@odla-ai/chapter 0.25.5 → 0.25.8

package/dist/worker/index.d.cts

@@ -480,6 +480,9 @@ interface ChapterEnv {
     ODLA_TENANT: string;
     ODLA_PLATFORM: string;
     ODLA_APP_ID: string;
+    /** Registry lifetime for this exact app/database. Discussion reference
+     * reads fail closed when it is absent or stale. */
+    ODLA_APP_INCARNATION?: string;
     ODLA_ENV: string;
     ODLA_API_KEY: string;
     SEND_EMAIL?: {

package/dist/worker/index.d.ts

@@ -480,6 +480,9 @@ interface ChapterEnv {
     ODLA_TENANT: string;
     ODLA_PLATFORM: string;
     ODLA_APP_ID: string;
+    /** Registry lifetime for this exact app/database. Discussion reference
+     * reads fail closed when it is absent or stale. */
+    ODLA_APP_INCARNATION?: string;
     ODLA_ENV: string;
     ODLA_API_KEY: string;
     SEND_EMAIL?: {

package/dist/worker/index.js

@@ -111,6 +111,48 @@ function createWorkerContext(options) {
 // src/worker-routes.ts
 import { createCrmRoutes } from "@odla-ai/crm";
 
+// src/discussion-reference-security.ts
+async function authorizeCrmDiscussionReference(req, env, fetcher = fetch) {
+  const match = req.headers.get("authorization")?.match(/^Bearer ([^\s]+)$/);
+  const appIncarnation = env.ODLA_APP_INCARNATION;
+  const expectedTenant = env.ODLA_ENV === "prod" ? env.ODLA_APP_ID : `${env.ODLA_APP_ID}--${env.ODLA_ENV}`;
+  if (!match || env.ODLA_TENANT !== expectedTenant || typeof appIncarnation !== "string" || !/^[a-f0-9]{32}$/.test(appIncarnation)) return null;
+  const requestUrl = new URL(req.url);
+  requestUrl.search = "";
+  requestUrl.hash = "";
+  const audience = requestUrl.href;
+  try {
+    const url = new URL(
+      "/registry/discuss/reference-authority/verify",
+      env.ODLA_PLATFORM
+    );
+    const response = await fetcher(url, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        token: match[1],
+        appId: env.ODLA_APP_ID,
+        appIncarnation,
+        env: env.ODLA_ENV,
+        product: "crm",
+        projectCapability: "crm.read",
+        audience
+      }),
+      redirect: "manual"
+    });
+    if (!response.ok) return null;
+    const value = await response.json();
+    if (value.authority?.appId !== env.ODLA_APP_ID || value.authority.appIncarnation !== appIncarnation || value.authority.appEnv !== env.ODLA_ENV || value.authority.capability !== "product.reference.read" || value.authority.product !== "crm" || value.authority.projectCapability !== "crm.read" || value.authority.audience !== audience || typeof value.actor?.id !== "string" || value.actor.kind !== "human" && value.actor.kind !== "agent" || value.actor.email !== void 0 && typeof value.actor.email !== "string") return null;
+    return {
+      userId: value.actor.id,
+      discussionReferenceScope: "all",
+      ...value.actor.email ? { email: value.actor.email } : {}
+    };
+  } catch {
+    return null;
+  }
+}
+
 // src/application-id.ts
 var APPLICATION_ID_DOMAIN = "odla-ai/chapter/application/v1:";
 async function applicationIdForSubmission(submissionId) {
@@ -871,6 +913,7 @@ var handleCrm = async (req, url, env, ctx) => {
       if (!u || !await ctx.isAdmin(db, u)) return null;
       return u.email ? { userId: u.userId, email: u.email } : { userId: u.userId };
     },
+    authorizeDiscussionReferences: (r) => authorizeCrmDiscussionReference(r, env),
     sender: ctx.crmSender(env),
     from: env.EMAIL_FROM,
     envName: env.ODLA_ENV,
@@ -1170,7 +1213,11 @@ async function bookSlot(req, env, ctx) {
   let meetingOp;
   try {
     if (decision.reschedule && decision.eventId) {
-      await cal.actions.reschedule(decision.eventId, { startAt, endAt });
+      await cal.actions.reschedule(decision.eventId, {
+        idempotencyKey: `meeting:${String(existing?.id)}:reschedule:${startAt}:${endAt}`,
+        startAt,
+        endAt
+      });
       meetUrl = existing?.meetUrl ?? null;
       htmlLink = existing?.htmlLink ?? null;
       meetingOp = { t: "update", ns: "meetings", id: String(existing?.id), attrs: meetingRescheduleUpdate(startAt, endAt) };
@@ -2200,7 +2247,11 @@ var handleAdminMeetingReschedule = async (req, url, env, ctx) => {
       minNoticeMs: cfg.minNoticeHours * 36e5
     });
     if (!isSlotAvailable(slots, startAt)) return json({ error: "slot no longer available", code: "calendar_slot_unavailable" }, 409);
-    await cal.actions.reschedule(String(meeting.googleEventId), { startAt, endAt });
+    await cal.actions.reschedule(String(meeting.googleEventId), {
+      idempotencyKey: `meeting:${String(meeting.id)}:reschedule:${startAt}:${endAt}`,
+      startAt,
+      endAt
+    });
   } catch {
     return json({ error: "reschedule failed upstream" }, 502);
   }
@@ -2220,7 +2271,9 @@ var handleAdminMeetingCancel = async (req, url, env, ctx) => {
   if (meeting.status !== "scheduled") return json({ error: "already cancelled" }, 409);
   if (meeting.googleEventId) {
     try {
-      await calFor(env).actions.cancel(String(meeting.googleEventId));
+      await calFor(env).actions.cancel(String(meeting.googleEventId), {
+        idempotencyKey: `meeting:${String(meeting.id)}:cancel`
+      });
     } catch {
       return json({ error: "cancel failed upstream" }, 502);
     }