@mindful-web/marko-web-theme-monorail 1.83.5 → 1.85.0

package/middleware/progressive-profiling.js

@@ -0,0 +1,238 @@
+const debug = require('debug')('progressive-profile');
+const Joi = require('@parameter1/joi');
+const { validate } = require('@parameter1/joi/utils');
+const { asyncRoute, isFunction } = require('@mindful-web/utils');
+const { get, getAsArray, getAsObject } = require('@mindful-web/object-path');
+const getMissingProgressiveFields = require('@mindful-web/marko-web-identity-x/utils/get-missing-progressive-fields');
+const { buildName } = require('@mindful-web/marko-web-identity-x/utils/content-form-cookie');
+const {
+  getAttempts,
+  incrementAttempts,
+  isDismissed,
+  isUnverifiedSuppressed,
+} = require('@mindful-web/marko-web-identity-x/utils/progressive-profile-cookies');
+const loadGatingContent = require('../utils/load-gating-content');
+
+/**
+ * Render-side keys only, deliberately. The write route's protections — reCAPTCHA score floor,
+ * suppression durations — live on the IdentityX config (`progressiveProfile.*`), so a site that
+ * misconfigures its theme cannot relax what `POST /__idx/progressive-profile` enforces. There is
+ * no `viewLimit`/`timeframe` (the default cadence is a hard gate on every article), no bot
+ * predicate for this middleware to consult, and no form token for the gate component to embed —
+ * both were removed with the hand-rolled bot safeguards in favor of submit-time reCAPTCHA.
+ */
+const configSchema = Joi.object({
+  enabled: Joi.boolean().default(false)
+    .description('Should progressive profiling be enabled?'),
+  excludeLabels: Joi.array().items(Joi.string())
+    .description('Content labels that should be excluded from the profile gate.'),
+  excludeContentTypes: Joi.array().items(Joi.string())
+    .description('Content types that should be excluded from the profile gate.'),
+  excludePrimarySectionIds: Joi.array().items(Joi.number())
+    .description('Sections whose primary content should be excluded from the profile gate.'),
+  excludePrimarySectionAlias: Joi.array().items(Joi.string())
+    .description('Sections whose primary content should be excluded from the profile gate.'),
+  previewParagraphs: Joi.number().min(1).default(3)
+    .description('How many paragraphs of the body remain readable above the gate.'),
+  displayOverlay: Joi.boolean().default(true)
+    .description('If the fade-out overlay should be displayed above the gate.'),
+  promoCode: Joi.string().default('progressive_profile')
+    .description('The Omeda promo code to use with progressive profiling events.'),
+  dismissible: Joi.boolean().default(false)
+    .description('If the gate should render a skip affordance.'),
+  suppressAfterDismissDays: Joi.number().min(0).default(0)
+    .description('Days to suppress the gate after a dismissal. Render-side echo of the IdentityX `progressiveProfile.suppressAfterDismissDays` option, which is what the dismiss route reads.'),
+  maxAttemptsPerUser: Joi.number().min(1).default(3)
+    .description('Gate renders without a successful submit before the content is released.'),
+  bypassQueryParam: Joi.string().default('bypassProgressiveProfile')
+    .description('Query parameter that bypasses the gate when set to 1/true.'),
+});
+
+const { error } = console;
+
+const defaultRegFn = ({ content }) => get(content, 'userRegistration.isCurrentlyRequired', false);
+const defaultBypassGatingFn = ({ content }) => get(content, 'userRegistration.bypassGating', false);
+
+/**
+ * Content-level checks, mirroring the meter's `shouldMeter`: any gate with an owner of its own
+ * wins, and the configured exclusions apply.
+ *
+ * Deliberately absent: the meter's Omeda bypass (`utils/has-omeda-id.js`). An `oly_enc_id`
+ * visitor with missing fields is not a false positive to wave through — they are exactly who this
+ * feature exists for, the identified-but-not-authenticated newsletter clicker. Do NOT "fix" this
+ * by copying the meter's block. Same for its `utm_medium=email` bypass, and for the same reason.
+ */
+/**
+ * Returns the name of the first content-level check that blocks the gate, or null when nothing
+ * does. The name is only ever debug output — but "which check said no" is the entire content of a
+ * "the gate is not showing" support question, so it is worth naming.
+ */
+const contentBlockReason = ({ req, content, config }) => {
+  if (!content) return 'no-content';
+
+  // Content gated by registration of some sort: the reg gate wins.
+  const localFn = req.app.locals.contentGatingHandler;
+  const contentGatingHandler = (localFn && isFunction(localFn)) ? localFn : defaultRegFn;
+  if (contentGatingHandler({ content })) return 'reg-gated';
+
+  const localBypassFn = req.app.locals.contentBypassGatingHandler;
+  const bypassGatingFn = (localBypassFn && isFunction(localBypassFn))
+    ? localBypassFn
+    : defaultBypassGatingFn;
+  if (bypassGatingFn({ content })) return 'bypass-gating';
+
+  // An idx survey form about to display owns this page. `res.locals.contentAccessState` is not
+  // consultable here — `withContent`'s formatResponse sets it *after* this middleware runs — so
+  // this re-derives the same "would the form display" test from the content's gating fields and
+  // the access cookie the survey submit sets. Claiming a survey page would burn an attempt on a
+  // gate the layout never renders and stand the meter down for the wrong owner.
+  const { surveyType, surveyId } = getAsObject(content, 'gating');
+  if (surveyType === 'idx' && surveyId) {
+    const accessCookie = get(req, `cookies.${buildName({ surveyId, contentId: content.id })}`);
+    if (!accessCookie) return 'idx-survey';
+  }
+
+  if (getAsArray(config, 'excludeContentTypes').includes(content.type)) return 'excluded-type';
+  if (getAsArray(config, 'excludePrimarySectionIds').includes(get(content, 'primarySection.id'))) return 'excluded-section-id';
+  // Read via the schema's key. The meter reads `excludePrimarySectionAliass` (double-s), which no
+  // schema or site config sets, so its alias exclusion has never matched — a shared-code bug that
+  // is noted for the follow-up PR, not copied here.
+  if (getAsArray(config, 'excludePrimarySectionAlias').includes(get(content, 'primarySection.alias'))) return 'excluded-section-alias';
+  if (getAsArray(config, 'excludeLabels').some((l) => getAsArray(content, 'labels').includes(l))) return 'excluded-label';
+  return null;
+};
+
+/**
+ * Detects an identified or authenticated visitor with unanswered progressive-profile fields and
+ * claims the request for the gate by setting `res.locals.progressiveProfileState`.
+ *
+ * Chain on content routes *before* `contentMetering` (the meter stands down when this claims the
+ * request) and after `newsletterState`. Do NOT install globally in `start-server.js`:
+ * `/print/content/:id` registers separately and must render the full body.
+ *
+ * Anonymous visitors bail before any i/o, so bots, SEO crawlers and the logged-out majority are
+ * byte-identical to today. The added cost is one idx lookup, only for identified visitors, only
+ * when the identity resolves — every idx call is bounded at 15s and instrumented as
+ * `MindfulApiCall`.
+ */
+module.exports = (params = {}) => {
+  // Validated at construction, not per request: a malformed site config should fail the boot,
+  // the same posture as the IdentityX config's field-row validation.
+  const config = validate(configSchema, params);
+
+  return asyncRoute(async (req, res, next) => {
+    const { identityX } = req;
+    if (!config.enabled) return next();
+    if (!identityX) {
+      error('IdentityX middleware must be loaded before progressive profiling middleware!');
+      return next();
+    }
+
+    const fieldRows = identityX.config.getProgressiveProfileFieldRows();
+    if (!fieldRows.length) return next();
+
+    // The cheap bails first — all cookie reads. These are *request-time* values by construction
+    // (the helpers read `req.cookies` only), so a cookie set during this request can never
+    // suppress the gate that set it; cf. `middleware/newsletter-state.js`.
+    const bypassQuery = ['1', 'true'].includes(get(req, `query.${config.bypassQueryParam}`));
+    // "User skipped" and "we discarded their answers" are different populations — keep them
+    // distinguishable in the debug output. The unverified bail is not optional: a submit that
+    // fails reCAPTCHA is passively accepted (content unlocks, answers discarded), so the member's
+    // record is unchanged and without `__idx_pp_sup` the diff would re-gate them on the very next
+    // article, forever.
+    const dismissed = isDismissed(req);
+    const unverifiedSuppressed = isUnverifiedSuppressed(req);
+    const attempts = getAttempts(req);
+    const attemptsExhausted = attempts >= config.maxAttemptsPerUser;
+
+    debug({
+      config, bypassQuery, dismissed, unverifiedSuppressed, attempts, attemptsExhausted,
+    });
+
+    if (bypassQuery || dismissed || unverifiedSuppressed) return next();
+    // The escape valve: a gate rendered `maxAttemptsPerUser` times without a successful submit
+    // releases the content. A gate that can trap a real person is worse than no gate.
+    if (attemptsExhausted) return next();
+
+    // Resolve the visitor. `loadActiveContext` is memoized per request; `getIdentity(res)` reads
+    // the request cookie and falls back to the outgoing response cookies, so an identity minted
+    // earlier in this same chain by `set-identity-cookie.js` (the first-time newsletter clicker)
+    // is visible here. A lookup failure must never break an article page — fail open.
+    let appUser;
+    let audience;
+    try {
+      const { user: authUser } = await identityX.loadActiveContext();
+      if (authUser) {
+        appUser = authUser;
+        audience = 'authenticated';
+      } else {
+        const identityId = identityX.getIdentity(res);
+        if (!identityId) return next(); // anonymous — the common path out.
+        appUser = await identityX.findUserByIdMemoized(identityId);
+        audience = 'identified';
+      }
+    } catch (e) {
+      error('Progressive profiling failed to resolve the visitor; releasing the content.', e);
+      return next();
+    }
+    // A member with no email is almost certainly a broken import, not a reader worth gating.
+    if (!appUser || !appUser.email) return next();
+
+    const {
+      hasMissing, missingRows, missingCustomFieldIds, missingCount,
+    } = getMissingProgressiveFields({ appUser, fieldRows });
+
+    debug({ audience, hasMissing, missingCustomFieldIds });
+
+    if (!hasMissing) return next();
+
+    // The reg gate owns an authenticated visitor who still owes *registration* input —
+    // required server fields, `mustReVerifyProfile`, required custom fields, consent policies.
+    // Claiming them here produced a two-gate sequence in testing: submit the progressive form,
+    // reload, land on the full profile gate anyway. Standing down lets the meter's
+    // `isLoggedIn && requiresUserInput` path render the profile form FIRST; once registration
+    // is complete this diff picks up whatever is still missing. The layout cannot enforce this
+    // precedence itself: when this middleware claims, the meter stands down and the
+    // `<marko-web-identity-x-access>` wrapper is disabled, so `context.requiresUserInput` is
+    // never populated there. Identified (non-authenticated) visitors are not checked — they
+    // have no session, and `requiresUserInput` reports on the active session only.
+    if (audience === 'authenticated') {
+      try {
+        const access = await identityX.checkContentAccess({
+          isEnabled: true,
+          requiredAccessLevelIds: [],
+        });
+        debug({ requiresUserInput: access.requiresUserInput });
+        if (access.requiresUserInput) return next();
+      } catch (e) {
+        error('Progressive profiling failed to check content access; releasing the content.', e);
+        return next();
+      }
+    }
+
+    const content = await loadGatingContent(req);
+    const blockReason = contentBlockReason({ req, content, config });
+    debug({ contentId: content && content.id, blockReason });
+    if (blockReason) return next();
+
+    // Claim the request. The render counts against the escape valve whether or not the visitor
+    // engages; the write route clears the counter on any successful submit.
+    incrementAttempts(req, res);
+
+    res.locals.progressiveProfileState = {
+      previewParagraphs: config.previewParagraphs,
+      displayOverlay: config.displayOverlay,
+      promoCode: config.promoCode,
+      dismissible: config.dismissible,
+      suppressAfterDismissDays: config.suppressAfterDismissDays,
+      userId: appUser.id,
+      audience,
+      missingRows,
+      missingCustomFieldIds,
+      missingCount,
+      attempts: attempts + 1,
+      displayGate: true,
+    };
+    return next();
+  });
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindful-web/marko-web-theme-monorail",
-  "version": "1.83.5",
+  "version": "1.85.0",
   "author": "Brian Miller <brian@parameter1.com>",
   "repository": "https://github.com/parameter1/mindful-web/tree/main/packages/marko-web-theme-monorail",
   "license": "MIT",
@@ -13,21 +13,21 @@
   },
   "dependencies": {
     "@mindful-web/dayjs": "^1.49.2",
-    "@mindful-web/html": "^1.0.0",
-    "@mindful-web/image": "^1.83.1",
+    "@mindful-web/html": "^1.84.0",
+    "@mindful-web/image": "^1.84.0",
     "@mindful-web/inflector": "^1.0.0",
     "@mindful-web/marko-web-deferred-script-loader": "^1.83.1",
     "@mindful-web/marko-web-gam": "^1.83.1",
     "@mindful-web/marko-web-gtm": "^1.83.1",
     "@mindful-web/marko-web-html-sitemap": "^1.83.1",
     "@mindful-web/marko-web-icons": "^1.59.2",
-    "@mindful-web/marko-web-identity-x": "^1.83.1",
-    "@mindful-web/marko-web-inquiry": "^1.83.1",
+    "@mindful-web/marko-web-identity-x": "^1.85.0",
+    "@mindful-web/marko-web-inquiry": "^1.85.0",
     "@mindful-web/marko-web-native-x": "^1.83.1",
-    "@mindful-web/marko-web-omeda": "^1.83.1",
-    "@mindful-web/marko-web-omeda-identity-x": "^1.83.1",
-    "@mindful-web/marko-web-p1-events": "^1.83.1",
-    "@mindful-web/marko-web-recaptcha": "^1.26.1",
+    "@mindful-web/marko-web-omeda": "^1.85.0",
+    "@mindful-web/marko-web-omeda-identity-x": "^1.85.0",
+    "@mindful-web/marko-web-p1-events": "^1.85.0",
+    "@mindful-web/marko-web-recaptcha": "^1.85.0",
     "@mindful-web/marko-web-reveal-ad": "^1.83.1",
     "@mindful-web/marko-web-search": "^1.83.1",
     "@mindful-web/marko-web-social-sharing": "^1.83.2",
@@ -54,5 +54,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "965e2cf481dc5b2efdd92941df5254e072933cc9"
+  "gitHead": "f605eeeddb1f44c632feb239d37a98560bb82416"
 }

package/scss/components/_content-page-gate.scss

@@ -26,6 +26,35 @@
       }
     }
   }
+
+  // The gate form's lead-in copy. Styled to match `newsletter-signup-banner__description--large`.
+  &__description {
+    @include skin-typography($style: "teaser-text-1");
+    max-width: 520px;
+    margin-bottom: 14px;
+  }
+
+  // The submit/dismiss button row, spaced off the form fields above it.
+  &__actions {
+    margin-top: 20px;
+  }
+
+  // The progressive-profile gate (`browser/progressive-profile.vue` renders this modifier on its
+  // root). Same box as the other gates; its body is a form rather than login copy, plus a
+  // post-submit success message. The fill matches `.newsletter-signup-banner-large`, so the gate
+  // stands out from the article body the same way the inline signup block does.
+  &--progressive-profile {
+    background-color: $gray-100;
+    .success-message {
+      margin-bottom: 15px;
+      font-family: $theme-font-family-serif;
+      font-size: 16px;
+      color: #222;
+    }
+    form {
+      margin-top: 15px;
+    }
+  }
 }
 
 .content-page-preview-overlay {

package/templates/ad-preview.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/ad-preview.marko",
+    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/ad-preview.marko",
     marko_component = require("./ad-preview.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_objectPath_module = require("@mindful-web/object-path"),
@@ -139,7 +139,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/ad-preview.marko",
+    id: "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/ad-preview.marko",
     component: "./ad-preview.marko",
     tags: [
       "../components/flows/section-feed.marko",

package/templates/content/components/presented-by.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/content/components/presented-by.marko",
+    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/content/components/presented-by.marko",
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_image_module = require("@mindful-web/image"),
     image_module = module_image_module.default || module_image_module,
@@ -67,7 +67,7 @@ marko_template._ = marko_renderer(render, {
   });
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/content/components/presented-by.marko",
+    id: "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/content/components/presented-by.marko",
     tags: [
       "@mindful-web/marko-web/components/element/index.marko",
       "@mindful-web/marko-web/components/element/img.marko",

package/templates/content/native-x-story.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/content/native-x-story.marko",
+    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/content/native-x-story.marko",
     marko_component = require("./native-x-story.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_convert = require("@mindful-web/marko-web-native-x/utils/convert-story-to-content"),
@@ -223,7 +223,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/content/native-x-story.marko",
+    id: "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/content/native-x-story.marko",
     component: "./native-x-story.marko",
     tags: [
       "@mindful-web/marko-web-native-x/components/gtm-init.marko",

package/templates/content/print.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/content/print.marko",
+    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/content/print.marko",
     marko_component = require("./print.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_objectPath_module = require("@mindful-web/object-path"),
@@ -402,7 +402,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/content/print.marko",
+    id: "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/content/print.marko",
     component: "./print.marko",
     tags: [
       "@mindful-web/marko-web/components/page/metadata/content.marko",

package/templates/email-preview.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/email-preview.marko",
+    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/email-preview.marko",
     marko_component = require("./email-preview.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     marko_web_gtm_push_template = require("@mindful-web/marko-web-gtm/components/push.marko"),
@@ -86,7 +86,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/email-preview.marko",
+    id: "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/email-preview.marko",
     component: "./email-preview.marko",
     tags: [
       "@mindful-web/marko-web-gtm/components/push.marko",

package/templates/search.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/search.marko",
+    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/search.marko",
     marko_component = require("./search.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_queryFragment = require("../graphql/fragments/section-feed-block"),
@@ -302,7 +302,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/search.marko",
+    id: "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/search.marko",
     component: "./search.marko",
     tags: [
       "@mindful-web/marko-web-p1-events/components/track-search.marko",

package/templates/taxonomy.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/taxonomy.marko",
+    marko_componentType = "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/taxonomy.marko",
     marko_component = require("./taxonomy.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_hierarchyAliases = require("@mindful-web/marko-web/utils/hierarchy-aliases"),
@@ -178,7 +178,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-theme-monorail$1.83.5/templates/taxonomy.marko",
+    id: "/@mindful-web/marko-web-theme-monorail$1.85.0/templates/taxonomy.marko",
     component: "./taxonomy.marko",
     tags: [
       "../components/gam/define-display-ad.marko",

package/utils/load-gating-content.js

@@ -0,0 +1,27 @@
+const { content: loader } = require('@mindful-web/web-common/page-loaders');
+const buildContentInput = require('@mindful-web/marko-web/utils/build-content-input');
+const queryFragment = require('../graphql/fragments/content-meter');
+
+/**
+ * Loads the gating-relevant fields of the current content request, memoized on the request.
+ *
+ * The progressive-profiling and content-metering middlewares chain on the same content route and
+ * each needs the same handful of fields to decide whether to claim the request. Without this they
+ * run two identical GraphQL round trips for a document `withContent` will load again anyway; with
+ * it they share one.
+ *
+ * The *promise* is cached rather than its result, so concurrent callers join the in-flight query,
+ * and a rejection is shared too: a 404 from the loader should fail the request once, not be
+ * retried per middleware.
+ *
+ * @param {import('express').Request} req
+ * @returns {Promise<object>} The content document.
+ */
+module.exports = (req) => {
+  if (!req.$gatingContent) {
+    const { apollo, params } = req;
+    const additionalInput = buildContentInput({ req });
+    req.$gatingContent = loader(apollo, { id: params.id, additionalInput, queryFragment });
+  }
+  return req.$gatingContent;
+};

package/utils/progressive-profile-helpers.js

@@ -0,0 +1,39 @@
+const debug = require('debug')('progressive-profile');
+const { getAsArray } = require('@mindful-web/object-path');
+
+/**
+ * Analogues of `content-meter-helpers.js`, so the layout reads identically for both gates.
+ *
+ * Both answer off `res.locals.progressiveProfileState`, which the middleware only sets when it
+ * has claimed the request — so unlike the meter there is no logged-in/requires-input matrix here:
+ * one gate, hard by default, either owns the page or the state is absent.
+ */
+
+const shouldGateForProfile = (state) => {
+  if (!state || !state.displayGate) return false;
+  // The form renders nothing without a resolved user and at least one missing row (the same
+  // guard `progressive-profile-form.marko` applies) — so without them, do not truncate the body
+  // under a gate that will not appear.
+  if (!state.userId) return false;
+  return Boolean(getAsArray(state, 'missingRows').length);
+};
+
+/**
+ * Separate name, same decision: the gate and the truncation must never disagree, or the full
+ * body renders under the form (no gate) or the preview ends in nothing (no body). Kept as two
+ * exports so the layout mirrors the meter's `shouldTruncate`/gate split.
+ */
+const shouldTruncateForProfile = (state) => shouldGateForProfile(state);
+
+module.exports = {
+  shouldGateForProfile: (...args) => {
+    const out = shouldGateForProfile(...args);
+    debug('shouldGateForProfile', out);
+    return out;
+  },
+  shouldTruncateForProfile: (...args) => {
+    const out = shouldTruncateForProfile(...args);
+    debug('shouldTruncateForProfile', out);
+    return out;
+  },
+};