@odla-ai/chapter 0.7.0 → 0.8.0

package/dist/worker/index.d.cts

@@ -189,7 +189,14 @@ interface ChapterConfig {
     auth?: ChapterAuth;
     /** odla services (db implied). Default `["db","calendar","o11y"]`. */
     services?: readonly string[];
+    /** Apply-time account provisioning: `"invite"` (default) mints a Clerk
+     *  invitation, `"create"` makes the account server-side (so join can say the
+     *  account is ready), `"none"` skips it. Any of these needs a `clerk_secret_key`
+     *  vault secret to act. */
+    account?: AccountModel;
 }
+/** Apply-time Clerk account provisioning model. */
+type AccountModel = "invite" | "create" | "none";
 /** The resolved engine `defineChapter()` returns. */
 interface Chapter {
     config: ChapterConfig;
@@ -209,6 +216,8 @@ interface Chapter {
     schema: DbSchema;
     rules: DbRules;
     services: readonly string[];
+    /** Resolved apply-time account provisioning model (default `"invite"`). */
+    account: AccountModel;
     /** The seed `groups` row derived from config (chapter mode), else `null`. */
     groupSeed(): Record<string, unknown> | null;
 }

package/dist/worker/index.d.ts

@@ -189,7 +189,14 @@ interface ChapterConfig {
     auth?: ChapterAuth;
     /** odla services (db implied). Default `["db","calendar","o11y"]`. */
     services?: readonly string[];
+    /** Apply-time account provisioning: `"invite"` (default) mints a Clerk
+     *  invitation, `"create"` makes the account server-side (so join can say the
+     *  account is ready), `"none"` skips it. Any of these needs a `clerk_secret_key`
+     *  vault secret to act. */
+    account?: AccountModel;
 }
+/** Apply-time Clerk account provisioning model. */
+type AccountModel = "invite" | "create" | "none";
 /** The resolved engine `defineChapter()` returns. */
 interface Chapter {
     config: ChapterConfig;
@@ -209,6 +216,8 @@ interface Chapter {
     schema: DbSchema;
     rules: DbRules;
     services: readonly string[];
+    /** Resolved apply-time account provisioning model (default `"invite"`). */
+    account: AccountModel;
     /** The seed `groups` row derived from config (chapter mode), else `null`. */
     groupSeed(): Record<string, unknown> | null;
 }

package/dist/worker/index.js

@@ -114,6 +114,26 @@ async function createClerkInvitation(secretKey, input, fetchImpl = fetch) {
   });
   return { ok: res.ok, status: res.status };
 }
+function clerkUserRequest(input) {
+  return {
+    path: "/v1/users",
+    body: {
+      email_address: [input.email],
+      skip_password_requirement: true,
+      ...input.firstName ? { first_name: input.firstName } : {},
+      ...input.lastName ? { last_name: input.lastName } : {}
+    }
+  };
+}
+async function createClerkUser(secretKey, input, fetchImpl = fetch) {
+  const { path, body } = clerkUserRequest(input);
+  const res = await fetchImpl(`https://api.clerk.com${path}`, {
+    method: "POST",
+    headers: { authorization: `Bearer ${secretKey}`, "content-type": "application/json" },
+    body: JSON.stringify(body)
+  });
+  return { ok: res.ok, status: res.status };
+}
 
 // src/member.ts
 async function submitApplication(db, chapter, fields, opts) {
@@ -428,10 +448,15 @@ async function provisionApplicant(db, chapter, applicationId, fields) {
     );
   } catch {
   }
-  try {
-    const secret = await getVaultSecret(db, "clerk_secret_key");
-    if (secret) await createClerkInvitation(secret, { email });
-  } catch {
+  if (chapter.account !== "none") {
+    try {
+      const secret = await getVaultSecret(db, "clerk_secret_key");
+      if (secret) {
+        if (chapter.account === "create") await createClerkUser(secret, { email, firstName: s(fields.firstName), lastName: s(fields.lastName) });
+        else await createClerkInvitation(secret, { email });
+      }
+    } catch {
+    }
   }
 }
 async function notifyAdminOfApplication(db, env, chapterId, applicationId, fields) {