solana-studio 0.5.1 → 0.5.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4bef16f1fb3562f3bafb45ac5f4e6e4302666b1910778fea314f61c76cd920b9
-  data.tar.gz: b1f1b40351157eaa134550c2c35c0e8caf44e3ed21d0a5ee5cfa583b2a7d4cf7
+  metadata.gz: fa775c67a1f3ae154dabf231c294c86e6a03dc74f2866fcfdab2cb7f8bf9da9b
+  data.tar.gz: 6dd4bd255c9ea0d99c8daaeff4a176152226e63a61f36943869f70f3e9a57441
 SHA512:
-  metadata.gz: c8347c8cba16faeb9f1987594a15f81cec4c4c6c26277ed1b8d82e766a3a6c18c3fec7ceb59b188df9f6f2c1a454ca6f37c427b4feab2d960d4b2af1f138bcd6
-  data.tar.gz: e3a3f37a694ce7f7081db1333870d22d52ed00e84a7acb5b68cbb0e87affd361b61a02aac3893652839de0392933a1cd969468b5a034c3e5ce04479e7f5b6206
+  metadata.gz: b52fd18bf1bab93c0a060d5cc135b1e9bc81bdfb5b32b9771251f831ffaaa5653891706927904e5e57a852094c3a4e41a45350e84bcca16f4f30cd9913bdbc55
+  data.tar.gz: 701023cfadfee72780409a021e2e2bfa2223cb3366a07659409764f5aa7f4aa1fb2adc961a5b7ba68103fe5263dfa77506f659727c6c315171d63faa4d16f735

data/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 The format is [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## Unreleased
+
+### Added
+- **The wallet sign-in button, contributed into studio-engine's auth modal** (`app/views/solana_studio/auth/_wallet_credential.html.erb`). Part of the base/bolt-on split: studio-engine plus McRitchie Studio is the template every app is built from, web2 and web3 alike, and this gem plus Turf Monster is the web3 bolt-on. Sign-in is a base concern so the modal stays in the engine; **wallets are not**, so the button moved here. The engine renders whatever resolves at `solana_studio/auth/wallet_credential` and nothing when the path is empty, so bundling this gem IS the registration and a web2 app carries no wallet markup at all. Deliberately NOT solved by giving this gem its own auth modal: that would fork a surface both apps sign in through, which is how the wallet picker reached three drifting copies before it was promoted. The engine keeps both halves of the existing gate (`Studio.auth_method?(:wallet)` and `Studio.feature?(:web3)`) so the hub — which bundles this gem for its signing primitives with web3 off — still renders a web2 sign-in modal.
+
+### Tests
+- `test/auth_credential_test.rb` (7): the partial sits at the path the engine resolves, the click handler consults the modal's age gate, visibility binds to the shared `methodOn('wallet')` toggle, `modal_store` is required with no default, the swap carries the picker's `backTo`/`ageAttested` contract, the brand gradient id is namespaced against collisions, and the mark stays inline rather than becoming a sprockets asset request. Every assertion reads ERB-comment-stripped source, because this file documents its own contract in prose and a bare grep would match the paragraph instead of the code — proven by mutating the gate into a comment and watching it go red.
+- `test/gemspec_test.rb` and `.github/workflows/gem-ci.yml` name the new partial alongside the modal, so a `spec.files` glob that stopped matching it fails at build rather than in a consumer.
+
 ## Unreleased — targets v0.5.0 (minor)
 
 Ships the gem's first Rails half, and its first CI. The version number is

data/README.md

@@ -177,6 +177,44 @@ attributes, so a host can adopt it before changing its layout.
 Requires studio-engine's modal host (`Alpine.store('modals')`) and its shared
 modal blocks. The JS is `solana_studio/network_guard.js` on the asset path.
 
+### Wallet sign-in button (the credential slot)
+
+studio-engine owns the sign-in modal, because every app in the ecosystem signs
+people in and most of them are web2. This gem owns the **wallet button** inside
+it, because only a web3 app has wallets.
+
+There is **nothing to wire up.** The engine's auth modal looks for a partial at
+one fixed path and renders whatever it finds:
+
+    solana_studio/auth/_wallet_credential
+
+Bundling this gem puts that partial on the host's view path, so the button
+appears. An app that does not bundle it finds nothing and renders nothing — no
+wallet markup ships to a newsletter app, and no `render` call has to be deleted
+to keep it out.
+
+The engine asks two questions and needs both answered yes:
+
+| Question | Answered by | Where |
+|---|---|---|
+| Does this app *want* wallet sign-in? | `Studio.auth_method?(:wallet)` and `Studio.feature?(:web3)` | the host's `config/initializers/studio.rb` |
+| Is there a layer that *implements* it? | this partial resolving on the view path | bundling this gem |
+
+Both matter. McRitchie Studio bundles this gem for the Ruby signing primitives
+while shipping web3 **off**, so the partial is present and the button is
+correctly absent. And an app that declares `:wallet` but forgets the gem gets no
+button rather than a missing-partial error in front of someone signing in.
+
+The partial renders inside the modal's own Alpine scope and borrows three
+members from it — `methodOn('wallet')` for visibility, `attested()` for the
+legal-age gate, and `props.submitting` for the disabled state. It takes one
+required local, `modal_store`, which the engine passes.
+
+Why a contributed button and not a second auth modal: Turf Monster wants Google
+plus magic-link plus wallet, McRitchie Studio wants Google plus magic-link. A
+forked modal would put a surface both apps sign in through into two files, which
+is how the wallet picker reached three copies before it was promoted.
+
 ## Dependencies
 
 - `ed25519` (~> 1.3) — Ed25519 signing

data/app/views/solana_studio/auth/_wallet_credential.html.erb

@@ -0,0 +1,71 @@
+<%#
+  The Solana credential button for studio-engine's SIGN-IN modal.
+
+  This is the gem half of the engine's CREDENTIAL SLOT seam. The auth modal is a
+  BASE modal: every app in the ecosystem signs people in, and most of them are
+  web2, so the modal itself stays in studio-engine and is never forked. What
+  varies is which credentials it offers. Google and magic-link are implemented by
+  the base template and render from the engine directly. Wallet is implemented
+  HERE, by the web3 bolt-on, and reaches the modal by being on the view path.
+
+  The engine renders this at a fixed path and only when it resolves:
+
+    solana_studio/auth/_wallet_credential
+
+  So an app that does not bundle this gem finds nothing, renders nothing, and
+  carries no wallet markup at all. An app that does bundle it gets the button
+  with no configuration and no registration call. Presence IS the wiring.
+
+  WHY A PARTIAL AND NOT A COPY OF THE MODAL. Turf Monster wants Google plus
+  magic-link plus wallet; McRitchie Studio wants Google plus magic-link. Solving
+  that by giving the gem its own auth modal would fork a surface both apps sign
+  in through, and the two copies would drift the way the wallet picker drifted
+  into three copies before it was promoted. One modal, one contributed button.
+
+  SCOPE — this renders INSIDE the engine auth modal's root x-data, so these
+  members are in scope and are the seam's contract:
+
+    methodOn(m)   whether credential m should show. Reads props.methods per key
+                  and falls back to the app's own Studio.auth_method? default,
+                  which for wallet is auth_method?(:wallet) AND feature?(:web3).
+    attested()    the legal-age gate. Returns false and paints the error when
+                  the app requires attestation and the box is unticked. Every
+                  credential CTA in the modal calls it first; skipping it here
+                  would make wallet the one way around the gate.
+
+  THE HANDLER IS INLINE, not a method on a nested x-data, and that is deliberate.
+  A child x-data would reach attested() through Alpine's prototypal scope merge,
+  which works but is subtle enough that a later reader could "simplify" the
+  nesting away and silently drop the age gate. An expression in the attribute
+  reads the enclosing scope directly, with nothing to get wrong.
+
+  Locals:
+    modal_store  Alpine store name backing the modal. The engine's real host
+                 uses "modals"; the living style guide mounts a page-scoped host
+                 and passes "dsModals". Required, no default, because a wrong
+                 store name fails as a dead button rather than as an error.
+%>
+<% modal_store = local_assigns.fetch(:modal_store) %>
+<%# The picker this opens is the wallet-connect modal. backTo returns the user
+    here if they back out of the brand list, and ageAttested carries the gate
+    they already passed so the picker does not ask a second time. %>
+<button type="button"
+        @click="attested() && $store.<%= modal_store %>.swap('wallet-connect', { backTo: 'auth', ageAttested: true })"
+        x-show="methodOn('wallet')"
+        :disabled="!!props.submitting"
+        class="btn btn-neutral btn-lg w-full gap-3 mb-3 disabled:cursor-wait">
+  <%# The Solana wordmark, inline rather than an asset request: this gem ships no
+      image and a host that had to precompile one would get a silent 404 on a
+      sprockets app. The gradient id is namespaced so two Solana marks on one
+      page cannot collide. %>
+  <svg width="18" height="14" viewBox="0 0 397 311" fill="none" x-show="props.submitting !== 'wallet'" aria-hidden="true">
+    <defs><linearGradient id="solana-studio-auth-grad" x1="361" y1="-9" x2="153" y2="389" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#00FFA3"/><stop offset="1" stop-color="#DC1FFF"/>
+    </linearGradient></defs>
+    <path d="M65 234c2-2 6-4 9-4h317c6 0 9 7 5 11l-63 63c-2 2-6 4-9 4H6c-6 0-9-7-5-11l64-63z" fill="url(#solana-studio-auth-grad)"/>
+    <path d="M65 4c2-2 6-4 9-4h317c6 0 9 7 5 11l-63 63c-2 2-6 4-9 4H6c-6 0-9-7-5-11L65 4z" fill="url(#solana-studio-auth-grad)"/>
+    <path d="M333 119c-2-2-6-4-9-4H7c-6 0-9 7-5 11l63 63c2 2 6 4 9 4h317c6 0 9-7 5-11l-63-63z" fill="url(#solana-studio-auth-grad)"/>
+  </svg>
+  <span x-show="props.submitting === 'wallet'" class="spinner" aria-hidden="true"></span>
+  <span x-text="props.submitting === 'wallet' ? 'Connecting…' : 'Solana'"></span>
+</button>

data/lib/solana_studio/version.rb

@@ -16,5 +16,5 @@ module SolanaStudio
   # through the normal cycle. Splitting the version out is the same shape
   # studio-engine already uses (lib/studio/version.rb) and hands each file back
   # to its real owner: this one to the release, the gemspec to the PR.
-  VERSION = "0.5.1"
+  VERSION = "0.5.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: solana-studio
 version: !ruby/object:Gem::Version
-  version: 0.5.1
+  version: 0.5.2
 platform: ruby
 authors:
 - Alex McRitchie
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-27 00:00:00.000000000 Z
+date: 2026-09-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ed25519
@@ -38,6 +38,7 @@ files:
 - LICENSE
 - README.md
 - app/assets/javascripts/solana_studio/network_guard.js
+- app/views/solana_studio/auth/_wallet_credential.html.erb
 - app/views/solana_studio/modals/_network_mismatch.html.erb
 - lib/solana-studio.rb
 - lib/solana/auth_verifier.rb