@odla-ai/chapter 0.15.0 → 0.16.0

package/dist/index.d.cts

@@ -242,18 +242,59 @@ interface ChapterConfig {
     auth?: ChapterAuth;
     /** odla services (db implied). Default `["db","calendar","o11y"]`. */
     services?: readonly string[];
-    /** Apply-time account provisioning: `"invite"` (default) mints a Clerk
-     *  invitation, `"create"` makes the account server-side (so join can say the
-     *  account is ready), `"none"` skips it. Any of these needs a `clerk_secret_key`
-     *  vault secret to act. */
+    /** Apply-time account provisioning. **Default `"none"`** — it provisions
+     *  nothing, because the alternatives have an outbound side effect and a site
+     *  that never made the choice must not be mailing people. `"create"` makes the
+     *  Clerk account server-side (so join can say the account is ready);
+     *  `"invite"` **emails the applicant a Clerk invitation**. Both non-default
+     *  models need a `clerk_secret_key` vault secret to act. Opt in explicitly —
+     *  leaving this unset provisions no accounts. */
     account?: AccountModel;
     /** WHEN lifecycle email fires. Addressing and content live on the group row
      *  (owner-editable at runtime); this is the trigger, which is a build-time
      *  decision. See {@link ChapterSends}. */
     sends?: ChapterSends;
+    /** Site policy for admin operations (approve side effects, refund rules).
+     *  See {@link ChapterOperations}. */
+    operations?: ChapterOperations;
 }
 /** Apply-time Clerk account provisioning model. */
 type AccountModel = "invite" | "create" | "none";
+/** Site policy for admin OPERATIONS: the DECISIONS, where the mechanics stay
+ *  package-owned. Same model as {@link ChapterSends} — a site declares the rule,
+ *  chapter enforces it. Distinct from {@link ChapterPolicy}, which is member-facing
+ *  copy. (The privilege-escalation rules are NOT here: they are package-enforced
+ *  in `canChangeRole`, gated on `auth.superAdmins`, so a site cannot weaken them.) */
+interface ChapterOperations {
+    /** What approving an application does. */
+    onApprove?: {
+        /** Role to promote the applicant to in Clerk. Defaults to the ladder rung
+         *  directly below admin (e.g. `"member"`); `false` promotes nobody. */
+        promoteTo?: string | false;
+        /** Group email template to send on approve. Default `"onboardingInvite"`;
+         *  `false` sends nothing. */
+        send?: string | false;
+    };
+    /** Refund rules. */
+    refund?: {
+        /** Application statuses a refund may be issued from. Default: any status. */
+        allowedFrom?: readonly string[];
+        /** Also cancel the Stripe subscription. Default `true`. */
+        cancelSubscription?: boolean;
+    };
+}
+/** The fully-resolved {@link ChapterOperations} carried on the {@link Chapter}. */
+interface ResolvedOperations {
+    onApprove: {
+        promoteTo: string | false;
+        send: string | false;
+    };
+    /** `allowedFrom: null` means "any status". */
+    refund: {
+        allowedFrom: readonly string[] | null;
+        cancelSubscription: boolean;
+    };
+}
 /** When the admin notification fires: on application `submit` (default), on the
  *  first successful `payment`, or `never` (the site drives it itself). */
 type AdminNotificationTrigger = "submit" | "payment" | "never";
@@ -284,10 +325,12 @@ interface Chapter {
     schema: DbSchema;
     rules: DbRules;
     services: readonly string[];
-    /** Resolved apply-time account provisioning model (default `"invite"`). */
+    /** Resolved apply-time account provisioning model (default `"none"`). */
     account: AccountModel;
     /** Resolved send policy — when each lifecycle email fires. */
     sends: ResolvedSends;
+    /** Resolved admin-operation policy (approve side effects, refund rules). */
+    operations: ResolvedOperations;
     /** The seed `groups` row derived from config (chapter mode), else `null`. */
     groupSeed(): Record<string, unknown> | null;
 }
@@ -781,6 +824,60 @@ declare function projectApplicant(deps: ProjectionDeps, applicant: Applicant): P
     recordId: string;
 }>;
 
+/** The crm `person` input for one application row: the built-in identity/contact
+ *  fields plus each configured `crmFields` value present on the row. */
+declare function personInputFromApp(chapter: Chapter, app: Record<string, unknown>): Record<string, unknown>;
+/** Upsert the person record for one application (or a synthetic `{ email,
+ *  firstName }` account row) and mirror its stage, billing snapshot, and Clerk
+ *  identity. `stage` is the `applications.status` to mirror — omit for
+ *  account-only rows not in the pipeline. Throws on failure (the backfill route
+ *  counts; the operational call sites wrap in `.catch`). */
+declare function syncApplicationToCrm(deps: ProjectionDeps & {
+    chapter: Chapter;
+}, opts: {
+    app: Record<string, unknown>;
+    stage?: string;
+}): Promise<string | null>;
+/** Backfill / repair: project every application (newest per person) and every
+ *  account-only `$users` row into the CRM. Idempotent (safe to re-run). Dev
+ *  volumes fit one 1000-row page. Returns `{ synced, errors }`. */
+declare function backfillCrm(deps: ProjectionDeps & {
+    chapter: Chapter;
+}): Promise<{
+    synced: number;
+    errors: Array<{
+        email: string;
+        error: string;
+    }>;
+}>;
+
+/** Bucket `{ t, v }` points into the last `weeks` weekly buckets ending at `now`
+ *  (epoch ms), summing `v` per bucket. Returns oldest→newest `{ weekStart, value
+ *  }`, so a caller renders a sparkline directly. Points outside the window are
+ *  ignored. */
+declare function bucketSeries(points: Array<{
+    t: number;
+    v: number;
+}>, now: number, weeks?: number): Array<{
+    weekStart: number;
+    value: number;
+}>;
+/** Annualized cents for a Stripe subscription: sum each item's
+ *  `unit_amount * quantity`, ×12 for monthly intervals. A yearly interval is
+ *  taken as-is. Returns 0 for a shape with no priced items. */
+declare function subAnnualCents(sub: Record<string, unknown>): number;
+
+/** The result of a Stripe Backend API call: ok + status + parsed JSON body. */
+type StripeResult = {
+    ok: boolean;
+    status: number;
+    body: Record<string, unknown>;
+};
+/** Call the Stripe Backend API (form-encoded, Bearer sk_). Exposed so the admin
+ *  billing/dashboard reads and the refund route share one Stripe client instead
+ *  of each re-deriving the auth + encoding. */
+declare function stripeCall(sk: string, method: "GET" | "POST" | "DELETE", path: string, params?: Record<string, unknown>, idempotencyKey?: string): Promise<StripeResult>;
+
 /** The outcome of a Clerk provisioning call. `existed` marks the heal case: Clerk
  *  rejected it because the account/invitation is already there, which is the end
  *  state we wanted anyway. */
@@ -1165,4 +1262,4 @@ type ApplicationBookingPatch = {
  *  already there (never backward). */
 declare function applicationBookingUpdate(currentStatus: string, startAt: number, htmlLink?: string | null): ApplicationBookingPatch;
 
-export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type ChapterSends, type ClerkInviteInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type SubmitResult, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, bookingDecision, brandTokens, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, slotWindow, stageIndex, stripeForm, submitApplication, subscriptionIdempotencyKey, validateScheduling, verifyStripeSignature, webhookMutationId };
+export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type ChapterSends, type ClerkInviteInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type StripeResult, type SubmitResult, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, slotWindow, stageIndex, stripeCall, stripeForm, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, validateScheduling, verifyStripeSignature, webhookMutationId };

package/dist/index.d.ts

@@ -242,18 +242,59 @@ interface ChapterConfig {
     auth?: ChapterAuth;
     /** odla services (db implied). Default `["db","calendar","o11y"]`. */
     services?: readonly string[];
-    /** Apply-time account provisioning: `"invite"` (default) mints a Clerk
-     *  invitation, `"create"` makes the account server-side (so join can say the
-     *  account is ready), `"none"` skips it. Any of these needs a `clerk_secret_key`
-     *  vault secret to act. */
+    /** Apply-time account provisioning. **Default `"none"`** — it provisions
+     *  nothing, because the alternatives have an outbound side effect and a site
+     *  that never made the choice must not be mailing people. `"create"` makes the
+     *  Clerk account server-side (so join can say the account is ready);
+     *  `"invite"` **emails the applicant a Clerk invitation**. Both non-default
+     *  models need a `clerk_secret_key` vault secret to act. Opt in explicitly —
+     *  leaving this unset provisions no accounts. */
     account?: AccountModel;
     /** WHEN lifecycle email fires. Addressing and content live on the group row
      *  (owner-editable at runtime); this is the trigger, which is a build-time
      *  decision. See {@link ChapterSends}. */
     sends?: ChapterSends;
+    /** Site policy for admin operations (approve side effects, refund rules).
+     *  See {@link ChapterOperations}. */
+    operations?: ChapterOperations;
 }
 /** Apply-time Clerk account provisioning model. */
 type AccountModel = "invite" | "create" | "none";
+/** Site policy for admin OPERATIONS: the DECISIONS, where the mechanics stay
+ *  package-owned. Same model as {@link ChapterSends} — a site declares the rule,
+ *  chapter enforces it. Distinct from {@link ChapterPolicy}, which is member-facing
+ *  copy. (The privilege-escalation rules are NOT here: they are package-enforced
+ *  in `canChangeRole`, gated on `auth.superAdmins`, so a site cannot weaken them.) */
+interface ChapterOperations {
+    /** What approving an application does. */
+    onApprove?: {
+        /** Role to promote the applicant to in Clerk. Defaults to the ladder rung
+         *  directly below admin (e.g. `"member"`); `false` promotes nobody. */
+        promoteTo?: string | false;
+        /** Group email template to send on approve. Default `"onboardingInvite"`;
+         *  `false` sends nothing. */
+        send?: string | false;
+    };
+    /** Refund rules. */
+    refund?: {
+        /** Application statuses a refund may be issued from. Default: any status. */
+        allowedFrom?: readonly string[];
+        /** Also cancel the Stripe subscription. Default `true`. */
+        cancelSubscription?: boolean;
+    };
+}
+/** The fully-resolved {@link ChapterOperations} carried on the {@link Chapter}. */
+interface ResolvedOperations {
+    onApprove: {
+        promoteTo: string | false;
+        send: string | false;
+    };
+    /** `allowedFrom: null` means "any status". */
+    refund: {
+        allowedFrom: readonly string[] | null;
+        cancelSubscription: boolean;
+    };
+}
 /** When the admin notification fires: on application `submit` (default), on the
  *  first successful `payment`, or `never` (the site drives it itself). */
 type AdminNotificationTrigger = "submit" | "payment" | "never";
@@ -284,10 +325,12 @@ interface Chapter {
     schema: DbSchema;
     rules: DbRules;
     services: readonly string[];
-    /** Resolved apply-time account provisioning model (default `"invite"`). */
+    /** Resolved apply-time account provisioning model (default `"none"`). */
     account: AccountModel;
     /** Resolved send policy — when each lifecycle email fires. */
     sends: ResolvedSends;
+    /** Resolved admin-operation policy (approve side effects, refund rules). */
+    operations: ResolvedOperations;
     /** The seed `groups` row derived from config (chapter mode), else `null`. */
     groupSeed(): Record<string, unknown> | null;
 }
@@ -781,6 +824,60 @@ declare function projectApplicant(deps: ProjectionDeps, applicant: Applicant): P
     recordId: string;
 }>;
 
+/** The crm `person` input for one application row: the built-in identity/contact
+ *  fields plus each configured `crmFields` value present on the row. */
+declare function personInputFromApp(chapter: Chapter, app: Record<string, unknown>): Record<string, unknown>;
+/** Upsert the person record for one application (or a synthetic `{ email,
+ *  firstName }` account row) and mirror its stage, billing snapshot, and Clerk
+ *  identity. `stage` is the `applications.status` to mirror — omit for
+ *  account-only rows not in the pipeline. Throws on failure (the backfill route
+ *  counts; the operational call sites wrap in `.catch`). */
+declare function syncApplicationToCrm(deps: ProjectionDeps & {
+    chapter: Chapter;
+}, opts: {
+    app: Record<string, unknown>;
+    stage?: string;
+}): Promise<string | null>;
+/** Backfill / repair: project every application (newest per person) and every
+ *  account-only `$users` row into the CRM. Idempotent (safe to re-run). Dev
+ *  volumes fit one 1000-row page. Returns `{ synced, errors }`. */
+declare function backfillCrm(deps: ProjectionDeps & {
+    chapter: Chapter;
+}): Promise<{
+    synced: number;
+    errors: Array<{
+        email: string;
+        error: string;
+    }>;
+}>;
+
+/** Bucket `{ t, v }` points into the last `weeks` weekly buckets ending at `now`
+ *  (epoch ms), summing `v` per bucket. Returns oldest→newest `{ weekStart, value
+ *  }`, so a caller renders a sparkline directly. Points outside the window are
+ *  ignored. */
+declare function bucketSeries(points: Array<{
+    t: number;
+    v: number;
+}>, now: number, weeks?: number): Array<{
+    weekStart: number;
+    value: number;
+}>;
+/** Annualized cents for a Stripe subscription: sum each item's
+ *  `unit_amount * quantity`, ×12 for monthly intervals. A yearly interval is
+ *  taken as-is. Returns 0 for a shape with no priced items. */
+declare function subAnnualCents(sub: Record<string, unknown>): number;
+
+/** The result of a Stripe Backend API call: ok + status + parsed JSON body. */
+type StripeResult = {
+    ok: boolean;
+    status: number;
+    body: Record<string, unknown>;
+};
+/** Call the Stripe Backend API (form-encoded, Bearer sk_). Exposed so the admin
+ *  billing/dashboard reads and the refund route share one Stripe client instead
+ *  of each re-deriving the auth + encoding. */
+declare function stripeCall(sk: string, method: "GET" | "POST" | "DELETE", path: string, params?: Record<string, unknown>, idempotencyKey?: string): Promise<StripeResult>;
+
 /** The outcome of a Clerk provisioning call. `existed` marks the heal case: Clerk
  *  rejected it because the account/invitation is already there, which is the end
  *  state we wanted anyway. */
@@ -1165,4 +1262,4 @@ type ApplicationBookingPatch = {
  *  already there (never backward). */
 declare function applicationBookingUpdate(currentStatus: string, startAt: number, htmlLink?: string | null): ApplicationBookingPatch;
 
-export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type ChapterSends, type ClerkInviteInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type SubmitResult, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, bookingDecision, brandTokens, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, slotWindow, stageIndex, stripeForm, submitApplication, subscriptionIdempotencyKey, validateScheduling, verifyStripeSignature, webhookMutationId };
+export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type ChapterSends, type ClerkInviteInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type StripeResult, type SubmitResult, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, slotWindow, stageIndex, stripeCall, stripeForm, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, validateScheduling, verifyStripeSignature, webhookMutationId };

package/dist/index.js

@@ -537,6 +537,27 @@ function defineChapter(config) {
     );
   }
   const sends = { adminNotification };
+  const onApproveCfg = config.operations?.onApprove ?? {};
+  const belowAdmin = auth.ladder[auth.ladder.length - 2] ?? auth.adminRole;
+  const promoteTo = onApproveCfg.promoteTo === void 0 ? belowAdmin : onApproveCfg.promoteTo;
+  if (promoteTo !== false && !auth.ladder.includes(promoteTo)) {
+    throw new Error(
+      `defineChapter.operations.onApprove.promoteTo: "${String(promoteTo)}" is not in the auth ladder (${auth.ladder.join(", ")})`
+    );
+  }
+  const refundCfg = config.operations?.refund ?? {};
+  if (refundCfg.allowedFrom !== void 0) {
+    const unknown = refundCfg.allowedFrom.filter((s) => !pipeline.stages.includes(s));
+    if (unknown.length > 0) {
+      throw new Error(
+        `defineChapter.operations.refund.allowedFrom: ${unknown.map((s) => `"${s}"`).join(", ")} not in the pipeline (${pipeline.stages.join(", ")})`
+      );
+    }
+  }
+  const operations = {
+    onApprove: { promoteTo, send: onApproveCfg.send === void 0 ? "onboardingInvite" : onApproveCfg.send },
+    refund: { allowedFrom: refundCfg.allowedFrom ?? null, cancelSubscription: refundCfg.cancelSubscription ?? true }
+  };
   const chapter = {
     config,
     id: id2,
@@ -551,6 +572,7 @@ function defineChapter(config) {
     services,
     account,
     sends,
+    operations,
     groupSeed: () => mode === "chapter" ? buildGroupSeed(config) : null
   };
   if (config.url !== void 0) chapter.url = config.url;
@@ -677,16 +699,16 @@ async function sendTemplated(deps, input) {
   return error ? { sent: false, reason: error } : { sent: true };
 }
 function emailGroupFrom(row) {
-  const str = (v) => typeof v === "string" ? v : void 0;
+  const str2 = (v) => typeof v === "string" ? v : void 0;
   const templates = row.emailTemplates && typeof row.emailTemplates === "object" ? row.emailTemplates : {};
   return {
     id: String(row.id),
     name: String(row.name ?? ""),
-    replyTo: str(row.replyTo) ?? "",
-    debugEmail: str(row.debugEmail),
-    refundPolicyText: str(row.refundPolicyText),
-    commitmentText: str(row.commitmentText),
-    normsText: str(row.normsText),
+    replyTo: str2(row.replyTo) ?? "",
+    debugEmail: str2(row.debugEmail),
+    refundPolicyText: str2(row.refundPolicyText),
+    commitmentText: str2(row.commitmentText),
+    normsText: str2(row.normsText),
     emailTemplates: templates
   };
 }
@@ -834,6 +856,126 @@ async function projectApplicant(deps, applicant) {
   }
 }
 
+// src/crm-sync.ts
+import { createRecord as createRecord2, updateRecord as updateRecord2, setStage, linkIdentity } from "@odla-ai/crm";
+var str = (v) => typeof v === "string" ? v : v == null ? "" : String(v);
+function personInputFromApp(chapter, app) {
+  const input = sharedPersonInput({
+    email: str(app.email),
+    firstName: str(app.firstName) || void 0,
+    lastName: str(app.lastName) || void 0,
+    phone: str(app.phone) || void 0,
+    linkedin: str(app.linkedin) || void 0,
+    hubRecordId: str(app.id)
+  });
+  for (const f of chapter.application.crmFields) {
+    if (app[f] !== void 0) input[f] = app[f];
+  }
+  if (app.id !== void 0) input.applicationId = str(app.id);
+  return input;
+}
+function billingColumns(app) {
+  const status = str(app.status);
+  const paid = Boolean(app.stripeSubscriptionId) && status !== "refunded";
+  const billingStatus = status === "refunded" ? "refunded" : app.canceled === true ? "canceled" : paid ? "active" : "none";
+  const cols = { billingStatus };
+  if (app.stripeCustomerId) cols.stripeCustomerId = str(app.stripeCustomerId);
+  if (app.stripeSubscriptionId) cols.subscriptionId = str(app.stripeSubscriptionId);
+  if (typeof app.renewalAt === "number") cols.renewalAt = app.renewalAt;
+  return cols;
+}
+async function syncApplicationToCrm(deps, opts) {
+  const emailKey = str(opts.app.email).toLowerCase();
+  if (!emailKey) return null;
+  const crmDeps = { crm: deps.crm, db: deps.db, now: deps.now, newId: deps.newId };
+  const input = personInputFromApp(deps.chapter, opts.app);
+  const { crm_record } = await deps.db.query({
+    crm_record: { $: { where: { type: "person", primaryEmail: emailKey }, limit: 1 } }
+  });
+  const existing = crm_record?.[0] ?? null;
+  const stage = opts.stage || void 0;
+  let recordId;
+  if (existing && typeof existing.id === "string") {
+    recordId = existing.id;
+    await updateRecord2(crmDeps, { id: recordId, input });
+  } else {
+    const created = await createRecord2(crmDeps, { type: "person", input, ...stage ? { stage } : {} });
+    recordId = created.id;
+  }
+  if (existing && stage && existing.stage !== stage) {
+    await setStage(crmDeps, { id: recordId, to: stage, authorId: "system", mutationId: `crm:stage:${recordId}:${stage}` }).catch(() => void 0);
+  }
+  await deps.db.transact([{ t: "update", ns: "crm_record", id: recordId, attrs: billingColumns(opts.app) }]);
+  await linkIdentity(crmDeps, { recordId, email: emailKey, mutationId: `crm:link:${recordId}:${emailKey}` }).catch(() => void 0);
+  return recordId;
+}
+async function backfillCrm(deps) {
+  const [appsRes, usersRes] = await Promise.all([
+    deps.db.query({ applications: { $: { order: { createdAt: "desc" }, limit: 1e3 } } }),
+    deps.db.query({ $users: { $: { limit: 1e3 } } })
+  ]);
+  const seen = /* @__PURE__ */ new Set();
+  let synced = 0;
+  const errors = [];
+  const run = async (app, stage) => {
+    const key = str(app.email).toLowerCase();
+    if (!key || seen.has(key)) return;
+    seen.add(key);
+    try {
+      await syncApplicationToCrm(deps, { app, stage });
+      synced += 1;
+    } catch (err) {
+      errors.push({ email: key, error: err instanceof Error ? err.message : String(err) });
+    }
+  };
+  for (const a of appsRes.applications ?? []) await run(a, str(a.status));
+  for (const u of usersRes.$users ?? []) {
+    if (u.deleted === true) continue;
+    await run({ email: u.email, firstName: str(u.name) });
+  }
+  return { synced, errors };
+}
+
+// src/series.ts
+function bucketSeries(points, now, weeks = 12) {
+  const WEEK = 7 * 864e5;
+  const end = now;
+  const start = end - weeks * WEEK;
+  const buckets = Array.from({ length: weeks }, (_, i) => ({ weekStart: start + i * WEEK, value: 0 }));
+  for (const p of points) {
+    if (!Number.isFinite(p.t) || p.t < start || p.t > end) continue;
+    const idx = Math.min(weeks - 1, Math.floor((p.t - start) / WEEK));
+    const bucket = buckets[idx];
+    if (bucket) bucket.value += Number.isFinite(p.v) ? p.v : 0;
+  }
+  return buckets;
+}
+function subAnnualCents(sub) {
+  const items = sub.items?.data ?? [];
+  let cents = 0;
+  for (const it of items) {
+    const price = it.price ?? {};
+    const per = (price.unit_amount ?? 0) * (it.quantity ?? 1);
+    cents += price.recurring?.interval === "month" ? per * 12 : per;
+  }
+  return cents;
+}
+
+// src/payments-stripe.ts
+async function stripeCall(sk, method, path, params, idempotencyKey) {
+  const qs = method === "GET" && params ? `?${stripeForm(params)}` : "";
+  const headers = { authorization: `Bearer ${sk}` };
+  if (idempotencyKey) headers["idempotency-key"] = idempotencyKey;
+  const init = { method, headers };
+  if (method === "POST" && params) {
+    headers["content-type"] = "application/x-www-form-urlencoded";
+    init.body = stripeForm(params);
+  }
+  const res = await fetch(`https://api.stripe.com${path}${qs}`, init);
+  const body = await res.json().catch(() => ({}));
+  return { ok: res.ok, status: res.status, body };
+}
+
 // src/clerk.ts
 var heal = (status) => status === 422 ? { ok: true, status, existed: true } : { ok: false, status };
 function clerkInviteRequest(input) {
@@ -1216,8 +1358,10 @@ export {
   applicantProfile,
   applicationBookingUpdate,
   applicationSummary,
+  backfillCrm,
   bookingDecision,
   brandTokens,
+  bucketSeries,
   buildGroupSeed,
   canApprove,
   canBook,
@@ -1257,6 +1401,7 @@ export {
   memberSession,
   normalizeWebhookEvent,
   paymentsReady,
+  personInputFromApp,
   planDelivery,
   projectApplicant,
   projectSharedRecord,
@@ -1275,9 +1420,12 @@ export {
   sharedPersonInput,
   slotWindow,
   stageIndex,
+  stripeCall,
   stripeForm,
+  subAnnualCents,
   submitApplication,
   subscriptionIdempotencyKey,
+  syncApplicationToCrm,
   validateScheduling,
   verifyStripeSignature,
   webhookMutationId