@odla-ai/chapter 0.25.2 → 0.25.4

package/dist/index.d.cts

@@ -903,8 +903,10 @@ type SubmitResult = {
  * fields + max lengths, writes the `applications` row at the pipeline's initial
  * status, and — when the client supplies a `submissionId` — stamps it as the
  * transaction's mutationId (`join:${submissionId}`) so a double-tap can never
- * create two applications (the second returns `duplicate: true`). Idempotency is
- * package-enforced. `now`/`newId` are injected (deterministic in tests).
+ * create two applications. The application id is derived from that same stable
+ * input, so the duplicate response returns the first request's canonical id
+ * rather than a fresh, nonexistent one. Idempotency is package-enforced.
+ * `now`/`newId` are injected (deterministic in tests).
  */
 declare function submitApplication(db: ChapterDb, chapter: Chapter, fields: Record<string, unknown>, opts: {
     submissionId?: string;

package/dist/index.d.ts

@@ -903,8 +903,10 @@ type SubmitResult = {
  * fields + max lengths, writes the `applications` row at the pipeline's initial
  * status, and — when the client supplies a `submissionId` — stamps it as the
  * transaction's mutationId (`join:${submissionId}`) so a double-tap can never
- * create two applications (the second returns `duplicate: true`). Idempotency is
- * package-enforced. `now`/`newId` are injected (deterministic in tests).
+ * create two applications. The application id is derived from that same stable
+ * input, so the duplicate response returns the first request's canonical id
+ * rather than a fresh, nonexistent one. Idempotency is package-enforced.
+ * `now`/`newId` are injected (deterministic in tests).
  */
 declare function submitApplication(db: ChapterDb, chapter: Chapter, fields: Record<string, unknown>, opts: {
     submissionId?: string;

package/dist/index.js

@@ -382,6 +382,17 @@ function canApprove(status, p) {
   return p.approvableFrom.includes(status);
 }
 
+// src/application-id.ts
+var APPLICATION_ID_DOMAIN = "odla-ai/chapter/application/v1:";
+async function applicationIdForSubmission(submissionId) {
+  const input = new TextEncoder().encode(`${APPLICATION_ID_DOMAIN}${submissionId}`);
+  const bytes = new Uint8Array(await crypto.subtle.digest("SHA-256", input)).slice(0, 16);
+  bytes[6] = bytes[6] & 15 | 128;
+  bytes[8] = bytes[8] & 63 | 128;
+  const hex = [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+
 // src/member.ts
 var DEFAULT_REQUIRED = ["firstName", "lastName", "email", "referral", "whoYouAre", "message"];
 var DEFAULT_OPTIONAL = ["referralName", "linkedin", "phone", "state"];
@@ -454,7 +465,7 @@ async function submitApplication(db, chapter, fields, opts) {
   if (app.requireDisclaimerAck && !acked) {
     return { ok: false, error: "disclaimerAck is required" };
   }
-  const id2 = opts.newId();
+  const id2 = opts.submissionId ? await applicationIdForSubmission(opts.submissionId) : opts.newId();
   const row = { id: id2, status: chapter.pipeline.initial, createdAt: opts.now };
   for (const f of [...app.required, ...app.optional]) {
     if (typeof fields[f] === "string") row[f] = fields[f].trim();