studio-engine 0.62.6 → 0.64.0

data/app/views/studio/profiles/_identity_styles.html.erb

@@ -132,7 +132,7 @@
        a second transform property would silently replace the first. */
     left: 50%;
     width: min(42rem, calc(100% - 2rem));
-    z-index: 30;
+    z-index: var(--z-sticky, 30);
     background: var(--color-surface);
     border: 1px solid var(--color-border-subtle);
     border-radius: 0.75rem;

data/app/views/studio/solana/_deeplink_assets.html.erb

@@ -0,0 +1,37 @@
+<%#
+  tweetnacl, for the Phantom mobile deep link. Both halves of that flow need
+  window.nacl: the deep link generates an x25519 keypair so Phantom can encrypt
+  its reply, and the callback opens that box with the stashed secret.
+
+  IDEMPOTENT ON PURPOSE. turf-monster already loads tweetnacl from its own
+  layout, so this must not load a second copy there; the guard means a consumer
+  that already supplies nacl keeps its own and one that does not (the hub, which
+  had no mobile wallet path at all) gets it here.
+
+  Pinned to an exact version rather than a range: this is signing-path crypto,
+  and a range lets a CDN swap it under a running app. The same reasoning is
+  written out beside turf-monster's web3.js pin.
+
+  Render before studio/solana/phantom_deeplink and in the callback view.
+%>
+<script>
+  // NOT document.write. Under turbo-rails a Drive visit re-executes body scripts
+  // at readyState === 'complete', where document.write implicitly calls
+  // document.open() and BLANKS THE PAGE — on exactly the consumer this guard
+  // exists for. Append a real element instead; it is also non-blocking.
+  (function () {
+    if (typeof window.nacl !== 'undefined') return;
+    if (document.querySelector('script[data-studio-nacl]')) return;
+    var s = document.createElement('script');
+    s.src = 'https://cdn.jsdelivr.net/npm/tweetnacl@1.0.3/nacl-fast.min.js';
+    // Derived with `openssl dgst -sha384 -binary | openssl base64 -A` against the
+    // fetched file, and cross-checked against the value turf-monster already pins
+    // for this exact URL. NEVER hand-write an SRI: a plausible-looking wrong one
+    // makes the browser refuse the script and nacl silently absent, which fails
+    // every mobile sign-in before any other code runs.
+    s.integrity = 'sha384-05+sicyRJQ56XpL4U9HJ8YbtSzFDvAg7apPKOGV6A0JsAJKFM68jp5oLnUjG5mEp';
+    s.crossOrigin = 'anonymous';
+    s.setAttribute('data-studio-nacl', '');
+    document.head.appendChild(s);
+  })();
+</script>

data/app/views/studio/solana/_phantom_deeplink.html.erb

@@ -0,0 +1,167 @@
+<%#
+  Phantom MOBILE deep link — the round trip a phone needs to sign in with a
+  wallet. On desktop Phantom is a browser extension the page can call directly;
+  on a phone it is a separate APP, so the page hands off to it and comes back.
+
+  PROMOTED from turf-monster (app/javascript/phantom_deeplink.js) so every
+  consumer gets it. The server half was already shared — the engine's
+  solana_sessions_controller owns nonce + verify and Solana::SessionAuth owns
+  verify_solana_signature! — only this mobile round trip was app-side.
+
+  Render it once, wherever the Connect-Wallet flow can be reached — an ERB
+  output tag rendering the partial path "studio/solana/phantom_deeplink".
+  (Described rather than quoted on purpose: an ERB comment ends at the first
+  close sequence, so spelling the tag out here would terminate this comment and
+  leak the rest of it as visible text into every consuming app. The engine's
+  erb_comment_leak_test enforces that, and it caught this very paragraph.)
+
+  It defines window.startPhantomDeepLink(linkMode, currentUserId). The engine's
+  wallet picker (studio/modals/_wallet_connect) gates its mobile Phantom row on
+  that function EXISTING, so a consumer that does not render this partial keeps
+  its install row instead of painting a button that does nothing.
+
+  THREE THINGS THAT MUST NOT BE MADE CONFIGURABLE — traced through
+  Solana::SessionAuth#verify_solana_signature! before this was generalised:
+
+    domain        the client builds it from window.location.host and the server
+                  checks it against request.host_with_port (OPSEC-018). An app
+                  override breaks sign-in.
+    User-ID line  OPSEC-005 does a SUBSTRING match on "User-ID: <id>". Do not
+                  reformat it and do not translate it.
+    the nonce     deleted server-side BEFORE verification; that is the replay
+                  protection for the login path.
+
+  The STATEMENT is the one part that varies, and it varies safely: the server
+  does NOT verify it — it is what the human reads inside Phantom. It derives
+  from Studio.app_name, which reproduces turf-monster's previous literal
+  ("Sign in to Turf Monster") BYTE FOR BYTE, so promoting this changed no
+  signed message. It MUST match the callback's copy exactly, because the
+  callback reconstructs the signed message to post for verification — both read
+  this same helper, which is why they cannot drift.
+
+  Requires tweetnacl (window.nacl); render "studio/solana/deeplink_assets"
+  first, or supply it yourself.
+%>
+<script>
+  (function () {
+    var STATEMENT = <%= Studio.wallet_sign_in_statement.to_json.html_safe %>;
+
+    // Base58, INLINE and self-contained. turf-monster took this from a separate
+    // app/javascript/base58.js module that assigned window.encodeBase58, so its
+    // deep link depended on a second global. Promoting only the deep link would
+    // have left encodeBase58 undefined in any consumer without that file — it
+    // throws on the first keypair encode, at the moment the user taps Connect.
+    // The callback view already carries its own codec for the same reason; this
+    // matches it, so the partial has exactly one dependency (nacl) and it is a
+    // guarded one.
+    // THE CONSTANT THE ENCODER READS. It was left behind when the function body
+    // was inlined: base58.js declares it at module scope, so it is unreachable
+    // from a classic script, and encodeBase58 referenced a free variable that
+    // resolved to nothing AT CALL TIME. Every mobile sign-in threw
+    // "B58_ALPHABET is not defined" on the first keypair encode.
+    //
+    // Invisible to eleven passing view tests and to a browser spec that checked
+    // `typeof startPhantomDeepLink` without ever CALLING it. A parse-time
+    // mutation cannot reach this class either — the program parses fine.
+    const B58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
+
+    function encodeBase58(bytes) {
+      const digits = [0];
+      for (let i = 0; i < bytes.length; i++) {
+        let carry = bytes[i];
+        for (let j = 0; j < digits.length; j++) {
+          carry += digits[j] << 8;
+          digits[j] = carry % 58;
+          carry = (carry / 58) | 0;
+        }
+        while (carry) { digits.push(carry % 58); carry = (carry / 58) | 0; }
+      }
+      let str = '';
+      for (let i = 0; i < bytes.length && bytes[i] === 0; i++) str += '1';
+      for (let i = digits.length - 1; i >= 0; i--) str += B58_ALPHABET[digits[i]];
+      return str;
+    }
+
+    // Phantom deep link protocol for mobile browsers
+    // Uses signIn deep link — ONE trip to Phantom (connect + sign combined)
+    // Flow: generate keypair → fetch nonce → build SIWS input → redirect to Phantom signIn
+
+    function startPhantomDeepLink(linkMode, currentUserId) {
+      // The consumer declares its cluster on <body data-solana-cluster="...">.
+  // turf-monster does; an app that does NOT silently signs against devnet while
+  // its wallet is on mainnet, which reads to the user as a rejected signature
+  // and to the log as nothing. Warn loudly rather than guess quietly — the
+  // default stays devnet so behaviour is unchanged for anyone already relying
+  // on it.
+  var cluster = document.body.dataset.solanaCluster;
+  if (!cluster) {
+    console.warn('[StudioSolana] no data-solana-cluster on <body>; defaulting to devnet. ' +
+                 'Set it on the body tag to sign against the cluster you mean.');
+    cluster = 'devnet';
+  }
+      var callbackUrl = window.location.origin + '/auth/phantom/callback';
+
+      // Generate x25519 keypair for decrypting Phantom's response
+      var dappKeyPair = nacl.box.keyPair();
+
+      // Fetch nonce from server, then redirect to Phantom signIn
+      fetch('/auth/solana/nonce')
+        .then(function(r) { return r.json(); })
+        .then(function(data) {
+          // OPSEC-005: when linking a wallet to a logged-in user, embed
+          // `User-ID: <id>` so the server can refuse signatures captured
+          // against a different session's nonce. Login (no currentUserId)
+          // skips the binding line.
+          var statement = STATEMENT;
+          if (linkMode && currentUserId) {
+            statement = statement + '\nUser-ID: ' + currentUserId;
+          }
+
+          // Build SIWS input (CAIP-122 / Sign In With Solana format)
+          // Note: chainId omitted — optional per spec, avoids mismatch warning
+          // when app is on devnet but user's wallet is on mainnet
+          var signInInput = {
+            domain: window.location.host,
+            statement: statement,
+            uri: window.location.origin,
+            version: '1',
+            nonce: data.nonce,
+            issuedAt: new Date().toISOString()
+          };
+
+          // Save state to localStorage (persists across redirect)
+          localStorage.setItem('phantom_dl_secret', encodeBase58(dappKeyPair.secretKey));
+          localStorage.setItem('phantom_dl_pubkey', encodeBase58(dappKeyPair.publicKey));
+          localStorage.setItem('phantom_dl_nonce', data.nonce);
+          localStorage.setItem('phantom_dl_nonce_at', Date.now().toString());
+          localStorage.setItem('phantom_dl_step', 'signIn');
+          localStorage.setItem('phantom_dl_link_mode', linkMode ? 'true' : 'false');
+          localStorage.setItem('phantom_dl_cluster', cluster);
+          if (currentUserId) {
+            localStorage.setItem('phantom_dl_user_id', String(currentUserId));
+          } else {
+            localStorage.removeItem('phantom_dl_user_id');
+          }
+
+          // Base58-encode the SIWS input JSON (NOT encrypted — per Phantom signIn protocol)
+          var payloadB58 = encodeBase58(new TextEncoder().encode(JSON.stringify(signInInput)));
+
+          // Build Phantom signIn deep link
+          var params = new URLSearchParams({
+            dapp_encryption_public_key: encodeBase58(dappKeyPair.publicKey),
+            cluster: cluster,
+            app_url: window.location.origin,
+            redirect_link: callbackUrl,
+            payload: payloadB58
+          });
+
+          window.location.href = 'https://phantom.app/ul/v1/signIn?' + params.toString();
+        })
+        .catch(function(err) {
+          alert('Failed to start Phantom connection: ' + err.message);
+        });
+    }
+
+    window.startPhantomDeepLink = startPhantomDeepLink;
+  })();
+</script>

data/app/views/style/_modals.html.erb

@@ -116,6 +116,15 @@
         return { connecting: false, error: null, statusText: 'Connect Wallet',
                  walletAvailable: false, isMobile: false, connect: function () {} };
       };
+      // Connect stub for the promoted wallet picker (studio/modals/_wallet_connect,
+      // configured by style/modals/_wallet_connect). Performs NO connect: it
+      // resolves success after a beat so the picker's connecting state is
+      // visible and its onConnected hook can continue the demo walk.
+      window.dsWalletConnectDemo = window.dsWalletConnectDemo || function () {
+        return new Promise(function (resolve) {
+          setTimeout(function () { resolve({ success: true }); }, 1100);
+        });
+      };
       window.walletProvider = window.walletProvider || {
         available: function () { return [{ name: 'Phantom' }, { name: 'Solflare' }]; },
         isMobile: function () { return false; },
@@ -306,7 +315,7 @@
       gated on props.dismissible (never @click.outside, so a hold modal can't
       close itself on the button release). %>
   <template x-if="$store.dsModals.current()">
-    <div class="fixed inset-0 z-[120] flex items-center justify-center p-4 modal-backdrop-mount"
+    <div class="fixed inset-0 z-[var(--z-modal)] flex items-center justify-center p-4 modal-backdrop-mount"
          :class="$store.dsModals.current()?._closing && 'modal-backdrop-unmount'"
          style="background: rgba(0,0,0,0.6)"
          role="dialog" aria-modal="true"

data/app/views/style/modals/_wallet_connect.html.erb

@@ -1,176 +1,82 @@
 <%#
-  "Connect Wallet" picker — design-system port of turf-monster's
-  modals/_wallet_connect, wired to the living style guide's page-scoped host
-  ($store.dsModals). Faithful reown-style picker: detected wallets on top
-  (click to connect), featured-but-missing wallets below (install links), a
-  mobile deep-link row, and the legal-age attestation for guests.
+  "Connect Wallet" specimen for the living style guide.
 
-  Self-contained: window.walletProvider (a page stub) supplies the detected
-  wallet list; pick() runs a brief connecting state then closes (no real
-  connect). Opened via open('wallet-connect', {...}) or swap()ed to from auth.
+  As of the wallet-picker promotion this is a THIN CONFIGURATION of the real
+  engine partial (studio/modals/_wallet_connect) rather than a parallel port of
+  it. That is the point: the card on /admin/style now demonstrates the SAME code
+  the apps render, so a drift between the specimen and production is no longer
+  possible. Before this, the picker existed three times — turf-monster's,
+  mcritchie-studio's, and this one — and only this one was ever looked at.
 
-  Brand icons ship inline from the engine (studio/modals/blocks/_wallet_brand_sprite,
-  rendered once below): brandIcon(name) resolves a known wallet to its <symbol>
-  id, and an unknown wallet falls back to a letter tile. No per-app PNG files.
+  What the configuration supplies, all of it demo scaffolding:
+    store       — the guide's page-scoped host ($store.dsModals), not the app
+                  host, so the specimen never collides with a consuming app's
+                  own shared modal host.
+    connect_fn  — dsWalletConnectDemo, the stub defined with the other guide
+                  credential stubs in style/_modals. It performs NO real
+                  connect; it resolves success after a beat so the picker's
+                  connecting state is visible.
+    extra_data  — the demo's own attestation state plus the hooks: onConnected
+                  continues the walk into the on-chain-tx card, onDeepLink
+                  treats the mobile row as a Phantom pick, onBack slides back
+                  to the auth card when the picker was swapped in from it.
 
-  Single root: the outer <div> is the host's required root.
+  The slot below is the app slot — here it holds the legal-age attestation,
+  exactly where turf-monster puts its own. It is a named local naming a partial,
+  not a block: a block-shaped slot leaks the captured page body into the card
+  (a compiled Rails partial's block_given? is always true).
 %>
-<div x-data="{
-       get props() { var c = Alpine.store('dsModals').current(); return (c && c.props) || {}; },
-       wallets: [],
-       installs: [
-         { name: 'Phantom',  url: 'https://phantom.app/download' },
-         { name: 'Solflare', url: 'https://solflare.com/download' },
-         { name: 'Backpack', url: 'https://backpack.app/downloads' }
-       ],
-       connecting: false,
-       picking: '',
-       error: '',
-       ageAttested: false,
-       ageError: false,
-       get needsAttestation() { return !this.props.linkMode; },
-       attested() {
-         if (!this.needsAttestation) return true;
-         if (this.ageAttested) return true;
-         this.ageError = true;
-         return false;
-       },
-       init() {
-         this.ageAttested = this.props.ageAttested === true;
-         this.refresh();
-       },
-       refresh() {
-         this.wallets = (window.walletProvider && window.walletProvider.available && window.walletProvider.available()) || [];
-       },
-       brandIcon(name) {
-         var n = ('' + name).toLowerCase();
-         return ['phantom', 'solflare', 'backpack'].indexOf(n) >= 0 ? n : null;
-       },
-       get isMobile() { return !!(window.walletProvider && window.walletProvider.isMobile && window.walletProvider.isMobile()); },
-       hasWallet(name) {
-         var n = ('' + name).toLowerCase();
-         return (this.wallets || []).some(function(w) { return w.name && w.name.toLowerCase() === n; });
-       },
-       get missingInstalls() {
-         var self = this;
-         return this.installs.filter(function(i) { return !self.hasWallet(i.name); });
-       },
-       pick(name) {
-         if (this.connecting) return;
-         if (!this.attested()) return;
-         this.connecting = true; this.picking = name; this.error = '';
-         var self = this;
-         // DEMO walk continuity: a picked wallet runs a brief connecting state,
-         // then swaps to the on-chain tx modal in its processing state, which
-         // auto-resolves to on-chain success (demoResolve). So the glow follows
-         // Connect Wallet -> Processing -> On-chain success. (No real connect.)
-         setTimeout(function () {
-           self.connecting = false; self.picking = '';
-           Alpine.store('dsModals').swap('onchain-tx', {
-             state: 'processing', demoResolve: true, demoError: false,
-             title: 'Confirming on-chain',
-             message: 'Waiting for the wallet signature…'
-           });
-         }, 1100);
-       },
-       deepLink() {
-         if (!this.attested()) return;
-         this.pick('Phantom');
-       },
-       back() {
-         if (this.connecting) return;
-         if (this.props.backTo === 'auth') {
-           Alpine.store('dsModals').swap('auth',
-             { step: 'credentials', submitting: null, formError: '' },
-             { direction: 'back' });
-         } else {
-           Alpine.store('dsModals').close();
-         }
-       }
-     }"
-     class="relative">
-
-  <%# Engine-owned brand-icon sprite — one copy; the <use> refs below paint it. %>
-  <%= render "studio/modals/blocks/wallet_brand_sprite" %>
-
-  <div class="relative mb-4">
-    <h3 class="text-heading font-bold text-lg text-center pt-1">Connect Wallet</h3>
-    <button @click="$store.dsModals.close()"
-            class="absolute top-0 right-0 -mr-1 text-secondary hover:text-heading text-xl leading-none"
-            aria-label="Close">&times;</button>
-  </div>
-
-  <template x-if="needsAttestation">
-    <div class="mb-3">
-      <%= render "studio/modals/shared/age_attestation" %>
-    </div>
-  </template>
-
-  <div class="space-y-2">
-    <%# Detected wallets — click to connect. %>
-    <template x-for="w in wallets" :key="w.name">
-      <button type="button" @click="pick(w.name)" :disabled="connecting"
-              class="w-full flex items-center gap-3 p-3 rounded-xl bg-surface-alt border border-strong hover:bg-surface transition text-left disabled:opacity-60 disabled:cursor-wait">
-        <template x-if="brandIcon(w.name)">
-          <span class="w-9 h-9 rounded-lg overflow-hidden flex items-center justify-center shrink-0">
-            <svg class="w-9 h-9" aria-hidden="true"><use :href="'#se-wallet-' + brandIcon(w.name)"></use></svg>
-          </span>
-        </template>
-        <template x-if="!brandIcon(w.name)">
-          <span class="w-9 h-9 rounded-lg bg-inset flex items-center justify-center text-sm font-bold text-heading shrink-0" x-text="w.name.slice(0,1)"></span>
-        </template>
-        <span class="font-semibold text-heading" x-text="w.name"></span>
-        <span class="ml-auto flex items-center gap-2">
-          <span x-show="picking === w.name" class="inline-flex items-center gap-1.5 text-xs text-secondary"><span class="spinner" aria-hidden="true"></span>Connecting…</span>
-          <span x-show="picking !== w.name" class="badge border-primary text-primary">Installed</span>
-          <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" class="w-4 h-4 text-muted">
-            <path stroke-linecap="round" stroke-linejoin="round" d="m8.25 4.5 7.5 7.5-7.5 7.5" />
-          </svg>
-        </span>
-      </button>
-    </template>
-
-    <%# Featured wallets that aren't installed — open the install page. %>
-    <template x-for="i in missingInstalls" :key="i.name">
-      <a :href="i.url" target="_blank" rel="noopener noreferrer"
-         class="w-full flex items-center gap-3 p-3 rounded-xl bg-surface-alt border border-strong hover:bg-surface transition no-underline">
-        <template x-if="brandIcon(i.name)">
-          <span class="w-9 h-9 rounded-lg overflow-hidden flex items-center justify-center shrink-0">
-            <svg class="w-9 h-9" aria-hidden="true"><use :href="'#se-wallet-' + brandIcon(i.name)"></use></svg>
-          </span>
-        </template>
-        <template x-if="!brandIcon(i.name)">
-          <span class="w-9 h-9 rounded-lg bg-inset flex items-center justify-center text-sm font-bold text-muted shrink-0" x-text="i.name.slice(0,1)"></span>
-        </template>
-        <span class="font-semibold text-heading" x-text="i.name"></span>
-        <span class="ml-auto flex items-center gap-2">
-          <span class="text-xs text-muted uppercase tracking-wide">Install</span>
-          <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" class="w-4 h-4 text-muted">
-            <path stroke-linecap="round" stroke-linejoin="round" d="m8.25 4.5 7.5 7.5-7.5 7.5" />
-          </svg>
-        </span>
-      </a>
-    </template>
-
-    <%# Mobile (no extension) — deep-link into the Phantom app. %>
-    <button x-show="isMobile" type="button" @click="deepLink()"
-            class="w-full flex items-center gap-3 p-3 rounded-xl bg-surface-alt border border-strong hover:bg-surface transition text-left">
-      <span class="w-9 h-9 rounded-lg overflow-hidden flex items-center justify-center shrink-0">
-        <svg class="w-9 h-9" aria-hidden="true"><use href="#se-wallet-phantom"></use></svg>
-      </span>
-      <span class="font-semibold text-heading">Open in Phantom app</span>
-      <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" class="ml-auto w-4 h-4 text-muted">
-        <path stroke-linecap="round" stroke-linejoin="round" d="m8.25 4.5 7.5 7.5-7.5 7.5" />
-      </svg>
-    </button>
-  </div>
-
-  <template x-if="error">
-    <p role="alert" class="text-red-400 text-sm mt-3 text-center" x-text="error"></p>
-  </template>
-
-  <button type="button" @click="back()" :disabled="connecting"
-          class="mt-4 w-full text-center text-sm text-secondary hover:text-heading disabled:opacity-50">
-    &larr; Back
-  </button>
-</div>
+<%
+  # The heredoc MUST live inside one Ruby chunk like this. Written inline in the
+  # render tag below it does NOT compile: ERB closes a tag at the first close
+  # marker it sees, so the heredoc body becomes template TEXT and extra_data
+  # arrives empty — the picker still renders, minus every hook, which is a
+  # working-looking page that passes a markup assertion.
+  #
+  # And note what this comment may NOT contain: the close marker itself, in any
+  # form, even inside a Ruby comment. ERB scans the raw text, not the Ruby. The
+  # first draft of this very comment spelled the marker out and closed the tag
+  # from inside itself.
+  demo_hooks = <<~JS
+    ageAttested: false,
+    ageError: false,
+    get needsAttestation() { return !this.props.linkMode; },
+    canPick() {
+      if (!this.needsAttestation) return true;
+      if (this.ageAttested) return true;
+      this.ageError = true;
+      return false;
+    },
+    onInit() { this.ageAttested = this.props.ageAttested === true; },
+    // DEMO walk continuity: the picked wallet resolves, then the card swaps to
+    // the on-chain tx modal in its processing state, which auto-resolves to
+    // on-chain success. So the guide's active-card glow follows
+    // Connect Wallet -> Processing -> On-chain success.
+    onConnected() {
+      this.connecting = false;
+      this.picking = '';
+      Alpine.store('dsModals').swap('onchain-tx', {
+        state: 'processing', demoResolve: true, demoError: false,
+        title: 'Confirming on-chain',
+        message: 'Waiting for the wallet signature\u2026'
+      });
+    },
+    // No app to deep-link into from the guide — treat the mobile Phantom row
+    // as picking Phantom so the card still walks somewhere.
+    onDeepLink() { this.pick('Phantom'); },
+    onBack() {
+      if (this.props.backTo === 'auth') {
+        Alpine.store('dsModals').swap('auth',
+          { step: 'credentials', submitting: null, formError: '' },
+          { direction: 'back' });
+      } else {
+        Alpine.store('dsModals').close();
+      }
+    }
+  JS
+%>
+<%= render "studio/modals/wallet_connect",
+      store: "dsModals",
+      connect_fn: "dsWalletConnectDemo",
+      slot: "style/modals/wallet_connect_slot",
+      extra_data: demo_hooks %>

data/app/views/style/modals/_wallet_connect_slot.html.erb

@@ -0,0 +1,18 @@
+<%#
+  The style guide's pre-connect slot for studio/modals/_wallet_connect — the
+  legal-age attestation, sitting exactly where turf-monster puts its own.
+
+  A PARTIAL rather than a block because the picker takes its slot as a named
+  local: `block_given?` reads TRUE inside any compiled Rails partial, so a
+  block-shaped slot yields the captured page body into the card whenever no
+  block is passed. See the picker's header.
+
+  It binds to ageAttested / ageError / needsAttestation, which reach this scope
+  through the picker's extra_data fragment — this renders INSIDE the picker's
+  root, so those members are in scope.
+%>
+<template x-if="needsAttestation">
+  <div class="mb-3">
+    <%= render "studio/modals/shared/age_attestation" %>
+  </div>
+</template>

data/lib/studio/version.rb

@@ -1,3 +1,3 @@
 module Studio
-  VERSION = "0.62.6"
+  VERSION = "0.64.0"
 end

data/lib/studio.rb

@@ -56,6 +56,46 @@ module Studio
   mattr_accessor :after_newsletter_change, default: ->(_user, subscribed:, first_join:) {}
   mattr_accessor :sso_logo,            default: nil
   mattr_accessor :wallet_address_method, default: nil
+
+  # The statement a wallet signs, and the line the human reads inside Phantom.
+  # Deliberately DERIVED rather than configured: "Sign in to Turf Monster" was
+  # turf-monster's literal before the mobile deep link was promoted, and
+  # app_name reproduces it byte for byte, so nothing that was already signed
+  # changed. Safe to vary because the server does NOT verify this text — see
+  # Solana::SessionAuth#verify_solana_signature!, which checks the nonce, the
+  # host, and the OPSEC-005 User-ID binding, and nothing else about the message.
+  # UNVERIFIED IS NOT UNCONSTRAINED. Solana::AuthVerifier reads the nonce with a
+  # FIRST-MATCH /Nonce: (\w+)/ and the statement is interpolated ABOVE the real
+  # nonce line, so a statement containing "Nonce: something" would be read as the
+  # nonce and fail every verify. Not an attack surface (this is app config, never
+  # user input) but a real constraint on what may be put here.
+  # Both the deep-link partial and the callback view read THIS, so they cannot
+  # drift; the callback rebuilds the signed message to post for verification, so
+  # a drift between them would fail every mobile sign-in.
+  mattr_accessor :wallet_sign_in_statement_builder,
+                 default: -> { "Sign in to #{Studio.app_name}" }
+
+  def self.wallet_sign_in_statement
+    wallet_sign_in_statement_builder.call
+  end
+
+  # The Phantom callback's on-page debug sink. DEFAULTS TO OFF, and the default
+  # is the point: that sink printed the dapp x25519 SECRET KEY to the page and
+  # the console on every mobile sign-in. A capability that leaks a signing key
+  # must be opted INTO, never defaulted on and switched off per environment.
+  #
+  # Rails.env.production? is the wrong predicate here and that is why this is a
+  # lambda rather than an env check: a Heroku QA dyno runs RAILS_ENV=production,
+  # so an env test would take QA's debugging away. turf-monster restores exactly
+  # what it had with:
+  #
+  #     config.wallet_debug_sink = -> { !AppFlags.live_production? }
+  #
+  # The callback treats an absent sink as "debug off" and stays null-safe, so
+  # turning this off can never break sign-in.
+  mattr_accessor :wallet_debug_sink, default: -> { false }
+
+  def self.wallet_debug_sink? = wallet_debug_sink.call
   mattr_accessor :theme_logos,         default: []
   mattr_accessor :sticky_table_headers, default: false
 
@@ -782,13 +822,18 @@ module Studio
              constraints: { token: %r{[^/]+} }
       end
 
-      # Solana / Phantom wallet sign-in (nonce challenge + signature verify).
-      # The browser posts to these literal paths from the shared Connect-Wallet
-      # flow; app-specific surfaces (mobile deep-link callback, account-linking,
-      # OAuth popup) stay in the consuming app's routes.
+      # Solana / Phantom wallet sign-in (nonce challenge + signature verify),
+      # plus the MOBILE deep-link callback Phantom redirects back to. The
+      # callback used to be listed here as app-specific and is not any more —
+      # it was promoted with the deep link itself, because the hub had no
+      # mobile wallet path at all and copying 400 lines of SIWS protocol per
+      # app is how the picker came to exist three times. Account-linking and
+      # the OAuth popup DO stay app-side.
       if Studio.draw_auth_routes && Studio.auth_method?(:wallet)
         get  "auth/solana/nonce",  to: "solana_sessions#nonce",  as: :solana_nonce
         post "auth/solana/verify", to: "solana_sessions#verify", as: :solana_verify
+        get  "auth/phantom/callback", to: "solana_sessions#phantom_callback",
+             as: :phantom_callback
       end
 
       # The shared profile page. ON by default — unlike /admin/emails and the

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: studio-engine
 version: !ruby/object:Gem::Version
-  version: 0.62.6
+  version: 0.64.0
 platform: ruby
 authors:
 - Alex McRitchie
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-27 00:00:00.000000000 Z
+date: 2026-08-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -401,6 +401,7 @@ files:
 - app/views/schema/index.html.erb
 - app/views/sessions/_sso_continue.html.erb
 - app/views/sessions/new.html.erb
+- app/views/solana_sessions/phantom_callback.html.erb
 - app/views/studio/_at_time_script.html.erb
 - app/views/studio/_birthday_assets.html.erb
 - app/views/studio/_board_assets.html.erb
@@ -444,6 +445,7 @@ files:
 - app/views/studio/modals/_load_convention.html.erb
 - app/views/studio/modals/_saving.html.erb
 - app/views/studio/modals/_scoped_host.html.erb
+- app/views/studio/modals/_wallet_connect.html.erb
 - app/views/studio/modals/_web3_step_up.html.erb
 - app/views/studio/modals/auth/_resend_footer.html.erb
 - app/views/studio/modals/blocks/_age_gate.html.erb
@@ -497,6 +499,8 @@ files:
 - app/views/studio/profiles/_save_controls.html.erb
 - app/views/studio/profiles/edit.html.erb
 - app/views/studio/profiles/show.html.erb
+- app/views/studio/solana/_deeplink_assets.html.erb
+- app/views/studio/solana/_phantom_deeplink.html.erb
 - app/views/style/_modal_specimen.html.erb
 - app/views/style/_modals.html.erb
 - app/views/style/_specimen.html.erb
@@ -528,6 +532,7 @@ files:
 - app/views/style/modals/_unsubscribe_goodbye.html.erb
 - app/views/style/modals/_wallet_changed.html.erb
 - app/views/style/modals/_wallet_connect.html.erb
+- app/views/style/modals/_wallet_connect_slot.html.erb
 - app/views/style/modals/_wallet_deposit.html.erb
 - app/views/style/modals/_wallet_setup.html.erb
 - app/views/theme_settings/edit.html.erb