Phase 3.3: topic sensitivity + Phase 3.4: auth foundation

Phase 3.3 — Session Topic Sensitivity (complete):
- Backend: topic_sensitivity column + session_sensitivity_log, sensitivity service
  (flip with one-way-latch + audit), PATCH /api/shared/chat/sessions/:id/topic,
  topic carried in pairing + extension WS payloads, CC filter + sensitive stats
  + per-mitra sensitive columns on activity page
- client_app: TopicSelectionBottomSheet before pricing, topic flows through
  pairing request, silent WS handler for session_topic_updated
- mitra_app: SensitivityBadge + SensitivityTheme + sensitivityConfigProvider,
  overlay badge + yellow accent, chat screen app-bar toggle with configurable
  confirmation + latch, extension card shows current flag, history + transcript
  yellow theme
- control_center: Sensitivitas Topik settings section, topic filter + column
  with inline audit log, sensitive stats dashboard card, mitra activity
  sensitive columns with QC flag

Phase 3.4 — Self-Managed Auth (foundation only):
- Migration: auth_sessions + otp_requests tables, social identity columns on
  customers, password_hash + lockout on control_center_users, OTP + CC lockout
  app_config keys
- New services: password (bcrypt + complexity), token (JWT HS256 + refresh
  rotation, session_id claim pre-wires future Valkey revocation),
  social-identity (Google + Apple JWKS), OTP (Fazpass stub — real API TBD)
- Constants: AuthProvider + OtpChannel
- Middleware, auth route rewrites, WS auth update, Firebase → FCM isolation
  still pending (next chunk); Fazpass docs + Apple Developer setup still
  required before E2E testing

Docs:
- requirement/phase3.3.md, phase3.3-plan.md, phase3.3-testing.md
- requirement/phase3.4.md, phase3.4-plan.md

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

client_app/lib/core/chat/chat_notifier.dart

@@ -316,6 +316,11 @@ class Chat extends _$Chat {
         _cleanup();
         break;
 
+      case WsMessage.sessionTopicUpdated:
+        // Customer is never given a visual cue about topic sensitivity;
+        // message is received for future-proofing but intentionally a no-op.
+        break;
+
       case WsMessage.error:
         break;
     }

client_app/lib/core/constants.dart

@@ -42,6 +42,18 @@ class ExtensionStatus {
   ExtensionStatus._();
 }
 
+/// Session topic sensitivity
+enum TopicSensitivity {
+  regular('regular'),
+  sensitive('sensitive');
+
+  final String value;
+  const TopicSensitivity(this.value);
+
+  static TopicSensitivity fromString(String? v) =>
+      values.firstWhere((e) => e.value == v, orElse: () => TopicSensitivity.regular);
+}
+
 /// WebSocket message types
 class WsMessage {
   // Auth
@@ -72,6 +84,9 @@ class WsMessage {
   static const extensionRequest = 'extension_request';
   static const extensionResponse = 'extension_response';
 
+  // Topic sensitivity
+  static const sessionTopicUpdated = 'session_topic_updated';
+
   // Delivery
   static const delivered = 'delivered';
   static const read = 'read';

client_app/lib/core/pairing/pairing_notifier.dart

@@ -60,12 +60,17 @@ class Pairing extends _$Pairing {
   @override
   PairingData build() => const PairingInitialData();
 
-  Future<void> requestPairing() async {
-    await _doPairingRequest({});
+  Future<void> requestPairing({required TopicSensitivity topicSensitivity}) async {
+    await _doPairingRequest({'topic_sensitivity': topicSensitivity.value});
   }
 
-  Future<void> requestPairingWithTier({int? durationMinutes, int? price, bool isFreeTrial = false}) async {
-    final body = <String, dynamic>{};
+  Future<void> requestPairingWithTier({
+    int? durationMinutes,
+    int? price,
+    bool isFreeTrial = false,
+    required TopicSensitivity topicSensitivity,
+  }) async {
+    final body = <String, dynamic>{'topic_sensitivity': topicSensitivity.value};
     if (isFreeTrial) {
       body['is_free_trial'] = true;
     } else {

client_app/lib/features/chat/widgets/pricing_bottom_sheet.dart

@@ -2,20 +2,24 @@ import 'package:flutter/material.dart';
 import 'package:flutter_riverpod/flutter_riverpod.dart';
 import '../../../core/chat/chat_opening_provider.dart';
 import '../../../core/chat/session_closure_notifier.dart';
+import '../../../core/constants.dart';
 import '../../../core/pairing/pairing_notifier.dart';
 
 class PricingBottomSheet extends ConsumerWidget {
   /// If set, the bottom sheet is in "extension" mode — selecting a tier extends the session.
   final String? extensionSessionId;
 
-  const PricingBottomSheet({super.key, this.extensionSessionId});
+  /// Required when starting a new pairing. Null when in extension mode.
+  final TopicSensitivity? topicSensitivity;
+
+  const PricingBottomSheet({super.key, this.extensionSessionId, this.topicSensitivity});
 
   /// Show for new pairing (from home screen)
-  static Future<void> show(BuildContext context) {
+  static Future<void> show(BuildContext context, {required TopicSensitivity topicSensitivity}) {
     return showModalBottomSheet(
       context: context,
       isScrollControlled: true,
-      builder: (_) => const PricingBottomSheet(),
+      builder: (_) => PricingBottomSheet(topicSensitivity: topicSensitivity),
     );
   }
 
@@ -124,6 +128,7 @@ class PricingBottomSheet extends ConsumerWidget {
       durationMinutes: durationMinutes,
       price: price,
       isFreeTrial: isFreeTrial,
+      topicSensitivity: topicSensitivity ?? TopicSensitivity.regular,
     );
   }
 

client_app/lib/features/chat/widgets/topic_selection_bottom_sheet.dart

@@ -0,0 +1,107 @@
+import 'package:flutter/material.dart';
+import '../../../core/constants.dart';
+
+class TopicSelectionBottomSheet extends StatelessWidget {
+  const TopicSelectionBottomSheet({super.key});
+
+  /// Shows the sheet and returns the customer's selection (null if cancelled).
+  static Future<TopicSensitivity?> show(BuildContext context) {
+    return showModalBottomSheet<TopicSensitivity>(
+      context: context,
+      isScrollControlled: true,
+      isDismissible: false,
+      enableDrag: false,
+      backgroundColor: Colors.transparent,
+      builder: (_) => const TopicSelectionBottomSheet(),
+    );
+  }
+
+  @override
+  Widget build(BuildContext context) {
+    final theme = Theme.of(context);
+    return PopScope(
+      canPop: true,
+      child: Container(
+        decoration: const BoxDecoration(
+          color: Colors.white,
+          borderRadius: BorderRadius.vertical(top: Radius.circular(24)),
+        ),
+        padding: EdgeInsets.fromLTRB(
+          24,
+          16,
+          24,
+          24 + MediaQuery.of(context).viewInsets.bottom,
+        ),
+        child: Column(
+          mainAxisSize: MainAxisSize.min,
+          crossAxisAlignment: CrossAxisAlignment.stretch,
+          children: [
+            Center(
+              child: Container(
+                width: 36,
+                height: 4,
+                decoration: BoxDecoration(
+                  color: Colors.grey.shade300,
+                  borderRadius: BorderRadius.circular(2),
+                ),
+              ),
+            ),
+            const SizedBox(height: 20),
+            Text(
+              'Sebelum kita mulai',
+              style: theme.textTheme.titleLarge?.copyWith(fontWeight: FontWeight.w700),
+              textAlign: TextAlign.center,
+            ),
+            const SizedBox(height: 12),
+            Text(
+              'Supaya kami bisa menyiapkan bestie yang tepat untukmu, boleh kami tahu sedikit tentang ceritamu? Tidak ada penilaian di sini — kamu aman bercerita apa pun.',
+              style: theme.textTheme.bodyMedium?.copyWith(color: Colors.grey.shade700),
+              textAlign: TextAlign.center,
+            ),
+            const SizedBox(height: 20),
+            Text(
+              'Apakah ceritamu menyentuh topik seperti seksualitas, pornografi, atau penggunaan zat?',
+              style: theme.textTheme.bodyMedium?.copyWith(fontWeight: FontWeight.w600),
+              textAlign: TextAlign.center,
+            ),
+            const SizedBox(height: 20),
+            Row(
+              children: [
+                Expanded(
+                  child: FilledButton(
+                    style: FilledButton.styleFrom(
+                      padding: const EdgeInsets.symmetric(vertical: 14),
+                    ),
+                    onPressed: () => Navigator.of(context).pop(TopicSensitivity.regular),
+                    child: const Text('Topik umum'),
+                  ),
+                ),
+                const SizedBox(width: 12),
+                Expanded(
+                  child: OutlinedButton(
+                    style: OutlinedButton.styleFrom(
+                      padding: const EdgeInsets.symmetric(vertical: 14),
+                    ),
+                    onPressed: () => Navigator.of(context).pop(TopicSensitivity.sensitive),
+                    child: const Text('Topik sensitif'),
+                  ),
+                ),
+              ],
+            ),
+            const SizedBox(height: 12),
+            Text(
+              'Pilihan ini hanya membantu bestie menyiapkan diri. Kamu tetap bisa bercerita apa adanya.',
+              style: theme.textTheme.bodySmall?.copyWith(color: Colors.grey.shade600),
+              textAlign: TextAlign.center,
+            ),
+            const SizedBox(height: 8),
+            TextButton(
+              onPressed: () => Navigator.of(context).pop(),
+              child: Text('Batal', style: TextStyle(color: Colors.grey.shade600)),
+            ),
+          ],
+        ),
+      ),
+    );
+  }
+}

client_app/lib/features/home/home_screen.dart

@@ -6,6 +6,7 @@ import '../../core/api/api_client_provider.dart';
 import '../../core/chat/unread_notifier.dart';
 import '../../core/pairing/pairing_notifier.dart';
 import '../chat/widgets/pricing_bottom_sheet.dart';
+import '../chat/widgets/topic_selection_bottom_sheet.dart';
 
 class HomeScreen extends ConsumerStatefulWidget {
   const HomeScreen({super.key});
@@ -60,6 +61,12 @@ class _HomeScreenState extends ConsumerState<HomeScreen> with WidgetsBindingObse
     }
   }
 
+  Future<void> _onStartChatPressed(BuildContext context) async {
+    final topic = await TopicSelectionBottomSheet.show(context);
+    if (topic == null || !context.mounted) return;
+    await PricingBottomSheet.show(context, topicSensitivity: topic);
+  }
+
   @override
   Widget build(BuildContext context) {
     final authState = ref.watch(authProvider);
@@ -122,7 +129,7 @@ class _HomeScreenState extends ConsumerState<HomeScreen> with WidgetsBindingObse
                     style: ElevatedButton.styleFrom(
                       padding: const EdgeInsets.symmetric(horizontal: 48, vertical: 16),
                     ),
-                    onPressed: () => PricingBottomSheet.show(context),
+                    onPressed: () => _onStartChatPressed(context),
                     child: const Text('Mulai Curhat', style: TextStyle(fontSize: 18)),
                   ),
                 ],