@gemka/core 0.4.0 → 0.5.1

package/auth.d.ts

@@ -0,0 +1,31 @@
+// Type declarations for @gemka/core/auth.
+
+/**
+ * How long (in seconds) the one-shot OAuth return marker lives.
+ */
+export declare const OAUTH_RETURN_MAX_AGE: 180;
+
+/**
+ * Optimistic signed-in hint from the raw cookie string ("a=1; b=2" form).
+ *
+ * Returns true when a Clerk UAT cookie ("__client_uat" or "__client_uat_<hash>")
+ * is present and non-"0", or when `markerName` names a present, truthy cookie.
+ */
+export declare function isSignedInFromCookies(
+  cookieString: string | null | undefined,
+  markerName?: string
+): boolean;
+
+/**
+ * Build the OAuth return marker cookie string, set client-side right before
+ * redirecting to gemka.co sign-in.
+ */
+export declare function oauthReturnMarker(
+  name: string,
+  options?: { secure?: boolean }
+): string;
+
+/**
+ * Build the cookie string that clears the OAuth return marker.
+ */
+export declare function clearOauthReturnMarker(name: string): string;

package/auth.js

@@ -0,0 +1,59 @@
+// @gemka/core/auth — optimistic-auth primitives shared by GemKa apps.
+//
+// Framework-agnostic and zero-dependency: pure string in, value out. No DOM
+// access, no next/headers, no reading document.cookie inside this module —
+// callers pass the raw cookie string. That's what lets the same code serve a
+// vanilla app, an SSR server component, and a client component.
+
+/**
+ * How long (in seconds) the one-shot OAuth return marker lives. Short enough to
+ * only cover the round-trip back from gemka.co sign-in.
+ */
+export const OAUTH_RETURN_MAX_AGE = 180;
+
+/**
+ * Optimistic signed-in hint from the raw cookie string ("a=1; b=2" form).
+ *
+ * Returns true when either:
+ *  - a Clerk UAT cookie is present and non-"0" — its name is exactly
+ *    "__client_uat" or starts with "__client_uat_" (Clerk's multi-app suffix), or
+ *  - markerName is provided and that cookie is present with a truthy value
+ *    (the short-lived OAuth return marker).
+ */
+export function isSignedInFromCookies(cookieString, markerName) {
+  if (!cookieString) return false;
+
+  const pairs = cookieString.split(";");
+  for (const pair of pairs) {
+    const eq = pair.indexOf("=");
+    if (eq === -1) continue;
+    const name = pair.slice(0, eq).trim();
+    const value = pair.slice(eq + 1).trim();
+
+    if (name === "__client_uat" || name.startsWith("__client_uat_")) {
+      if (value && value !== "0") return true;
+    }
+
+    if (markerName && name === markerName && value) return true;
+  }
+
+  return false;
+}
+
+/**
+ * Build the OAuth return marker cookie string. Set client-side
+ * (document.cookie = ...) right before redirecting to gemka.co sign-in.
+ */
+export function oauthReturnMarker(name, { secure } = {}) {
+  let cookie = `${name}=1; Max-Age=${OAUTH_RETURN_MAX_AGE}; Path=/; SameSite=Lax`;
+  if (secure) cookie += "; Secure";
+  return cookie;
+}
+
+/**
+ * Build the cookie string that clears the OAuth return marker (one-shot clear
+ * after consumption).
+ */
+export function clearOauthReturnMarker(name) {
+  return `${name}=; Max-Age=0; Path=/; SameSite=Lax`;
+}

package/chrome.css

@@ -425,6 +425,7 @@
 .theme-vintage .dd-bar-fill.completed { background: var(--gk-accent); }
 .theme-vintage .dd-bar-fill.sustaining,
 .theme-vintage .dd-bar-fill.created { background: var(--gk-ink); }
+.theme-vintage .dd-bar-fill.checkpoint { background: var(--gk-checkpoint-bar); }
 .theme-vintage .dd-bar-value {
   min-width: var(--dd-bar-value-w, 16px);
   font-size: var(--dd-bar-value-size, 0.72rem);

package/package.json

@@ -1,14 +1,24 @@
 {
   "name": "@gemka/core",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "description": "Canonical GemKa design tokens (cream paper, oxblood accent, warm neutrals, Inter + Fraunces).",
   "license": "UNLICENSED",
+  "type": "module",
+  "scripts": {
+    "test": "node --test"
+  },
   "files": [
     "tokens.css",
-    "chrome.css"
+    "chrome.css",
+    "auth.js",
+    "auth.d.ts"
   ],
   "exports": {
     "./tokens.css": "./tokens.css",
-    "./chrome.css": "./chrome.css"
+    "./chrome.css": "./chrome.css",
+    "./auth": {
+      "types": "./auth.d.ts",
+      "default": "./auth.js"
+    }
   }
 }

package/tokens.css

@@ -25,6 +25,9 @@
   /* Shared row-hover tint */
   --gk-hover-cream:   #f0ece0;
 
+  /* Neutral magnitude bars */
+  --gk-checkpoint-bar: #7C766B; /* warm taupe grey — neutral magnitude bars, distinct from oxblood (deep) and ink (sustaining) */
+
   /* Type */
   --gk-font-sans:  "Inter", -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
   --gk-font-serif: "Fraunces", Georgia, "Times New Roman", serif;