@odla-ai/chapter 0.10.0 → 0.11.0

package/dist/worker/index.d.cts

@@ -154,6 +154,12 @@ interface ChapterApplication {
     defaultMaxLen?: number;
     /** Max JSON request body in bytes. Default 32768. */
     bodyCap?: number;
+    /** Reject a submit that carries no truthy `disclaimerAck` (400), instead of
+     *  writing a row with no consent record. Default `false` for back-compat —
+     *  but turn it on if the disclaimer is a compliance record: a missing ack is
+     *  otherwise silent, permanent and unreconstructible. Failure is deterministic
+     *  and surfaces on the first test submit, not intermittently in production. */
+    requireDisclaimerAck?: boolean;
 }
 /** The fully-resolved application config carried on the {@link Chapter}. */
 interface ResolvedApplication {
@@ -162,6 +168,7 @@ interface ResolvedApplication {
     maxLen: Record<string, number>;
     defaultMaxLen: number;
     bodyCap: number;
+    requireDisclaimerAck: boolean;
 }
 /** The `defineChapter()` config a site fills in. */
 interface ChapterConfig {

package/dist/worker/index.d.ts

@@ -154,6 +154,12 @@ interface ChapterApplication {
     defaultMaxLen?: number;
     /** Max JSON request body in bytes. Default 32768. */
     bodyCap?: number;
+    /** Reject a submit that carries no truthy `disclaimerAck` (400), instead of
+     *  writing a row with no consent record. Default `false` for back-compat —
+     *  but turn it on if the disclaimer is a compliance record: a missing ack is
+     *  otherwise silent, permanent and unreconstructible. Failure is deterministic
+     *  and surfaces on the first test submit, not intermittently in production. */
+    requireDisclaimerAck?: boolean;
 }
 /** The fully-resolved application config carried on the {@link Chapter}. */
 interface ResolvedApplication {
@@ -162,6 +168,7 @@ interface ResolvedApplication {
     maxLen: Record<string, number>;
     defaultMaxLen: number;
     bodyCap: number;
+    requireDisclaimerAck: boolean;
 }
 /** The `defineChapter()` config a site fills in. */
 interface ChapterConfig {

package/dist/worker/index.js

@@ -157,6 +157,20 @@ async function createClerkUser(secretKey, input, fetchImpl = fetch) {
 }
 
 // src/member.ts
+function hasDisclaimerAck(fields) {
+  return fields.disclaimerAck === true || fields.disclaimerAck === "true";
+}
+var IDENTITY_FIELDS = /* @__PURE__ */ new Set(["email", "firstName", "lastName"]);
+function applicantProfile(chapter, fields) {
+  const profile = {};
+  for (const f of [...chapter.application.required, ...chapter.application.optional]) {
+    if (IDENTITY_FIELDS.has(f)) continue;
+    const v = fields[f];
+    if (typeof v === "string" && v.trim() !== "") profile[f] = v.trim();
+  }
+  if (fields.focus !== void 0) profile.focus = fields.focus;
+  return Object.keys(profile).length > 0 ? profile : void 0;
+}
 async function submitApplication(db, chapter, fields, opts) {
   const app = chapter.application;
   for (const f of app.required) {
@@ -168,6 +182,10 @@ async function submitApplication(db, chapter, fields, opts) {
     const cap = app.maxLen[f] ?? app.defaultMaxLen;
     if (typeof v === "string" && v.length > cap) return { ok: false, error: `${f} exceeds ${cap} characters` };
   }
+  const acked = hasDisclaimerAck(fields);
+  if (app.requireDisclaimerAck && !acked) {
+    return { ok: false, error: "disclaimerAck is required" };
+  }
   const id = opts.newId();
   const row = { id, status: chapter.pipeline.initial, createdAt: opts.now };
   for (const f of [...app.required, ...app.optional]) {
@@ -175,11 +193,12 @@ async function submitApplication(db, chapter, fields, opts) {
   }
   if (fields.focus !== void 0) row.focus = fields.focus;
   if (opts.groupId) row.groupId = opts.groupId;
+  if (acked) row.disclaimerAckAt = opts.now;
   const { duplicate } = await db.transact(
     [{ t: "update", ns: "applications", id, attrs: row }],
     opts.submissionId ? { mutationId: `join:${opts.submissionId}` } : void 0
   );
-  return { ok: true, id, duplicate, status: chapter.pipeline.initial };
+  return { ok: true, id, duplicate, status: chapter.pipeline.initial, disclaimerAckAt: acked ? opts.now : null };
 }
 function joinConfig(group, paymentsReady) {
   return {
@@ -488,8 +507,13 @@ async function provisionApplicant(db, chapter, applicationId, fields) {
     try {
       const secret = await getVaultSecret(db, "clerk_secret_key");
       if (secret) {
-        if (chapter.account === "create") await createClerkUser(secret, { email, firstName: s(fields.firstName), lastName: s(fields.lastName) });
-        else await createClerkInvitation(secret, { email });
+        const profile = applicantProfile(chapter, fields);
+        const publicMetadata = { applicationId, ...profile ? { profile } : {} };
+        if (chapter.account === "create") {
+          await createClerkUser(secret, { email, firstName: s(fields.firstName), lastName: s(fields.lastName), publicMetadata });
+        } else {
+          await createClerkInvitation(secret, { email, publicMetadata });
+        }
       }
     } catch {
     }
@@ -630,7 +654,14 @@ var handleMember = async (req, url, env, ctx) => {
       }
       await provisionApplicant(db, chapter, result.id, parsed);
     }
-    return json({ id: result.id, duplicate: result.duplicate, status: result.status });
+    return json({
+      id: result.id,
+      duplicate: result.duplicate,
+      status: result.status,
+      // Echoed so a site can see (and assert in an integration test) whether its
+      // join page actually posted the ack. Absent consent is otherwise invisible.
+      disclaimerAckAt: result.disclaimerAckAt
+    });
   }
   return null;
 };