@odla-ai/chapter 0.42.0 → 0.42.2

package/README.md

@@ -888,6 +888,11 @@ export const chapter = defineChapter({
       },
       // Separate write consent: browsing never implies note permission.
       sharedNotes: ["person"],
+      // Separate again: name the exact profile fields and record types the
+      // parent may mutate. Omission keeps the edge read-only.
+      editableFields: { person: ["name", "email", "phone", "linkedin"] },
+      stageTransitions: ["person"],
+      admissionGrants: true,
     }],
   },
 });
@@ -896,14 +901,34 @@ export const chapter = defineChapter({
 `GET /api/network/records` requires the edge HMAC and rejects signed senders not
 listed in `network.readers`. Results are capped at 50 records, offset-paged,
 search-bounded, and projected to the reader's field list. Pipeline stage and
-record timestamps are the only metadata outside that list; application
+record timestamps, optimistic `revision`, and explicitly delegated edit
+metadata are the only metadata outside that list; application
 narrative, billing, account state, activities, and notes do not cross unless
 the follower explicitly names a corresponding CRM field.
 
 The leader's authenticated `GET /api/admin/network/records` proxy signs the
 follower request server-to-server, so neither the browser session nor the
-vaulted edge secret crosses sites. The Network detail view has two deliberate
-lanes:
+vaulted edge secret crosses sites. When both halves of an edge opt in,
+`PATCH /api/admin/network/records` accepts one bounded field patch or lifecycle
+destination with the follower-authored `expectedRevision`, current stage, and a
+stable mutation id. The follower revalidates its CRM schema, identity/email
+rules, pipeline gates, and atomic revision guard; it remains source of truth and
+records the leader peer plus initiating admin in the CRM activity audit. A
+retry with the same input is idempotent, while stale state is `409`, an
+undelegated operation is `403`, invalid fields or transitions are `422`, and
+ordinary browse-only edges remain read-only.
+
+Admission decisions use a separate default-deny lane. With
+`admissionGrants: true` on both halves of an edge, the leader's
+`POST /api/admin/network/admissions` resolves the person's current email from
+its CRM, persists the complete desired target document, and delivers it through
+the configured service binding or signed URL. Delivery state is durable as
+`saved`, `pending`, `acknowledged`, `retrying`, or `rejected`; retry and revoke
+routes publish the same or a higher desired revision. A follower may declare an
+admission-only reader without `fields`, which does not make CRM records
+browsable or editable.
+
+The Network detail view also has two deliberate note lanes:
 
 - `GET/POST /api/admin/network/notes` stores private annotations in the
   leader's deny-all `networkNotes` namespace. They are keyed to the follower's
@@ -935,6 +960,9 @@ export const chapter = defineChapter({
         company: ["name", "domain", "industry", "location", "linkedin"],
       },
       sharedNotes: ["person"],
+      editableFields: { person: ["name", "email", "phone", "linkedin"] },
+      stageTransitions: ["person"],
+      admissionGrants: true,
     }],
   },
 });
@@ -945,7 +973,7 @@ Treat the network as websites connected by explicit delivery edges:
 - each website is a node with its own `appId`, ODLA tenants/keys, CRM config,
   Clerk application, publishable keys, issuer, roles, and local users;
 - each `network.targets[]` entry is a directed edge from one leader to one
-  follower: `{ id, name, url, binding?, secretName?, fields }`;
+  follower: `{ id, name, url, binding?, secretName?, fields, editableFields?, stageTransitions?, admissionGrants? }`;
 - the payload is a versioned, allowlisted business record
   `{ version: 2, source: { siteId, recordId }, type, input }`, never an
   identity-provider session, another site's pipeline/account/billing state, or

package/dist/{chunk-MMDWXTJU.js → chunk-HWUTCXBV.js}

@@ -1620,6 +1620,48 @@ function admissionGrantsWorkspace(label = "Admission") {
     render: (ctx) => /* @__PURE__ */ jsx16(AdmissionGrantsWorkspace, { getToken: ctx.getToken })
   };
 }
+function LeaderAdmissionAction(props) {
+  const [decision, setDecision] = useState11("waive_interview");
+  const [note, setNote] = useState11("");
+  const [busy, setBusy] = useState11(false);
+  const [error, setError] = useState11(null);
+  const submit = async () => {
+    setBusy(true);
+    setError(null);
+    try {
+      const result = await adminFetch(props.getToken, "/api/admin/network/admissions", {
+        method: "POST",
+        body: JSON.stringify({
+          targetId: props.targetId,
+          personId: props.personId,
+          decision,
+          ...note.trim() ? { note: note.trim() } : {},
+          mutationId: crypto.randomUUID()
+        })
+      });
+      props.onSaved?.(result);
+    } catch (cause) {
+      setError(cause instanceof Error ? cause.message : String(cause));
+    } finally {
+      setBusy(false);
+    }
+  };
+  return /* @__PURE__ */ jsxs13("div", { style: { display: "grid", gap: 8 }, children: [
+    /* @__PURE__ */ jsxs13("label", { children: [
+      "Interview",
+      /* @__PURE__ */ jsxs13("select", { value: decision, onChange: (event) => setDecision(event.currentTarget.value), children: [
+        /* @__PURE__ */ jsx16("option", { value: "waive_interview", children: "Already completed" }),
+        /* @__PURE__ */ jsx16("option", { value: "require_interview", children: "Required" })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs13("label", { children: [
+      "Internal note",
+      /* @__PURE__ */ jsx16("input", { maxLength: 2e3, value: note, onInput: (event) => setNote(event.currentTarget.value) })
+    ] }),
+    /* @__PURE__ */ jsx16("button", { className: "btn secondary", type: "button", disabled: busy, onClick: () => void submit(), children: busy ? "Saving\u2026" : "Prepare for chapter" }),
+    error ? /* @__PURE__ */ jsx16("p", { role: "alert", children: error }) : null
+  ] });
+}
 
 // src/ui/admin-settings-workspace.tsx
 import { Tabs as Tabs2 } from "@odla-ai/ui/components";
@@ -2709,6 +2751,7 @@ export {
   LeaderNetworkOverview,
   AdmissionGrantsWorkspace,
   admissionGrantsWorkspace,
+  LeaderAdmissionAction,
   availabilitySection,
   BuilderLibraryAdmin,
   builderLibrarySection,
@@ -2722,4 +2765,4 @@ export {
   defaultAdminSections,
   meetingsSection
 };
-//# sourceMappingURL=chunk-MMDWXTJU.js.map
+//# sourceMappingURL=chunk-HWUTCXBV.js.map