@odla-ai/chapter 0.25.6 → 0.26.0

package/README.md

@@ -61,8 +61,10 @@ Chapter-owned application, admin, CRM, payment, and scheduling behavior.
   the browser UI does not need a second identity or follower registry.
 - **The worker is the package.** `chapterWorker({ chapter })` is the whole
   Cloudflare `ExportedHandler`. It serves `/api/health`, `/api/config`,
-  `/api/me`, `/api/crm/*`, `/api/network/shared`; configured leaders also get
-  `/api/admin/network/{targets,push}`. Chapter mode adds the public
+  `/api/me`, `/api/crm/*`, `/api/network/{shared,snapshot}`; configured leaders
+  also get `/api/admin/network/{targets,push,rollup}`. An enabled leader
+  formation intake adds `/api/formation/{config,applications}`. Chapter mode
+  adds the public
   member surface (`/api/join-config`, `/api/join/resume`, `/api/applications`,
   `/api/schedule/{slots,book}`, `/api/payments/subscription`,
   `/api/webhooks/stripe`). The `/api/admin/*` handlers are registered in both
@@ -104,7 +106,9 @@ Chapter-owned application, admin, CRM, payment, and scheduling behavior.
   config and secret *values* stay in the tenant vault. The standard record panel
   then shows “Share with …” actions for compatible people, businesses, deals,
   or other CRM types. The receiver validates the payload against its own CRM
-  config and stores a provenance tag, so retries update the same local record.
+  config and stores a structured origin row, so retries update the same local
+  record. Delivery state is structured too; display tags remain a migration and
+  cohort affordance rather than the machine identity contract.
   Shared identity/business fields move; each site's pipeline, account, and
   billing state remain authoritative locally.
 - **The UI kit, adoptable in pieces.** Three entries, split on the dependency
@@ -285,6 +289,75 @@ wrap or replace the provisional card just as admin workspaces can be composed.
 Nested admin/page/record tabs use fragment anchors by default, not query-string
 state.
 
+### Leader portfolio and formation
+
+`leaderCrmConfig()` composes generic portfolio records into an existing CRM
+config without replacing its people, businesses, pipelines, templates, or
+relations. Duplicate ids fail at startup:
+
+```ts
+import { defineChapter, leaderCrmConfig } from "@odla-ai/chapter";
+
+const existingCrmConfig = {
+  types: {
+    person: {
+      label: "Person",
+      labelPlural: "People",
+      nameField: "name",
+      emailField: "email",
+      fields: {
+        name: { type: "string", required: true },
+        email: { type: "email" },
+      },
+    },
+  },
+};
+
+export const chapter = defineChapter({
+  id: "example-hub",
+  name: "Example Hub",
+  mode: "hub",
+  crm: leaderCrmConfig({ base: existingCrmConfig }),
+  formation: {},
+  network: {
+    targets: [{
+      id: "example-chapter",
+      name: "Example Chapter",
+      url: "https://chapter.example.com",
+      fields: { person: ["name", "email"] },
+    }],
+  },
+});
+```
+
+The preset adds `chapter`, `chapter_application`, and `deal` record types in
+the `portfolio` workspace, with formation, operating, and deal-flow pipelines.
+It also composes relations to base `person` and `company` types when present.
+These are ordinary CRM records: the host may add fields, types, render slots,
+and relations by composing its own config before passing it to Chapter.
+
+`formation: {}` opts into a host-rendered public application:
+
+- `GET /api/formation/config` returns only configured public field metadata.
+- `POST /api/formation/applications` accepts only those fields and creates a
+  normal `chapter_application` CRM record.
+- A stable base64url `submissionId` makes ambiguous retries resolve to the same
+  record. Hosts must generate one per form journey and retain it until the
+  response is known.
+- Request size, string length, required fields, and public field names are
+  bounded by `formation`; internal fields such as notes are not accepted.
+
+Formation is off unless configured. Chapter intentionally does not ship a
+public form design: the site renders the fields in its own voice and brand.
+
+For a hub with network targets, the standard admin catalog is Dashboard,
+People, Portfolio, and Settings. Dashboard Overview renders aggregate network
+health; People contains CRM types whose `workspace` is absent or `"people"`;
+Portfolio contains types marked `workspace: "portfolio"`. Operational details
+remain nested page tabs and record operations remain record tabs. A
+`workspaces` transform can preserve or extend this catalog just like the
+standard follower console.
+
 ### Leader → follower delivery
 
 The leader declares where records may go and exactly which fields each follower
@@ -316,19 +389,22 @@ Treat the network as websites connected by explicit delivery edges:
 - each `network.targets[]` entry is a directed edge from one leader to one
   follower: `{ id, name, url, secretName?, fields }`;
 - the payload is a versioned, allowlisted business record
-  `{ version, type, hubRecordId, input }`, never an identity-provider session,
-  another site's pipeline/account/billing state, or an ODLA admin key;
+  `{ version: 2, source: { siteId, recordId }, type, input }`, never an
+  identity-provider session, another site's pipeline/account/billing state, or
+  an ODLA admin key;
 - retries address the follower record by leader provenance, so the same edge
   updates rather than duplicates.
 
 The authorization chain has three separate hops. The leader's browser sends
 its own Clerk session only to the leader's admin route. The leader Worker
 authorizes that local operator, reads the edge's share secret from its own
-vault, and sends that secret to the follower. The follower validates the share
-secret, validates the payload against its own CRM config, and writes with its
-own server-side `ODLA_API_KEY`. A follower Clerk token is never needed, the
-leader never receives the follower's database key, and sites do not share a
-Clerk application.
+vault, and signs the exact method, path/query, sender id, timestamp, nonce, and
+body digest. The follower validates that HMAC envelope against its vaulted
+copy, requires the signed sender to match the v2 payload source, validates the
+payload against its own CRM config, and writes with its own server-side
+`ODLA_API_KEY`. The share secret itself is never sent. A follower Clerk token
+is never needed, the leader never receives the follower's database key, and
+sites do not share a Clerk application.
 
 Vault the same random value as `network_share_secret` in the follower and as
 `network_share_example_chapter` in the leader (or set a different
@@ -337,6 +413,25 @@ config. The standard collection drawer discovers the target and calls the
 admin-gated push route. A follower must declare the receiving CRM type/fields;
 otherwise it rejects the record cleanly instead of dropping fields.
 
+The signed v2 protocol is the contract for new integrations. The follower
+temporarily accepts the old bearer/v1 envelope so an existing edge can be
+upgraded without downtime; new leaders must not use it.
+
+Every received v2 record gets a `crm_record_origin` row keyed by the upstream
+site and record id. Every push attempt gets a `crm_record_delivery` row keyed by
+the local record and target, including attempt count, current status, payload
+version, remote record id, and bounded latest error. Record detail responses
+include both collections and the standard record drawer adds a Network tab
+when either exists.
+
+`GET /api/network/snapshot` is an HMAC-signed, aggregate-only follower endpoint.
+It returns type totals and pipeline-stage counts, never record fields, people,
+sessions, Clerk tokens, share secrets, or ODLA keys. The leader's admin-gated
+`GET /api/admin/network/rollup` fans out to every configured target, verifies
+that each returned site id equals the target id, and returns combined totals
+plus explicit per-target failures. Consequently each target `id` must equal the
+follower's `chapter.id`.
+
 #### Existing follower CRMs must opt into the shared graph
 
 When `crm` is omitted, chapter's default already contains compatible `person`
@@ -436,7 +531,8 @@ data.
 
 Use distinct development tenants and follower origins for the first delivery:
 
-1. Vault one random value as `network_share_secret` in the follower and under
+1. Confirm every target `id` exactly equals the follower's `chapter.id`. Vault
+   one random value as `network_share_secret` in the follower and under
    the target's resolved `secretName` in the leader.
 2. Confirm `GET /api/admin/network/targets` lists the development follower with
    the expected compatible record types.
@@ -451,7 +547,11 @@ Use distinct development tenants and follower origins for the first delivery:
    without writing CRM data.
 7. Prove each browser JWT is accepted only by its own website. Inspect the
    network request and client bundle to confirm neither site's Clerk token nor
-   either `ODLA_API_KEY` crosses the delivery edge.
+   either `ODLA_API_KEY` crosses the delivery edge, and confirm the share
+   secret itself is absent from the request.
+8. Load `GET /api/admin/network/rollup` through the leader session. Confirm
+   aggregate totals, then break one development edge and confirm that target is
+   reported unavailable without hiding healthy targets.
 
 Only after this contract passes against development origins should the leader
 target be changed to a production follower origin and the matching production
@@ -468,7 +568,7 @@ Legacy `?tab=` and path links still open, while `routing="query"` and
 
 ### Admin information architecture and migration
 
-The default chapter console deliberately has only three top-level workspaces:
+The default follower console deliberately has only three top-level workspaces:
 
 - **Dashboard** — Overview and Billing page tabs.
 - **People** — configured CRM collections as page tabs, then a master/detail
@@ -476,6 +576,11 @@ The default chapter console deliberately has only three top-level workspaces:
   Connections, Access, and Sharing record tabs when those capabilities apply.
 - **Settings** — Calendar and Email page tabs.
 
+A leader hub with configured targets adds **Portfolio** between People and
+Settings and uses Dashboard Overview for the aggregate network rollup. A hub
+without targets retains the minimal People-only default. These defaults compose
+the same grammar; they do not introduce a second admin shell.
+
 The default `chrome="embedded"` assumes the host supplies the site header.
 Use `chrome="standalone"` for Chapter's packaged masthead or `renderHeader` for
 a custom header rendered inside the Chapter theme boundary. `editorial`,

package/dist/{chunk-5SWVMJZN.js → chunk-4QZEAWQL.js}

@@ -4,7 +4,7 @@ import {
   DEFAULT_CHAPTER_COPY,
   formatChapterCopy,
   useChapterCopy
-} from "./chunk-WGQO4WDJ.js";
+} from "./chunk-OIWCKF2G.js";
 
 // src/ui/admin.tsx
 import { useEffect as useEffect8, useMemo, useRef, useState as useState12 } from "preact/hooks";
@@ -177,6 +177,7 @@ function Gate(props) {
 }
 
 // src/ui/admin-route.ts
+import { parseCrmDiscussionReference } from "@odla-ai/crm";
 var DEFAULT_ALIASES = {
   billing: { workspaceId: "dashboard", viewId: "billing" },
   meetings: { workspaceId: "dashboard" },
@@ -218,6 +219,14 @@ function adminRouteFromUrl(url, basePath, workspaceIds, aliases = {}) {
   const hashParts = url.hash.replace(/^#\/?/, "").split("/").filter(Boolean);
   const fromHash = resolve(fromParts(hashParts), workspaceIds, aliases);
   if (fromHash) return fromHash;
+  const reference = parseCrmDiscussionReference(url);
+  const fromReference = reference ? resolve({
+    workspaceId: "people",
+    viewId: reference.type,
+    recordId: reference.recordId,
+    detailTab: reference.kind === "crm:activity" ? "notes" : "profile"
+  }, workspaceIds, aliases) : null;
+  if (fromReference) return fromReference;
   const tab = url.searchParams.get("tab");
   const fromQuery = resolve(
     tab ? {
@@ -843,12 +852,15 @@ function NetworkShareActions(props) {
 // src/ui/admin-record-activity.tsx
 import { useCallback as useCallback3, useEffect as useEffect5, useState as useState8 } from "preact/hooks";
 import { ActivityFeed } from "@odla-ai/crm/ui";
+import { parseCrmDiscussionReference as parseCrmDiscussionReference2 } from "@odla-ai/crm";
 import { jsx as jsx10 } from "preact/jsx-runtime";
 function RecordActivityPanel(props) {
   const { client, recordId } = props;
   const [activities, setActivities] = useState8([]);
   const [busy, setBusy] = useState8(false);
   const [error, setError] = useState8(null);
+  const reference = typeof window === "undefined" ? null : parseCrmDiscussionReference2(new URL(window.location.href));
+  const focusedActivityId = reference?.kind === "crm:activity" && reference.recordId === recordId ? reference.activityId : void 0;
   const load = useCallback3(async () => {
     try {
       const result = await client.listActivities(recordId, { limit: 100 });
@@ -873,6 +885,7 @@ function RecordActivityPanel(props) {
     ActivityFeed,
     {
       activities,
+      focusedActivityId,
       busy,
       onAddNote: (body) => void run(() => client.addActivity(recordId, { kind: "note", body })),
       onAddTask: (task) => void run(() => client.addActivity(recordId, { kind: "task", ...task })),
@@ -1242,8 +1255,46 @@ function peopleSection(options) {
   });
 }
 
+// src/ui/admin-portfolio.tsx
+import { StatBand as StatBand2, StepPipeline as StepPipeline2 } from "@odla-ai/ui/components";
+import { jsx as jsx15, jsxs as jsxs12 } from "preact/jsx-runtime";
+function LeaderNetworkOverview({ ctx }) {
+  const copy = useChapterCopy().admin.network;
+  const { data, loading, error } = useAdminResource(
+    ctx.getToken,
+    "/api/admin/network/rollup"
+  );
+  if (loading) return /* @__PURE__ */ jsx15(AdminNote, { children: copy.loadingRollup });
+  if (error || !data) return /* @__PURE__ */ jsxs12(AdminNote, { children: [
+    copy.loadRollupFailed,
+    error ? `: ${error}` : "",
+    "."
+  ] });
+  if (data.configured === 0) return /* @__PURE__ */ jsx15(AdminPage, { children: /* @__PURE__ */ jsx15(Panel, { title: copy.overview, children: /* @__PURE__ */ jsx15("p", { className: "muted", children: copy.noFollowers }) }) });
+  const stats = [
+    { value: data.configured.toLocaleString(), label: copy.configuredFollowers },
+    { value: data.available.toLocaleString(), label: copy.reachableFollowers },
+    { value: data.totalRecords.toLocaleString(), label: copy.recordsAcrossFollowers }
+  ];
+  const steps = data.types.map((type) => ({
+    icon: /* @__PURE__ */ jsx15("span", { style: { fontSize: 22, fontWeight: 700 }, children: type.total }),
+    title: type.type.replaceAll("_", " "),
+    description: Object.entries(type.stages).filter(([, count]) => count > 0).map(([stage, count]) => `${stage.replaceAll("_", " ")} ${count}`).join(" \xB7 ") || copy.noRecordTotals
+  }));
+  return /* @__PURE__ */ jsxs12(AdminPage, { children: [
+    /* @__PURE__ */ jsx15(StatBand2, { stats }),
+    /* @__PURE__ */ jsx15(Panel, { title: copy.followers, children: /* @__PURE__ */ jsx15("ul", { style: { listStyle: "none", margin: 0, padding: 0, display: "grid", gap: 10 }, children: data.targets.map((target) => /* @__PURE__ */ jsxs12("li", { style: { display: "flex", gap: 12, alignItems: "baseline", flexWrap: "wrap" }, children: [
+      /* @__PURE__ */ jsx15("strong", { style: { minWidth: 180 }, children: target.name }),
+      /* @__PURE__ */ jsx15("span", { className: "badge", children: target.available ? copy.available : copy.unavailable }),
+      target.error ? /* @__PURE__ */ jsx15("span", { className: "muted", children: target.error }) : null,
+      /* @__PURE__ */ jsx15("a", { href: target.url, target: "_blank", rel: "noreferrer", style: { marginLeft: "auto" }, children: target.url })
+    ] }, target.id)) }) }),
+    /* @__PURE__ */ jsx15(Panel, { title: copy.recordTotals, children: steps.length ? /* @__PURE__ */ jsx15(StepPipeline2, { ariaLabel: copy.recordTotals, steps }) : /* @__PURE__ */ jsx15("p", { className: "muted", children: copy.noRecordTotals }) })
+  ] });
+}
+
 // src/ui/admin-workspaces.tsx
-import { jsx as jsx15 } from "preact/jsx-runtime";
+import { jsx as jsx16 } from "preact/jsx-runtime";
 var adminViewContext = (ctx, viewId, active) => {
   const route = {
     workspaceId: ctx.route.workspaceId,
@@ -1269,7 +1320,7 @@ function DashboardWorkspace({ chapter, ctx }) {
   const active = ctx.route.viewId === "billing" ? "billing" : "overview";
   const overview = dashboardSection({ id: "overview", label: copy.workspaces.overview });
   const billing = billingSection({ label: copy.workspaces.billing });
-  return /* @__PURE__ */ jsx15(
+  return /* @__PURE__ */ jsx16(
     Tabs2,
     {
       ariaLabel: copy.workspaces.dashboardViewsLabel,
@@ -1297,7 +1348,7 @@ function SettingsWorkspace({ chapter, ctx }) {
   const active = ctx.route.viewId === "email" ? "email" : "calendar";
   const calendar = availabilitySection({ id: "calendar", label: copy.workspaces.calendar });
   const email = emailSection({ label: copy.workspaces.email });
-  return /* @__PURE__ */ jsx15(
+  return /* @__PURE__ */ jsx16(
     Tabs2,
     {
       ariaLabel: copy.workspaces.settingsViewsLabel,
@@ -1321,11 +1372,11 @@ function SettingsWorkspace({ chapter, ctx }) {
   );
 }
 function PeopleWorkspace({ chapter, ctx }) {
-  const types = Object.entries(chapter.crm.config.types);
+  const types = Object.entries(chapter.crm.config.types).filter(([, def]) => (def.workspace ?? "people") === "people");
   const fallback = types[0]?.[0] ?? "person";
   const active = types.some(([type]) => type === ctx.route.viewId) ? ctx.route.viewId : fallback;
   const networkSharing = chapter.network.targets.length > 0;
-  return /* @__PURE__ */ jsx15(
+  return /* @__PURE__ */ jsx16(
     Tabs2,
     {
       ariaLabel: chapter.copy.admin.workspaces.collectionsLabel,
@@ -1350,38 +1401,124 @@ function PeopleWorkspace({ chapter, ctx }) {
     }
   );
 }
+function PortfolioWorkspace({ chapter, ctx }) {
+  const copy = chapter.copy.admin;
+  const types = Object.entries(chapter.crm.config.types).filter(([, def]) => def.workspace === "portfolio");
+  const fallback = types[0]?.[0] ?? "";
+  const active = types.some(([type]) => type === ctx.route.viewId) ? ctx.route.viewId : fallback;
+  if (!active) return /* @__PURE__ */ jsx16(LeaderNetworkOverview, { ctx });
+  return /* @__PURE__ */ jsx16(
+    Tabs2,
+    {
+      ariaLabel: copy.workspaces.portfolioViewsLabel,
+      value: active,
+      variant: "pill",
+      mount: "active",
+      items: types.map(([type, def]) => {
+        const section = collectionSection({
+          crm: chapter.crm,
+          type,
+          networkSharing: chapter.network.targets.length > 0
+        });
+        return {
+          value: type,
+          label: def.labelPlural ?? def.label,
+          href: ctx.href({ viewId: type, recordId: null, detailTab: null }),
+          panel: section.render(adminViewContext(ctx, type, active === type))
+        };
+      })
+    }
+  );
+}
+function LeaderDashboardWorkspace({ chapter, ctx }) {
+  return /* @__PURE__ */ jsx16(
+    Tabs2,
+    {
+      ariaLabel: chapter.copy.admin.workspaces.dashboardViewsLabel,
+      value: "overview",
+      mount: "active",
+      items: [{
+        value: "overview",
+        label: chapter.copy.admin.workspaces.overview,
+        href: ctx.href({ viewId: "overview", recordId: null, detailTab: null }),
+        panel: /* @__PURE__ */ jsx16(LeaderNetworkOverview, { ctx: adminViewContext(ctx, "overview", true) })
+      }]
+    }
+  );
+}
+function LeaderSettingsWorkspace({ chapter, ctx }) {
+  const email = emailSection({ label: chapter.copy.admin.workspaces.email });
+  return /* @__PURE__ */ jsx16(
+    Tabs2,
+    {
+      ariaLabel: chapter.copy.admin.workspaces.settingsViewsLabel,
+      value: "email",
+      mount: "active",
+      items: [{
+        value: "email",
+        label: chapter.copy.admin.workspaces.email,
+        href: ctx.href({ viewId: "email", recordId: null, detailTab: null }),
+        panel: email.render(adminViewContext(ctx, "email", true))
+      }]
+    }
+  );
+}
 function defaultAdminWorkspaces(chapter) {
   const copy = chapter.copy.admin;
   const people = {
     id: "people",
     label: copy.workspaces.people,
     defaultViewId: Object.keys(chapter.crm.config.types)[0] ?? "person",
-    render: (ctx) => /* @__PURE__ */ jsx15(PeopleWorkspace, { chapter, ctx })
+    render: (ctx) => /* @__PURE__ */ jsx16(PeopleWorkspace, { chapter, ctx })
   };
-  if (chapter.mode === "hub") return [people];
+  if (chapter.mode === "hub" && chapter.network.targets.length === 0) return [people];
+  if (chapter.mode === "hub") {
+    const portfolioTypes = Object.entries(chapter.crm.config.types).filter(([, def]) => def.workspace === "portfolio");
+    return [
+      {
+        id: "dashboard",
+        label: copy.workspaces.dashboard,
+        defaultViewId: "overview",
+        render: (ctx) => /* @__PURE__ */ jsx16(LeaderDashboardWorkspace, { chapter, ctx })
+      },
+      people,
+      {
+        id: "portfolio",
+        label: copy.workspaces.portfolio,
+        defaultViewId: portfolioTypes[0]?.[0],
+        render: (ctx) => /* @__PURE__ */ jsx16(PortfolioWorkspace, { chapter, ctx })
+      },
+      {
+        id: "settings",
+        label: copy.workspaces.settings,
+        defaultViewId: "email",
+        render: (ctx) => /* @__PURE__ */ jsx16(LeaderSettingsWorkspace, { chapter, ctx })
+      }
+    ];
+  }
   return [
     {
       id: "dashboard",
       label: copy.workspaces.dashboard,
       defaultViewId: "overview",
-      render: (ctx) => /* @__PURE__ */ jsx15(DashboardWorkspace, { chapter, ctx })
+      render: (ctx) => /* @__PURE__ */ jsx16(DashboardWorkspace, { chapter, ctx })
     },
     people,
     {
       id: "settings",
       label: copy.workspaces.settings,
       defaultViewId: "calendar",
-      render: (ctx) => /* @__PURE__ */ jsx15(SettingsWorkspace, { chapter, ctx })
+      render: (ctx) => /* @__PURE__ */ jsx16(SettingsWorkspace, { chapter, ctx })
     }
   ];
 }
 
 // src/ui/admin-frame.tsx
 import { ThemeScope as ThemeScope2 } from "@odla-ai/ui/components";
-import { jsx as jsx16, jsxs as jsxs12 } from "preact/jsx-runtime";
+import { jsx as jsx17, jsxs as jsxs13 } from "preact/jsx-runtime";
 function AdminTheme(props) {
   const brand = props.chapter?.brand;
-  return /* @__PURE__ */ jsx16(ChapterCopyProvider, { copy: props.chapter?.copy, children: /* @__PURE__ */ jsxs12(
+  return /* @__PURE__ */ jsx17(ChapterCopyProvider, { copy: props.chapter?.copy, children: /* @__PURE__ */ jsxs13(
     ThemeScope2,
     {
       ref: props.scopeRef,
@@ -1390,7 +1527,7 @@ function AdminTheme(props) {
       accent: brand?.accent,
       colorScheme: brand?.colorScheme ?? "light",
       children: [
-        /* @__PURE__ */ jsx16(BrandStyle, { brand, selector: "[data-chapter-admin]" }),
+        /* @__PURE__ */ jsx17(BrandStyle, { brand, selector: "[data-chapter-admin]" }),
         props.children
       ]
     }
@@ -1445,7 +1582,7 @@ async function loadChapterAdminUser(adapter, apiBase, getToken) {
 }
 
 // src/ui/admin.tsx
-import { jsx as jsx17, jsxs as jsxs13 } from "preact/jsx-runtime";
+import { jsx as jsx18, jsxs as jsxs14 } from "preact/jsx-runtime";
 function Authed(props) {
   const copy = useChapterCopy().admin;
   const {
@@ -1492,17 +1629,17 @@ function Authed(props) {
       live = false;
     };
   }, [getToken, apiBase, auth]);
-  if (state.status === "checking") return /* @__PURE__ */ jsx17(Gate, { brand, children: /* @__PURE__ */ jsx17("p", { style: S.muted, children: copy.auth.checking }) });
+  if (state.status === "checking") return /* @__PURE__ */ jsx18(Gate, { brand, children: /* @__PURE__ */ jsx18("p", { style: S.muted, children: copy.auth.checking }) });
   if (state.status === "denied") {
-    return /* @__PURE__ */ jsx17(Gate, { brand, children: /* @__PURE__ */ jsxs13("div", { className: "card", style: S.card, children: [
-      /* @__PURE__ */ jsx17("h2", { style: { marginTop: 0 }, children: copy.auth.notAuthorized }),
-      /* @__PURE__ */ jsx17("p", { style: S.muted, children: formatChapterCopy(copy.auth.accountNotAuthorized, {
+    return /* @__PURE__ */ jsx18(Gate, { brand, children: /* @__PURE__ */ jsxs14("div", { className: "card", style: S.card, children: [
+      /* @__PURE__ */ jsx18("h2", { style: { marginTop: 0 }, children: copy.auth.notAuthorized }),
+      /* @__PURE__ */ jsx18("p", { style: S.muted, children: formatChapterCopy(copy.auth.accountNotAuthorized, {
         account: state.email ?? copy.auth.thisAccount
       }) }),
-      /* @__PURE__ */ jsx17("button", { className: "btn secondary", onClick: () => signOut(), children: copy.auth.signOut })
+      /* @__PURE__ */ jsx18("button", { className: "btn secondary", onClick: () => signOut(), children: copy.auth.signOut })
     ] }) });
   }
-  return /* @__PURE__ */ jsx17(
+  return /* @__PURE__ */ jsx18(
     AdminShell,
     {
       workspaces,
@@ -1555,23 +1692,23 @@ function ChapterAdmin(props) {
   }, [apiBase, auth]);
   let content;
   if (publishableKey === void 0 || publishableKey && !appearance) {
-    content = /* @__PURE__ */ jsx17(Gate, { brand, children: /* @__PURE__ */ jsx17("p", { style: S.muted, children: copy.admin.auth.loading }) });
+    content = /* @__PURE__ */ jsx18(Gate, { brand, children: /* @__PURE__ */ jsx18("p", { style: S.muted, children: copy.admin.auth.loading }) });
   } else if (!publishableKey) {
-    content = /* @__PURE__ */ jsx17(Gate, { brand, children: /* @__PURE__ */ jsxs13("div", { className: "card", style: S.card, children: [
-      /* @__PURE__ */ jsx17("h2", { style: { marginTop: 0 }, children: copy.admin.auth.signInNotConfigured }),
-      /* @__PURE__ */ jsx17("p", { style: S.muted, children: copy.admin.auth.missingPublishableKey })
+    content = /* @__PURE__ */ jsx18(Gate, { brand, children: /* @__PURE__ */ jsxs14("div", { className: "card", style: S.card, children: [
+      /* @__PURE__ */ jsx18("h2", { style: { marginTop: 0 }, children: copy.admin.auth.signInNotConfigured }),
+      /* @__PURE__ */ jsx18("p", { style: S.muted, children: copy.admin.auth.missingPublishableKey })
     ] }) });
   } else if (workspaces.length === 0) {
-    content = /* @__PURE__ */ jsx17(Gate, { brand, children: /* @__PURE__ */ jsx17("p", { style: S.muted, children: copy.admin.auth.noWorkspaces }) });
+    content = /* @__PURE__ */ jsx18(Gate, { brand, children: /* @__PURE__ */ jsx18("p", { style: S.muted, children: copy.admin.auth.noWorkspaces }) });
   } else {
-    content = /* @__PURE__ */ jsxs13(
+    content = /* @__PURE__ */ jsxs14(
       ClerkGate,
       {
         publishableKey,
         appearance,
         afterSignOutUrl: "/",
         children: [
-          /* @__PURE__ */ jsx17(SignedOut, { children: /* @__PURE__ */ jsx17(Gate, { brand, tagline: copy.admin.auth.signInTagline, children: /* @__PURE__ */ jsx17(
+          /* @__PURE__ */ jsx18(SignedOut, { children: /* @__PURE__ */ jsx18(Gate, { brand, tagline: copy.admin.auth.signInTagline, children: /* @__PURE__ */ jsx18(
             SignIn,
             {
               routing: "hash",
@@ -1579,7 +1716,7 @@ function ChapterAdmin(props) {
               signUpForceRedirectUrl: redirect
             }
           ) }) }),
-          /* @__PURE__ */ jsx17(SignedIn, { children: /* @__PURE__ */ jsx17(
+          /* @__PURE__ */ jsx18(SignedIn, { children: /* @__PURE__ */ jsx18(
             Authed,
             {
               workspaces,
@@ -1599,7 +1736,7 @@ function ChapterAdmin(props) {
       }
     );
   }
-  return /* @__PURE__ */ jsx17(AdminTheme, { chapter: props.chapter, scopeRef, children: content });
+  return /* @__PURE__ */ jsx18(AdminTheme, { chapter: props.chapter, scopeRef, children: content });
 }
 
 // src/ui/admin-defaults.ts
@@ -1610,15 +1747,15 @@ function defaultAdminSections(chapter) {
 // src/ui/admin-meetings.tsx
 import { useState as useState13 } from "preact/hooks";
 import { Button as Button6 } from "@odla-ai/ui/components";
-import { Fragment as Fragment4, jsx as jsx18, jsxs as jsxs14 } from "preact/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx19, jsxs as jsxs15 } from "preact/jsx-runtime";
 var when2 = (t) => new Date(t).toLocaleString([], { dateStyle: "medium", timeStyle: "short" });
 function MeetingsBody({ ctx }) {
   const copy = useChapterCopy().admin.meetings;
   const { data, loading, error, refresh } = useAdminResource(ctx.getToken, "/api/admin/meetings?all=1");
   const [busy, setBusy] = useState13(null);
   const [note, setNote] = useState13(null);
-  if (loading) return /* @__PURE__ */ jsx18(AdminNote, { children: copy.loading });
-  if (error || !data) return /* @__PURE__ */ jsxs14(AdminNote, { children: [
+  if (loading) return /* @__PURE__ */ jsx19(AdminNote, { children: copy.loading });
+  if (error || !data) return /* @__PURE__ */ jsxs15(AdminNote, { children: [
     copy.loadFailed,
     error ? `: ${error}` : "",
     "."
@@ -1649,32 +1786,32 @@ function MeetingsBody({ ctx }) {
     }
     void run(id, () => adminFetch(ctx.getToken, `/api/admin/meetings/${id}/reschedule`, { method: "POST", body: JSON.stringify({ startAt }) }));
   };
-  return /* @__PURE__ */ jsx18(AdminPage, { children: /* @__PURE__ */ jsx18(Panel, { title: /* @__PURE__ */ jsxs14(Fragment4, { children: [
+  return /* @__PURE__ */ jsx19(AdminPage, { children: /* @__PURE__ */ jsx19(Panel, { title: /* @__PURE__ */ jsxs15(Fragment4, { children: [
     copy.agenda,
     " ",
-    /* @__PURE__ */ jsxs14("span", { className: "muted", style: { fontWeight: 400 }, children: [
+    /* @__PURE__ */ jsxs15("span", { className: "muted", style: { fontWeight: 400 }, children: [
       "\xB7 ",
       data.timezone
     ] })
-  ] }), actions: note ? /* @__PURE__ */ jsx18("span", { className: "muted", children: note }) : void 0, children: data.meetings.length === 0 ? /* @__PURE__ */ jsx18("p", { className: "muted", style: { margin: 0 }, children: copy.empty }) : /* @__PURE__ */ jsx18("ul", { style: { listStyle: "none", margin: 0, padding: 0, display: "flex", flexDirection: "column", gap: 12 }, children: data.meetings.map((m) => /* @__PURE__ */ jsxs14("li", { style: { display: "flex", alignItems: "center", gap: 12, flexWrap: "wrap", opacity: m.status === "cancelled" ? 0.55 : 1 }, children: [
-    /* @__PURE__ */ jsx18("strong", { style: { minWidth: 170 }, children: when2(m.startAt) }),
-    /* @__PURE__ */ jsx18("span", { style: { flex: 1 }, children: m.applicant ? `${m.applicant.name} \xB7 ${m.applicant.email}` : copy.unknown }),
-    /* @__PURE__ */ jsx18("span", { className: "badge", children: m.status }),
-    m.drift && m.drift !== "none" ? /* @__PURE__ */ jsxs14("span", { className: "badge", children: [
+  ] }), actions: note ? /* @__PURE__ */ jsx19("span", { className: "muted", children: note }) : void 0, children: data.meetings.length === 0 ? /* @__PURE__ */ jsx19("p", { className: "muted", style: { margin: 0 }, children: copy.empty }) : /* @__PURE__ */ jsx19("ul", { style: { listStyle: "none", margin: 0, padding: 0, display: "flex", flexDirection: "column", gap: 12 }, children: data.meetings.map((m) => /* @__PURE__ */ jsxs15("li", { style: { display: "flex", alignItems: "center", gap: 12, flexWrap: "wrap", opacity: m.status === "cancelled" ? 0.55 : 1 }, children: [
+    /* @__PURE__ */ jsx19("strong", { style: { minWidth: 170 }, children: when2(m.startAt) }),
+    /* @__PURE__ */ jsx19("span", { style: { flex: 1 }, children: m.applicant ? `${m.applicant.name} \xB7 ${m.applicant.email}` : copy.unknown }),
+    /* @__PURE__ */ jsx19("span", { className: "badge", children: m.status }),
+    m.drift && m.drift !== "none" ? /* @__PURE__ */ jsxs15("span", { className: "badge", children: [
       copy.drift,
       ": ",
       m.drift
     ] }) : null,
-    m.meetUrl ? /* @__PURE__ */ jsx18("a", { href: m.meetUrl, target: "_blank", rel: "noreferrer", children: copy.meet }) : null,
-    m.status === "scheduled" ? /* @__PURE__ */ jsxs14(Fragment4, { children: [
-      /* @__PURE__ */ jsx18(Button6, { variant: "secondary", mini: true, disabled: busy === m.id, onClick: () => reschedule(m.id), children: copy.reschedule }),
-      /* @__PURE__ */ jsx18(Button6, { variant: "danger", mini: true, disabled: busy === m.id, onClick: () => cancel(m.id), children: copy.cancel })
+    m.meetUrl ? /* @__PURE__ */ jsx19("a", { href: m.meetUrl, target: "_blank", rel: "noreferrer", children: copy.meet }) : null,
+    m.status === "scheduled" ? /* @__PURE__ */ jsxs15(Fragment4, { children: [
+      /* @__PURE__ */ jsx19(Button6, { variant: "secondary", mini: true, disabled: busy === m.id, onClick: () => reschedule(m.id), children: copy.reschedule }),
+      /* @__PURE__ */ jsx19(Button6, { variant: "danger", mini: true, disabled: busy === m.id, onClick: () => cancel(m.id), children: copy.cancel })
     ] }) : null
   ] }, m.id)) }) }) });
 }
 function meetingsSection(options = {}) {
   const { id = "meetings", label = "Meetings" } = options;
-  return { id, label, render: (ctx) => /* @__PURE__ */ jsx18(MeetingsBody, { ctx }) };
+  return { id, label, render: (ctx) => /* @__PURE__ */ jsx19(MeetingsBody, { ctx }) };
 }
 
 export {
@@ -1697,6 +1834,7 @@ export {
   applicationLifecycleAdapter,
   collectionSection,
   peopleSection,
+  LeaderNetworkOverview,
   defaultAdminWorkspaces,
   loadChapterAdminConfig,
   loadChapterAdminUser,
@@ -1704,4 +1842,4 @@ export {
   defaultAdminSections,
   meetingsSection
 };
-//# sourceMappingURL=chunk-5SWVMJZN.js.map
+//# sourceMappingURL=chunk-4QZEAWQL.js.map