houseaccount 0.8.1 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eb93eb6916d764185a9a842424a967a999a604c13f69c4fd1e55520732238a5e
-  data.tar.gz: 18f86ddd7092b5c594a5384cef3071eead026ac4b3af0ac92d74cd5edb24d4ac
+  metadata.gz: 5796d31f6b9a92bf2b042880b51a5f18a05dcaf92c34f85940f5fcd5e528de9f
+  data.tar.gz: ef59866ad6471fbbbf4e284c5bec8724c209503364eb7f1da6f81b0ef0329645
 SHA512:
-  metadata.gz: b491d90baf039dc87e9cb31acac22b61753c9f669a7c3a497c7f54cc717b4668ee15775cbb7b96f796165ce5fe376a361c503880804377908e962d6ed27bfd89
-  data.tar.gz: fba487c0cd2d2b2e7982c8c7c0edb2f766ef7e88a36fb3067785a671aa2857253f2a83b67a291f9ecde777a939d6ae8e1e4d60758644c032a479be25c7f2f22d
+  metadata.gz: 9b63ad2533d43cc94f78baba186fe0cd1dd07189e7f259e14a580c2bd8026c5039eebf91f489370eac754468711f000fb12a5f2e2e1b813d4abb71aabe24871d
+  data.tar.gz: f769721a266ffebeed4ec06467f701ae5a7d630355b37e93b7126061bfafcc2a208d620408b6d488ffbd841c5fcdb3411fc633359961a895ec69a24009bc35ee

data/CHANGELOG.md

@@ -7,6 +7,42 @@ For more information about changelogs, check [Keep a Changelog](http://keepachan
 
 ## [Unreleased]
 
+## 0.10.0 - 2026-09-14
+
+* [Fix] A page is as tall as the window a phone actually shows
+
+  The body asked for `100vh`, which on a phone measures the window with the browser's own
+  bars hidden — they are not, until somebody scrolls. So every flow page stood taller than
+  what could be seen: a scrollbar where the content fit, and a foot resting below the fold
+  that cost a scroll to reach. `100svh` is the window with the bars showing, and the body
+  wears `house-page` for it rather than Bootstrap's `min-vh-100`.
+
+* [Change] A new set of trades on the wall, and the house's mark among them
+
+  Thirteen drawings rather than fourteen: the roller, ladder, frame, plunger, can, hard hat,
+  spray, lock, plug, broom, nut, level and the cube. The four apps' own marks are gone from
+  it, and with them the grid that placed each one deliberately — every mark is dealt the
+  same way now, the cube included.
+
+## 0.9.0 - 2026-09-14
+
+* [Breaking change] A one-time code carries the line for the phone again
+
+  0.8.0 took `@host #code` out because it is plainly visible in the message that arrives.
+  Visible is what it is for: it is Apple's own format, it tells a reader which site the code
+  belongs to, and it binds the code to that domain so no other site can ask for it. Without
+  it iOS falls back to guessing at the text, which it does not do reliably — the suggestion
+  above the keyboard stopped appearing. `HouseAccount.one_time_code` takes `host:` again,
+  defaulting to the application's own.
+
+* [Fix] A seventh digit leaves no bar behind in the first slot
+
+  The real field lies transparently across all six slots, and its hidden text sits crammed
+  against the left edge rather than under them. A keystroke iOS cannot place answers by
+  selecting inside that field, and the grab handles it draws for a selection are its own to
+  paint — so one surfaced over the first slot. The selection is collapsed back to the end
+  once the code is whole.
+
 ## 0.8.1 - 2026-09-14
 
 * [Fix] The wall is drawn again after a page Turbo morphs

data/README.md

@@ -20,10 +20,10 @@ gem install houseaccount
 
 ```ruby
 # Gemfile
-gem 'houseaccount', '~> 0.8.1'
+gem 'houseaccount', '~> 0.10.0'
 ```
 
-`~> 0.8.0` stops short of `0.9`, since below 1.0 a minor release may break whatever it likes.
+`~> 0.10.0` stops short of `0.11`, since below 1.0 a minor release may break whatever it likes.
 Rails 8.1 and Ruby 3.2 are the minimum.
 
 A page takes the gem's layout, and wears the same head:
@@ -60,7 +60,7 @@ which Pages redirects away from.
 
 With the gem in the bundle an app serves `/css/houseaccount.css`, `/js/houseaccount.js`,
 `/theme/*`, `/font/*`, `/logo/*` and `/favicon/*` itself — and its own version's copy under
-`/v0.8.1/`, which is what the head helper links, cached for a year — answers a 400, 404, 406, 422 or 500
+`/v0.10.0/`, which is what the head helper links, cached for a year — answers a 400, 404, 406, 422 or 500
 with the house's own page, and has these helpers in every view:
 
 ```erb
@@ -181,13 +181,15 @@ HouseAccount::Message.new side: :left, text: answer.note, sender: 'Claude', at:
 ```
 
 A code sent to a phone is the same words from every app, `HouseAccount.one_time_code`, in
-each voice they are said in. `written` is the one sentence a person reads; `spoken` is that
-same sentence with its digits one at a time, so a listener can write them down. The words are
+each voice they are said in. `written` is the sentence a person reads and, under it, the
+`@host #code` line that offers the code above the keyboard on the phone it arrived on;
+`spoken` is the sentence alone, its digits one at a time so a listener can write them down.
+The host is the application's default one unless `host:` says otherwise, and the words are
 the gem's `config/locales` entry.
 
 ```ruby
 HouseAccount.one_time_code(contact.pin).written
-# => "Enter this 6-digit code to proceed: 482913"
+# => "Enter this 6-digit code to proceed: 482913\n\n@houseaccount.com #482913"
 HouseAccount.one_time_code(contact.pin).spoken
 # => "Enter this 6-digit code to proceed: 4, 8, 2, 9, 1, 3"
 ```
@@ -203,8 +205,8 @@ Those follow the latest release. Every release is also kept whole under its own
 forever and cached for a year, for a page that would rather move on its own terms:
 
 ```html
-<link rel='stylesheet' href='https://design.houseaccount.com/v0.8.1/css/houseaccount.css'>
-<script type='module' src='https://design.houseaccount.com/v0.8.1/js/houseaccount.js'></script>
+<link rel='stylesheet' href='https://design.houseaccount.com/v0.10.0/css/houseaccount.css'>
+<script type='module' src='https://design.houseaccount.com/v0.10.0/js/houseaccount.js'></script>
 ```
 
 A host with a Content Security Policy allows that origin for `style-src`, `script-src` and

data/app/views/layouts/houseaccount.html.erb

@@ -15,7 +15,7 @@
     <%= yield :head %>
     <%- end -%>
   </head>
-  <body class='min-vh-100 d-flex flex-column'>
+  <body class='house-page d-flex flex-column'>
     <main class='container-fluid py-4 flex-grow-1 d-flex flex-column'>
       <%= content_for?(:content) ? yield(:content) : yield %>
     </main>

data/config/locales/houseaccount.en.yml

@@ -4,7 +4,10 @@ en:
     ask: Ask a question
     close: Close
     okay: Okay
-    one_time_code: 'Enter this 6-digit code to proceed: %{pin}'
+    one_time_code: |-
+      Enter this 6-digit code to proceed: %{pin}
+
+      @%{host} #%{pin}
     send: Send
     spoken_one_time_code: 'Enter this 6-digit code to proceed: %{pin}'
     typing: Typing

data/lib/houseaccount/version.rb

@@ -1,4 +1,4 @@
 module HouseAccount
   # Version of the gem, read by the gemspec and by hosts checking compatibility.
-  VERSION = '0.8.1'
+  VERSION = '0.10.0'
 end

data/lib/houseaccount.rb

@@ -29,10 +29,14 @@ module HouseAccount
     MARKS.key?(name) ? name : :houseaccount
   end
 
-  # The one sentence that carries a 6-digit code to a phone, written as a person reads it and
-  # spoken a digit at a time so a listener can write it down.
-  def self.one_time_code(pin)
-    Copy.new written: I18n.t('houseaccount.one_time_code', pin:),
+  # The words that carry a 6-digit code to a phone, in both voices. `written` is the sentence
+  # a person reads and, under it, the line Safari matches against the page about to be filled,
+  # `@host #code`, which offers the code above the keyboard so nobody leaves for Messages to
+  # copy it. `spoken` is the sentence alone, its digits one at a time so a listener can write
+  # them down, and without a line meant for a phone rather than a person. Every app of the
+  # house that sends a code sends these, from `config/locales`.
+  def self.one_time_code(pin, host: Rails.application.default_url_options[:host])
+    Copy.new written: I18n.t('houseaccount.one_time_code', pin:, host:),
              spoken: I18n.t('houseaccount.spoken_one_time_code', pin: pin.chars.join(', '))
   end
 end