@odla-ai/chapter 0.15.1 → 0.16.0

package/dist/worker/index.d.cts

@@ -233,9 +233,47 @@ interface ChapterConfig {
      *  (owner-editable at runtime); this is the trigger, which is a build-time
      *  decision. See {@link ChapterSends}. */
     sends?: ChapterSends;
+    /** Site policy for admin operations (approve side effects, refund rules).
+     *  See {@link ChapterOperations}. */
+    operations?: ChapterOperations;
 }
 /** Apply-time Clerk account provisioning model. */
 type AccountModel = "invite" | "create" | "none";
+/** Site policy for admin OPERATIONS: the DECISIONS, where the mechanics stay
+ *  package-owned. Same model as {@link ChapterSends} — a site declares the rule,
+ *  chapter enforces it. Distinct from {@link ChapterPolicy}, which is member-facing
+ *  copy. (The privilege-escalation rules are NOT here: they are package-enforced
+ *  in `canChangeRole`, gated on `auth.superAdmins`, so a site cannot weaken them.) */
+interface ChapterOperations {
+    /** What approving an application does. */
+    onApprove?: {
+        /** Role to promote the applicant to in Clerk. Defaults to the ladder rung
+         *  directly below admin (e.g. `"member"`); `false` promotes nobody. */
+        promoteTo?: string | false;
+        /** Group email template to send on approve. Default `"onboardingInvite"`;
+         *  `false` sends nothing. */
+        send?: string | false;
+    };
+    /** Refund rules. */
+    refund?: {
+        /** Application statuses a refund may be issued from. Default: any status. */
+        allowedFrom?: readonly string[];
+        /** Also cancel the Stripe subscription. Default `true`. */
+        cancelSubscription?: boolean;
+    };
+}
+/** The fully-resolved {@link ChapterOperations} carried on the {@link Chapter}. */
+interface ResolvedOperations {
+    onApprove: {
+        promoteTo: string | false;
+        send: string | false;
+    };
+    /** `allowedFrom: null` means "any status". */
+    refund: {
+        allowedFrom: readonly string[] | null;
+        cancelSubscription: boolean;
+    };
+}
 /** When the admin notification fires: on application `submit` (default), on the
  *  first successful `payment`, or `never` (the site drives it itself). */
 type AdminNotificationTrigger = "submit" | "payment" | "never";
@@ -270,6 +308,8 @@ interface Chapter {
     account: AccountModel;
     /** Resolved send policy — when each lifecycle email fires. */
     sends: ResolvedSends;
+    /** Resolved admin-operation policy (approve side effects, refund rules). */
+    operations: ResolvedOperations;
     /** The seed `groups` row derived from config (chapter mode), else `null`. */
     groupSeed(): Record<string, unknown> | null;
 }

package/dist/worker/index.d.ts

@@ -233,9 +233,47 @@ interface ChapterConfig {
      *  (owner-editable at runtime); this is the trigger, which is a build-time
      *  decision. See {@link ChapterSends}. */
     sends?: ChapterSends;
+    /** Site policy for admin operations (approve side effects, refund rules).
+     *  See {@link ChapterOperations}. */
+    operations?: ChapterOperations;
 }
 /** Apply-time Clerk account provisioning model. */
 type AccountModel = "invite" | "create" | "none";
+/** Site policy for admin OPERATIONS: the DECISIONS, where the mechanics stay
+ *  package-owned. Same model as {@link ChapterSends} — a site declares the rule,
+ *  chapter enforces it. Distinct from {@link ChapterPolicy}, which is member-facing
+ *  copy. (The privilege-escalation rules are NOT here: they are package-enforced
+ *  in `canChangeRole`, gated on `auth.superAdmins`, so a site cannot weaken them.) */
+interface ChapterOperations {
+    /** What approving an application does. */
+    onApprove?: {
+        /** Role to promote the applicant to in Clerk. Defaults to the ladder rung
+         *  directly below admin (e.g. `"member"`); `false` promotes nobody. */
+        promoteTo?: string | false;
+        /** Group email template to send on approve. Default `"onboardingInvite"`;
+         *  `false` sends nothing. */
+        send?: string | false;
+    };
+    /** Refund rules. */
+    refund?: {
+        /** Application statuses a refund may be issued from. Default: any status. */
+        allowedFrom?: readonly string[];
+        /** Also cancel the Stripe subscription. Default `true`. */
+        cancelSubscription?: boolean;
+    };
+}
+/** The fully-resolved {@link ChapterOperations} carried on the {@link Chapter}. */
+interface ResolvedOperations {
+    onApprove: {
+        promoteTo: string | false;
+        send: string | false;
+    };
+    /** `allowedFrom: null` means "any status". */
+    refund: {
+        allowedFrom: readonly string[] | null;
+        cancelSubscription: boolean;
+    };
+}
 /** When the admin notification fires: on application `submit` (default), on the
  *  first successful `payment`, or `never` (the site drives it itself). */
 type AdminNotificationTrigger = "submit" | "payment" | "never";
@@ -270,6 +308,8 @@ interface Chapter {
     account: AccountModel;
     /** Resolved send policy — when each lifecycle email fires. */
     sends: ResolvedSends;
+    /** Resolved admin-operation policy (approve side effects, refund rules). */
+    operations: ResolvedOperations;
     /** The seed `groups` row derived from config (chapter mode), else `null`. */
     groupSeed(): Record<string, unknown> | null;
 }