# CLIENT: IDAA — International Doctors in Alcoholics Anonymous **Client:** International Doctors in Alcoholics Anonymous (IDAA) **Module Path:** `src/routes/idaa/` **State Stores:** `src/lib/stores/ae_idaa_stores.ts` **Last Updated:** 2026-03-09 (Novi UUID verification upgrade) --- ## ⚠️ CRITICAL PRIVACY REQUIREMENT **ALL IDAA content is PRIVATE. Authentication is required for ALL modules.** IDAA serves a sensitive population — physicians in addiction recovery. Content exposure to the public is a **severe security failure** and a violation of member trust. - A previous AI agent accidentally exposed IDAA Bulletin Board content publicly. This must never happen again. - Every route, component, and API call in this module must enforce authentication. - When in doubt: **it's private**. **Required access level:** `trusted_access` or higher for all IDAA content. --- ## What IDAA Is IDAA is a private membership organization for physicians in recovery. They use the Aether platform for: - A private document archive (historical materials, meeting records) - A members-only bulletin board (community posts and discussion) - A searchable directory of in-person and virtual recovery meetings - Video conferencing (Jitsi-based) IDAA's Aether instance is embedded as an **iframe inside their existing Novi-powered website** (`idaa.org`). Novi is their external Association Management System (AMS) — it handles membership records and authentication. Aether receives the member context via URL parameters on iframe load. --- ## Architecture: Composite Module IDAA is **not a standalone module** — it is a **composition of three existing Aether modules**, access-gated and branded for the IDAA client. | IDAA Feature | Aether Module Used | Library | |---|---|---| | Archives | Archives module | `src/lib/ae_archives/` | | Bulletin Board (BB) | Posts module | `src/lib/ae_posts/` | | Recovery Meetings | Events module (repurposed) | `src/lib/ae_events/` | | Video Conferences | Jitsi (external embed) | External | There is **no `src/lib/ae_idaa/`** library directory. IDAA-specific state and logic lives in `ae_idaa_stores.ts` and the route components only. This design allows the IDAA module to be removed or updated without touching core modules. --- ## Route Structure ``` src/routes/idaa/ ├── +layout.svelte # Root layout: Novi UUID extraction, iframe height sync ├── (idaa)/ │ ├── +layout.svelte # Access gate: blocks render if unauthorized; permission upgrade │ ├── +page.svelte # IDAA dashboard — 3-module selector │ ├── archives/ # Archives submodule │ │ ├── +page.svelte # Archive list (LiveQuery) │ │ └── [archive_id]/ │ │ ├── +page.svelte # Archive detail + content viewer │ │ ├── ae_idaa_comp__archive_obj_id_view.svelte │ │ ├── ae_idaa_comp__archive_obj_id_edit.svelte │ │ ├── ae_idaa_comp__archive_content_obj_id_edit.svelte │ │ └── ae_idaa_comp__modal_media_player.svelte │ ├── bb/ # Bulletin Board (Posts) submodule │ │ ├── +page.svelte # Post list (LiveQuery, archive-filtered) │ │ └── [post_id]/ │ │ ├── +page.svelte # Post detail + comments │ │ ├── ae_idaa_comp__post_obj_id_view.svelte │ │ ├── ae_idaa_comp__post_obj_id_edit.svelte │ │ └── ae_idaa_comp__post_comment_obj_id_edit.svelte │ ├── recovery_meetings/ # Recovery Meetings (Events repurposed) │ │ ├── +layout.ts # Layout loader (auth, stores) │ │ ├── +layout.svelte # Layout wrapper │ │ ├── +page.svelte # Meeting list + search filters │ │ ├── ae_idaa_comp__event_obj_li_wrapper.svelte # List container/modal host │ │ ├── ae_idaa_comp__event_obj_li.svelte # Individual list item card │ │ ├── ae_idaa_comp__event_obj_qry.svelte # Query/filter bar │ │ ├── ae_idaa_comp__event_obj_id_view.svelte # Meeting detail (read-only) │ │ ├── ae_idaa_comp__event_obj_id_edit.svelte # Meeting edit form (v1, legacy — do not touch) │ │ ├── ae_idaa_comp__event_obj_id_edit_v2.svelte # Meeting edit form (v2, active) │ │ └── [event_id]/ │ │ ├── +page.svelte # Meeting detail page — renders view OR edit based on session flag │ │ └── +page.ts │ └── video_conferences/ # Jitsi video conference integration └── jitsi_reports/ # External Jitsi reporting ``` > **Note:** Recovery Meetings has **two UI entry points**: > 1. **Modal pattern** (primary list flow) — list, view, and edit components live at `recovery_meetings/` > level, toggled via `$idaa_sess.recovery_meetings` session flags (`show__modal_view`, `show__modal_edit`). > 2. **Direct page** (`[event_id]/+page.svelte`) — navigating to `/idaa/recovery_meetings/` renders > the same view/edit components gated by `$idaa_sess.recovery_meetings.edit__event_obj`. > > Both patterns use `ae_idaa_comp__event_obj_id_edit_v2.svelte`. The edit form clears **both** > `show__modal_edit` and `edit__event_obj` on save/cancel so it works correctly from either entry point. --- ## Authentication: Novi UUID System IDAA members do not log in through Aether — they log in through Novi (idaa.org), and Novi passes their identity to the Aether iframe via URL parameters. ### URL Parameters (on iframe load) ``` ?uuid=<36-char-uuid> &iframe=true &key= ``` > **Security note (2026-03-09):** The iframe HTML files previously also passed `email` and `full_name` > via URL params. These were unverifiable claims that could be spoofed via URL. They have been removed. > The SvelteKit layout now fetches verified identity directly from the Novi API. > See "Iframe Integration" → "Novi UUID Verification Flow" below. ### Verification Flow (`(idaa)/+layout.svelte`) When a `uuid` param is present in the URL, the layout performs an **async Novi API call** to verify: 1. The UUID actually exists in Novi's system (prevents fake/crafted UUIDs) 2. Gets verified name and email directly from Novi — these can't be forged via URL 3. Sets `$idaa_loc.novi_uuid`, `$idaa_loc.novi_email`, `$idaa_loc.novi_full_name` 4. Sets `$idaa_loc.novi_verified = true` on success A `novi_verifying` UI state prevents the "Access Denied" screen from flashing during the API round-trip. **All or nothing:** If the Novi API key is not configured, or the verification call fails, access is denied. There is no URL-param fallback. **Required `site_cfg_json` fields:** ```json { "novi_idaa_api_key": "Base64-encoded-key-from-Novi", "novi_api_root_url": "https://www.idaa.org/api", // optional, this is the default "novi_admin_li": ["uuid-1", "uuid-2"], "novi_trusted_li": ["uuid-3", "uuid-4"], "novi_idaa_group_guid_li": ["group-uuid"] // Jitsi moderators only } ``` ### Permission Levels (Ascending) | Level | Condition | Access | |---|---|---| | Anonymous | No UUID, unrecognized UUID, or verification failure | No access | | Authenticated | UUID verified against Novi API | View own content, limited actions | | Trusted | Verified UUID in `novi_trusted_li` | Full member access to all IDAA content | | Administrator | Verified UUID in `novi_admin_li` | Full access + edit/manage | `novi_trusted_li` and `novi_admin_li` are managed in Aether site config (not in Novi directly). ### Permission Upgrade Rule ``` // RULE: Only UPGRADE to Novi-based permissions, NEVER downgrade. // If a user has a higher global Aether role (site manager, super), // their global role is preserved and not overwritten by Novi auth. ``` This ensures that OSIT staff with `super` or `manager` roles retain full access regardless of Novi UUID status. ### Non-Novi Sign-in Paths (unaffected) - **User/Pass or Auth Link:** No `uuid` in URL → layout Novi block does not run - **Shared Passcode:** No `uuid` in URL → layout Novi block does not run ### Access Gate (`(idaa)/+layout.svelte`) The inner layout blocks ALL rendering if the user is not authorized: - `novi_verifying = true` → "Verifying identity..." spinner - Verification failed or no UUID → "Access Denied" error page - Access check runs before any child routes render --- ## Module 1: Archives **Route:** `/idaa/archives/` **Library:** `src/lib/ae_archives/` **Types:** `ae_Archive`, `ae_ArchiveContent` The Archives module stores IDAA historical content — meeting records, conference proceedings, historical documents, and media. ### Object Types **Archive (Container)** - Represents a collection (e.g., "2019 Conference Proceedings") - Key fields: `name`, `description`, `original_datetime`, `original_location`, `archive_on` - `archive_on` — date when this archive collection is auto-hidden (scheduled visibility control) **ArchiveContent (Items)** - Individual items within an archive - Supports multiple content types: `'text'`, `'file'`, `'url'`, `'video'` - Key fields: `archive_content_type`, `content_html`, `url`, `hosted_file_id`, `duration` - Video/audio content has a dedicated media player component ### Database (Dexie) ``` db_archives.archive — Archive containers db_archives.content — Archive content items (linked by archive_id) ``` ### Demo / Test IDs - Archive: `nAA2bHLv8RK` (id: 1) "One Sky Test Archive" - Archive Content: `UjKzrk-GKu5` (id: 1) "Hosted File Test" --- ## Module 2: Bulletin Board (BB) **Route:** `/idaa/bb/` **Library:** `src/lib/ae_posts/` **Types:** `ae_Post`, `ae_PostComment` The BB is the IDAA members-only community discussion board. It is the **most sensitive module** — public exposure must never occur. ### Object Types **Post (Thread)** - Key fields: `title`, `content`, `anonymous`, `full_name`, `email` - `archive_on` — date after which the post is hidden from all views - `archive` — boolean flag for immediate archival - `enable_comments` — controls whether replies are allowed - `post_comment_count` — cached count of replies **PostComment (Reply)** - Key fields: `post_id`, `content`, `anonymous`, `full_name`, `email` - Replies inherit the parent post's visibility rules ### Post Visibility / Archival Filter Posts with `archive_on` set to a past date are **automatically hidden** from all queries. This is enforced at the component level via a LiveQuery filter: ```typescript // This filter is REQUIRED — do not remove it filter((x) => !x.archive_on || archiveDate > now) ``` Archived posts are soft-deleted — they remain in the database for audit purposes but are not shown to members. Most recent first (sorted `updated_on DESC`). ### Database (Dexie) ``` db_posts.post — Posts (threads) db_posts.comment — Post comments (linked by post_id) ``` --- ## Module 3: Recovery Meetings **Route:** `/idaa/recovery_meetings/` **Library:** `src/lib/ae_events/` (standard Events module, repurposed) **Types:** `ae_Event` (standard event type, filtered for meeting context) Recovery Meetings reuses the Aether Events object to represent AA recovery meetings. These are NOT conferences — they are regular ongoing meetings (weekly, monthly, etc.) available to IDAA members. ### Search Filters Members can filter meetings by: - **Fulltext search** — name, location - **Physical** — in-person meetings - **Virtual** — online meetings (Zoom, Google Meet, etc.) - **Meeting type** — specific meeting format categories Search is debounced (250ms) and uses the standard Aether SWR pattern. ### Edit Form — Sections and Key Fields The edit form (`ae_idaa_comp__event_obj_id_edit.svelte`) is organized into these sections. All fields map directly to the `ae_Event` object; none are IDAA-specific custom fields. | Section | Key Fields | | --- | --- | | **General Information** | `name` (required), `description` (TipTap rich text), `type` (IDAA / Caduceus / Family Recovery) | | **How to Attend** | `physical` (bool), `virtual` (bool) toggles; conditionally shows: | | → Physical | `location_address_json` (name, line_1–3, city, state, postal, country), `location_text` (TipTap) | | → Virtual | Platform toggle: **Zoom** (`attend_url_code` meeting ID, `attend_url_passcode`, `attend_json.zoom.passcode_enc`, `attend_json.zoom.domain`, `attend_json.zoom.full_url`), **Jitsi** (`attend_json.jitsi.*`), **Other** (`attend_url`, `attend_url_passcode`, `attend_phone`, `attend_phone_passcode`) | | → Both | `attend_text` (TipTap — additional attendance instructions) | | **Schedule** | `recurring_pattern` (weekly/every other week/monthly/other), `weekday_*` (Sun–Sat booleans), `timezone`, `recurring_start_time`, `recurring_end_time`, `recurring_text` (optional TipTap, auto-generated with `*gen*` prefix if blank) | | **Contacts** | `external_person_id` (Novi UUID link), `contact_li_json[0]` (Contact 1: name, email, phone_mobile, phone_home, phone_office — name/email locked to Novi user by default), `contact_li_json[1]` (Contact 2: same fields, optional) | | **Admin Options** | `status`, `hide`, `priority`, `sort`, `group`, `enable`, `notes` (TipTap) — **trusted_access only** | **Rich text fields** all use `AE_Comp_Editor_TipTap` with separate `*_new_html` state variables (not bound to `$idaa_slct.event_obj` directly) to track change state for the save-button logic. **Zoom URL auto-generation:** Triggered by `$idaa_trig = 'update_zoom_full_url'`. An `$effect` reconstructs `attend_json.zoom.full_url` from domain + meeting_id + passcode_enc whenever the Meeting ID, Passcode, Encrypted Passcode, or Domain fields change. **Recurring text auto-generation:** If `recurring_text` is blank or contains the `*gen*` prefix, the submit handler generates a human-readable string (e.g., `*gen* weekly: Monday, Wednesday at 7:00 PM America/Chicago`). Members can opt into a custom text via "Add More Details?" (admin/trusted only). **Contact 1 lock:** Contact 1 name and email default to the logged-in Novi member's identity (`$idaa_loc.novi_full_name`, `$idaa_loc.novi_email`). They are `readonly` unless the user explicitly unlocks them via confirm dialog (or has administrator access). ### Jitsi Integration Some virtual meetings are hosted via Jitsi. Members with a Jitsi moderator UUID (`novi_jitsi_mod_li`) have elevated permissions in video sessions. ### Edit Form — Implementation Notes (v2) - The v2 edit form uses a `