or(Unit.defaults).left_joins(:base)
        .where.not(
          # Exclude Units that are/have default counterpart
          Arel::SelectManager.new.project(1).from(other_units)
@@ -66,8 +63,14 @@ class Unit < ApplicationRecord
        ),
      # Fill base Units to display proper hierarchy. Duplicates will be removed
      # by final group() - can't be deduplicated with UNION due to 'portable' field.
-      arel_table.join(actionable_units).on(actionable_units[:base_id].eq(arel_table[:id]))
-        .project(arel_table[Arel.star], Arel::Nodes.build_quoted(nil).as('portable'))
+      # Use ActiveRecord::Relation (not a raw SelectManager) so the SQLite Arel
+      # visitor does not wrap it in parentheses inside the UNION ALL CTE body.
+      Unit.joins(
+        arel_table.create_join(
+          actionable_units,
+          arel_table.create_on(actionable_units[:base_id].eq(arel_table[:id]))
+        )
+      ).select(arel_table[Arel.star], Arel::Nodes.build_quoted(nil).as('portable'))
    ]).select(units: [:base_id, :symbol])
      .select(
        units[:id].minimum.as('id'), # can be ANY_VALUE()
@@ -75,24 +78,26 @@ class Unit < ApplicationRecord
        Arel::Nodes.build_quoted(1).as('multiplier'), # disregard multiplier when sorting
        units[:portable].minimum.as('portable')
      )
-      .from(units).group(:base_id, :symbol)
+      .from(units).group(units[:base_id], units[:symbol])
  }
  scope :ordered, ->{
-    left_outer_joins(:base).order([
-      arel_table.coalesce(Arel::Table.new(:bases_units)[:symbol], arel_table[:symbol]),
-      arel_table[:base_id].not_eq(nil),
-      arel_table[:multiplier],
-      arel_table[:symbol]
-    ])
+    left_outer_joins(:base).order(ordering)
  }

+  def self.ordering
+    [arel_table.coalesce(Arel::Table.new(:bases_units)[:symbol], arel_table[:symbol]),
+     arel_table[:base_id].not_eq(nil),
+     arel_table[:multiplier],
+     arel_table[:symbol]]
+  end
+
  before_destroy do
    # TODO: disallow destruction if any object depends on this unit
    nil
  end

  def to_s
-    tag.pre symbol
+    symbol
  end

  def movable?
@@ -103,21 +108,21 @@ class Unit < ApplicationRecord
    user_id.nil?
  end

-  # Should only by invoked on Units returned from #defaults_diff which are #portable.
+  # Should only by invoked on Units returned from #defaults_diff which are #portable
  def port!(recipient)
    recipient_base = base && Unit.find_by!(symbol: base.symbol, user: recipient)
-    params = slice(ATTRIBUTES[:unit] - [:symbol, :base_id])
+    params = slice(ATTRIBUTES - [:symbol, :base_id])
    Unit.find_or_initialize_by(user: recipient, symbol: symbol)
      .update!(base: recipient_base, **params)
  end

  def successive
    units = Unit.arel_table
-    Unit.with(units_with_lag: user.units.left_outer_joins(:base).select(
-      units[Arel.star],
-      Arel::Nodes::NamedFunction.new('LAG', [units[:id]])
-        .over(Arel::Nodes::Window.new.order(Unit.ordered.order_values)).as('lag_id')
-    )).from(Arel::Table.new(:units_with_lag).as(:units))
-      .where(units[:lag_id].eq(id)).take
+    lead = Arel::Nodes::NamedFunction.new('LAG', [units[:id]])
+    window = Arel::Nodes::Window.new.order(*Unit.ordering)
+    lag_id = lead.over(window).as('lag_id')
+    Unit.with(
+      units: user.units.left_outer_joins(:base).select(units[Arel.star], lag_id)
+    ).where(units[:lag_id].eq(id)).first
  end
 end
@@ -29,4 +29,11 @@ class User < ApplicationRecord
  def at_least(status)
    User.statuses[self.status] >= User.statuses[status]
  end
+
+  # Returns true when this user is the only admin account in the system.
+  # Used to block actions that would leave the application without an admin
+  # (account deletion, status demotion).
+  def sole_admin?
+    admin? && !User.admin.where.not(id: id).exists?
+  end
 end
@@ -1,7 +0,0 @@
-<%= turbo_stream.validate dom_target(*@target, :form) do %>
-  <% @record.errors.attribute_names.map do |attr| %>
-    <%= tag.span data: {name: field_name(dom_class(@record), attr)} do %>
-      <%- @record.errors.full_messages_for(attr).map { |m| m + '.' }.join(' ') %>
-    <% end %>
-  <% end %>
-<% end %>
@@ -5,7 +5,7 @@
  </td>

  <% if current_user.at_least(:active) %>
-    <td class="flex">
+    <td class="actions">
      <% unless unit.portable.nil? %>
        <% if unit.default? %>
          <%= image_button_to_if unit.portable?, t('.import'), 'download-outline',
@@ -8,7 +8,7 @@
    class: 'tools-area' %>
 </div>

-<table class="main-area items-table">
+<table class="main-area items">
  <thead>
    <tr>
      <th><%= Unit.human_attribute_name(:symbol) %></th>
@@ -23,10 +23,10 @@
  </head>

  <body>
-    <header class="flex">
+    <header class="hflex">
      <%= image_link_to t(".source_code"), "code-braces", source_code_url %>
      <%= image_link_to t(".issue_tracker"), "bug-outline", issue_tracker_url,
-        class: "rextend" %>
+            class: "extendedright" %>
      <% if user_signed_in? %>
        <%= image_link_to_unless_current(current_user, "account-wrench-outline",
          edit_user_registration_path) %>
@@ -44,7 +44,7 @@
    </header>

    <div id="flashes">
-      <%= render_flash %>
+      <%= render_flash_messages %>
    </div>

    <%# Allows overwriting/clearing navigation menu for some views %>
@@ -1,6 +1,6 @@
-<%# Render unconditionally, to clear previous flash messages. %>
-<%= turbo_stream.update :flashes do %>
-  <%= render_flash %>
-<% end %>
-
 <%= yield %>
+
+<%# Some views may convert ActiveRecord errors to flashes, render at the end. %>
+<%= turbo_stream.update :flashes do %>
+  <%= render_flash_messages %>
+<% end %>
@@ -1,39 +1,25 @@
-<%= tabular_form_with model: Measurement.new, id: :measurement_form,
-  class: 'topside-area flex vertical center',
-  html: {onkeydown: 'formProcessKey(event)'} do |form| %>
-
-  <table class="items-table center">
-    <tbody id="readouts">
-      <%= tabular_fields_for @measurement do |form| %>
-        <tr class="italic">
-          <td class="hexpand hmin50"><%= t '.taken_at_html' %></td>
-          <td colspan="3" class="ralign">
-            <%= form.datetime_field :taken_at, required: true %>
+<%= tabular_form_with model: Measurement.new do |form| %>
+  <fieldset>
+    <table class="items centered">
+      <tbody id="readouts">
+        <tr id="readouts_form">
+          <td colspan="4">
+            <%= collection_select :quantity, :id, @quantities, :id, :to_s_with_depth,
+              {prompt: t('.select_quantity'), disabled: '', selected: ''},
+              {name: :id, class: 'quantity vexpand',
+               onchange: "this.form.requestSubmit(new_readout_submit);"} %>
+            <%= form.submit id: :new_readout_submit, name: nil, value: nil,
+              formaction: new_readout_path, formmethod: :get, formnovalidate: true,
+              hidden: true, data: {turbo_stream: true} %>
          </td>
        </tr>
-      <% end %>
-    </tbody>
-  </table>
-
-  <%# TODO: right-click selection; unnecessary with hierarchical tags? %>
-  <details id="quantity_select" class="center hexpand" open
-           onkeydown="detailsProcessKey(event)">
-    <summary autofocus>
-      <!-- TODO: Set content with CSS when span empty to avoid duplication -->
-      <span data-prompt="<%= t('.select_quantity') %>">
-        <%= t('.select_quantity') %>
-      </span>
-      <%= image_button_tag t(:apply), "update", name: nil, disabled: true,
-        formaction: new_readout_path, formmethod: :get, formnovalidate: true,
-        data: {turbo_stream: true} %>
-    </summary>
-    <ul><%= quantities_check_boxes(@quantities) %></ul>
-  </details>
-
-  <div class="flex reverse">
-    <%= form.button id: :create_measurement_button, disabled: true -%>
+      </tbody>
+    </table>
+  </fieldset>
+  <div class="hflex centered">
+    <%= form.button -%>
    <%= image_link_to t(:cancel), "close-outline", measurements_path, name: :cancel,
-      class: 'auxiliary dangerous', onclick: render_turbo_stream('form_close') %>
+      class: 'dangerous', onclick: render_turbo_stream('form_close') %>
  </div>
 <% end %>

@@ -1,3 +1,4 @@
+<%= turbo_stream.update :measurement_form %>
 <%= turbo_stream.update :flashes %>
 <%= turbo_stream.remove :measurement_form %>
 <%= turbo_stream.show :no_items -%>
@@ -0,0 +1,14 @@
+<%= tag.tr id: dom_id(measurement) do %>
+  <td><%= l measurement.created_at, format: :short %></td>
+  <td>
+    <% measurement.readouts.each do |readout| %>
+      <span><%= readout.quantity.name %>: <%= readout.value %> <%= readout.unit %></span>
+    <% end %>
+  </td>
+  <% if current_user.at_least(:active) %>
+    <td class="actions">
+      <%= image_button_to t('.destroy'), 'delete-outline', measurement_path(measurement),
+        method: :delete %>
+    </td>
+  <% end %>
+<% end %>
@@ -0,0 +1,5 @@
+<%= turbo_stream.update :flashes %>
+<%= turbo_stream.remove :measurement_form %>
+<%= turbo_stream.remove :no_items %>
+<%= turbo_stream.enable :new_measurement_link %>
+<%= turbo_stream.prepend :measurements, @measurement %>
@@ -0,0 +1,3 @@
+<%= turbo_stream.update :flashes %>
+<%= turbo_stream.remove @measurement %>
+<%= turbo_stream.append(:measurements, render_no_items) if @measurements_empty %>
@@ -1,5 +1,5 @@
 <%# TODO: show hint when no quantities/units defined %>
-<div class="rightside-area buttongrid">
+<div class="rightside buttongrid">
  <% if current_user.at_least(:active) %>
    <%= image_link_to t('.new_measurement'), 'plus-outline', new_measurement_path,
      id: :new_measurement_link, onclick: 'this.blur();',
@@ -7,7 +7,9 @@
  <% end %>
 </div>

-<table class="main-area">
+<%= tag.div class: 'topside', id: :measurement_form %>
+
+<table class="main">
  <tbody id="measurements">
    <%= render(@measurements) || render_no_items %>
  </tbody>
@@ -1,5 +1,4 @@
 <%= turbo_stream.disable :new_measurement_link -%>
-<%= turbo_stream.hide :no_items -%>
-<%= turbo_stream.append_all 'body' do %>
+<%= turbo_stream.update :measurement_form do %>
  <%= render partial: 'form' %>
 <% end %>
@@ -9,7 +9,7 @@
      <%= form.text_area :description, cols: 30, rows: 1, escape: false %>
    </td>

-    <td class="flex">
+    <td class="actions">
      <%= form.button %>
      <%= image_link_to t(:cancel), "close-outline", quantities_path, class: 'dangerous',
        name: :cancel, onclick: render_turbo_stream('form_close', {row: row}) %>
@@ -5,14 +5,14 @@
           data: {drag_path: reparent_quantity_path(quantity), drop_id: dom_id(quantity),
                  drop_id_param: "quantity[parent_id]"} do %>

-  <td style="--depth:<%= quantity.depth %>">
-    <%= link_to quantity, edit_quantity_path(quantity), class: 'link',
-      onclick: 'this.blur();', data: {turbo_stream: true} %>
+  <td class="link" style="--depth:<%= quantity.depth %>">
+    <%= link_to quantity, edit_quantity_path(quantity), onclick: 'this.blur();',
+      data: {turbo_stream: true} %>
  </td>
  <td><%= quantity.description %></td>

  <% if current_user.at_least(:active) %>
-    <td class="flex">
+    <td class="actions">
      <%= image_link_to t('.new_subquantity'), 'plus-outline', new_quantity_path(quantity),
        id: dom_id(quantity, :new, :link), onclick: 'this.blur();', data: {turbo_stream: true} %>

@@ -8,14 +8,13 @@
    class: 'tools-area' %>
 </div>

-<%# TODO: remove? form can be inserted directly, e.g. at the end of index %>
 <%= tag.div class: 'main-area', id: :quantity_form %>

-<table class="main-area items-table">
+<table class="main-area items">
  <thead>
    <tr>
      <th><%= Quantity.human_attribute_name(:name) %></th>
-      <th class="hexpand"><%= Quantity.human_attribute_name(:description) %></th>
+      <th><%= Quantity.human_attribute_name(:description) %></th>
      <% if current_user.at_least(:active) %>
        <th><%= t :actions %></th>
        <th></th>
@@ -1,22 +1,20 @@
 <%# TODO: add readout reordering by dragging %>
 <%= tabular_fields_for 'readouts[]', readout do |form| %>
-  <%- tag.tr id: dom_id(readout.quantity, :new, :readout) do %>
+  <%- tag.tr id: dom_id(readout.quantity, :new, :readout),
+             onkeydown: 'processKey(event)' do %>
    <td>
-      <%# TODO: add grayed readout index (in separate column?) %>
      <%= readout.quantity.relative_pathname(@superquantity) %>
+    </td>
+    <td>
+      <%= form.number_field :value, required: true, autofocus: true, size: 10 %>
+    </td>
+    <td>
      <%= form.hidden_field :quantity_id %>
-    </td>
-    <td>
-      <%= form.number_field :value, required: true, autofocus: readout_counter == 0 %>
-    </td>
-    <td>
      <%= form.collection_select :unit_id, @user_units, :id,
-        ->(u){ sanitize('&emsp;' * (u.base_id ? 1 : 0) + u.symbol) },
-        {prompt: '', disabled: '', selected: ''}, required: true %>
+        ->(u){ sanitize('&emsp;' * (u.base_id ? 1 : 0) + u.symbol) } %>
    </td>
-    <td class="flex">
-      <%# TODO: change to _link_ after giving up displaying relative paths %>
-      <%= image_button_tag '', 'delete-outline', class: 'dangerous', name: nil,
+    <td class="actions">
+      <%= image_button_tag '', 'delete-outline', class: 'dangerous', name: :discard,
        formaction: discard_readouts_path(readout.quantity),
        formmethod: :get, formnovalidate: true, data: {turbo_stream: true} %>
    </td>
@@ -1,4 +1,4 @@
-<%= turbo_stream.disable :create_measurement_button if @prev_quantities.one? %>
 <%= turbo_stream.remove dom_id(@quantity, :new, :readout) %>
+<%= turbo_stream.disable_all 'button[name="discard"]' if @prev_quantities.one? %>
+<%= turbo_stream.enable_all "select.quantity option[value='#{@quantity.id}']" %>
 <%= render partial: 'form_repath' %>
-<%= turbo_stream.unselect dom_id(@quantity) %>
@@ -1,8 +1,9 @@
-<% @readouts.each do |r| %>
-  <%= turbo_stream.disable dom_id(r.quantity) %>
-<% end %>
 <%= render partial: 'form_repath' %>
-<%= turbo_stream.append :readouts do %>
+<%# is .one? proper condition? can @readouts be empty? %>
+<%= turbo_stream.enable_all 'button[name="discard"]' if @prev_quantities.one? %>
+<% @readouts.each do |r| %>
+  <%= turbo_stream.disable_all "select.quantity option[value='#{r.quantity_id}']" %>
+<% end %>
+<%= turbo_stream.before :readouts_form do %>
  <%= render partial: 'form', collection: @readouts, as: :readout %>
 <% end %>
-<%= turbo_stream.enable :create_measurement_button if @prev_quantities.empty? %>
@@ -0,0 +1,39 @@
+<%= form_with url: setup_path, method: :post, class: "labeled-form main-area" do %>
+
+  <h3 style="grid-column: 1 / -1; text-align: left; margin: 0;">
+    <%= t(".admin_account") %>
+  </h3>
+
+  <label for="admin_email"><%= t(".admin_email") %></label>
+  <%= email_field_tag :admin_email, params[:admin_email],
+        id: "admin_email", required: true, size: 30, autofocus: true,
+        autocomplete: "email" %>
+
+  <label for="admin_password"><%= t(".admin_password") %></label>
+  <%= password_field_tag :admin_password, nil,
+        id: "admin_password", required: true, size: 30,
+        autocomplete: "new-password" %>
+
+  <label for="admin_password_confirmation"><%= t(".admin_password_confirmation") %></label>
+  <%= password_field_tag :admin_password_confirmation, nil,
+        id: "admin_password_confirmation", required: true, size: 30,
+        autocomplete: "off" %>
+
+  <h3 style="grid-column: 1 / -1; text-align: left; margin: 0.5em 0 0 0;">
+    <%= t(".options") %>
+  </h3>
+
+  <label for="skip_email_confirmation" style="grid-column: 1 / 3; text-align: left;">
+    <%= check_box_tag :skip_email_confirmation, "1",
+          params[:skip_email_confirmation] == "1",
+          id: "skip_email_confirmation" %>
+    <%= t(".skip_email_confirmation") %>
+  </label>
+
+  <label for="seed_units" style="grid-column: 1 / 3; text-align: left;">
+    <%= check_box_tag :seed_units, "1", true, id: "seed_units" %>
+    <%= t(".seed_units") %>
+  </label>
+
+  <%= submit_tag t(".submit") %>
+<% end %>
@@ -8,11 +8,11 @@
    <td>
      <%= form.text_area :description, cols: 30, rows: 1, escape: false %>
    </td>
-    <td>
-      <%= form.number_field :multiplier, required: true if @unit.base_id? %>
+    <td class="number">
+      <%= form.number_field :multiplier, required: true, size: 10, min: :step if @unit.base_id? %>
    </td>

-    <td class="flex">
+    <td class="actions">
      <%= form.button %>
      <%= image_link_to t(:cancel), "close-outline", units_path, class: 'dangerous',
        name: :cancel, onclick: render_turbo_stream('form_close', {row: row}) %>
@@ -6,15 +6,14 @@
                  drop_id: dom_id(unit.base || unit),
                  drop_id_param: "unit[base_id]"} do %>

-  <td style="--depth:<%= unit.base_id? ? 1 : 0 %>">
-    <%= link_to unit, edit_unit_path(unit), class: 'link', onclick: 'this.blur();',
-      data: {turbo_stream: true} %>
+  <td class="link" style="--depth:<%= unit.base_id? ? 1 : 0 %>">
+    <%= link_to unit, edit_unit_path(unit), onclick: 'this.blur();', data: {turbo_stream: true} %>
  </td>
  <td><%= unit.description %></td>
-  <td class="ralign"><%= unit.multiplier.to_html if unit.base_id? %></td>
+  <td class="number"><%= unit.multiplier.to_html %></td>

  <% if current_user.at_least(:active) %>
-    <td class="flex">
+    <td class="actions">
      <% unless unit.base_id? %>
        <%= image_link_to t('.new_subunit'), 'plus-outline', new_unit_path(unit),
          id: dom_id(unit, :new, :link), onclick: 'this.blur();', data: {turbo_stream: true} %>
@@ -1,4 +1,4 @@
-<%= turbo_stream.close_form dom_target(:new, @unit.base || :unit) %>
+<%= turbo_stream.close_form dom_id(@unit.base || Unit, :new) %>
 <%= turbo_stream.remove :no_items %>
 <%= turbo_stream.replace @unit.base if @unit.base_id? %>
 <%= @before ? turbo_stream.before(@before, @unit) : turbo_stream.append(:units, @unit) %>
@@ -1,7 +1,7 @@
-<% ids = {row: dom_target(:edit, @unit),
-          hidden_row: dom_target(@unit),
+<% ids = {row: dom_id(@unit, :edit),
+          hidden_row: dom_id(@unit),
          link: nil,
-          form_tag: dom_target(:edit, @unit, :form)} %>
+          form_tag: dom_id(@unit, :edit, :form)} %>

 <%= turbo_stream.append :unit_form do %>
  <%- tabular_form_with model: @unit, html: {id: ids[:form_tag]} do %>
@@ -7,14 +7,13 @@
    class: 'tools-area' %>
 </div>

-<%# TODO: remove? form can be inserted directly, e.g. at the end of index %>
 <%= tag.div id: :unit_form %>

-<table class="main-area items-table">
+<table class="main-area items">
  <thead>
    <tr>
      <th><%= Unit.human_attribute_name(:symbol) %></th>
-      <th class="hexpand"><%= Unit.human_attribute_name(:description) %></th>
+      <th><%= Unit.human_attribute_name(:description) %></th>
      <th><%= Unit.human_attribute_name(:multiplier) %></th>
      <% if current_user.at_least(:active) %>
        <th><%= t :actions %></th>
@@ -1,8 +1,8 @@
-<% target_id = dom_target(:new, @unit.base || :unit) %>
-<% ids = {row: target_id,
+<% dom_obj = @unit.base || @unit %>
+<% ids = {row: dom_id(dom_obj, :new),
          hidden_row: nil,
-          link: dom_target(target_id, :link),
-          form_tag: dom_target(target_id, :form)} %>
+          link: dom_id(dom_obj, :new, :link),
+          form_tag: dom_id(dom_obj, :new, :form)} %>

 <%= turbo_stream.disable ids[:link] -%>

@@ -1,4 +1,4 @@
 <%= turbo_stream.remove @unit %>
 <%= turbo_stream.replace @previous_base if @previous_base %>
-<%= turbo_stream.replace @unit.base if @unit.base_id? && (@previous_base&.id != @unit.base_id) %>
+<%= turbo_stream.replace @unit.base if @unit.base_id? && (@previous_base.id != @unit.base_id) %>
 <%= @before ? turbo_stream.before(@before, @unit) : turbo_stream.append(:units, @unit) %>
@@ -1,3 +1,3 @@
-<%= turbo_stream.close_form dom_target(:edit, @unit) %>
+<%= turbo_stream.close_form dom_id(@unit, :edit) %>
 <%= turbo_stream.replace @unit.base if @unit.base_id? %>
 <%= turbo_stream.replace @unit %>
@@ -1,17 +1,17 @@
-<table class="main-area items-table" id="users">
+<table class="main-area items" id="users">
  <thead>
    <tr>
      <th><%= User.human_attribute_name(:email) %></th>
      <th><%= User.human_attribute_name(:status) %></th>
      <th><%= User.human_attribute_name(:confirmed_at) %></th>
-      <th><pre><%= User.human_attribute_name(:created_at) %> <sup>(UTC)</sup></pre></th>
+      <th><%= User.human_attribute_name(:created_at) %>&nbsp;<sup>(UTC)</sup></th>
      <th><%= t :actions %></th>
    </tr>
  </thead>
  <tbody>
    <% @users.each do |user| %>
      <tr>
-        <td><%= link_to user, user_path(user), class: 'link' %></td>
+        <td class="link"><%= link_to user, user_path(user) %></td>
        <td>
          <% if user == current_user %>
            <%= user.status %>
@@ -22,9 +22,11 @@
            <% end %>
          <% end %>
        </td>
-        <td><%= svg_tag 'checkbox-marked-outline' if user.confirmed_at.present? %></td>
-        <td><pre><%= l user.created_at, format: :without_tz %></pre></td>
-        <td class="flex">
+        <td class="svg">
+          <%= svg_tag 'pictograms/checkbox-marked-outline' if user.confirmed_at.present? %>
+        </td>
+        <td><%= l user.created_at, format: :without_tz %></td>
+        <td class="actions">
          <% if allow_disguise?(user) %>
            <%= image_link_to t('.disguise'), 'incognito', disguise_user_path(user) %>
          <% end %>
@@ -1 +1,2 @@
+<%# For some reason flash messages are duplicated in bot flash and flash.now %>
 <% flash.discard %>
@@ -1,12 +1,11 @@
 <% content_for :navigation, flush: true do %>
-  <%= link_to svg_tag('arrow-left-bold-outline', t(:back)),
+  <%= link_to svg_tag('pictograms/arrow-left-bold-outline', t(:back)),
    request.referer.present? ? :back : root_path, class: 'tab' %>
 <% end %>

 <div class="rightside-area buttongrid">
-  <%#= TODO: Disallow/disable deletion for last admin account, image_button_to_if %>
-  <%= image_button_to t('.delete'), 'account-remove-outline', user_registration_path,
-    form_class: 'tools-area', method: :delete, data: {turbo: false},
+  <%= image_button_to_if !current_user.sole_admin?, t('.delete'), 'account-remove-outline',
+    user_registration_path, form_class: 'tools-area', method: :delete, data: {turbo: false},
    onclick: {confirm: t('.confirm_delete')} %>
 </div>

@@ -10,6 +10,7 @@

  <%= f.submit t(:register), data: {turbo: false} %>

+  <%# TODO: fix button text color after change link -> button %>
  <%= image_button_tag t(:resend_confirmation), 'email-sync-outline',
    class: 'auxiliary', formaction: user_confirmation_path, formnovalidate: true,
    data: {validate: f.field_id(:email)} %>
@@ -1,5 +1,6 @@
 <% content_for :navigation, flush: true do %>
-  <%= link_to svg_tag('arrow-left-bold-outline', t(:back)), users_path, class: 'tab' %>
+  <%= link_to svg_tag('pictograms/arrow-left-bold-outline', t(:back)), users_path,
+    class: 'tab' %>
 <% end %>

 <%= labeled_form_for @user, html: {class: 'main-area'} do |f| %>
@@ -8,7 +8,7 @@
    <%= f.email_field :email, autofocus: true, autocomplete: "email" %>
  </div>

-  <div class="flex">
+  <div class="actions">
    <%= f.submit "Resend unlock instructions" %>
  </div>
 <% end %>
@@ -1,6 +0,0 @@
-#!/usr/bin/env ruby
-require_relative "../config/boot"
-require "active_support/continuous_integration"
-
-CI = ActiveSupport::ContinuousIntegration
-require_relative "../config/ci.rb"
@@ -1,2 +0,0 @@
-#!/usr/bin/env ruby
-exec "./bin/rails", "server", *ARGV
@@ -1,29 +0,0 @@
-#!/usr/bin/ruby33
-#
-# This file was generated by RubyGems.
-#
-# The application 'nokogiri' is installed as part of a gem, and
-# this file is here to facilitate running it.
-#
-
-require 'rubygems'
-
-Gem.use_gemdeps
-
-version = ">= 0.a"
-
-str = ARGV.first
-if str
-  str = str.b[/\A_(.*)_\z/, 1]
-  if str and Gem::Version.correct?(str)
-    version = str
-    ARGV.shift
-  end
-end
-
-if Gem.respond_to?(:activate_bin_path)
-load Gem.activate_bin_path('nokogiri', 'nokogiri', version)
-else
-gem "nokogiri", version
-load Gem.bin_path("nokogiri", "nokogiri", version)
-end
@@ -1,10 +1,11 @@
 #!/usr/bin/env ruby
 require "fileutils"

+# path to your application root.
 APP_ROOT = File.expand_path("..", __dir__)

 def system!(*args)
-  system(*args, exception: true)
+  system(*args) || abort("\n== Command #{args} failed ==")
 end

 FileUtils.chdir APP_ROOT do
@@ -13,6 +14,7 @@ FileUtils.chdir APP_ROOT do
  # Add necessary setup steps to this file.

  puts "== Installing dependencies =="
+  system! "gem install bundler --conservative"
  system("bundle check") || system!("bundle install")

  # puts "\n== Copying sample files =="
@@ -22,14 +24,10 @@ FileUtils.chdir APP_ROOT do

  puts "\n== Preparing database =="
  system! "bin/rails db:prepare"
-  system! "bin/rails db:reset" if ARGV.include?("--reset")

  puts "\n== Removing old logs and tempfiles =="
  system! "bin/rails log:clear tmp:clear"

-  unless ARGV.include?("--skip-server")
-    puts "\n== Starting development server =="
-    STDOUT.flush # flush the output before exec(2) so that it displays
-    exec "bin/dev"
-  end
+  puts "\n== Restarting application server =="
+  system! "bin/rails restart"
 end
@@ -18,17 +18,14 @@ require "rails/test_unit/railtie"
 # you've limited to :test, :development, or :production.
 Bundler.require(*Rails.groups)

-require_relative '../lib/default_settings_strategy'
-
 module FixinMe
  class Application < Rails::Application
    # Initialize configuration defaults for originally generated Rails version.
-    config.load_defaults 8.1
+    config.load_defaults 7.0

-    # Please, add to the `ignore` list any other `lib` subdirectories that do
-    # not contain `.rb` files, or that should not be reloaded or eager loaded.
-    # Common ones are `templates`, `generators`, or `middleware`, for example.
-    config.autoload_lib(ignore: %w[assets tasks])
+    # Autoload lib/, required e.g. for core library extensions.
+    # https://guides.rubyonrails.org/autoloading_and_reloading_constants.html#config-autoload-lib-ignore.
+    config.autoload_lib(ignore: %w(assets tasks))

    # Configuration for the application, engines, and railties goes here.
    #
@@ -41,24 +38,25 @@ module FixinMe
    config.action_dispatch.rescue_responses['ApplicationController::AccessForbidden'] = :forbidden
    config.action_dispatch.rescue_responses['ApplicationController::ParameterInvalid'] = :unprocessable_entity

-    # Set default migrations parameters.
-    config.active_record.migration_strategy = DefaultSettingsStrategy
-
    # SETUP: Below settings need to be updated on a per-installation basis.
    #
-    # Set host to be used by links generated in mailer templates.
-    config.action_mailer.default_url_options = {host: 'localhost', protocol: 'https'}
+    # URL to use in sent e-mails.
+    config.action_mailer.default_url_options = {host: 'localhost', :protocol => 'https'}
    # https://guides.rubyonrails.org/configuring.html#config-action-mailer-delivery-method
    config.action_mailer.delivery_method = :sendmail

    # List of hosts this app is available at.
    # https://guides.rubyonrails.org/configuring.html#actiondispatch-hostauthorization
-    config.hosts |= ['localhost']
+    config.hosts += ['localhost', 'example.com', IPAddr.new('1.2.3.4/32')]

    # Email address of admin account
    config.admin = 'admin@localhost'

    # Sender address of account registration-related messages
    Devise.mailer_sender = 'noreply@localhost'
+
+    # Whether to skip e-mail confirmation for new registrations is configured
+    # through the web setup wizard and stored in the database (Setting model),
+    # so it does not need to be set here.
  end
 end
@@ -1,20 +0,0 @@
-# Run using bin/ci
-
-CI.run do
-  step "Setup", "bin/setup --skip-server"
-
-  step "Security: Importmap vulnerability audit", "bin/importmap audit"
-  step "Tests: Rails", "bin/rails test"
-  step "Tests: Seeds", "env RAILS_ENV=test bin/rails db:seed:replant"
-
-  # Optional: Run system tests
-  # step "Tests: System", "bin/rails test:system"
-
-  # Optional: set a green GitHub commit status to unblock PR merge.
-  # Requires the `gh` CLI and `gh extension install basecamp/gh-signoff`.
-  # if success?
-  #   step "Signoff: All systems go. Ready for merge and deploy.", "gh signoff"
-  # else
-  #   failure "Signoff: CI failed. Do not merge or deploy.", "Fix the issues and try again."
-  # end
-end
@@ -1 +1 @@
-3nm9KZNtyLhPgZBVzOOkN2FXHD0uEMuzgb5Sl1MrAMmi6+iEFSzyTHfZFW2mz18VyNz5DDYvTODZqBDQKK+FQh70uEQkmGqaY5XsTOzUFzk56quaPNtZvFEGux1nX2avSbYQBs3HeyYyWyTAFhez5j8tVb6sZD2xZ8twa9KAB42j86NIHT9w/ZMFqZbGbdBoR1Mrqoy9/IWv2QgxMTpGR6JBpTUwauXm6wS/bTt8SCXF57JSVgvdw/BxFzoA3Xj6N5E89LbMfh54W2ruMhybka5E7zXN9z0v4oXt8GiYZFIODEYZwqzEVaUK1WXS5qb5OrDJFAzs29Uf/gDrIDx71Lot+jejCS+xFfI9454EnHcVH66wKuwF6ylKupJDffM0hQHplcEfVSq5UiDfbPXm46Vr0g1A--2RrmuzCBuHvYpPNA--ugbuRe7ivfDqeUCt6ahciA==
+OOGMGhfQuV67kqlMecZLcNfgrGS81KPAGmY27GnohtcGSPtiaqL8OZYsVf5IIOaI1K14ZEflln+E2deaIJ5apaq98f+1gJawGbAJeEfLCskJV/03nT8ICpRk+bxT/lzqeCIaUJOLk4708ufC9EpdpJD/jgVSAuI/iNMzzwMbNFvqNmx0Kmgp0mRpHSDGLZZkaP3GW7wdsJEVsNpSPIrkkGL1BvD+nHbmHjuGkn4MMsmm1Yz0M31jkJiDksT0SVeOcxWvOApclxm6VZOAws2l6YKEs/XoE7ye3ssjxdjdwjMzRXV7dwYclNBQGRoERVTozdYiFR4eAGMdlG0RsnUAp+edILH5nvHCIPb3la/dUTOzAQMNY0TqMMVUHGqGuVS/EMCX/w7zrmYN5C+2W8SfugrvTpAL--dUdvsDfbUdVrbmmo--fUwsWUp+DQGPtEF+Zq4ZTw==
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
barbie-bot	492507aea7	Merge upstream/final-form into master Incorporates WIP alternative measurement form (single select form with multiple select actions) and readouts controller. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-13 02:38:09 +00:00
barbie-bot	f52f4c83dd	Merge upstream/css-cleanup into master Resolves conflicts between upstream/master and upstream/css-cleanup: - CSS: take css-cleanup versions (button/link style unification, comment cleanup, table .button styles, [name=cancel]/.auxiliary styles) - application_helper.rb: use SVG icon for flash message close button (css-cleanup) - users_test.rb: use single-quote style (css-cleanup), keep sole-admin test (master) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-12 18:07:54 +00:00
barbie-bot	d54467f259	Fix quantity ordered scope for SQLite: use pathname column instead of recursive CTE SQLite's Arel visitor wraps CTE branches in extra parentheses, making the UNION ALL inside recursive CTEs invalid. Also SQLite lacks LPAD() and CAST(... AS BINARY). Fix by using the existing pathname column for ordering on SQLite, which already encodes the hierarchical path. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-10 18:40:54 +00:00
barbie-bot	2c9320010b	Fix quantity ordered scope for SQLite compatibility Replace MySQL-specific LPAD() with SQLite's format() for zero-padded row numbering, and skip CAST(... AS BINARY) on SQLite where string comparisons are already binary by default. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-10 18:34:27 +00:00
barbie-bot	179fe58421	Implement measurements create/destroy and index listing Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-10 18:24:58 +00:00
cryptogopher	68695bced9	Merge styles of <a>.button/<button>/<input type="submit"> into .button Remove flash button Fix some multi-selector specificity differences	2026-03-10 18:16:01 +00:00
cryptogopher	6717b1d4c1	Update and format comments	2026-03-10 18:15:24 +00:00
cryptogopher	d7fd8f1c45	Make [disabled] and [hidden] styles !important	2026-03-10 18:15:06 +00:00
barbie-bot	c367009347	Regenerate credentials.yml.enc with working master.key Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-10 17:58:43 +00:00
barbie-bot	1efb1ad86e	Prevent sole admin from deleting their account Without this guard, the last admin in the system could delete their own account, making the application unmanageable. This adds a model method `User#sole_admin?`, a controller guard in `RegistrationsController#destroy`, and disables the delete button in the profile edit view when the current user is the only remaining admin. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-10 17:50:47 +00:00
barbie-bot	238e8eb846	Fix controller tests and SQLite compatibility for defaults_diff Test infrastructure: - Allow www.example.com host in test env (ActionDispatch::HostAuthorization was blocking all integration test requests) - Include Devise::Test::IntegrationHelpers in ActionDispatch::IntegrationTest so tests can sign in with sign_in(user) Controller tests: - Rewrite UsersControllerTest to match actual routes/actions (no new/create/ edit/destroy); sign in as admin; test update-self rejection via turbo_stream - Fix Default::UnitsControllerTest to sign in before requesting the index SQLite compatibility in Unit#defaults_diff: - Hoist the inner "units" CTE to the outer WITH RECURSIVE level (fixes nested WITH syntax error) — this was the existing TODO in the code - Use Unit.joins(...) for the recursive part instead of a raw Arel::SelectManager so the SQLite visitor does not wrap it in parentheses inside UNION ALL - Drop the named "units" CTE (conflicts with the table name under WITH RECURSIVE in SQLite); apply the user/defaults scope directly on the base case - Qualify GROUP BY columns to avoid ambiguity when bases_units is joined - Qualify ORDER BY :multiplier/:symbol to avoid ambiguity (Unit.ordering) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-10 17:50:19 +00:00
barbie-bot	37199f85df	Use committed database.yml instead of generating it in CI The repo's config/database.yml already handles both SQLite (default) and MySQL (DB_ADAPTER=mysql) via ERB. Remove the redundant steps that overwrote it with a hardcoded version, and pass DB_ADAPTER=mysql for the MySQL job. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-10 17:50:19 +00:00
barbie-bot	7e1eacbc33	Add multi-adapter test support: SQLite + MySQL via Gitea Actions and rake task - .gitea/workflows/test.yml: two parallel CI jobs (SQLite and MySQL), each generates its own database.yml inline and runs the test suite - lib/tasks/test_multi_db.rake: `rails test:all_adapters` runs both adapters sequentially using DATABASE_URL to switch at runtime Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-10 17:50:19 +00:00
barbie-bot	f3cb8db1f4	Setup wizard: use labeled-form grid for vertical field layout Replace the fieldset-based layout with the app's standard .labeled-form CSS grid so email, password and retype fields stack vertically (label left, input right) exactly like the existing sign-in and registration forms. Section headings and checkbox rows are given explicit grid-column spans via inline styles so they span the full form width rather than being constrained to the label column. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-02-28 17:37:49 +00:00
barbie-bot	7904ff3ef9	Add web-based installation wizard Replace the CLI-only setup (db:seed + manual application.rb edits) with a web wizard shown automatically on first visit when no admin account exists yet. SetupController (GET/POST /setup) collects the admin e-mail and password, a "skip e-mail confirmation" toggle, and an option to seed the built-in default units. Once submitted it creates the admin User, persists the chosen options as Setting records, and redirects to the sign-in page. ApplicationController gains a redirect_to_setup_if_needed before_action that catches every request (including Devise routes) when no admin exists, so a fresh installation always lands on the wizard rather than an empty sign-in form. A new Setting model provides a lightweight key-value store for runtime options that were previously hard-coded in application.rb (e.g. skip_email_confirmation). RegistrationsController now reads that flag from the database instead of from the application config. Seeds.rb is kept for headless / automated deployments and skips admin creation when an admin already exists (idempotent), with a comment pointing to the web wizard as the preferred path. Also extends the SQLite nil-limit fix (\|\| Float::INFINITY) to the Quantity model, which suffered the same ArgumentError as Unit. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-02-28 17:19:24 +00:00
barbie-bot	9ad922e3a1	Add skip_email_confirmation option; fix SQLite length validation Introduce config.skip_email_confirmation in application.rb.dist. When set to true, new registrations are automatically confirmed without requiring email verification — useful for installations where outgoing email is not configured or for development/testing. Implemented by calling skip_confirmation! in build_resource before the record is saved, so no confirmation email is ever sent. Also fix ArgumentError raised in length validations when type_for_attribute(:column).limit returns nil, which happens with SQLite for string columns that have no explicit limit in the migration. Guard with \|\| Float::INFINITY so the validation is effectively skipped when the database imposes no limit. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-02-28 15:57:50 +00:00
cryptogopher	1acb179851	Single select form without action buttons	2026-01-15 19:00:25 +01:00
cryptogopher	207699584b	Back to single-select form w/ multiple select actions	2025-12-27 01:38:11 +01:00
cryptogopher	46dd480b4e	Alternative new Measurement form, WIP	2025-08-15 23:26:57 +02:00