@odla-ai/chapter 0.39.1 → 0.40.0

package/dist/index.d.cts

@@ -207,16 +207,14 @@ interface ResolvedMemberContent {
 interface ChapterBuilderLibrary {
     /** Keep local admin authoring enabled. Defaults to true. */
     localAuthoring?: boolean;
-    /** Signed sources this app accepts. Hub sources are Chapters; Chapter sources are Built Not Found. */
+    /** Existing Chapter-network peers this app accepts. Hub sources must be
+     * configured network targets; a Chapter source must be a configured reader. */
     sources?: readonly {
         sourceId: string;
-        /** Vault key holding the dedicated Builder Library edge secret. */
-        secretName?: string;
     }[];
 }
 interface ResolvedBuilderLibrarySource {
     sourceId: string;
-    secretName: string;
 }
 /** Validated Builder Library settings carried on a resolved Chapter. */
 interface ResolvedBuilderLibrary {
@@ -796,8 +794,9 @@ declare function resolveSignupControl(input: ChapterSignupControl | undefined):
 /** Validate the deliberately separate member-content authoring boundary. */
 declare function resolveMemberContent(input: ChapterMemberContent | undefined): ResolvedMemberContent | null;
 
-/** Validate the private Builder Library federation boundary. */
-declare function resolveBuilderLibrary(mode: ChapterMode, input: ChapterBuilderLibrary | undefined): ResolvedBuilderLibrary | null;
+/** Validate the private Builder Library boundary against Chapter's existing
+ * network peers. Builder Library never introduces a second edge credential. */
+declare function resolveBuilderLibrary(mode: ChapterMode, input: ChapterBuilderLibrary | undefined, network?: ResolvedNetwork): ResolvedBuilderLibrary | null;
 
 /** Options for {@link leaderCrmConfig}. */
 interface LeaderCrmOptions {
@@ -1545,6 +1544,8 @@ type WebhookEvent = ({
 }) & {
     appId?: string;
     environment?: string;
+    dataEnvironment?: string;
+    runtime?: string;
 };
 /** Resolve the application reference on a Stripe object: `applicationId` from
  *  metadata (direct, then subscription_details, then nested
@@ -1554,6 +1555,8 @@ declare function findApplicationRef(obj: Record<string, unknown>): {
     customerId?: string;
     appId?: string;
     environment?: string;
+    dataEnvironment?: string;
+    runtime?: string;
 };
 /** Normalize a verified Stripe event into a {@link WebhookEvent}. `invoice.paid`
  *  splits into first_payment vs renewal by `billing_reason`; refunds and

package/dist/index.d.ts

@@ -207,16 +207,14 @@ interface ResolvedMemberContent {
 interface ChapterBuilderLibrary {
     /** Keep local admin authoring enabled. Defaults to true. */
     localAuthoring?: boolean;
-    /** Signed sources this app accepts. Hub sources are Chapters; Chapter sources are Built Not Found. */
+    /** Existing Chapter-network peers this app accepts. Hub sources must be
+     * configured network targets; a Chapter source must be a configured reader. */
     sources?: readonly {
         sourceId: string;
-        /** Vault key holding the dedicated Builder Library edge secret. */
-        secretName?: string;
     }[];
 }
 interface ResolvedBuilderLibrarySource {
     sourceId: string;
-    secretName: string;
 }
 /** Validated Builder Library settings carried on a resolved Chapter. */
 interface ResolvedBuilderLibrary {
@@ -796,8 +794,9 @@ declare function resolveSignupControl(input: ChapterSignupControl | undefined):
 /** Validate the deliberately separate member-content authoring boundary. */
 declare function resolveMemberContent(input: ChapterMemberContent | undefined): ResolvedMemberContent | null;
 
-/** Validate the private Builder Library federation boundary. */
-declare function resolveBuilderLibrary(mode: ChapterMode, input: ChapterBuilderLibrary | undefined): ResolvedBuilderLibrary | null;
+/** Validate the private Builder Library boundary against Chapter's existing
+ * network peers. Builder Library never introduces a second edge credential. */
+declare function resolveBuilderLibrary(mode: ChapterMode, input: ChapterBuilderLibrary | undefined, network?: ResolvedNetwork): ResolvedBuilderLibrary | null;
 
 /** Options for {@link leaderCrmConfig}. */
 interface LeaderCrmOptions {
@@ -1545,6 +1544,8 @@ type WebhookEvent = ({
 }) & {
     appId?: string;
     environment?: string;
+    dataEnvironment?: string;
+    runtime?: string;
 };
 /** Resolve the application reference on a Stripe object: `applicationId` from
  *  metadata (direct, then subscription_details, then nested
@@ -1554,6 +1555,8 @@ declare function findApplicationRef(obj: Record<string, unknown>): {
     customerId?: string;
     appId?: string;
     environment?: string;
+    dataEnvironment?: string;
+    runtime?: string;
 };
 /** Normalize a verified Stripe event into a {@link WebhookEvent}. `invoice.paid`
  *  splits into first_payment vs renewal by `billing_reason`; refunds and

package/dist/index.js

@@ -215,6 +215,7 @@ var applicationAttrs = {
   tierId: attr("string", { indexed: true, optional: true }),
   stripeCustomerId: attr("string", { indexed: true, optional: true }),
   stripeSubscriptionId: attr("string", { indexed: true, optional: true }),
+  stripeRuntime: attr("string", { indexed: true, optional: true }),
   renewalAt: attr("number", { optional: true }),
   disclaimerAckAt: attr("number", { optional: true }),
   refundPolicyAckAt: attr("number", { optional: true }),
@@ -310,6 +311,7 @@ var giftPurchaseIntentsEntity = { attrs: {
   id: id2(),
   chapterId: attr3("string", { indexed: true }),
   environment: attr3("string", { indexed: true }),
+  runtime: attr3("string", { optional: true, indexed: true }),
   purchaserType: attr3("string", { indexed: true }),
   purchaserApplicationId: attr3("string", { optional: true, indexed: true }),
   purchaserUserId: attr3("string", { optional: true, indexed: true }),
@@ -1523,8 +1525,7 @@ function resolveMemberContent(input) {
 
 // src/config-builder-library.ts
 var SLUG4 = /^[a-z0-9][a-z0-9-]{1,62}$/;
-var SECRET_NAME3 = /^[a-z][a-z0-9_]{1,127}$/;
-function resolveBuilderLibrary(mode, input) {
+function resolveBuilderLibrary(mode, input, network = { targets: [], readers: [] }) {
   if (!input) return null;
   if (input.sources !== void 0 && !Array.isArray(input.sources)) {
     throw new Error("defineChapter.builderLibrary.sources: must be an array");
@@ -1544,11 +1545,19 @@ function resolveBuilderLibrary(mode, input) {
       throw new Error(`defineChapter.builderLibrary.sources: duplicate source "${source.sourceId}"`);
     }
     seen.add(source.sourceId);
-    const secretName = source.secretName?.trim() || "builder_library_control_secret";
-    if (!SECRET_NAME3.test(secretName)) {
-      throw new Error(`defineChapter.builderLibrary.sources[${index}].secretName: must be a vault-key identifier`);
+    if ("secretName" in source) {
+      throw new Error(
+        `defineChapter.builderLibrary.sources[${index}].secretName: remove this field; Builder Library reuses the Chapter network edge`
+      );
+    }
+    const networkPeer = mode === "hub" ? network.targets.some((target) => target.id === source.sourceId) : network.readers.some((reader) => reader.id === source.sourceId);
+    if (!networkPeer) {
+      const side = mode === "hub" ? "targets" : "readers";
+      throw new Error(
+        `defineChapter.builderLibrary.sources[${index}]: "${source.sourceId}" must already be configured in network.${side}`
+      );
     }
-    return { sourceId: source.sourceId, secretName };
+    return { sourceId: source.sourceId };
   });
   return { enabled: true, localAuthoring: input.localAuthoring !== false, sources };
 }
@@ -1587,7 +1596,7 @@ function defineChapter(config) {
   const network = resolveNetwork(config, crm);
   const signupControl = resolveSignupControl(config.signupControl);
   const memberContent = resolveMemberContent(config.memberContent);
-  const builderLibrary = resolveBuilderLibrary(mode, config.builderLibrary);
+  const builderLibrary = resolveBuilderLibrary(mode, config.builderLibrary, network);
   const formation = resolveLeaderFormation(config.formation, crm);
   if (signupControl && mode !== "chapter") {
     throw new Error("defineChapter.signupControl: only chapter-mode followers can receive signup control");
@@ -1911,13 +1920,6 @@ function createChapterIntegration(chapter, options = {}) {
     ...emails?.debugEmail ? { debugEmail: emails.debugEmail } : {}
   });
   const seeds = [...crmDesc.seeds ?? []];
-  const builderLibrarySecrets = [...new Set(
-    chapter.builderLibrary?.sources.map((source) => source.secretName) ?? []
-  )].map((name) => ({
-    name,
-    description: "Signing secret for private Builder Library delivery from a configured source.",
-    required: true
-  }));
   const group = chapter.groupSeed();
   if (group) {
     seeds.push({ id: "group", ns: "groups", key: { attr: "id", value: chapter.id }, attrs: { ...group, createdAt: now } });
@@ -1950,7 +1952,7 @@ function createChapterIntegration(chapter, options = {}) {
     },
     rules: { ...crmDesc.rules, ...chapter.rules },
     seeds,
-    secrets: builderLibrarySecrets,
+    secrets: [],
     probes: [
       ...crmDesc.probes ?? [],
       // The snapshot route is deliberately private. A credential-free smoke
@@ -2655,12 +2657,16 @@ function findApplicationRef(obj) {
   const applicationId = candidates.map(pick).find(Boolean);
   const appId = candidates.map((metadata) => typeof metadata.odlaAppId === "string" ? metadata.odlaAppId : void 0).find(Boolean);
   const environment = candidates.map((metadata) => typeof metadata.odlaEnvironment === "string" ? metadata.odlaEnvironment : void 0).find(Boolean);
+  const dataEnvironment = candidates.map((metadata) => typeof metadata.odlaDataEnvironment === "string" ? metadata.odlaDataEnvironment : void 0).find(Boolean);
+  const runtime = candidates.map((metadata) => typeof metadata.odlaRuntime === "string" ? metadata.odlaRuntime : void 0).find(Boolean);
   const customerId = typeof obj.customer === "string" ? obj.customer : void 0;
   return {
     ...applicationId ? { applicationId } : {},
     ...customerId ? { customerId } : {},
     ...appId ? { appId } : {},
-    ...environment ? { environment } : {}
+    ...environment ? { environment } : {},
+    ...dataEnvironment ? { dataEnvironment } : {},
+    ...runtime ? { runtime } : {}
   };
 }
 function findGiftRef(obj) {
@@ -2670,17 +2676,31 @@ function findGiftRef(obj) {
   const subscription = obj.subscription_details ?? parent?.subscription_details;
   const giftIntentId = pick(metaOf(obj)) ?? pick(metaOf(subscription));
   const subscriptionId = typeof obj.subscription === "string" ? obj.subscription : typeof subscription?.subscription === "string" ? String(subscription.subscription) : void 0;
-  return { ...giftIntentId ? { giftIntentId } : {}, providerObjectId: subscriptionId ?? String(obj.id ?? "") };
+  const candidates = [metaOf(obj), metaOf(subscription)];
+  const pickIdentity = (name) => candidates.map((metadata) => typeof metadata[name] === "string" ? String(metadata[name]) : void 0).find(Boolean);
+  const appId = pickIdentity("odlaAppId");
+  const environment = pickIdentity("odlaEnvironment");
+  const dataEnvironment = pickIdentity("odlaDataEnvironment");
+  const runtime = pickIdentity("odlaRuntime");
+  return {
+    ...giftIntentId ? { giftIntentId } : {},
+    providerObjectId: subscriptionId ?? String(obj.id ?? ""),
+    ...appId ? { appId } : {},
+    ...environment ? { environment } : {},
+    ...dataEnvironment ? { dataEnvironment } : {},
+    ...runtime ? { runtime } : {}
+  };
 }
 function normalizeWebhookEvent(event) {
   const obj = event.data?.object ?? {};
   const gift = findGiftRef(obj);
   if (gift.giftIntentId) {
+    const { giftIntentId, providerObjectId, ...identity } = gift;
     if (event.type === "payment_intent.succeeded" || event.type === "invoice.paid" && obj.billing_reason === "subscription_create") {
-      return { kind: "gift_paid", giftIntentId: gift.giftIntentId, providerObjectId: gift.providerObjectId };
+      return { kind: "gift_paid", giftIntentId, providerObjectId, ...identity };
     }
-    if (event.type === "charge.refunded") return { kind: "gift_revoked", giftIntentId: gift.giftIntentId, reason: "refunded" };
-    if (event.type === "customer.subscription.deleted") return { kind: "gift_revoked", giftIntentId: gift.giftIntentId, reason: "canceled" };
+    if (event.type === "charge.refunded") return { kind: "gift_revoked", giftIntentId, ...identity, reason: "refunded" };
+    if (event.type === "customer.subscription.deleted") return { kind: "gift_revoked", giftIntentId, ...identity, reason: "canceled" };
     return { kind: "ignored", type: event.type };
   }
   const ref = findApplicationRef(obj);