@teamscala/service-boot 0.23.414 → 0.23.416

package/src/agreement-gate/signing-shell.ts

@@ -0,0 +1,201 @@
+/**
+ * @system service-boot
+ * @status handwritten
+ * @edit edit directly
+ *
+ * New-flow signing-shell injection (no pre-placed gate required): agreement
+ * meta stashing, body-content discovery, the SignIn gate block builder, and
+ * the DB-driven signing shell (config/agreement-signing-shell) with its
+ * hardcoded fallback.
+ *
+ * Split out of agreement-gate.ts (909 lines) — byte-for-byte move; import
+ * paths adjusted only.
+ */
+
+import { loadRegistryConfig } from "@teamscala/db/registry/load-config";
+import * as v from "valibot";
+import { findAgreementGate } from "./signing-session.ts";
+import type { ContentBlock } from "./signing-session.ts";
+import type { AgreementGateSettings } from "./settings.ts";
+
+/** Agreement metadata stashed on resolved during getResourceId. */
+export const AGREEMENT_META_KEY = "_agreementMeta";
+
+export function stashAgreementMeta(
+	resolved: Record<string, unknown>,
+	id: string,
+	name: string,
+): void {
+	resolved[AGREEMENT_META_KEY] = { id, name };
+}
+
+/**
+ * The body content array for the agreement. The public shell composes the body
+ * region FROM resolved.page (register-registry-page-route.ts Branch 2:
+ * `bodyPuck = extractPuckData(resolved.page)`, returned un-cloned), so this IS
+ * the live array whose mutation reaches the SSR render. Header/footer are
+ * separate region sources (resolved.header / resolved.footer) — never the body.
+ *
+ * A prior version scored every region by top-level non-shell block count and
+ * picked the highest. That misroutes when the body wraps its clauses inside a
+ * Container (body's top-level count is ~2 while its nested clause count is ~40):
+ * a /header region with more top-level blocks out-scores the body, so
+ * onUnauthorized cleared the HEADER and injected the gate there, leaving the
+ * entire agreement body visible past the gate. The body is the resource page —
+ * identified, not heuristically guessed.
+ */
+export function getBodyContentArray(
+	resolved: Record<string, unknown>,
+): ContentBlock[] | null {
+	const pd = (
+		resolved.page as { puck_data?: { content?: unknown[] } } | undefined
+	)?.puck_data;
+	if (!pd || !Array.isArray(pd.content)) return null;
+	return pd.content as ContentBlock[];
+}
+
+/** Construct the SignIn gate block for injection. */
+export function buildGateBlock(
+	agreementUuid: string,
+	title: string,
+	settings: AgreementGateSettings,
+): ContentBlock {
+	return {
+		type: "SignIn",
+		props: {
+			id: `agreement-gate-${agreementUuid}`,
+			mode: "gate",
+			title: title || settings.title,
+			subtitle: settings.subtitle,
+			gateAction: "/api/agreement-access",
+			showBackToHome: true,
+			gateContextField: "agreementId",
+			gateContextValue: agreementUuid,
+			gateSubmitLabel: settings.submitLabel,
+			// Require OTP is DB-driven (config/content-gate-agreement.requireOtp).
+			// String "true"/"false" (not boolean) to match the select-field enum the
+			// render validates against — a boolean is stripped before reaching the
+			// component (the same coercion that bit the pre-placed gate block).
+			gateRequireOtp: settings.requireOtp ? "true" : "false",
+		},
+	};
+}
+
+/**
+ * Construct the signing shell blocks that wrap the body content when authed:
+ * [0] title ({{agreement.name}}), [1] execution clause, [2] signature panel
+ * (grid Container holding a per-party SignatureField template), [3] print
+ * button, [4] audit footer. The title is unshift'd before body; the rest are
+ * pushed after. expandRosterTemplates expands the SignatureField per party;
+ * seedSigningBlocks seeds each cell with the verified session.
+ */
+const AGREEMENT_SIGNING_SHELL_DEFAULT: ContentBlock[] = [
+		{
+			type: "Text",
+			props: {
+				id: "agreement-title",
+				text: "{{agreement.name}}",
+				size: "xl",
+				weight: "bold",
+				align: "left",
+				element: "h1",
+			},
+		},
+		{
+			type: "Text",
+			props: {
+				id: "agreement-execution",
+				text: "IN WITNESS WHEREOF, the parties have executed this Agreement as of the date(s) of signature below.",
+				size: "sm",
+				weight: "normal",
+				align: "left",
+				element: "p",
+			},
+		},
+		{
+			type: "Container",
+			props: {
+				id: "agreement-signature-panel",
+				layout: "grid",
+				columns: 2,
+				direction: "column",
+				gap: "md",
+				padding: "md",
+				mobileBehavior: "stack",
+				content: [
+					{
+						type: "SignatureField",
+						props: {
+							id: "agreement-signature-field",
+							label: "",
+						},
+					},
+				],
+			},
+		},
+		// Print button — preset:"action-primary" is the single styling knob: it
+		// resolves (button-presets config) to variant:primary → brand-coloured
+		// background. NO explicit `variant` prop: button-styles.ts does
+		// `variant ?? preset.variant`, so any explicit variant overrides the preset
+		// (a stray variant:"secondary" — not a real variant — fell back to a
+		// transparent ghost; that was the bare-text bug). icon:"lucide:printer"
+		// renders the printer glyph (baseStyle provides the icon↔label gap).
+		{
+			type: "Button",
+			props: {
+				id: "agreement-print",
+				label: "Print",
+				icon: "lucide:printer",
+				actionType: "print",
+				preset: "action-primary",
+				size: "default",
+				borderColor: "var(--border-color-default)",
+				borderWidth: "var(--border-width-default)",
+				borderRadius: "var(--radius-md)",
+				fullWidth: false,
+				pushRight: false,
+				href: "",
+				target: "_self",
+			},
+		},
+		{
+			type: "Text",
+			props: {
+				id: "agreement-audit",
+				text: "Secured electronic signature · {{agreement.org}}",
+				size: "xs",
+				align: "center",
+				element: "p",
+			},
+		},
+];
+
+const SigningShellSchema = v.object({ blocks: v.array(v.unknown()) });
+
+/**
+ * The signing-shell block tree, DB-driven (config/agreement-signing-shell) so the
+ * clauses, labels, and structure are editable without a deploy. Deep-cloned per
+ * call because injection (expandRosterTemplates/seedSigningBlocks) mutates the
+ * tree. Falls back to AGREEMENT_SIGNING_SHELL_DEFAULT so signing ALWAYS renders.
+ */
+export async function buildSigningShellBlocks(): Promise<ContentBlock[]> {
+	try {
+		const cfg = await loadRegistryConfig(
+			"config",
+			"agreement-signing-shell",
+			SigningShellSchema,
+		);
+		const blocks = cfg?.blocks as ContentBlock[] | undefined;
+		if (Array.isArray(blocks) && blocks.length > 0) {
+			return structuredClone(blocks);
+		}
+	} catch {
+		// fall through to the default so the signing shell ALWAYS renders
+	}
+	return structuredClone(AGREEMENT_SIGNING_SHELL_DEFAULT);
+}
+
+/** True if the page has a pre-placed SignIn gate block (old-flow page). */
+export function hasPrePlacedGate(resolved: Record<string, unknown>): boolean {
+	return findAgreementGate(resolved).agreementUuid !== "";
+}