@odla-ai/chapter 0.40.0 → 0.40.2

package/dist/index.d.cts

@@ -363,6 +363,8 @@ interface ChapterPrices {
 interface ChapterPolicy {
     disclaimerText?: string;
     refundPolicyText?: string;
+    /** Plain-language merchant identity shown immediately before payment consent. */
+    merchantDisclosureText?: string;
     trustCopy?: string;
     commitmentText?: string;
     normsText?: string;
@@ -1747,6 +1749,7 @@ interface JoinConfigGroup {
     foundingDiscountCents?: number;
     disclaimerText?: string;
     refundPolicyText?: string;
+    merchantDisclosureText?: string;
     trustCopy?: string;
     commitmentText?: string;
     normsText?: string;
@@ -2100,6 +2103,8 @@ declare function stripeCall(sk: string, method: "GET" | "POST" | "DELETE", path:
 interface ClerkResult {
     ok: boolean;
     status: number;
+    /** Stable Clerk user id returned by a successful fresh account create. */
+    userId?: string;
     existed?: boolean;
     /** Set when an `existed` heal also refreshed the account's metadata. */
     refreshed?: boolean;
@@ -2218,14 +2223,16 @@ interface IntegrationSetting {
 /**
  * A secret the capability needs, held in the tenant vault.
  *
- * Structurally the odla CLI's `IntegrationSecret`: `name` is the vault name
- * byte-for-byte, so `odla-ai doctor`, `odla-ai secrets status`, and the
+ * Structurally the odla CLI's `IntegrationSecret`: `name` is the effective
+ * runtime vault name, so `odla-ai doctor`, `odla-ai secrets status`, and the
  * repo's `check:secrets` gate can hold this declaration against the name the
- * platform actually reads. `mode` is chapter's own addition and the CLI
- * ignores it.
+ * package requests. The Clerk backend key is stored once in the reserved
+ * `$clerk_secret` slot and odla-db resolves its released `clerk_secret_key`
+ * compatibility name. `mode` is chapter's own addition and the CLI ignores it.
  */
 interface IntegrationSecret {
-    /** Vault name, exactly as `odla-ai secrets set <name>` writes it. */
+    /** Effective runtime vault name. Dedicated platform commands may keep the
+     * canonical value in a reserved slot and resolve this compatibility name. */
     name: string;
     description: string;
     pattern?: string;
@@ -2644,6 +2651,8 @@ interface SignupControlApplication {
 interface SignupControlPolicy {
     disclaimerText: string;
     refundPolicyText: string;
+    /** Plain-language merchant identity displayed before payment consent. */
+    merchantDisclosureText?: string;
     trustCopy?: string;
     commitmentText?: string;
     normsText?: string;

package/dist/index.d.ts

@@ -363,6 +363,8 @@ interface ChapterPrices {
 interface ChapterPolicy {
     disclaimerText?: string;
     refundPolicyText?: string;
+    /** Plain-language merchant identity shown immediately before payment consent. */
+    merchantDisclosureText?: string;
     trustCopy?: string;
     commitmentText?: string;
     normsText?: string;
@@ -1747,6 +1749,7 @@ interface JoinConfigGroup {
     foundingDiscountCents?: number;
     disclaimerText?: string;
     refundPolicyText?: string;
+    merchantDisclosureText?: string;
     trustCopy?: string;
     commitmentText?: string;
     normsText?: string;
@@ -2100,6 +2103,8 @@ declare function stripeCall(sk: string, method: "GET" | "POST" | "DELETE", path:
 interface ClerkResult {
     ok: boolean;
     status: number;
+    /** Stable Clerk user id returned by a successful fresh account create. */
+    userId?: string;
     existed?: boolean;
     /** Set when an `existed` heal also refreshed the account's metadata. */
     refreshed?: boolean;
@@ -2218,14 +2223,16 @@ interface IntegrationSetting {
 /**
  * A secret the capability needs, held in the tenant vault.
  *
- * Structurally the odla CLI's `IntegrationSecret`: `name` is the vault name
- * byte-for-byte, so `odla-ai doctor`, `odla-ai secrets status`, and the
+ * Structurally the odla CLI's `IntegrationSecret`: `name` is the effective
+ * runtime vault name, so `odla-ai doctor`, `odla-ai secrets status`, and the
  * repo's `check:secrets` gate can hold this declaration against the name the
- * platform actually reads. `mode` is chapter's own addition and the CLI
- * ignores it.
+ * package requests. The Clerk backend key is stored once in the reserved
+ * `$clerk_secret` slot and odla-db resolves its released `clerk_secret_key`
+ * compatibility name. `mode` is chapter's own addition and the CLI ignores it.
  */
 interface IntegrationSecret {
-    /** Vault name, exactly as `odla-ai secrets set <name>` writes it. */
+    /** Effective runtime vault name. Dedicated platform commands may keep the
+     * canonical value in a reserved slot and resolve this compatibility name. */
     name: string;
     description: string;
     pattern?: string;
@@ -2644,6 +2651,8 @@ interface SignupControlApplication {
 interface SignupControlPolicy {
     disclaimerText: string;
     refundPolicyText: string;
+    /** Plain-language merchant identity displayed before payment consent. */
+    merchantDisclosureText?: string;
     trustCopy?: string;
     commitmentText?: string;
     normsText?: string;

package/dist/index.js

@@ -165,6 +165,7 @@ function joinConfig(group, paymentsReady2, tiers2 = [], conditions = {}) {
     conditions,
     disclaimerText: group.disclaimerText ?? "",
     refundPolicyText: group.refundPolicyText ?? "",
+    merchantDisclosureText: group.merchantDisclosureText ?? "",
     trustCopy: group.trustCopy ?? "",
     commitmentText: group.commitmentText ?? "",
     normsText: group.normsText ?? "",
@@ -511,6 +512,7 @@ var groups = {
     calendarLink: attr4("string", { optional: true }),
     disclaimerText: attr4("string"),
     refundPolicyText: attr4("string"),
+    merchantDisclosureText: attr4("string", { optional: true }),
     trustCopy: attr4("string"),
     commitmentText: attr4("string", { optional: true }),
     normsText: attr4("string", { optional: true }),
@@ -736,6 +738,7 @@ function buildGroupSeed(config) {
     replyTo: emails?.replyTo ?? emails?.notificationEmail ?? "",
     disclaimerText: policy.disclaimerText ?? "",
     refundPolicyText: policy.refundPolicyText ?? "",
+    merchantDisclosureText: policy.merchantDisclosureText ?? "",
     trustCopy: policy.trustCopy ?? "",
     emailTemplates: emails?.templates ?? defaultEmailTemplates(config.name),
     schedulingJson: scheduling
@@ -1952,7 +1955,14 @@ function createChapterIntegration(chapter, options = {}) {
     },
     rules: { ...crmDesc.rules, ...chapter.rules },
     seeds,
-    secrets: [],
+    secrets: chapter.account === "none" ? [] : [{
+      // Released Chapter workers request this effective name. odla-db maps
+      // it to the canonical reserved `$clerk_secret` value written by
+      // `odla-ai secrets set-clerk-key`.
+      name: "clerk_secret_key",
+      description: "Clerk backend key (set with odla-ai secrets set-clerk-key) required by the configured Chapter account model.",
+      required: true
+    }],
     probes: [
       ...crmDesc.probes ?? [],
       // The snapshot route is deliberately private. A credential-free smoke
@@ -3462,7 +3472,14 @@ async function createClerkUser(secretKey, input, fetchImpl = fetch) {
     headers: { authorization: `Bearer ${secretKey}`, "content-type": "application/json" },
     body: JSON.stringify(body)
   });
-  if (res.ok) return { ok: true, status: res.status };
+  if (res.ok) {
+    const body2 = typeof res.json === "function" ? await res.json().catch(() => null) : null;
+    return {
+      ok: true,
+      status: res.status,
+      ...typeof body2?.id === "string" && body2.id ? { userId: body2.id } : {}
+    };
+  }
   const healed = heal(res.status);
   const repair = input.repairMetadata ?? {
     ...input.publicMetadata !== void 0 ? { publicMetadata: input.publicMetadata } : {},
@@ -3564,7 +3581,7 @@ var clerkIntegration = {
     },
     {
       name: "clerk_secret_key",
-      description: "Clerk backend key (sk_*) \u2014 powers account creation, the public role claim, and backend-only private profile signals; it also lets odla-db resolve user email/name via the Clerk API.",
+      description: "Effective Clerk backend key (sk_*), stored canonically by set-clerk-key in reserved $clerk_secret \u2014 powers account creation, the public role claim, backend-only private profile signals, and odla-db user resolution.",
       pattern: "sk_",
       mode: "full",
       required: false
@@ -3597,15 +3614,16 @@ var clerkIntegration = {
   provision: {
     human: [
       "Run `npx clerk auth login` \u2014 the one interactive step; the agent then creates + configures the Clerk app with the Clerk CLI (no pk_ to hand-paste).",
-      'For auth mode "full": create the Clerk user-sync webhook and store its whsec_, plus the sk_ as clerk_secret_key, in the tenant vault (Studio, write-only).'
+      'For auth mode "full": create the Clerk user-sync webhook, store its whsec_, and transfer the sk_ with `odla-ai secrets set-clerk-key --env <env> --stdin` (write-only).'
     ],
     cli: [
       "Clerk CLI (`npx clerk apps create/link/config patch`) creates + configures the instance and pulls the pk_.",
-      "odla `provision` records it: setAuth(env, publishableKey) -> apps-registry (issuer/JWKS derived from the key)."
+      "odla `provision` records it: setAuth(env, publishableKey) -> apps-registry (issuer/JWKS derived from the key).",
+      "odla `secrets set-clerk-key` stores one environment-scoped reserved credential consumed by odla-db and Chapter."
     ],
     doctor: [
       "registry auth[env] present when the app mounts <SignIn>?",
-      'auth mode "full" => whsec_ and clerk_secret_key present in the tenant vault?'
+      'auth mode "full" => whsec_ present and the effective clerk_secret_key reports set via the reserved Clerk credential status?'
     ]
   }
 };
@@ -4198,7 +4216,14 @@ function policyOf(value, errors) {
     errors.push("document.policy must be an object");
     return void 0;
   }
-  const allowed2 = /* @__PURE__ */ new Set(["disclaimerText", "refundPolicyText", "trustCopy", "commitmentText", "normsText"]);
+  const allowed2 = /* @__PURE__ */ new Set([
+    "disclaimerText",
+    "refundPolicyText",
+    "merchantDisclosureText",
+    "trustCopy",
+    "commitmentText",
+    "normsText"
+  ]);
   unknownKeys3(input, allowed2, "document.policy", errors);
   const result = {};
   for (const key of allowed2) {