studio-engine 0.62.1 → 0.62.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d7bb00518e41485eb5c86076482d82bf7e178c3de53ebe7e7cb86b727d2ebdf2
-  data.tar.gz: a56bfe30c698b1943312c078e6030e4224540adf074832d942997d0812303824
+  metadata.gz: 822c72023af8d108848e67535194fa5a115443b4faaeebd7d9adc931ffcc7678
+  data.tar.gz: a1ef68303215291461d2e07b5237506c57fc6ab83e4fd8b9edc9f18a39e19e51
 SHA512:
-  metadata.gz: 0c9e71c552cbb8078ca4b6e01d18de197e7a6ec6bb633ce6987d63793610f01387466f653584e5acd3c4a6e0da85d7692b941e0358591e429e51ee29aea46b20
-  data.tar.gz: 4f4f23cc7ce10e40da54465a29f9022c234848a481cd99138ec2946c281bbc11e293279a10136019db19c1de57a779c21d552f3728b7a7ffb212d36e6daefc45
+  metadata.gz: dac77f69b4c34943fe3bd8f8a790dbbadfd8ebbc4e80a17595af78fff7f054e9321ea92062769c474ae56b70da09d051a9d45801f0f0aff2197fedc794deaaba
+  data.tar.gz: 723edaf2959e13979ede94523e578ce1d612cbe9911dfd4f1340de8a77b73fa2a2a2ee2c866f3f8078a780455af3baeafd5f369fb232a90a024987ed409a84e1

data/app/views/studio/modals/blocks/_entry_confirmed.html.erb

@@ -51,6 +51,13 @@
     seeds_total_key  — Alpine expr: new seeds total. Default "props.seedsTotal".
     seeds_per_level  — Integer seeds per level. Default 100.
     free_entry_label — reward copy on a level-up. Default "Free Entry Earned 🎟️".
+    secondary_label  — optional secondary action label under the CTA (e.g.
+                       "Dismiss"). Forwarded to _success_card, which renders a
+                       button dispatching secondary_event.
+    secondary_event  — window event name for that button. BOTH are required or
+                       NEITHER renders, matching how _success_card and _error_card
+                       already gate the pair — a label with no event is a button
+                       that does nothing.
 %>
 <%
   modal_store      = local_assigns.fetch(:modal_store, "modals")
@@ -70,6 +77,8 @@
   seeds_total_key  = local_assigns.fetch(:seeds_total_key, "props.seedsTotal")
   seeds_per_level  = local_assigns.fetch(:seeds_per_level, 100)
   free_entry_label = local_assigns.fetch(:free_entry_label, "Free Entry Earned 🎟️")
+  secondary_label  = local_assigns[:secondary_label]
+  secondary_event  = local_assigns[:secondary_event]
 
   sc_locals = {
     large_title:           true,
@@ -89,6 +98,17 @@
   else
     sc_locals[:message] = subtitle
   end
+
+  # BOTH OR NEITHER, deliberately. sc_locals was a FIXED hash, so a consumer
+  # adopting this card in place of its own fork lost any secondary action it had
+  # SILENTLY — there was no error, the button simply stopped existing. That is
+  # what blocked turf-monster's entry-confirmed defork: its card ends in a
+  # "Dismiss" link, and the call site sits inside a <template x-if>, which takes
+  # ONE root, so the button cannot be kept outside the block either.
+  if secondary_label.present? && secondary_event.present?
+    sc_locals[:secondary_label] = secondary_label
+    sc_locals[:secondary_event] = secondary_event
+  end
 %>
 <%# props getter + clusterParam live on the root scope so _success_card's nested
     Alpine expressions (props.txSignature, props.lobbyUrl, clusterParam) resolve up

data/app/views/studio/modals/blocks/_rail_row.html.erb

@@ -78,8 +78,22 @@
   tile_style    = icon_bg.present? ? "background-color:#{icon_bg}" : nil
   tile_bg_class = icon_bg.present? ? nil : "bg-primary"
 %>
+<%# on_click is marked html_safe because it is CODE, not content. content_tag
+    escapes through ERB::Util.unwrapped_html_escape, which no-ops on an html_safe
+    String, so the handler reaches the attribute exactly as the caller wrote it:
+    f('a'), not the entity-escaped form. A browser recovered from the escaped
+    version and Alpine fired either way, so this was invisible on screen; what it
+    broke was every consumer test that reads the markup.
+
+    IT IS STILL SAFE FOR DOUBLE QUOTES. content_tag quote-escapes an attribute
+    VALUE regardless of html_safe, so a double-quoted expression is entity-encoded
+    and still works. An earlier attempt emitted the handler through raw in literal
+    ERB instead, which had no such protection: it broke out of the attribute and
+    silently narrowed the contract to single quotes only.
+
+    Everything else here stays escaped, because everything else is content. %>
 <%= content_tag(soon ? :div : :button, type: (soon ? nil : "button"),
-      "@click": on_click,
+      "@click": on_click&.html_safe,
       class: "w-full flex items-center gap-4 p-4 rounded-xl #{border_class} bg-inset#{soon ? '' : ' transition text-left'}",
       data: data_attrs.presence) do %>
   <span class="shrink-0 w-10 h-10 rounded-lg flex items-center justify-center <%= icon_class %> <%= tile_bg_class %>"

data/app/views/style/_modals.html.erb

@@ -566,7 +566,7 @@
 
   <%# 1. AUTH suite %>
   <%# ===================================================================== %>
-  <section class="space-y-5">
+  <section id="modals-auth" class="space-y-5">
     <div class="space-y-1">
       <h3 class="text-xl font-bold text-heading">Auth</h3>
       <p class="text-muted text-sm">
@@ -650,7 +650,7 @@
       owns: the person's name, their birthday, their picture. Grouping by
       subject rather than by moment also stops the guide claiming a chain it
       cannot show, now that the wallet step lives with the wallet cards. %>
-  <section class="space-y-5">
+  <section id="modals-profile" class="space-y-5">
     <div class="space-y-1">
       <h3 class="text-xl font-bold text-heading">Profile</h3>
       <p class="text-muted text-sm">
@@ -838,7 +838,7 @@
       "Quest N of N" counter — the with/without fork is gone. The two "updated"
       cards open the same modal id straight at the celebrate state (props.celebrate),
       exactly like the Auth cards open a given step. %>
-  <section class="space-y-5">
+  <section id="modals-profile-leveling" class="space-y-5">
     <div class="space-y-1">
       <div class="flex flex-wrap items-center gap-3">
         <h3 class="text-xl font-bold text-heading">Profile Leveling</h3>
@@ -1046,7 +1046,7 @@
   <%# 2. WEB3 — the wallet + on-chain modals, in the order a player meets them. %>
   <%# Gated by :web3; off = disabled-but-present-yet-openable. %>
   <%# ===================================================================== %>
-  <section class="space-y-5">
+  <section id="modals-web3" class="space-y-5">
     <div class="space-y-1">
       <div class="flex flex-wrap items-center gap-3">
         <h3 class="text-xl font-bold text-heading">Web3</h3>
@@ -1447,7 +1447,7 @@
   <%# 3. CONTEST ENTRY & ELIGIBILITY — moved directly under Web3. The %>
   <%# walked entry flow (glow follows), plus the honest web2/web3 map. %>
   <%# ===================================================================== %>
-  <section class="space-y-5">
+  <section id="modals-contest-entry" class="space-y-5">
     <div class="space-y-1">
       <div class="flex flex-wrap items-center gap-3">
         <h3 class="text-xl font-bold text-heading">Contest entry &amp; eligibility</h3>
@@ -1597,7 +1597,7 @@
   <%# ===================================================================== %>
   <%# 5. SYSTEM AND STATUS (reusable card blocks) %>
   <%# ===================================================================== %>
-  <section class="space-y-5">
+  <section id="modals-system-status" class="space-y-5">
     <div class="space-y-1">
       <h3 class="text-xl font-bold text-heading">System &amp; status</h3>
       <p class="text-muted text-sm">
@@ -1713,7 +1713,7 @@
   <%# ===================================================================== %>
   <%# 6. TEMPLATES (copy-from archetypes) %>
   <%# ===================================================================== %>
-  <section class="space-y-5">
+  <section id="modals-templates" class="space-y-5">
     <div class="space-y-1">
       <h3 class="text-xl font-bold text-heading">Templates</h3>
       <p class="text-muted text-sm">
@@ -1747,7 +1747,7 @@
   <%# ===================================================================== %>
   <%# 7. REWARDS / leveling (gated by Studio.feature?(:leveling)) %>
   <%# ===================================================================== %>
-  <section class="space-y-5">
+  <section id="modals-rewards" class="space-y-5">
     <div class="space-y-1">
       <div class="flex flex-wrap items-center gap-3">
         <h3 class="text-xl font-bold text-heading">Rewards</h3>

data/lib/studio/version.rb

@@ -1,3 +1,3 @@
 module Studio
-  VERSION = "0.62.1"
+  VERSION = "0.62.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: studio-engine
 version: !ruby/object:Gem::Version
-  version: 0.62.1
+  version: 0.62.2
 platform: ruby
 authors:
 - Alex McRitchie