@odla-ai/chapter 0.10.1 → 0.11.0

package/dist/worker/index.d.cts

@@ -154,6 +154,12 @@ interface ChapterApplication {
     defaultMaxLen?: number;
     /** Max JSON request body in bytes. Default 32768. */
     bodyCap?: number;
+    /** Reject a submit that carries no truthy `disclaimerAck` (400), instead of
+     *  writing a row with no consent record. Default `false` for back-compat —
+     *  but turn it on if the disclaimer is a compliance record: a missing ack is
+     *  otherwise silent, permanent and unreconstructible. Failure is deterministic
+     *  and surfaces on the first test submit, not intermittently in production. */
+    requireDisclaimerAck?: boolean;
 }
 /** The fully-resolved application config carried on the {@link Chapter}. */
 interface ResolvedApplication {
@@ -162,6 +168,7 @@ interface ResolvedApplication {
     maxLen: Record<string, number>;
     defaultMaxLen: number;
     bodyCap: number;
+    requireDisclaimerAck: boolean;
 }
 /** The `defineChapter()` config a site fills in. */
 interface ChapterConfig {

package/dist/worker/index.d.ts

@@ -154,6 +154,12 @@ interface ChapterApplication {
     defaultMaxLen?: number;
     /** Max JSON request body in bytes. Default 32768. */
     bodyCap?: number;
+    /** Reject a submit that carries no truthy `disclaimerAck` (400), instead of
+     *  writing a row with no consent record. Default `false` for back-compat —
+     *  but turn it on if the disclaimer is a compliance record: a missing ack is
+     *  otherwise silent, permanent and unreconstructible. Failure is deterministic
+     *  and surfaces on the first test submit, not intermittently in production. */
+    requireDisclaimerAck?: boolean;
 }
 /** The fully-resolved application config carried on the {@link Chapter}. */
 interface ResolvedApplication {
@@ -162,6 +168,7 @@ interface ResolvedApplication {
     maxLen: Record<string, number>;
     defaultMaxLen: number;
     bodyCap: number;
+    requireDisclaimerAck: boolean;
 }
 /** The `defineChapter()` config a site fills in. */
 interface ChapterConfig {

package/dist/worker/index.js

@@ -157,6 +157,9 @@ async function createClerkUser(secretKey, input, fetchImpl = fetch) {
 }
 
 // src/member.ts
+function hasDisclaimerAck(fields) {
+  return fields.disclaimerAck === true || fields.disclaimerAck === "true";
+}
 var IDENTITY_FIELDS = /* @__PURE__ */ new Set(["email", "firstName", "lastName"]);
 function applicantProfile(chapter, fields) {
   const profile = {};
@@ -179,6 +182,10 @@ async function submitApplication(db, chapter, fields, opts) {
     const cap = app.maxLen[f] ?? app.defaultMaxLen;
     if (typeof v === "string" && v.length > cap) return { ok: false, error: `${f} exceeds ${cap} characters` };
   }
+  const acked = hasDisclaimerAck(fields);
+  if (app.requireDisclaimerAck && !acked) {
+    return { ok: false, error: "disclaimerAck is required" };
+  }
   const id = opts.newId();
   const row = { id, status: chapter.pipeline.initial, createdAt: opts.now };
   for (const f of [...app.required, ...app.optional]) {
@@ -186,12 +193,12 @@ async function submitApplication(db, chapter, fields, opts) {
   }
   if (fields.focus !== void 0) row.focus = fields.focus;
   if (opts.groupId) row.groupId = opts.groupId;
-  if (fields.disclaimerAck === true || fields.disclaimerAck === "true") row.disclaimerAckAt = opts.now;
+  if (acked) row.disclaimerAckAt = opts.now;
   const { duplicate } = await db.transact(
     [{ t: "update", ns: "applications", id, attrs: row }],
     opts.submissionId ? { mutationId: `join:${opts.submissionId}` } : void 0
   );
-  return { ok: true, id, duplicate, status: chapter.pipeline.initial };
+  return { ok: true, id, duplicate, status: chapter.pipeline.initial, disclaimerAckAt: acked ? opts.now : null };
 }
 function joinConfig(group, paymentsReady) {
   return {
@@ -647,7 +654,14 @@ var handleMember = async (req, url, env, ctx) => {
       }
       await provisionApplicant(db, chapter, result.id, parsed);
     }
-    return json({ id: result.id, duplicate: result.duplicate, status: result.status });
+    return json({
+      id: result.id,
+      duplicate: result.duplicate,
+      status: result.status,
+      // Echoed so a site can see (and assert in an integration test) whether its
+      // join page actually posted the ack. Absent consent is otherwise invisible.
+      disclaimerAckAt: result.disclaimerAckAt
+    });
   }
   return null;
 };