@odla-ai/chapter 0.22.0 → 0.23.0

package/README.md

@@ -8,7 +8,7 @@ email. The host still builds the public pages, routing, and brand presentation;
 Chapter supplies their application mechanics.
 
 ```sh
-npm i --save-exact @odla-ai/chapter@0.22.0
+npm i --save-exact @odla-ai/chapter@0.23.0
 ```
 
 > **Agentic experiment.** Built and maintained by AI agents from bounded runbooks
@@ -37,6 +37,12 @@ Do not combine the two flows. A provisioned canary is not a completed adoption,
 and a greenfield build does not need migration machinery. Both runbooks keep
 secrets out of source and require development proof before production.
 
+The repository also contains a build-tested
+[generic Preact reference host](https://github.com/cory/odla-ai/tree/main/examples/chapter-site).
+It is the executable companion to the greenfield runbook: site-owned global
+navigation, public routes, brand, voice, join fields, and member framing wrap
+Chapter-owned application, admin, CRM, payment, and scheduling behavior.
+
 ## The shape
 
 - **One config, two profiles.** `defineChapter()` validates at import and returns
@@ -50,14 +56,15 @@ secrets out of source and require development proof before production.
   Cloudflare `ExportedHandler`. It serves `/api/health`, `/api/config`,
   `/api/me`, `/api/crm/*`, `/api/network/shared`; configured leaders also get
   `/api/admin/network/{targets,push}`. Chapter mode adds the public
-  member surface (`/api/join-config`, `/api/applications`,
+  member surface (`/api/join-config`, `/api/join/resume`, `/api/applications`,
   `/api/schedule/{slots,book}`, `/api/payments/subscription`,
   `/api/webhooks/stripe`). The `/api/admin/*` handlers are registered in both
   modes; expose only the sections compatible with the selected profile and its
   provisioned namespaces. The Worker then falls back to static assets. Your
   `src/worker.ts` is ~3 lines. Observability is a host concern — wrap it with
   `withObservability` from `@odla-ai/o11y`.
-  Operational values that owners may change (prices, policy copy, email
+  Unknown `/api/*` paths terminate as JSON `404` responses rather than falling
+  through to an SPA document. Operational values that owners may change (prices, policy copy, email
   templates, scheduling rules) are read at runtime from a single odla-db
   `groups` row. Brand identity and build-time tokens remain in the checked-in
   Chapter config.
@@ -94,7 +101,7 @@ secrets out of source and require development proof before production.
   billing state remain authoritative locally.
 - **The UI kit, adoptable in pieces.** Three entries, split on the dependency
   boundary so you never pay for what you don't use:
-  - `@odla-ai/chapter/ui/member` — **react-only**: `SlotPicker`, the date/timezone
+  - `@odla-ai/chapter/ui/member` — **Preact-only**: `SlotPicker`, the date/timezone
     helpers, `JoinIsland` (form → payment → booking), `MembersArea`,
     `Rescheduler`, `PaymentStep`, `<BrandStyle>`. It never imports
     `@odla-ai/auth-clerk` or `@odla-ai/crm`, so you can adopt a single
@@ -108,9 +115,20 @@ secrets out of source and require development proof before production.
     that information architecture. This entry needs auth-clerk + crm/ui.
   - `@odla-ai/chapter/ui` — the full barrel, for back-compat.
 
-  Authored against React, rendered as Preact via `preact/compat` in the reference
-  sites. Brand tokens (`brandTokens`/`<BrandStyle>`) re-skin all of it from
+  Authored and shipped against Preact. Brand tokens
+  (`brandTokens`/`<BrandStyle>`) re-skin all of it from
   `brand` (now light **and** dark, via `brand.palette` + `brand.paletteDark`).
+- **Voice is part of the brand.** `copy` is a recursively partial
+  `ChapterCopy`; `defineChapter()` resolves it into a complete `chapter.copy`
+  contract. Packaged join, member, and admin surfaces read that contract, so a
+  follower can own terminology and tone without forking behavior. Text remains
+  serializable; use render slots when the host needs markup or a different
+  composition.
+- **The host owns global navigation.** Admin defaults to `chrome="embedded"` and
+  three familiar workspaces. Dashboard/Billing and Calendar/Email remain
+  link-backed page tabs; record operations remain record tabs. A host can keep
+  one site header around public, join, member, and admin routes without Chapter
+  introducing another top-level navigation model.
 
 ### Theme tokens and scoped branding
 
@@ -134,6 +152,26 @@ and semantic `brand.tokens` / `brand.tokensDark` for normal configuration.
 escape hatch. Chapter scopes these overrides to `[data-chapter-admin]`, so an
 admin brand cannot recolor the document root or vendor sign-in UI.
 
+`brand.accent` selects a named `data-ui-accent` family supplied by the chosen
+theme. Each `AdminWorkspace` may set its own `accent` for a scoped page-level
+variation. For a fully custom palette, compile the brand book through the pure
+token entry and adapt it structurally:
+
+```ts
+import { compileBrandTokens } from "@odla-ai/brand/tokens";
+import { chapterBrandFromTokens } from "@odla-ai/chapter";
+
+const compiled = compileBrandTokens({ swatches });
+const brand = chapterBrandFromTokens(compiled, {
+  theme: "paper",
+  wordmark: "Example Chapter",
+});
+```
+
+This carries the compiler's complete light map, derived dark map, and invert
+map into Chapter without adding an `@odla-ai/brand` runtime dependency to
+Chapter itself.
+
 ## API quick start
 
 ```ts
@@ -157,8 +195,13 @@ export const chapter = defineChapter({
     },
     fonts: { display: "GT Sectra" },
   },
+  copy: {
+    join: { form: { submit: "Start the conversation" } },
+    admin: { workspaces: { people: "Community" } },
+  },
   prices: { standardCents: 100000, foundingDiscountCents: 10000 },
   emails: { notificationEmail: "hello@example.com" },
+  account: "none",
 });
 ```
 
@@ -198,6 +241,42 @@ from the approved product and brand brief plus `@odla-ai/ui` marketing
 components. Do not copy a reference site's identity or fork auth, admin routing,
 CRM, payment, booking, or account logic to achieve a different brand.
 
+### Join and member composition
+
+`JoinIsland` keeps application mechanics while exposing presentation seams:
+
+```tsx
+<JoinIsland
+  config={joinConfig}
+  renderStepHeader={({ state }) => <FlowHeading step={state.step} />}
+  renderSubmit={({ disabled, submitting }) => (
+    <BrandedSubmit disabled={disabled}>{submitting ? "Sending…" : "Apply"}</BrandedSubmit>
+  )}
+  renderDone={({ booked, membersHref }) => (
+    <Confirmation booked={booked} membersHref={membersHref} />
+  )}
+  payment={{
+    appearance: stripeAppearance,
+    fonts: stripeFonts,
+    renderPriceLines: (lines) => <PriceSummary lines={lines} />,
+  }}
+>
+  <ApplicationFields />
+</JoinIsland>
+```
+
+`initialState` accepts trusted server state. On a browser redirect,
+`JoinIsland` reads the `application` capability from the query string and asks
+`GET /api/join/resume` for the canonical payment, booking, or done state; raw
+`redirect_status` and `reschedule` values never choose a UI step. Supply
+`loadResume` when a host stores the capability elsewhere.
+
+`MembersArea.renderProvisional` receives the loaded application, authenticated
+API function, reload callback, apply URL, and `defaultContent`, so the host can
+wrap or replace the provisional card just as admin workspaces can be composed.
+Nested admin/page/record tabs use fragment anchors by default, not query-string
+state.
+
 ### Leader → follower delivery
 
 The leader declares where records may go and exactly which fields each follower
@@ -503,28 +582,23 @@ These bite silently — a smoke test won't catch them:
   **Re-check this on every chapter upgrade.** Wiring a send changes a site's
   outbound mail with no local diff — release notes call out send changes
   explicitly for that reason.
-- **Account model — the default is `"none"`, and that is deliberate.**
+- **Account model is an explicit chapter-mode decision.**
   `account: "create"` makes the Clerk account server-side (so join can say the
   account is ready), `"invite"` **emails the applicant a Clerk invitation**, and
-  `"none"` (the default) provisions nothing. Both non-default models need
-  `clerk_secret_key` in the tenant vault. The default is side-effect-free on
-  purpose: inviting mails a real person, and a site that never made that choice
-  must not be sending mail. **You must opt in — a site that wants accounts and
-  doesn't set `account` will silently provision none.** (Changed in 0.15.0: the
-  default was `"invite"`, which mailed applicants from a config nobody wrote.)
+  `"none"` provisions nothing. `defineChapter()` rejects a chapter-mode config
+  that omits `account`, so forgetting the decision cannot silently disable or
+  enable account provisioning. Both side-effecting models need
+  `clerk_secret_key` in the tenant vault. Hub mode resolves to inert `"none"`.
 - **What lands on the Clerk account (and its `public_metadata` is
-  client-readable).** Both models write `public_metadata` as
-  `{ applicationId, profile }`. By default `profile` is every configured
-  `application.required`/`optional` field Clerk doesn't already carry natively
-  (so *not* email/firstName/lastName), plus `focus` — **which means free-text or
-  third-party fields like `message` or `referral` are exposed to the browser
-  unless you curate.** Set `application: { profileFields: ["phone", "state",
-  "focus", ...] }` to an allowlist and everything else stays db-only. Array fields
+  client-readable).** Both side-effecting models write `applicationId` and,
+  when explicitly selected fields are present, `profile`. The
+  `application.profileFields` default is `[]`, so application details remain
+  db-only. Set `profileFields: ["phone", "state", "focus"]` to a deliberate
+  browser-readable allowlist. Array fields
   (`focus`) are clamped to `maxArrayLen` (default 100) and non-primitive elements
   dropped, so a client can't post an unbounded array into metadata.
   `applicantProfile(chapter, fields)` is exported to assert the exact shape in a
-  test before deleting a local override. (Default is back-compat today; expected
-  to tighten at 1.0.)
+  test before deleting a local override.
 - **Email + input validation.** The field literally named `email` is checked
   against a permissive email shape (400 on `"notanemail"`, so it fails cleanly
   here rather than at the downstream Clerk create) — set
@@ -549,12 +623,10 @@ These bite silently — a smoke test won't catch them:
   one integration test and a join page that quietly stops posting the flag can't
   go unnoticed.
 
-  **If the disclaimer is a compliance record, set
-  `application: { requireDisclaimerAck: true }`** and a submit with no ack is a
-  400 instead of a row with no consent. It defaults to `false` so an upgrade
-  never starts rejecting traffic; enabling it fails *deterministically* on your
-  first test submit, not intermittently in production. Expect this to default to
-  `true` at 1.0.
+  `requireDisclaimerAck` now defaults to `true`, and a submit with no ack is a
+  400 instead of a row with no consent. Set it to `false` deliberately only when
+  the site renders no consent control. Existing adopters must test this before
+  cutover.
 - **CRM projection points.** chapter projects the person on application submit
   (`projectApplicant`), not on booking or on webhook status change. If you mirror
   pipeline stage into the CRM, keep those routes.
@@ -573,26 +645,25 @@ These bite silently — a smoke test won't catch them:
   route or provisioning seed; that is deliberate, so the running app cannot
   grant itself admin. Confirm the result by signing in, not merely by inspecting
   the row.
-- **`@odla-ai/auth-clerk` is not a chapter peer.** It is deliberately absent from
-  this package's manifest, because only one entry imports it: the worker verifies
-  JWTs with `jose` via `ctx.verifyUser`, and `@odla-ai/chapter/ui/member` is
-  react-only. **Install `@odla-ai/auth-clerk` yourself if (and only if) you adopt
+- **`@odla-ai/auth-clerk` is an optional Chapter peer.** Only one entry imports
+  it: the worker verifies JWTs with `jose` via `ctx.verifyUser`, and
+  `@odla-ai/chapter/ui/member` does not load the auth package. **Install
+  `@odla-ai/auth-clerk` yourself if (and only if) you adopt
   `@odla-ai/chapter/ui/admin`** or want the themed sign-in components; reach for
   `@odla-ai/auth-clerk/invitations` when you want to send your own branded
   invitation mail. Importing the full `@odla-ai/chapter/ui` barrel pulls the admin
   half, so prefer the narrower entry.
 - **Known-good application set** (installs clean, no flags):
-  `@odla-ai/chapter` 0.22.0, `@odla-ai/ui` 0.12.0, `@odla-ai/crm` 0.3.0,
-  `@odla-ai/db` 0.6.6,
+  `@odla-ai/chapter` 0.23.0, `@odla-ai/brand` 0.2.0,
+  `@odla-ai/ui` 0.12.1, `@odla-ai/crm` 0.3.1,
+  `@odla-ai/db` 0.6.7,
   `@odla-ai/calendar` 0.2.0, `@odla-ai/email` 0.3.1,
-  `@odla-ai/auth-clerk` 0.4.0, `@odla-ai/o11y` 2.2.2, `jose` 6.2.3, React
-  19.2.7, and `react-dom` 19.2.7.
-- **Known-good React host toolchain:** `@odla-ai/cli` 0.17.1,
+  `@odla-ai/auth-clerk` 0.4.1, `@odla-ai/o11y` 2.2.2, `jose` 6.2.3, and
+  Preact 10.29.7.
+- **Known-good Preact host toolchain:** `@odla-ai/cli` 0.17.1,
   `@odla-ai/security` 0.3.1, `@cloudflare/workers-types` 4.20260702.1,
-  `@types/react` 19.2.17, `@types/react-dom` 19.2.3,
-  `@vitejs/plugin-react` 6.0.3, TypeScript 6.0.3, Vite 8.1.4, Vitest 4.1.10,
-  and Wrangler 4.107.0. The greenfield runbook standardizes on this exact React
-  matrix; a Preact host needs its own tested compatibility set.
+  TypeScript 6.0.3, Vite 8.1.4, Vitest 4.1.10, and Wrangler 4.107.0. The
+  greenfield runbook standardizes on this exact Preact matrix.
 - **`--legacy-peer-deps` is a diagnostic, not a setting.** It suppresses exactly
   the peer conflict that tells you a pair is unsupported. If you need it, find out
   why first.

package/dist/chunk-NTZSXAFT.js

@@ -0,0 +1,411 @@
+// src/ui/copy-context.tsx
+import { createContext } from "preact";
+import { useContext } from "preact/hooks";
+
+// src/copy-defaults-admin.ts
+var DEFAULT_ADMIN_COPY = {
+  auth: {
+    checking: "Checking access\u2026",
+    notAuthorized: "Not authorized",
+    accountNotAuthorized: "{account} isn't on the admin list.",
+    thisAccount: "This account",
+    signOut: "Sign out",
+    loading: "Loading\u2026",
+    signInNotConfigured: "Sign-in not configured",
+    missingPublishableKey: "No Clerk publishable key is set for this environment yet.",
+    noWorkspaces: "No admin workspaces are configured.",
+    signInTagline: "Admin sign-in, invite only"
+  },
+  shell: {
+    adminRole: "admin",
+    adminConsole: "Admin Console",
+    adminName: "Admin",
+    navigationLabel: "Admin navigation"
+  },
+  workspaces: {
+    dashboard: "Dashboard",
+    overview: "Overview",
+    billing: "Billing",
+    people: "People",
+    settings: "Settings",
+    calendar: "Calendar",
+    email: "Email",
+    dashboardViewsLabel: "Dashboard views",
+    settingsViewsLabel: "Settings views",
+    collectionsLabel: "CRM collections"
+  },
+  dashboard: {
+    loading: "Loading dashboard\u2026",
+    loadFailed: "Couldn't load the dashboard",
+    upcomingCalls: "Upcoming calls",
+    callsNeedAttention: "{count} need attention",
+    noUpcomingCalls: "No upcoming calls.",
+    drift: "drift",
+    open: "Open",
+    meet: "Meet",
+    applications: "Applications",
+    newMembers: "New members",
+    newMembersUnavailable: "Appears once billing is connected.",
+    revenueAdded: "Revenue \xB7 annual run rate added",
+    revenue: "Revenue",
+    revenueUnavailable: "Appears once billing is connected.",
+    pipeline: "Pipeline",
+    pipelineLabel: "Membership pipeline",
+    thisWeek: "+{count} this week",
+    noChange: "no change",
+    activeMemberships: "Active memberships",
+    annualRunRate: "Annual run rate",
+    testMode: "test mode"
+  },
+  billing: {
+    loading: "Loading\u2026",
+    loadFailed: "Couldn't load billing",
+    notConfigured: "Billing isn't configured. No Stripe key is vaulted for this group.",
+    active: "Active",
+    annualized: "Annualized",
+    renewingSoon: "Renewing within 60 days",
+    pastDue: "Past due",
+    subscriptions: "Subscriptions",
+    testMode: "Stripe test mode",
+    truncated: "Showing the first 100 subscriptions. The list is truncated.",
+    name: "Name",
+    email: "Email",
+    application: "Application",
+    subscription: "Subscription",
+    cancelling: "cancelling",
+    amount: "Amount",
+    renews: "Renews"
+  },
+  availability: {
+    loading: "Loading\u2026",
+    loadFailed: "Couldn't load availability",
+    saved: "Saved.",
+    title: "Booking availability",
+    days: "Days",
+    startHour: "Start hour (0\u201324)",
+    endHour: "End hour (0\u201324)",
+    slotMinutes: "Slot length (minutes)",
+    minNoticeHours: "Minimum notice (hours)",
+    windowDays: "Booking window (days)",
+    timezone: "Timezone",
+    summaryTemplate: "Event summary template",
+    save: "Save availability",
+    dayLabels: ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"]
+  },
+  email: {
+    loading: "Loading\u2026",
+    loadFailed: "Couldn't load email config",
+    saved: "Saved.",
+    sent: "Sent {template} to {address}{redirected}.",
+    testFailed: "Test send did not deliver.",
+    delivery: "Delivery",
+    notificationAddress: "Notification address",
+    replyTo: "Reply-to",
+    debugInbox: "Debug inbox",
+    debugInboxHint: "Non-production sends redirect here.",
+    sendTest: "Send test",
+    enabled: "Enabled",
+    subject: "Subject",
+    body: "Body",
+    save: "Save changes",
+    sendLog: "Send log",
+    sentColumn: "Sent",
+    templateColumn: "Template",
+    statusColumn: "Status",
+    toColumn: "To",
+    failed: "failed",
+    redirected: "redirected",
+    delivered: "delivered"
+  },
+  meetings: {
+    loading: "Loading\u2026",
+    loadFailed: "Couldn't load meetings",
+    cancelConfirm: "Cancel this call? The calendar provider notifies the attendee.",
+    newStartPrompt: "New start time (for example, 2026-08-01 14:00):",
+    parseFailed: "Couldn't parse that time.",
+    agenda: "Agenda",
+    empty: "No meetings.",
+    unknown: "(unknown)",
+    drift: "drift",
+    meet: "Meet",
+    reschedule: "Reschedule",
+    cancel: "Cancel"
+  },
+  network: {
+    title: "Share to a follower",
+    allowlistDescription: "Sends the target's allowlisted fields. Its pipeline and account state remain local.",
+    sharing: "Sharing\u2026",
+    shareWith: "Share with {target}",
+    shared: "Shared with {target}.",
+    shareFailed: "Could not share with {target}.",
+    deliveryFailed: "Delivery failed."
+  },
+  records: {
+    workflowMissing: "This record is not linked to an application workflow.",
+    comms: "Comms",
+    commsHistory: "Comms history",
+    scheduling: "Scheduling",
+    billing: "Billing",
+    notes: "Notes",
+    access: "Access",
+    sharing: "Sharing",
+    lifecycle: "Access & lifecycle",
+    role: "Role",
+    superAdminHint: "Super-admin, managed in odla Studio.",
+    noAccount: "No linked account yet. The role is set once they sign in.",
+    approve: "Approve",
+    refund: "Refund",
+    approved: "Approved.",
+    refunded: "Refund issued.",
+    roleSet: "Role set to {role}.",
+    messageSent: "Message sent.",
+    messageNotSent: "Message was not sent.",
+    loadingTemplates: "Loading templates\u2026",
+    template: "Template",
+    chooseTemplate: "Choose a template\u2026",
+    sending: "Sending\u2026",
+    send: "Send",
+    noMessages: "No messages recorded.",
+    message: "Message",
+    newStartPrompt: "New start time:",
+    parseFailed: "Couldn't parse that time.",
+    cancelConfirm: "Cancel this call?",
+    callCancelled: "Call cancelled.",
+    callRescheduled: "Call rescheduled.",
+    noApplication: "No application is linked to this record.",
+    loadingMeetings: "Loading meetings\u2026",
+    noMeetings: "No meetings recorded.",
+    joinMeeting: "Join meeting",
+    openCalendar: "Open calendar",
+    reschedule: "Reschedule",
+    cancel: "Cancel"
+  }
+};
+
+// src/copy-defaults.ts
+var DEFAULT_COMMON_COPY = {
+  loading: "Loading\u2026",
+  saved: "Saved.",
+  unknown: "(unknown)"
+};
+var DEFAULT_JOIN_COPY = {
+  form: {
+    submit: "Submit application",
+    submitting: "Submitting\u2026",
+    submitFailed: "Your application could not be submitted.",
+    unexpectedFailure: "Something went wrong. Please try again."
+  },
+  booking: {
+    unavailable: "Scheduling is briefly unavailable. We'll reach out by email to arrange your call.",
+    loadFailed: "Times are briefly unavailable. Please try again.",
+    slotTaken: "That time was just taken. Here are the current openings.",
+    failed: "The booking could not be completed.",
+    loading: "Loading available times\u2026",
+    book: "Book this time",
+    booking: "Booking\u2026"
+  },
+  payment: {
+    setupFailed: "Payment could not be set up. Please try again.",
+    preparing: "Preparing secure payment\u2026",
+    pending: "Confirming your payment\u2026",
+    processing: "Processing\u2026",
+    payAndContinue: "Pay and continue",
+    incomplete: "The payment did not complete. Please try again."
+  },
+  done: {
+    label: "You're booked",
+    calendarInvite: "A calendar invitation with the video call link is on its way to your email.",
+    memberArea: "Go to your member area"
+  }
+};
+var DEFAULT_MEMBERS_COPY = {
+  loadFailed: "Sign in is briefly unavailable. Please refresh.",
+  account: {
+    signOut: "Sign out",
+    adminConsole: "Admin console"
+  },
+  provisional: {
+    cardLabel: "Your Application",
+    applicationNeeded: "One step remains",
+    applicationNeededBody: "Your account is ready, and the application that completes it takes a few minutes.",
+    apply: "Apply for membership",
+    refunded: "Membership refunded",
+    refundedBody: "Your fee has been refunded in full and your membership is canceled.",
+    active: "Your membership is active.",
+    renews: "Your membership is active and renews {date}.",
+    introductionCall: "Your introduction call",
+    calendarInvite: "A calendar invitation with the video call link is in your email.",
+    joinCall: "Join the video call",
+    bookCall: "Book your introduction call",
+    bookCallBody: "Your application is in. Choose a time below, and a calendar invitation will reach your email.",
+    chooseTime: "Choose a time"
+  },
+  full: {
+    welcome: "Welcome back."
+  },
+  reschedule: {
+    changeTime: "Change your time",
+    unavailable: "Scheduling is briefly unavailable. We'll reach out by email to arrange your call.",
+    loadFailed: "Times are briefly unavailable. Please try again.",
+    slotGone: "That time is no longer available. Please pick another.",
+    loading: "Loading available times\u2026",
+    noTimes: "No open times right now. Please check back soon.",
+    rescheduling: "Rescheduling\u2026",
+    keepTime: "Keep my current time"
+  }
+};
+
+// src/copy-resolve.ts
+var DEFAULT_CHAPTER_COPY = {
+  common: DEFAULT_COMMON_COPY,
+  join: DEFAULT_JOIN_COPY,
+  members: DEFAULT_MEMBERS_COPY,
+  admin: DEFAULT_ADMIN_COPY
+};
+var isObject = (value) => Boolean(value) && typeof value === "object" && !Array.isArray(value);
+function mergeCopy(base, input, path) {
+  if (typeof base === "string") {
+    if (input === void 0) return base;
+    if (typeof input !== "string") throw new Error(`${path}: must be a string`);
+    return input;
+  }
+  if (Array.isArray(base)) {
+    if (input === void 0) return [...base];
+    if (!Array.isArray(input) || !input.every((item) => typeof item === "string")) {
+      throw new Error(`${path}: must be an array of strings`);
+    }
+    return [...input];
+  }
+  if (!isObject(base)) return base;
+  if (input !== void 0 && !isObject(input)) throw new Error(`${path}: must be an object`);
+  const overrides = input;
+  const result = {};
+  for (const [key, value] of Object.entries(base)) {
+    result[key] = mergeCopy(value, overrides?.[key], `${path}.${key}`);
+  }
+  return result;
+}
+function resolveChapterCopy(input) {
+  return mergeCopy(DEFAULT_CHAPTER_COPY, input, "defineChapter.copy");
+}
+function formatChapterCopy(template, values) {
+  return template.replace(
+    /\{([a-zA-Z][a-zA-Z0-9]*)\}/g,
+    (match, key) => Object.prototype.hasOwnProperty.call(values, key) ? String(values[key]) : match
+  );
+}
+
+// src/ui/copy-context.tsx
+import { jsx } from "preact/jsx-runtime";
+var ChapterCopyContext = createContext(DEFAULT_CHAPTER_COPY);
+function ChapterCopyProvider(props) {
+  return /* @__PURE__ */ jsx(ChapterCopyContext.Provider, { value: resolveChapterCopy(props.copy), children: props.children });
+}
+function useChapterCopy() {
+  return useContext(ChapterCopyContext);
+}
+
+// src/brand.ts
+function paletteVar(key) {
+  return key.startsWith("--") ? key : `--${key}`;
+}
+function cleanValue(value) {
+  return value.replace(/[<>{};]/g, "").trim();
+}
+function paletteDecls(palette) {
+  const decls = [];
+  for (const [key, value] of Object.entries(palette ?? {})) {
+    if (typeof value === "string" && value.trim()) decls.push(`${paletteVar(key)}: ${cleanValue(value)};`);
+  }
+  return decls;
+}
+var TOKEN_VARS = {
+  background: "--ui-bg",
+  surface: "--ui-surface",
+  surface2: "--ui-surface-2",
+  text: "--ui-text",
+  textMuted: "--ui-text-muted",
+  textFaint: "--ui-text-faint",
+  border: "--ui-border",
+  borderStrong: "--ui-border-strong",
+  accent: "--ui-accent",
+  accentStrong: "--ui-accent-strong",
+  accentSoft: "--ui-accent-soft",
+  onAccent: "--ui-on-accent",
+  good: "--ui-good",
+  warn: "--ui-warn",
+  danger: "--ui-danger",
+  chart1: "--ui-chart-1",
+  chart2: "--ui-chart-2",
+  chart3: "--ui-chart-3",
+  chart4: "--ui-chart-4",
+  chart5: "--ui-chart-5",
+  chart6: "--ui-chart-6",
+  chartPositive: "--ui-chart-pos",
+  chartNegative: "--ui-chart-neg",
+  contentWidth: "--ui-content-width",
+  panelRadius: "--ui-radius-lg",
+  panelShadow: "--ui-shadow",
+  masterDetailColumns: "--ui-master-detail-columns",
+  masterDetailMinHeight: "--ui-master-detail-min-height",
+  pagePadding: "--chapter-admin-page-padding",
+  workspacePadding: "--chapter-admin-workspace-padding"
+};
+function semanticDecls(tokens) {
+  return Object.entries(tokens ?? {}).flatMap(
+    ([key, value]) => typeof value === "string" && value.trim() ? [`${TOKEN_VARS[key]}: ${cleanValue(value)};`] : []
+  );
+}
+function brandTokens(brand, options = {}) {
+  if (!brand) return "";
+  const light = [...paletteDecls(brand.palette), ...semanticDecls(brand.tokens)];
+  const fonts = brand.fonts;
+  if (fonts?.display) light.push(`--ui-font-display: ${cleanValue(fonts.display)};`);
+  if (fonts?.body) light.push(`--ui-font-sans: ${cleanValue(fonts.body)};`);
+  if (fonts?.numeral) light.push(`--ui-font-numeral: ${cleanValue(fonts.numeral)};`);
+  const dark = [...paletteDecls(brand.paletteDark), ...semanticDecls(brand.tokensDark)];
+  const invert = paletteDecls(brand.paletteInvert);
+  const selector = options.selector ?? ":root";
+  const darkSelector = selector === ":root" ? ':root[data-theme="dark"]' : `${selector}[data-theme="dark"]`;
+  const systemSelector = selector === ":root" ? ':root:not([data-theme="light"])' : `${selector}:not([data-theme="light"])`;
+  let css = light.length ? `${selector} {
+  ${light.join("\n  ")}
+}
+` : "";
+  if (dark.length) {
+    const block = `{
+  ${dark.join("\n  ")}
+}`;
+    css += `${darkSelector} ${block}
+@media (prefers-color-scheme: dark) {
+  ${systemSelector} ${block}
+}
+`;
+  }
+  if (invert.length) {
+    const invertSelector = selector === ":root" ? ".ui-invert" : `${selector}.ui-invert, ${selector} .ui-invert`;
+    css += `${invertSelector} {
+  color-scheme: dark;
+  ${invert.join("\n  ")}
+}
+`;
+  }
+  return css;
+}
+
+// src/ui/brand-style.tsx
+import { jsx as jsx2 } from "preact/jsx-runtime";
+function BrandStyle(props) {
+  const css = brandTokens(props.brand, { selector: props.selector });
+  if (!css) return null;
+  return /* @__PURE__ */ jsx2("style", { children: css });
+}
+
+export {
+  DEFAULT_CHAPTER_COPY,
+  formatChapterCopy,
+  ChapterCopyProvider,
+  useChapterCopy,
+  BrandStyle
+};
+//# sourceMappingURL=chunk-NTZSXAFT.js.map