@odla-ai/chapter 0.19.0 → 0.20.1

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { CrmConfig, Crm } from '@odla-ai/crm';
+import { CrmConfig, Crm, CrmRecord } from '@odla-ai/crm';
 
 /** Which feature profile a site runs. `chapter` is the full public member site
  * (join, Stripe membership, booking, member area, admin, CRM); `hub` is
@@ -68,6 +68,9 @@ interface ChapterBrand {
         body?: string;
         numeral?: string;
     };
+    /** Short glyph used in compact admin chrome. Defaults to the first three
+     * letters of the chapter name. */
+    badge?: string;
     wordmark?: string;
     tagline?: string;
     /** Header/footer nav sections for the web-component chrome: label → entries. */
@@ -77,6 +80,40 @@ interface ChapterBrand {
     }>>;
     logos?: string;
 }
+/** One follower site a leader can push CRM records to. The secret VALUE never
+ * lives in config: `secretName` names the leader tenant's vaulted copy of the
+ * follower's `network_share_secret`. */
+interface ChapterNetworkTarget {
+    /** Stable lowercase slug used by the UI, audit tags, and default secret name. */
+    id: string;
+    /** Human-facing site name. Defaults to `id`. */
+    name?: string;
+    /** Absolute follower origin, e.g. `https://silver.example.com`. */
+    url: string;
+    /** Leader-vault key holding this follower's share secret. Defaults to
+     * `network_share_<id-with-underscores>`. */
+    secretName?: string;
+    /** Per-record-type field allowlist. If present, omitted types cannot be sent
+     * to this target. Without it, package-safe person/company defaults apply. */
+    fields?: Record<string, readonly string[]>;
+}
+/** Leader/follower network configuration. Followers need no code config to
+ * receive records; they only vault `network_share_secret`. */
+interface ChapterNetwork {
+    targets?: readonly ChapterNetworkTarget[];
+}
+/** A validated network target carried on the resolved chapter engine. */
+interface ResolvedNetworkTarget {
+    id: string;
+    name: string;
+    url: string;
+    secretName: string;
+    fields?: Record<string, readonly string[]>;
+}
+/** Fully-resolved leader network configuration. */
+interface ResolvedNetwork {
+    targets: readonly ResolvedNetworkTarget[];
+}
 /** Membership pricing for the group row (chapter mode). */
 interface ChapterPrices {
     standardCents: number;
@@ -232,6 +269,9 @@ interface ChapterConfig {
     /** A `defineCrm()` config or a resolved `Crm`. Omit for the per-mode default. */
     crm?: CrmConfig | Crm;
     brand?: ChapterBrand;
+    /** Leader → follower delivery targets. Secret values stay in the leader
+     * tenant vault; see {@link ChapterNetworkTarget}. */
+    network?: ChapterNetwork;
     thesis?: unknown;
     /** Required in `chapter` mode. */
     prices?: ChapterPrices;
@@ -318,6 +358,11 @@ interface Chapter {
     name: string;
     url?: string;
     mode: ChapterMode;
+    /** Resolved site identity. `wordmark` always falls back to `name`, so the
+     * admin/member UI never needs a second brand declaration. */
+    brand: ChapterBrand;
+    /** Validated follower targets for leader-driven record pushes. */
+    network: ResolvedNetwork;
     /** Resolved CRM engine (from `defineCrm`). */
     crm: Crm;
     /** Resolved auth policy (source, claim, ladder, super-admin tier). */
@@ -401,9 +446,9 @@ declare function chapterDb(mode: ChapterMode, auth: ResolvedAuth): {
     rules: DbRules;
 };
 
-/** The per-mode default CRM config: `chapter` = a person lead pipeline;
- * `hub` = people + businesses with a works_at relation. */
-declare function defaultCrm(mode: ChapterMode): CrmConfig;
+/** The default shared CRM graph: people (with the application/member pipeline)
+ * plus businesses and the `works_at` relation, in both modes. */
+declare function defaultCrm(_mode: ChapterMode): CrmConfig;
 
 /** The `groups` row (attrs) for `chapter` mode. Missing config falls back to
  * empty copy / defaults, so a minimal config still provisions cleanly. */
@@ -783,6 +828,27 @@ interface SharedPerson {
     linkedin?: string;
     hubRecordId: string;
 }
+/** Convenience wire shape for sharing the default `company` CRM type. */
+interface SharedBusiness {
+    type: "company";
+    name: string;
+    domain?: string;
+    industry?: string;
+    location?: string;
+    linkedin?: string;
+    notes?: string;
+    hubRecordId: string;
+}
+/** Versioned generic wire shape. `input` is validated against the follower's
+ * own CRM type before any write, so a leader cannot smuggle undeclared fields. */
+interface SharedRecord {
+    version: 1;
+    type: string;
+    hubRecordId: string;
+    input: Record<string, unknown>;
+}
+/** Safe defaults when a target does not declare an explicit field allowlist. */
+declare const DEFAULT_SHARE_FIELDS: Readonly<Record<string, readonly string[]>>;
 /** Map a shared prospect to a crm `person` input (only the fields the default
  *  person type accepts). Name falls back to first+last, then the email. */
 declare function sharedPersonInput(person: SharedPerson): Record<string, unknown>;
@@ -794,12 +860,20 @@ interface ProjectionDeps {
     now: () => number;
     newId: () => string;
 }
+/** CRM provenance tag used as the durable leader-id → local-record mapping. */
+declare function networkSourceTag(type: string, hubRecordId: string): string;
+/** Normalize the backwards-compatible person/business shapes into the versioned
+ * generic record envelope the receiver writes. */
+declare function normalizeSharedRecord(record: SharedPerson | SharedBusiness | SharedRecord): SharedRecord;
+/** Build the allowlisted payload sent from one leader CRM record to a target.
+ * A target with an explicit `fields` map only accepts the types it lists. */
+declare function sharedRecordFromCrm(crm: Crm, record: CrmRecord, target: ResolvedNetworkTarget): SharedRecord;
 /**
- * Upsert a hub-shared prospect into this chapter's `crm_record` (push
- * projection), idempotent by the hub record id and unified by email. Callers wrap
- * this in `.catch` so a projection failure never fails the hub's share request.
+ * Upsert a leader-shared CRM record into this follower. Accepts the original
+ * person wire shape plus the versioned generic shape. Re-shares resolve through
+ * a durable provenance tag; people/businesses also converge by natural key.
  */
-declare function projectSharedRecord(deps: ProjectionDeps, person: SharedPerson): Promise<{
+declare function projectSharedRecord(deps: ProjectionDeps, shared: SharedPerson | SharedBusiness | SharedRecord): Promise<{
     recordId: string;
 }>;
 /** An arriving applicant, as far as the CRM projection cares. `extra` carries the
@@ -1271,4 +1345,4 @@ type ApplicationBookingPatch = {
  *  already there (never backward). */
 declare function applicationBookingUpdate(currentStatus: string, startAt: number, htmlLink?: string | null): ApplicationBookingPatch;
 
-export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type ChapterSends, type ClerkInviteInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type StripeResult, type SubmitResult, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, slotWindow, stageIndex, stripeCall, stripeForm, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, validateScheduling, verifyStripeSignature, webhookMutationId };
+export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterNetwork, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type ChapterSends, type ClerkInviteInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, DEFAULT_SHARE_FIELDS, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedNetwork, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type StripeEvent, type StripeResult, type SubmitResult, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, networkSourceTag, normalizeSharedRecord, normalizeWebhookEvent, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, sharedRecordFromCrm, slotWindow, stageIndex, stripeCall, stripeForm, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, validateScheduling, verifyStripeSignature, webhookMutationId };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { CrmConfig, Crm } from '@odla-ai/crm';
+import { CrmConfig, Crm, CrmRecord } from '@odla-ai/crm';
 
 /** Which feature profile a site runs. `chapter` is the full public member site
  * (join, Stripe membership, booking, member area, admin, CRM); `hub` is
@@ -68,6 +68,9 @@ interface ChapterBrand {
         body?: string;
         numeral?: string;
     };
+    /** Short glyph used in compact admin chrome. Defaults to the first three
+     * letters of the chapter name. */
+    badge?: string;
     wordmark?: string;
     tagline?: string;
     /** Header/footer nav sections for the web-component chrome: label → entries. */
@@ -77,6 +80,40 @@ interface ChapterBrand {
     }>>;
     logos?: string;
 }
+/** One follower site a leader can push CRM records to. The secret VALUE never
+ * lives in config: `secretName` names the leader tenant's vaulted copy of the
+ * follower's `network_share_secret`. */
+interface ChapterNetworkTarget {
+    /** Stable lowercase slug used by the UI, audit tags, and default secret name. */
+    id: string;
+    /** Human-facing site name. Defaults to `id`. */
+    name?: string;
+    /** Absolute follower origin, e.g. `https://silver.example.com`. */
+    url: string;
+    /** Leader-vault key holding this follower's share secret. Defaults to
+     * `network_share_<id-with-underscores>`. */
+    secretName?: string;
+    /** Per-record-type field allowlist. If present, omitted types cannot be sent
+     * to this target. Without it, package-safe person/company defaults apply. */
+    fields?: Record<string, readonly string[]>;
+}
+/** Leader/follower network configuration. Followers need no code config to
+ * receive records; they only vault `network_share_secret`. */
+interface ChapterNetwork {
+    targets?: readonly ChapterNetworkTarget[];
+}
+/** A validated network target carried on the resolved chapter engine. */
+interface ResolvedNetworkTarget {
+    id: string;
+    name: string;
+    url: string;
+    secretName: string;
+    fields?: Record<string, readonly string[]>;
+}
+/** Fully-resolved leader network configuration. */
+interface ResolvedNetwork {
+    targets: readonly ResolvedNetworkTarget[];
+}
 /** Membership pricing for the group row (chapter mode). */
 interface ChapterPrices {
     standardCents: number;
@@ -232,6 +269,9 @@ interface ChapterConfig {
     /** A `defineCrm()` config or a resolved `Crm`. Omit for the per-mode default. */
     crm?: CrmConfig | Crm;
     brand?: ChapterBrand;
+    /** Leader → follower delivery targets. Secret values stay in the leader
+     * tenant vault; see {@link ChapterNetworkTarget}. */
+    network?: ChapterNetwork;
     thesis?: unknown;
     /** Required in `chapter` mode. */
     prices?: ChapterPrices;
@@ -318,6 +358,11 @@ interface Chapter {
     name: string;
     url?: string;
     mode: ChapterMode;
+    /** Resolved site identity. `wordmark` always falls back to `name`, so the
+     * admin/member UI never needs a second brand declaration. */
+    brand: ChapterBrand;
+    /** Validated follower targets for leader-driven record pushes. */
+    network: ResolvedNetwork;
     /** Resolved CRM engine (from `defineCrm`). */
     crm: Crm;
     /** Resolved auth policy (source, claim, ladder, super-admin tier). */
@@ -401,9 +446,9 @@ declare function chapterDb(mode: ChapterMode, auth: ResolvedAuth): {
     rules: DbRules;
 };
 
-/** The per-mode default CRM config: `chapter` = a person lead pipeline;
- * `hub` = people + businesses with a works_at relation. */
-declare function defaultCrm(mode: ChapterMode): CrmConfig;
+/** The default shared CRM graph: people (with the application/member pipeline)
+ * plus businesses and the `works_at` relation, in both modes. */
+declare function defaultCrm(_mode: ChapterMode): CrmConfig;
 
 /** The `groups` row (attrs) for `chapter` mode. Missing config falls back to
  * empty copy / defaults, so a minimal config still provisions cleanly. */
@@ -783,6 +828,27 @@ interface SharedPerson {
     linkedin?: string;
     hubRecordId: string;
 }
+/** Convenience wire shape for sharing the default `company` CRM type. */
+interface SharedBusiness {
+    type: "company";
+    name: string;
+    domain?: string;
+    industry?: string;
+    location?: string;
+    linkedin?: string;
+    notes?: string;
+    hubRecordId: string;
+}
+/** Versioned generic wire shape. `input` is validated against the follower's
+ * own CRM type before any write, so a leader cannot smuggle undeclared fields. */
+interface SharedRecord {
+    version: 1;
+    type: string;
+    hubRecordId: string;
+    input: Record<string, unknown>;
+}
+/** Safe defaults when a target does not declare an explicit field allowlist. */
+declare const DEFAULT_SHARE_FIELDS: Readonly<Record<string, readonly string[]>>;
 /** Map a shared prospect to a crm `person` input (only the fields the default
  *  person type accepts). Name falls back to first+last, then the email. */
 declare function sharedPersonInput(person: SharedPerson): Record<string, unknown>;
@@ -794,12 +860,20 @@ interface ProjectionDeps {
     now: () => number;
     newId: () => string;
 }
+/** CRM provenance tag used as the durable leader-id → local-record mapping. */
+declare function networkSourceTag(type: string, hubRecordId: string): string;
+/** Normalize the backwards-compatible person/business shapes into the versioned
+ * generic record envelope the receiver writes. */
+declare function normalizeSharedRecord(record: SharedPerson | SharedBusiness | SharedRecord): SharedRecord;
+/** Build the allowlisted payload sent from one leader CRM record to a target.
+ * A target with an explicit `fields` map only accepts the types it lists. */
+declare function sharedRecordFromCrm(crm: Crm, record: CrmRecord, target: ResolvedNetworkTarget): SharedRecord;
 /**
- * Upsert a hub-shared prospect into this chapter's `crm_record` (push
- * projection), idempotent by the hub record id and unified by email. Callers wrap
- * this in `.catch` so a projection failure never fails the hub's share request.
+ * Upsert a leader-shared CRM record into this follower. Accepts the original
+ * person wire shape plus the versioned generic shape. Re-shares resolve through
+ * a durable provenance tag; people/businesses also converge by natural key.
  */
-declare function projectSharedRecord(deps: ProjectionDeps, person: SharedPerson): Promise<{
+declare function projectSharedRecord(deps: ProjectionDeps, shared: SharedPerson | SharedBusiness | SharedRecord): Promise<{
     recordId: string;
 }>;
 /** An arriving applicant, as far as the CRM projection cares. `extra` carries the
@@ -1271,4 +1345,4 @@ type ApplicationBookingPatch = {
  *  already there (never backward). */
 declare function applicationBookingUpdate(currentStatus: string, startAt: number, htmlLink?: string | null): ApplicationBookingPatch;
 
-export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type ChapterSends, type ClerkInviteInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedPerson, type StripeEvent, type StripeResult, type SubmitResult, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, normalizeWebhookEvent, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, slotWindow, stageIndex, stripeCall, stripeForm, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, validateScheduling, verifyStripeSignature, webhookMutationId };
+export { type AccountModel, type AdminNotificationTrigger, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterConfig, type ChapterDb, type ChapterEmails, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMode, type ChapterNetwork, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterScheduling, type ChapterSends, type ClerkInviteInput, type ClerkResult, type ClerkUserInput, type ClerkUserRecord, DEFAULT_SHARE_FIELDS, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, type EmailGroup, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type JoinConfigGroup, type LiveEvent, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberSession, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type ProjectionDeps, type ReconcileDecision, type ResolvedApplication, type ResolvedAuth, type ResolvedNetwork, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type StripeEvent, type StripeResult, type SubmitResult, type WebhookEvent, applicantProfile, applicationBookingUpdate, applicationSummary, backfillCrm, bookingDecision, brandTokens, bucketSeries, buildGroupSeed, canApprove, canBook, canChangeRole, canTransition, canceledPatch, chapterDb, clampArray, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkSetRole, clerkUserRequest, createChapterIntegration, createClerkInvitation, createClerkUser, defaultCrm, defineChapter, emailGroupFrom, endForSlot, findApplicationRef, firstPaymentPatch, getVaultSecret, hasDisclaimerAck, introIdempotencyKey, isAdminRole, isAlreadySent, isReconcilable, isSlotAvailable, isValidEmail, joinConfig, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberSession, networkSourceTag, normalizeSharedRecord, normalizeWebhookEvent, paymentsReady, personInputFromApp, planDelivery, projectApplicant, projectSharedRecord, reconcileMeetings, refundedPatch, render, renderSummary, renderTemplateBody, renewalPatch, resolveApplication, resolveAuth, resolvePipeline, resolveScheduling, roleFromClaim, sendTemplated, sharedPersonInput, sharedRecordFromCrm, slotWindow, stageIndex, stripeCall, stripeForm, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, validateScheduling, verifyStripeSignature, webhookMutationId };

package/dist/index.js

@@ -195,16 +195,10 @@ function companyType() {
     facets: { rank: "manual" }
   };
 }
-function defaultCrm(mode) {
-  if (mode === "hub") {
-    return {
-      types: { person: personType(), company: companyType() },
-      relations: { works_at: { from: "person", to: "company", label: "works at", reverseLabel: "team" } },
-      templates: TEMPLATES
-    };
-  }
+function defaultCrm(_mode) {
   return {
-    types: { person: personType() },
+    types: { person: personType(), company: companyType() },
+    relations: { works_at: { from: "person", to: "company", label: "works at", reverseLabel: "team" } },
     templates: TEMPLATES
   };
 }
@@ -487,6 +481,62 @@ function joinConfig(group, paymentsReady2) {
 
 // src/config.ts
 var SLUG = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var FIELD = /^[a-z][a-zA-Z0-9_]*$/;
+function resolveNetwork(config, crm) {
+  const seen = /* @__PURE__ */ new Set();
+  const targets = [];
+  for (const target of config.network?.targets ?? []) {
+    if (!SLUG.test(target.id)) {
+      throw new Error(`defineChapter.network.targets.id: must be a lowercase slug \u2014 got ${JSON.stringify(target.id)}`);
+    }
+    if (seen.has(target.id)) throw new Error(`defineChapter.network.targets: duplicate target "${target.id}"`);
+    seen.add(target.id);
+    let url;
+    try {
+      url = new URL(target.url);
+    } catch {
+      throw new Error(`defineChapter.network.targets.${target.id}.url: must be an absolute URL`);
+    }
+    const local = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "::1";
+    if (url.protocol !== "https:" && !(local && url.protocol === "http:")) {
+      throw new Error(`defineChapter.network.targets.${target.id}.url: must use https (http is allowed only for localhost)`);
+    }
+    const fields = target.fields;
+    for (const [type, names] of Object.entries(fields ?? {})) {
+      if (!FIELD.test(type) || names.length === 0 || names.some((name) => !FIELD.test(name))) {
+        throw new Error(
+          `defineChapter.network.targets.${target.id}.fields.${type}: type and field names must be non-empty CRM identifiers`
+        );
+      }
+      const def = crm.config.types[type];
+      if (!def) throw new Error(`defineChapter.network.targets.${target.id}.fields: unknown leader CRM type "${type}"`);
+      const unknown = names.filter((field) => !def.fields[field]);
+      if (unknown.length > 0) {
+        throw new Error(
+          `defineChapter.network.targets.${target.id}.fields.${type}: ${unknown.map((field) => `"${field}"`).join(", ")} not declared on the leader CRM type`
+        );
+      }
+      const nameField = def.nameField ?? "name";
+      if (!names.includes(nameField)) {
+        throw new Error(
+          `defineChapter.network.targets.${target.id}.fields.${type}: must include required name field "${nameField}"`
+        );
+      }
+    }
+    const secretName = target.secretName?.trim() || `network_share_${target.id.replaceAll("-", "_")}`;
+    if (!/^[a-zA-Z][a-zA-Z0-9_-]{1,127}$/.test(secretName)) {
+      throw new Error(`defineChapter.network.targets.${target.id}.secretName: must be a vault-key identifier`);
+    }
+    targets.push({
+      id: target.id,
+      name: target.name?.trim() || target.id,
+      url: url.origin,
+      secretName,
+      ...fields ? { fields } : {}
+    });
+  }
+  return { targets };
+}
 function isResolvedCrm(x) {
   return !!x && typeof x === "object" && "prepare" in x && typeof x.prepare === "function";
 }
@@ -511,6 +561,8 @@ function defineChapter(config) {
   const auth = resolveAuth(mode, config.auth);
   const pipeline = resolvePipeline(config.pipeline);
   const application = resolveApplication(config.application);
+  const brand = { ...config.brand, wordmark: config.brand?.wordmark ?? name };
+  const network = resolveNetwork(config, crm);
   const { schema, rules } = chapterDb(mode, auth);
   const services = config.services ?? ["db", "calendar", "o11y"];
   const account = config.account ?? "none";
@@ -563,6 +615,8 @@ function defineChapter(config) {
     id: id2,
     name,
     mode,
+    brand,
+    network,
     crm,
     auth,
     pipeline,
@@ -811,6 +865,10 @@ function canceledPatch() {
 
 // src/network.ts
 import { createRecord, updateRecord } from "@odla-ai/crm";
+var DEFAULT_SHARE_FIELDS = {
+  person: ["name", "email", "firstName", "lastName", "phone", "linkedin"],
+  company: ["name", "domain", "industry", "location", "linkedin", "notes"]
+};
 function sharedPersonInput(person) {
   const email = person.email.toLowerCase();
   const fullName = [person.firstName, person.lastName].filter(Boolean).join(" ").trim();
@@ -822,6 +880,52 @@ function sharedPersonInput(person) {
   if (person.linkedin) input.linkedin = person.linkedin;
   return input;
 }
+function shortHash(value) {
+  let a = 2166136261;
+  let b = 2654435769;
+  for (let i = 0; i < value.length; i += 1) {
+    const n = value.charCodeAt(i);
+    a = Math.imul(a ^ n, 16777619);
+    b = Math.imul(b ^ n, 2246822507);
+  }
+  return `${(a >>> 0).toString(36)}${(b >>> 0).toString(36)}`;
+}
+function networkSourceTag(type, hubRecordId) {
+  const typeKey = type.toLowerCase();
+  const readable = /^[a-z0-9_-]+$/.test(hubRecordId);
+  const raw = `network:${typeKey}:${hubRecordId}`;
+  if (readable && raw.length <= 64) return raw;
+  return `network:${typeKey.slice(0, 20)}:${shortHash(`${type}\0${hubRecordId}`)}`;
+}
+function normalizeSharedRecord(record) {
+  if ("input" in record) return { version: 1, type: record.type, hubRecordId: record.hubRecordId, input: record.input };
+  if ("type" in record && record.type === "company") {
+    const input = { name: record.name };
+    for (const key of ["domain", "industry", "location", "linkedin", "notes"]) {
+      if (record[key]) input[key] = record[key];
+    }
+    return { version: 1, type: "company", hubRecordId: record.hubRecordId, input };
+  }
+  return { version: 1, type: "person", hubRecordId: record.hubRecordId, input: sharedPersonInput(record) };
+}
+function sharedRecordFromCrm(crm, record, target) {
+  if (target.fields && !target.fields[record.type]) {
+    throw new Error(`${target.name} does not accept "${record.type}" records`);
+  }
+  const def = crm.type(record.type);
+  const fields = target.fields?.[record.type] ?? DEFAULT_SHARE_FIELDS[record.type];
+  if (!fields) {
+    throw new Error(`${target.name} requires an explicit field allowlist for "${record.type}" records`);
+  }
+  const nameField = def.nameField ?? "name";
+  const input = {};
+  for (const field of /* @__PURE__ */ new Set([nameField, ...fields])) {
+    const value = record.fields?.[field];
+    if (value !== void 0) input[field] = value;
+  }
+  if (input[nameField] === void 0) input[nameField] = record.name;
+  return { version: 1, type: record.type, hubRecordId: record.id, input };
+}
 async function upsertPerson(deps, opts) {
   const email = opts.email.toLowerCase();
   const crmDeps = { crm: deps.crm, db: deps.db, now: deps.now, newId: deps.newId };
@@ -834,8 +938,65 @@ async function upsertPerson(deps, opts) {
   const created = await createRecord(crmDeps, { type: "person", input: opts.input, mutationId: opts.mutationId });
   return { recordId: created.id };
 }
-async function projectSharedRecord(deps, person) {
-  return upsertPerson(deps, { email: person.email, input: sharedPersonInput(person), mutationId: `share:${person.hubRecordId}` });
+async function findSharedRecord(deps, record, tag) {
+  const mapped = await deps.db.query({ crm_tag: { $: { where: { tag }, limit: 1 } } });
+  const mappedId = mapped.crm_tag?.[0]?.recordId;
+  if (typeof mappedId === "string") {
+    const found = await deps.db.query({ crm_record: { $: { where: { id: mappedId }, limit: 1 } } });
+    if (found.crm_record?.[0]) return found.crm_record[0];
+  }
+  const def = deps.crm.type(record.type);
+  const emailField = def.emailField;
+  if (emailField && typeof record.input[emailField] === "string") {
+    const primaryEmail = record.input[emailField].toLowerCase();
+    const found = await deps.db.query({
+      crm_record: { $: { where: { type: record.type, primaryEmail }, limit: 1 } }
+    });
+    if (found.crm_record?.[0]) return found.crm_record[0];
+  }
+  const domain = record.input.domain;
+  const domainSlot = def.fields.domain?.slot;
+  if (typeof domain === "string" && domainSlot) {
+    const found = await deps.db.query({
+      crm_record: { $: { where: { type: record.type, [domainSlot]: domain }, limit: 1 } }
+    });
+    if (found.crm_record?.[0]) return found.crm_record[0];
+  }
+  const nameField = def.nameField ?? "name";
+  const name = record.input[nameField];
+  if (record.type === "company" && typeof name === "string" && name.trim()) {
+    const found = await deps.db.query({
+      crm_record: { $: { where: { type: record.type, name: name.trim() }, limit: 1 } }
+    });
+    if (found.crm_record?.[0]) return found.crm_record[0];
+  }
+  return void 0;
+}
+async function projectSharedRecord(deps, shared) {
+  const record = normalizeSharedRecord(shared);
+  if (!record.type.trim() || !record.hubRecordId.trim()) {
+    throw new Error("type and hubRecordId must be non-empty");
+  }
+  const tag = networkSourceTag(record.type, record.hubRecordId);
+  const crmDeps = { crm: deps.crm, db: deps.db, now: deps.now, newId: deps.newId };
+  const existing = await findSharedRecord(deps, record, tag);
+  let recordId;
+  if (existing && typeof existing.id === "string") {
+    await updateRecord(crmDeps, { id: existing.id, input: record.input });
+    recordId = existing.id;
+  } else {
+    recordId = `network_${shortHash(`${record.type}\0${record.hubRecordId}`)}`;
+    await createRecord({ ...crmDeps, newId: () => recordId }, {
+      type: record.type,
+      input: record.input,
+      mutationId: `share-create:${tag}`
+    });
+  }
+  await deps.db.transact(
+    [{ t: "update", ns: "crm_tag", id: tag, attrs: { key: `${recordId}:${tag}`, recordId, tag, createdAt: deps.now() } }],
+    { mutationId: `share-map:${tag}:${recordId}` }
+  );
+  return { recordId };
 }
 async function projectApplicant(deps, applicant) {
   const base = sharedPersonInput({
@@ -1370,6 +1531,7 @@ function applicationBookingUpdate(currentStatus, startAt, htmlLink) {
   };
 }
 export {
+  DEFAULT_SHARE_FIELDS,
   SCHEDULING_DEFAULTS,
   applicantProfile,
   applicationBookingUpdate,
@@ -1415,6 +1577,8 @@ export {
   meetingRescheduleUpdate,
   memberApplication,
   memberSession,
+  networkSourceTag,
+  normalizeSharedRecord,
   normalizeWebhookEvent,
   paymentsReady,
   personInputFromApp,
@@ -1434,6 +1598,7 @@ export {
   roleFromClaim,
   sendTemplated,
   sharedPersonInput,
+  sharedRecordFromCrm,
   slotWindow,
   stageIndex,
   stripeCall,